last executing test programs:

12m16.943819068s ago: executing program 3 (id=693):
socket$inet6(0xa, 0x2, 0x0)
unshare(0x2c060000)
unshare(0x2a060400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000060a010400000000000000000af96242fa59517e5620c899400000040900010073797a310000000018000480140001800a0021007265646972000000040002800900020073797a32000000001400000011000100"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00')
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x1, 0x8010800000000084)
socket$inet6_sctp(0xa, 0x1, 0x84)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r3, 0x4126}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
close(0x3)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100010203f15028d9d1d454630bb31d3f01090224000100000004"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000040)=0xffffffff, 0x4)
socket$kcm(0x29, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)

12m16.602639361s ago: executing program 2 (id=694):
setuid(0xee00)
ptrace(0x10, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x68)
mount$afs(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000340)={[{}]})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_clone(0x10801000, &(0x7f0000001000)="b86a0ba43066c224010b6ea370d43580b568f219240aed9ebc", 0x19, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)="8e3a1494971b22c581c0dbb1c29cf812721b7f8d76ed05bf22ba944c56a5ec8c6b528d")
ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f0000001100))
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0)
mprotect(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x2000002)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = open(&(0x7f00000000c0)='.\x00', 0x12800, 0x120)
getdents(r2, &(0x7f0000000440)=""/4090, 0xffa)
syz_io_uring_setup(0x5792, &(0x7f00000011c0)={0x0, 0xc11e, 0x80, 0x1, 0x148, 0x0, r2}, 0x0, 0x0, 0x0)
waitid(0x1, r1, &(0x7f0000001440), 0x60000009, &(0x7f00000014c0))
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42000, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
fchdir(r4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
fcntl$getflags(r4, 0x40a)
renameat(r3, &(0x7f0000000140)='./bus/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00')

12m16.167122556s ago: executing program 2 (id=697):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)='\n', 0x1}], 0x1}}], 0x1, 0x20044840)
sendmmsg$inet(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490", 0x2}], 0x1, 0x0, 0x0, 0x1700}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab5c4dd7a77de7f5ae2edb3078", 0xdb}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000300)="7daad44510df7dc335e66c0e962a5ce64120016d3750175c423665dfd246d084c8e400b6c006f6c74ec8219e7bd29464ba326c26805a2b900e958cf88ed55de49f9400fdcf60ff1066757c78148f12b72720a63042cd274e883c9ccf0169c55d8fdbac47fa9acbfe3178cff055c59f582b1d64628b896898b9734298b75f7d23345e45e62e3a70e77d59a60afa4b543eae17ac165b13f818b7805741425fb718d691dcb6c67f51aae4dcc6875ee298353ecb", 0xb2}, {&(0x7f00000003c0)="1f125f61cc5d556d973ab358911b8772f398c25f5ef41d1ce58a62ea8e5cb1cb411cd89d45dd3267f001ba6e9698e9cf32f12d8ba96abdf5f2b0e86d30bb5c7c924be08c4fb3de1c6f7839fbaa6b86869b1263a76297b0639c50e4840c698d2778d4914ef6d3910359738c62e93f58722bfd7bbea8fa9c97ec3c7a3e1cfee6920b38e1cac0e47fad4cab9a77c66b91332406c46e324e50fd6751caf659b9e1278e47256ff7b3dd494ce5e06bb18eae091e1cb0509f", 0xb5}, {&(0x7f0000000540)="ead66fa4e8be0d4d9690c554a0e30356a3959c7833394e13d60c3156f904da0150ef968210846cc953b76c516564312c0559c23d5530acf640f3f2ad9858cc", 0x3f}, {&(0x7f00000005c0)="8518fed30943e2faab84a71895536356ac933c1b", 0x14}, {&(0x7f00000006c0)="7fe0e46cdaba2de9c97af343e32d7a696d98fed445c92f8e7c99c1912996f2482cb694c2e7b790cdc35f098252d7a10c7b20ddccef66077eb4c38bc0c425183a20bfd609370e9d6381bfb3e2d3cd485fbae4376ab7d116dac0a023f549604b6dbdb29becb16a709a6de2859d96b5386a94c0cbf259", 0x75}], 0x5}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f00000025c0)="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", 0x13c}], 0x1}}], 0x4, 0x2090)

12m14.097375532s ago: executing program 2 (id=700):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000240)="039c175a9b50c0c90a740c5ca154eaaf2343d4e3d296af888e9142", 0x1b}], 0x2, 0x0, 0x0, 0xffd6}}], 0x1, 0x20000004)

12m12.962307084s ago: executing program 2 (id=702):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

12m11.501484922s ago: executing program 3 (id=703):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x3000000, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x0, 0xf0}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

12m9.788556666s ago: executing program 3 (id=705):
setuid(0xee00)
ptrace(0x10, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x68)
mount$afs(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000340)={[{}]})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_clone(0x10801000, &(0x7f0000001000)="b86a0ba43066c224010b6ea370d43580b568f219240aed9ebc", 0x19, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)="8e3a1494971b22c581c0dbb1c29cf812721b7f8d76ed05bf22ba944c56a5ec8c6b528d")
ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f0000001100))
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0)
mprotect(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x2000002)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = open(&(0x7f00000000c0)='.\x00', 0x12800, 0x120)
getdents(r2, &(0x7f0000000440)=""/4090, 0xffa)
syz_io_uring_setup(0x5792, &(0x7f00000011c0)={0x0, 0xc11e, 0x80, 0x1, 0x148, 0x0, r2}, 0x0, 0x0, 0x0)
waitid(0x1, r1, &(0x7f0000001440), 0x60000009, &(0x7f00000014c0))
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42000, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
fchdir(r4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
renameat(r3, &(0x7f0000000140)='./bus/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00')

12m9.242205953s ago: executing program 3 (id=707):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x8800)

12m9.118341191s ago: executing program 1 (id=708):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000007000008001240000000000500050002000000050004000000000016000300686173683a6e6574"], 0x64}}, 0x0)

12m9.051713277s ago: executing program 2 (id=709):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x0, 0xf0}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (fail_nth: 10)

12m8.431674009s ago: executing program 2 (id=710):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000787000/0x2000)=nil, 0x2000, &(0x7f00000003c0)='+++\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000788000/0x1000)=nil, 0x1000, &(0x7f0000000100)='\x00')
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0xb, 0x0, &(0x7f0000000640))
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f4ce0140006001e0089e9aaa911d7c2290f0089061327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x40)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=<r7=>0x0)
capset(&(0x7f00000001c0)={0x19980330, r7}, &(0x7f0000000240)={0x80000000, 0x7, 0xfa52, 0x8, 0x8, 0x52})
ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f00000002c0))
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r8, 0x5402, &(0x7f0000000500)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, '\x00\x00\r\x00'})
write$binfmt_aout(r8, &(0x7f0000000100)=ANY=[], 0xff2e)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000040)={0x0, 0x800, 0x2, 0x0, 0x14, "00000000000000000000ffff00000000000002"})
syz_open_pts(r8, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x3, 0x2, 0xfe0000, 0x84080})
r9 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r9, 0xc0485661, &(0x7f0000000240)={0x0, 0x1, @start={0x3, 0x1}})
r10 = dup3(r8, r8, 0x80000)
read$FUSE(r10, &(0x7f0000003f80)={0x2020}, 0x2020)
openat(r10, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4802, 0x0)
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn+\x88\xfe\xf7\x01')

12m8.264326257s ago: executing program 1 (id=711):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000001102000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)

12m8.236518092s ago: executing program 3 (id=712):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000feffff7f0455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016069400000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeec6e6ccd4", 0xd8}], 0x1}, 0x94)

12m4.884131436s ago: executing program 3 (id=713):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000340)=0x1)
ioctl$TCGETA(r2, 0x89f2, &(0x7f00000029c0))

12m4.848019557s ago: executing program 1 (id=714):
syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, r1, 0x309, 0x2, 0x25dfdbfc, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x6, 0x4000006, 0xcd})

11m59.686632064s ago: executing program 1 (id=717):
creat(0x0, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0xff1f000000000000)

11m59.509215496s ago: executing program 1 (id=718):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r0, 0x400000000007)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x3d, 0x9, 0xfffffffe, 0x25dfdbff, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="a6e6c8fd"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4)
iopl(0x12)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)

11m57.558688628s ago: executing program 1 (id=719):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_setup(0xaa0, &(0x7f0000000180)={0x0, 0xc5e4, 0x2, 0x1, 0x391, 0x0, r0}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_submit(r4, r2, r3, &(0x7f0000000480)=@IORING_OP_FSYNC={0x3, 0xa, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc}}}, &(0x7f0000000440))

11m52.537071627s ago: executing program 32 (id=710):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000787000/0x2000)=nil, 0x2000, &(0x7f00000003c0)='+++\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000788000/0x1000)=nil, 0x1000, &(0x7f0000000100)='\x00')
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0xb, 0x0, &(0x7f0000000640))
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f4ce0140006001e0089e9aaa911d7c2290f0089061327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x40)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=<r7=>0x0)
capset(&(0x7f00000001c0)={0x19980330, r7}, &(0x7f0000000240)={0x80000000, 0x7, 0xfa52, 0x8, 0x8, 0x52})
ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f00000002c0))
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r8, 0x5402, &(0x7f0000000500)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, '\x00\x00\r\x00'})
write$binfmt_aout(r8, &(0x7f0000000100)=ANY=[], 0xff2e)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000040)={0x0, 0x800, 0x2, 0x0, 0x14, "00000000000000000000ffff00000000000002"})
syz_open_pts(r8, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x3, 0x2, 0xfe0000, 0x84080})
r9 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r9, 0xc0485661, &(0x7f0000000240)={0x0, 0x1, @start={0x3, 0x1}})
r10 = dup3(r8, r8, 0x80000)
read$FUSE(r10, &(0x7f0000003f80)={0x2020}, 0x2020)
openat(r10, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4802, 0x0)
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn+\x88\xfe\xf7\x01')

11m51.088687432s ago: executing program 33 (id=713):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000340)=0x1)
ioctl$TCGETA(r2, 0x89f2, &(0x7f00000029c0))

11m42.303264801s ago: executing program 34 (id=719):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_setup(0xaa0, &(0x7f0000000180)={0x0, 0xc5e4, 0x2, 0x1, 0x391, 0x0, r0}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000280), &(0x7f00000002c0))
syz_io_uring_submit(r4, r2, r3, &(0x7f0000000480)=@IORING_OP_FSYNC={0x3, 0xa, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc}}}, &(0x7f0000000440))

5m44.490901373s ago: executing program 6 (id=2687):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=0x0, @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x4004015}, 0x40000)
recvmmsg(r0, &(0x7f0000007ec0), 0x20, 0x0, 0x0)
syz_usb_connect$uac2(0x0, 0xee, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x3, 0xe0, 0x2, {0x8, 0xb, 0x1, 0x2, 0x1, 0x0, 0x20, 0xe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x1, 0x53, 0x4}, [@feature_unit={0x11, 0x24, 0x6, 0x3, 0x4, [0x1, 0x2, 0x1, 0x2, 0x1, 0x4]}, @processing_unit={0x11, 0x24, 0x8, 0x5, 0x5, [0x2, 0x3, 0x1, 0x2, 0x1, 0x0]}, @sample_rate={0x9, 0x24, 0xd, 0x1, 0x3, 0x4, [0x2]}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x203, 0x1, 0x4, 0x5, 0x7, 0x10, 0xd, 0x80}, @effect_unit={0xf, 0x24, 0x7, 0x6, 0x0, 0x2, [0x2, 0x3, 0x0, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x9, 0x0, 0xd}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x49}, @as_header={0x10, 0x24, 0x1, 0x5, 0x6, 0x2, 0x5, 0xa8, 0x8000, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0xd, 0x81, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0xfa, 0xb, 0xfe}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xc4, 0x6, 0x2, {0x8, 0x25, 0x1, 0x80, 0xf, 0xff, 0x1}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x8, 0x3, 0x2, 0x20, 0x5}, 0x4b, &(0x7f0000000280)={0x5, 0xf, 0x4b, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "0f21528c94a8444d486d128b4a812d2f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xe, 0x0, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x19, 0x7, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "78108f7107cc60db876c7b8e83ef8d9e"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xf, 0x4, 0x3}]}, 0x5, [{0x46, &(0x7f0000000300)=@string={0x46, 0x3, "79d21b0ae8a535431199f4f487577b6aa3ed6ad82a574d793baceb79f2ae57168c5be1ce29d4ea1ac0d5ca85b1d07b9d83915a1790c127c46ca91e5e1cc6f9bf9c77f905"}}, {0x8a, &(0x7f0000000380)=@string={0x8a, 0x3, "62957b1771d19d52eed9adfd94b9227e4a5dca24135c6c2610075543e23fb5d544159c97fa96813abb1aabd1e05d2c551117f7c58fbdc0e847f3c5b7c8690496826731a9e4af2e3b93b4655067af0f1b69ad5e8286cdcada31584511d9b963ae8453fcabd0420a7aa257c49731d2bff0bfb74a1d8b0ca8955cb0641ba8e75a37a7ab8b6512a90e67"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x814}}, {0xec, &(0x7f00000004c0)=@string={0xec, 0x3, "c84c1256350dc15c446372258779c60165f1f742c6f24f18df153395803eea0aba5e7f022273be22e1175c340db26c540f36f0adfa6733376426e688410e3da355661087f554872abac4da0095d7c1d4827e8c15d4c32a49d3df09dd4e00484378012a2cbf018cfd1b0ff8069103890d24906a658bc6522205b25d15625f82437db3f9acb58b59206cacfe64ca1f19933dfba768cd93184405008087a76f0ddecfdd8b15f6d7dc4e0daeb3beae385491bee4fced83c1f6c3de65c0e941365340421b58739b90da36b2727853c7d8d918494358159dc766f47175758aef90b16275a1f22edea81678ced9"}}]})

5m41.436459174s ago: executing program 6 (id=2698):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000005f3a00000f0000001c0007800c0004003a5f0000000000000c0003"], 0x30}, 0x1, 0x0, 0x0, 0x80001}, 0x0)

5m41.230907432s ago: executing program 6 (id=2699):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0xa54ab000) (async)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0)

5m40.490895012s ago: executing program 6 (id=2702):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x80000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x20000)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))
syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
chdir(&(0x7f0000000140)='./file1\x00') (async)
open(&(0x7f0000000000)='.\x00', 0x80000, 0x12d) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x20000) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, 0x0) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) (async)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d"], 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff) (async)

5m39.424106655s ago: executing program 6 (id=2704):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0xf5, 0x24000, 0x0}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0})

5m38.516726134s ago: executing program 6 (id=2709):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000004600add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0)

5m37.894013673s ago: executing program 35 (id=2709):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000004600add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0)

3m6.348509956s ago: executing program 4 (id=3693):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

3m6.20271404s ago: executing program 4 (id=3697):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f6ea8", 0x8}, {&(0x7f0000000600)}], 0x2}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl(r1, 0x1, &(0x7f0000001300))
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000280)=@arm64={0x7, 0x40, 0xfc, '\x00', 0x9})
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
eventfd2(0x1, 0x80001)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2}})
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f00000000c0)=0x5, 0x12)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xe, 0x0, 0x0, 0x400000]}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3m6.116150604s ago: executing program 4 (id=3700):
creat(&(0x7f0000000080)='./file0\x00', 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x420002, 0x0)
mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,pr\x00\x00\x00\x00\x00\x00\x00\x00'])

3m5.875871082s ago: executing program 4 (id=3704):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000069000b0008000000060011000a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="00042dbd7000fedbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x4000000)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x129d02, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)
getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000100))
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@uuid_on}]})
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000069000b0008000000060011000a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="00042dbd7000fedbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x4000000) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x129d02, 0x0) (async)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) (async)
socket(0x2, 0x80805, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) (async)
getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000100)) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@uuid_on}]}) (async)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) (async)

3m4.719848797s ago: executing program 4 (id=3721):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x18, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x12, 0x1, "c4d04cbc080f276a27f949bd78e2"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x120}, 0x1, 0x0, 0x2400, 0x80}, 0x0)

3m4.436883588s ago: executing program 4 (id=3727):
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) (async)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000003)
write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x40, 0x10, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x11}, [@extension_unit={0x7, 0x24, 0x8, 0x6, 0xbbe3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x0, 0x3, {0x7, 0x25, 0x1, 0x4, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0x6, 0xff, {0x7, 0x25, 0x1, 0xc, 0x10, 0x8}}}}}}}}]}}, 0x0) (async)
syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x40, 0x10, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x11}, [@extension_unit={0x7, 0x24, 0x8, 0x6, 0xbbe3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x0, 0x3, {0x7, 0x25, 0x1, 0x4, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0x6, 0xff, {0x7, 0x25, 0x1, 0xc, 0x10, 0x8}}}}}}}}]}}, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf2501000000000000000c4100000014001462726f616463617326b9c1fb255d43d6"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)={0xfffffffffffffffa, 0xfffffffffffffadd})

2m49.409511953s ago: executing program 36 (id=3727):
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) (async)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000003)
write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x40, 0x10, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x11}, [@extension_unit={0x7, 0x24, 0x8, 0x6, 0xbbe3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x0, 0x3, {0x7, 0x25, 0x1, 0x4, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0x6, 0xff, {0x7, 0x25, 0x1, 0xc, 0x10, 0x8}}}}}}}}]}}, 0x0) (async)
syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x40, 0x10, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x11}, [@extension_unit={0x7, 0x24, 0x8, 0x6, 0xbbe3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x0, 0x3, {0x7, 0x25, 0x1, 0x4, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0x6, 0xff, {0x7, 0x25, 0x1, 0xc, 0x10, 0x8}}}}}}}}]}}, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf2501000000000000000c4100000014001462726f616463617326b9c1fb255d43d6"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)={0xfffffffffffffffa, 0xfffffffffffffadd})

2m6.022591952s ago: executing program 5 (id=4038):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x44)

2m5.658662297s ago: executing program 5 (id=4040):
socket$nl_route(0x10, 0x3, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
eventfd2(0x800084, 0x80800)
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0)
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10, 0x0, 0xeffdffff}}}, &(0x7f0000000440))

2m4.98683413s ago: executing program 5 (id=4043):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2)
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

2m3.793918906s ago: executing program 5 (id=4046):
syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00')
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x91)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000005c0)=[{0x17, '\x00', @st={0x4, [{0x0, @uvalue=0x9}, {0x0, @svalue=0x7}, {0x1, @svalue=0xcf4}, {0x1, @svalue=0xfffffffffffffffe}]}, 0x4}, {0x2, '\x00', @buffer={"556074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x9}, {0x12, '\x00', @data, 0xe6}]})
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80020, 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

2m3.470913561s ago: executing program 5 (id=4047):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000013000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000090900010073797a30000000000900030073797a320000000098000000060a01f5ffffffffffffff000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000608000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120800064000000004040005800900010073797a30"], 0x10c}}, 0x0)

2m2.718598535s ago: executing program 5 (id=4054):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000029001c00c900"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000080)="29000300010003", 0x7)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x18, 0x4)
r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000780)="07d821ff55e2b7b4a5640da3ba41b622e30f9194b3be1b0e3eaca20b3c5b2dfc0c49ea5a2b275251a23c5ed9efc3b67fd394a844348aa49819193d383624023b891f617577f87cbdee9d96f2be7c48cc168f116aeaf9e14a67c4b7dc8202bcd26a1bb33905e4a4f57dfc914f7dcdd27466ee29a27774a35e272c0d698001eab24ff33191b034e424aab82ef38187153d6ecf42841408c7cc1737ec354b1f90b70f62c7884855d5f45dab3854b86d70812b60848b3933e390e20ddce226e7c6ee16f92b447da24b8a5f573172dd3426af45ef1f05ba1a4d884c36f971a5e01f3119ad8372e5d8a544ced689bea04f1585bcfec80155d6de1f78bbc93d1398da9b2f6231c6debf2b90c34d183b77c67f65737b12d61b52a3592e0d2ff7c29d8243cf409500e81e3dc36bd8dd71fb6c603327528168b365ea53edaa788cd613dd07246db85469bb48758ed01649d841d7e9bcdc197e22a354390b9b75fc303895ae70e0142181595a12f72a7402c435deb44a63379d05d5bbbd7ea4c87ea6d068639be8b766fc20f8fe581e4721914050aca66b0530f97772d57b4bcdc7cd7c1c39aa70a03f144ed0cf8e220311695fc6494a4a54f664f3f985faea3598019e1a40a3ff8f61022d953a75cdd1000f1c0d954a56c105b526448e50cf08ab5eae58b64a11ada87d30889b958031f4eb83b20132a654678e8dfeea230285ab9b43d9ab77a7f43b121476e47c35af4cb9e8258d8b23cd71d9cdbaa748edf352de54036b62b51fc91bb05587ad054fe98e7ccaeae46fb0eb7f0c0855daf3b29c8c76bbd14de98ab058c27f7be67697226c19e979fd73a3c7d5e94798830e7a5c8004fcdec1dddb6f60d957f99e193f303ee65a78be0175c7df9c6798bf9a36b05df132ebfe35be62c457275df9dc7db7415c4f3cf7442decf0a1b9111896577e45937cdacc08e17c2975346173123d8b43164932c9bcdb8a39f599379446ff861425323064fe845ada09e876828b39b266d412802ecda206d5a58bbc6783365201facf5d887ce771399a4bee477fc38a3374ebc7858c96c1b044fca0d282b67d137c3ac263fa2e9cbd64815c965c573e190cc5050bfb332d6ff5a558f25818d5337fd73b87b7684a13255719ff795fd1870403495b81bbdae46838a2bda677f5c9aeade49767e295c32451d72c64b253eba2fb77cf16eae08736e1f737b0b3abba47b519db2f39828701790be69b4af12200696f59d3b4f6c203338607cd1002cdc02a2ab953025de61d5fd2709d0c321dbe25593d7f9d71c7aeab1408716953cb1f6474a9b09997a7391747e22edf2fc01c7c39b6e686041f7eaf40fde90f6dc4d8c5b913dddd5ce3930891620848c3bbf3d97d939c9b892f96c6671a4a0ae082ce37ae69e6339e27cea4e4dbaea4c79252a775c98eade0e9ac6fc73a144691074fae963825ccab0f81148bc3d5941fddd9c6850db8f0938fb6e97b46cbf559dd334c68049b5c365a042f1b26c35828f24115219249bc1d7157b4a8e90825be7fdfba4e5a0829380b6d04cd22ef9a63787cafe08bebcf7022c20f74dab10f4e96c44d721fc352fdf5fd1a5e2de6fc6d93dfd5403ca9a0134f41a9c1f8d9ee2845266bcc25799dcfa7188ae08c57b79f7e98aa0e9a693f816aef733ac6233998a8d8907242c830f6334729918ba094d56db59962e74d776e80efd29a555c8a6034bcfb3e179155e6dd77774d593c194d541f5183bb88a5bdf84b2cc82b99b8a6b5eedfd7b251ff5fe056f4bf4497024c3dd20b2ff396d22440e0e0bc7a322dea5b0f2c737dab0ad7561e0de3d977a08aa85082775213b005a1a8b9a9d1c25ba844100a2a839112cb9c782d6c07807d5b2df0b37b36a6a132dce6c1979e5c155a22c19e9d9e79baf5b8bc46fb27ac9258336ba740daf1c9da7d080dd64fd86daee0b33e13dab9878cd5a41ea5d131f0285a5bc9596d53f1c1f29a560db646bb2fed6a1b5df7a4f4b338a75aa93b57aa752d496fc64de0548138dfba4887034c804d2c7d42767dff02a6bcc69f9e7876243ba45060892da8b72c153f61423e4b4e1d22ce749120cfff6ff9fab9359f4ead609e2c5511cb8818e911fd7e1b693ee70e7f4a0ad7bde68cdb581e9c6637ccd565da471c574fc3c70e8b6bfc31adebce6ba146b4e08c2e7a5e5728c2ea5a62ed06d849e35904af2955055e0acde8e565636d0a965430709499aa391bb11a86179c1d8d9dc61f1a426262df47b61260ff29659f1c626a45c80180ca9c464224a8adca37682b4b5aa3a1278380106d3e99a8e101df66a79dd85b9193d0ace3f84b88a6394bcbcb4c1743be206571c68acd5ba7c4cef4ca894bc622b57cd00f6ead70028cada6b3c2650bed4f43b160162a55e797cace77195fee3cacdc382267c5fdfc0c082d45ee21c5b531a051adc60ce989166f24db2a9eb447736c473eacdf2ef2630b1e31341e4019bbf29224c893d3cc6a52cfaf9b2f3074f189d6d208bd7fb98de474163f507c4f92e4bf9fd074aef54d8ae58846f70e381df69dc583598404032e0257fbae6a30f17d1f75ba96a902166075afea8da1cd53b746e7363984b4f0c51efaee69dfc57265b56ac13b057bf53fefc67ffb99562224dfb95e9dd1349592b3348e85a9e13d45cf732c7fb8d93db5133623b1c1af0b5df8b1f8e6ea2b5854f216ac3e81143b6592078c3c5b92d1bdddde97e98f702b27e5ee21b8bd0f23fb7496fd653187b954d8e66a916f0fa02b2761a97a2251e876f044b94995fc2872bc98519667fb13fcb5a6d047793c0fe6c2b5d1c3c6e45b02d241d62168b3e284c3159d1d390b542ab2036e994a4a4f5aaf13e56dc69ac2f64a3d99f5dd4292b8332331d40eeabd798d225355e9fcfb04617319e50d43ef315d35c40b18fe56d6b88e3f720c4d996035e914a07b5279944ed1576ba864e9271d6d221b34d658282cfdc7d49e9e4c6e2085ce44b9cebec8830586cac1fd61d89d814027154d984d8fb28d8d87045353d1ca88ca3e18e9751fe2afedddd1a4289f3160335801bd97b9c36078b620b9d846dd165b53f5c1ad8563aa45e8bb30ec80191f285ae83097dcf820f94b6fb7e13945ee4b1e5c2c8565ba5efee6fc24ff96fc8f175ba678cc7682054ba2a5d2f9e42ede612b97db8e195971ad28faccbfdfadf158edb287dbb20ecd1582e649ccc85d0e31c82d82d74f4c60633fef87253a21b1df9cd6f7f50e7279f05a15de74576168eedd740d61304c821f10bbc6f59bf4e85052f60529494f95de9b3ee340df2442ae942f6d7ab2e32cf4ba80b9e09ee1c84393de5e98c683f0978464577c4ce601f6e79f2827d7c72df7488f27224129434efe47b333dec256021954e221786df6ee1c62d87dd5d5a99bc5a5fbf01954230ccf4246ebcd1a91191dcf4fc39d5ac80a366e613246a35001450ad700c07c179b0f44bae0a773cc890a5b21e656415424a44f281f5d5bf3ba4f6e94979b98e2c080b4efdfbaf44008df2341f473c37c47f1995b8b029a33c7faae03cbaadc15c98c83ebcea4c697f2c163605fc76be94debbe7064ba49f85d85ad0e2ebbea15cc41ec28f76d4cb291ebf9435f0ba4b220ee3d011f57b8ec9b42438ccfb910abfdeb05e7c9f982e3ea1b24b77c9b6c3c618d62ddc7de1a135bc2f640b682b545ab6277b4318f500065ff0faa6ce30d7b138de2390eababf0b632465aa1bae5dcdf397a575c4b089b3ce10509b544957f2d4af94b15a6f7a76345088540563c790eec7339900b1448b6e85e0530da2df59f5f48d695bd2485397e07f66d31c076fde08e978e300e78ee9f9178f8868ec1d16ace0c3ee52e3d8e876c33be6797686a723c9cb8d2ebe87bbfa2c16561236221d8692a0ec16ae11dd9834be126d3f6d449ae30154e6212e9e7b38649a9c13768be4e3171314f0c7faef250e078e69444361b564c5cdb4244cd3d8f4874aa3534286d718eb1cc4b988e10f8d95c9bbb0ec7660978a15c038f41153c70fd9771d695c69401226b2f0ce4e7e397298dc42914143e8fd6ab3095410bc2091391e70ed8e44e037df0b43f548634e48d95ec18e985d84880259c4acc11bbb20223d4b95346dc87a9cd28acf7a8fba4a92de6d123502294653bd643a12949646499eb0e3e5aedeb7337090336a23ea412a371887ebde19d18adbc0a9ed584425333b75d9c09b66f555d05c07dc7b3ba21c9dcbf181d01eb003b3157e36a8dab2b5d8585cc4aba718d7c86ad20ba93dbba853031631f55f7295383ffed2847e83ceedd2d43aae177b99e6458f4beb446c5c15c47ac792ed8e5fed816dacfd8a721cc0b38945e3bb4a8509591b261d42ae0576ab5e8184c2b82f2d42abbcf046b9dd9e2aca723f20c12d523fd3d44e1e74d1261fe5a819438c7ba5df16f4547ab0313daafe88479f8d8ce08b5424f3a7ef3295d28fa01dcbc502f819f3897e6408840b5da55eba42f006dc0df8d58e074c2ad20bfbf3b10d6098cb744d0af259710e68f7334001701af78979839e2e0cb1aaa444d85f28b7c3c749d0812e00e22b18db6fe6bb7cb8d490864ee51f9773f282f12f0d8f4660178f199e7c6877df84fa1f627b96333a8e2a89f775f69abe4e8a56c72f806dbc686d6336e0c25eb6e09af258f7a3ab4131caf8c0107e49579a9b2ecbebbda381185318c03e96db73ad58792c616b9b71407238d60830e8d403e8a367e7531160d9f91cb543473c6364e4378431f12260e956310adae06b12a3f94ae2b5bd838416f25bf0ab1c48d8aa8857b1f4c8bf2c687d33a0ce3c025bf91975810cb3fd1d6d31a12d5f3d197ae28295e86956c908e889bc80fb0317143dc444e7d415e64468b04fc02f5cac9dd0c3484b686533c324139989c2cb4464e24d510a3877290edaddf0dd8a4fcebf45c01b91d32d4f6096cf0b3f18f47c59cb79da6a08343004bb2e55330ff0cab7962fde96637b47c0fcfa09e9190c12b262535721977dcf798e3b8eb40a0a9ce0f7dd4b3aacde6f24efe8fd969104bc9fd117a38a34c5bd8cdc1d9b92bd78b27e9ac601089c871498e6f8bf10acb9d27d903b147aae417a4b750387a71cb11bab99dc41003c82fa3a48a263feb0ec84f81bc7f75dc62750a50611962fdd6f5efed191cc1f1d63c4ff1dfd37db3c9650b534b05cd28997b64d7c460ea15dbbc67468b9dcfec6f06f47a2768acc437c8fc780593df469ee29812805cc683dfb49d0e1cbff0f5a0336a771bae013a47d6b217f06d33de371a8c03ed9f2a08e1735f4962ff85f828016a69bbb6954f28de7adf1dba2ab41f0e904639ee90ec8876884edc6d78fb8b287301b973c5e188df806d2783bda9a1478b859b86e46e40b5593c0db4a8a71a8edda7107a5124238174e8bac222399d59622ec39b98ec4a1f6d7a8bc778a35b18e821d525c80a244ecb5019bf51e87d2e73c1800873b8924896777af9d9000d17bf8760efafdada76f5a35e0a370809a3f5297abe944b11fa365831e20eef17178827ffee1b6ae16c6f98a006db7dcb0f4ed4226cd76720809fe0dbdecce3e1508f6bfa52c16d2368fca6d1c21b451d8514940bf2bce138fdfe4abb7dd6fe59c5f12e76900a748991dfdca2cbeb4ccdd875d99ddab9b3fed4605a9c6c8d7f6a2ae114d627ab0ec80732f0e1ba0f5038fad83d84ce8c8921c08ca3097c41bf20af9d18e201fe401ef9b965922aeab959f06ffe05b675baab52bd8ca1ac3943fcdd7accbf3423112287047d121d583019ab7c8a861e53f5210e75d1ea73e0540e9362cf", 0x1000, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, r3}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={'rmd256-generic\x00'}})
r4 = socket(0x11, 0x2, 0x0)
setsockopt(r4, 0x107, 0x1, &(0x7f0000000040)="060000000000060000071a800100613f", 0x10)
setsockopt(r4, 0x107, 0x2, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

2m2.320838073s ago: executing program 37 (id=4054):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000029001c00c900"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000080)="29000300010003", 0x7)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x18, 0x4)
r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000780)="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", 0x1000, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, r3}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={'rmd256-generic\x00'}})
r4 = socket(0x11, 0x2, 0x0)
setsockopt(r4, 0x107, 0x1, &(0x7f0000000040)="060000000000060000071a800100613f", 0x10)
setsockopt(r4, 0x107, 0x2, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

1m7.036957383s ago: executing program 8 (id=4263):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}], {0x14}}, 0x48}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

1m5.849503363s ago: executing program 8 (id=4266):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000002f00000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)

1m5.127052504s ago: executing program 8 (id=4268):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
write$binfmt_misc(r1, &(0x7f0000000580)="34d4ec46370523e08902a8e24c118992db2b4377aa404eb702816ffc737af86c3a114c0e7278aee3c15e274bbc8c09161f8c8c9f3a8ac85b0152cca0e2b4b73f37bebc0a645109344ed2d0ae5cc6d203e9cf4671297e2a47a157975b53328b3d78000000000000000000000000000000000000000000afc8ddd1a4df5ef0ba8d058ab671500b7d2ec942103e9c1eca6426d839d02eb06c5634cfddf40e21b71dbe1c0d17eb306c0f7d3840f9351db382dec5961e6df7fe7a0000000007e4e21401dfd4c858d24b87f543e99c40b0e1c6e2a2000000000000000000", 0xfe7f)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000205, 0x40000000, 0x0, 0x5, 0xc, "fee8a2ab7800e87aaeccb2ce3a2000001ea89fe2b7fb0000e60080b8785d960001000000000200f97a640d46a73867000000000000000800", "28094cf00000000000004ad54a1d875397bdc0d8529e01177d2d4589d4792961ac0000084c640000000008001900", "9003001c550a001d00e6fffffff0ffffd39600", [0xfffffffffffff801, 0x8009]}})

1m2.174966004s ago: executing program 8 (id=4269):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="0100d8000000000000000100000004000480080002000100004808000100000000000400088058010c8054000b8008"], 0x184}}, 0x0)

59.19769407s ago: executing program 9 (id=4271):
syz_usb_connect$uac3(0x0, 0x9c, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x20000})

59.024556928s ago: executing program 8 (id=4272):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2)
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
open(0x0, 0x808400, 0x43)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

58.692436053s ago: executing program 8 (id=4273):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
r1 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x70bd29, 0x0, {0x0, 0x7, 0x0, 0x2d, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x100000000000000, 0x0, 0x3dd66fec0ddfba6f}, 0x40000)

58.569946951s ago: executing program 7 (id=4274):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4014)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r2, 0x6, 0x0, 0x0, 0x0, 0x1, {0x2}})
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x1, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc10c5541, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7bfd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r10, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x88, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x70, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3, 0x200, 0x5d}, {0x6, 0x24, 0x1a, 0x40, 0x20}, [@obex={0x5, 0x24, 0x15, 0x98f}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x72, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0xb, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x1, 0x8}}}}}}}]}}, 0x0)
syz_usb_control_io$hid(r10, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r11 = syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r11, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac3(r11, &(0x7f0000000100)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="000e06000000060a"], 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r9, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffffffff, 0x3}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "759a1d590701a7d6dace1952ed"}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "81642a70d295e7c54dcfdff6e3"}]}, 0x50}}, 0x11)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r13, 0x800448d4, &(0x7f0000000040)={0x1, 0x2, "004004", 0x5a, 0x40})
shutdown(r1, 0x2)

57.270006431s ago: executing program 9 (id=4275):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}], {0x14}}, 0x48}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

56.922086983s ago: executing program 9 (id=4276):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000240a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a30000000"], 0xf0}}, 0x0)

54.683864121s ago: executing program 7 (id=4277):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) (fail_nth: 4)

54.030731746s ago: executing program 7 (id=4278):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x1, 0x0, 0x7fffffff})
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0)

53.910917842s ago: executing program 7 (id=4279):
creat(&(0x7f0000000080)='./bus\x00', 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d80", @ANYRES32=r0, @ANYRESOCT], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0)

53.567841301s ago: executing program 9 (id=4280):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x300, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0)

53.50866026s ago: executing program 7 (id=4281):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2)
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
open(0x0, 0x808400, 0x43)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

52.581608412s ago: executing program 9 (id=4282):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000040)) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001e00010329bd70000000000005"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) (async)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000a40)={0xdc, 0x2, 0x2, 0xffff7fff, &(0x7f0000000080)=[{}, {}]}) (async)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x006\a'], 0x0, 0x0, 0x0, 0x0, 0x0})

50.209798932s ago: executing program 0 (id=4286):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x8008af83, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffc000/0x1000)=nil, 0x4, 0x952fe55939efcdc, 0x8})
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000280)=0xd739d1f50688ecbd)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000200))
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
r4 = fsmount(0xffffffffffffffff, 0x1, 0x6a)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000240)={0x20000000})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x7)
syz_usb_control_io$hid(r3, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000700)={0x20, 0x1, 0x58, "e98efb5895484ff2e3325de79d81923cde507ab6299eeb7bd98891b343cbaca8f61b3f10a1cdf02c9196276b72df4faae4198f6424e30c47acd75aa1d1049bae1f358ffa45f6274587ce8ec7f3f7adfc6fc5fe813d7cd183"}, 0x0})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r6, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = pidfd_getfd(0xffffffffffffffff, r7, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x34a4, 0x200, 0x3, 0x121}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80d4, 0x4, 0x1, 0x13c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c6e, 0x40, 0x3, 0x31a}, <r9=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf1f9, 0x400, 0x0, 0x3d9, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7a8a, 0x20, 0x2, 0xfd}}], 0x4, &(0x7f0000002b00)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff}, 0x0, 0x0, '\x00', {0x1, 0xbcc, 0x0, &(0x7f0000001b00)=@buf_1k="10b7f115a88a6c90e300b116a0c4931bed56f4ff9b7ef972ff6414077a2ea3c42d8d74364240631d92515815266a2999a43f67f91650331fdd9c7b3adf84b69fcad658241e47e52c989485b6f04240547e961a08d6c9fc97f881ad84b3196100acb88cfe9fb0c3f954a86a2c65836a7cfc5ea26979ab7be02d85dce1bd70f1bbcb8a3bf0162c044df1fa9114a3b9793c4c2326532e4fafd499f9d094c27b8bc90cc3313363cb007d99ee5f774abc5ed0debf686b8cb404a81c04a13a94e244b8d3f1f4b3b11172b0bff4158cb78dda7fb9355a9caf2c26fe7493a2b6222ec8862a9733d2ffd0e0e4bdc75dc22bfeb646acc91180f15813b273144c59f09dc1b172db1a6c90c61761eb774da58ef3f9d57aa7cf25a31e5e49a8f1e9c6a66bfdc2d66d6f5a89dd7ed8e3f016de9b9c92612e38421450a96294cf64a351cd4688c35dff1b5aa337bfe1e3371c1a83d3584785e88ea6634c2dce79c5088428d5b77b71db63090e9877206f40ac75b55a5c450b39e81332738c49e6cffc27b87a5b38152fcb2d80dba48489c75b2fbfda89cb478a983f1a05d5c35b980499a8f33d70aeec07bc0c8483a522654b4c51223929127fe9518610f0e500059267812d75bfeecc8b129bcf655c4be4cd43552955a17ff8b911e496aa8dfee46d2f8014df7e92ac9b14a4c2700770c5c8f962fff0fe0ae2eedcfccf228923fd28451314c4fe6fee9da0e50250182c47b8d1ccb6be4844734ca74d5a25644279f0fee413a7bcb76b459fa8bac279108ca5a174b780bf6c5366912e003807e5533b07ca9e3ef8eac05093c5c182fae6fd10493cce28a1469bcf37392f2fed61be013146046569fe77fd3630cfdd10ce2bdca948bcf1a5d266dbfe88080a7684834827a4591f89d37f702a5495901f9b3ee42391e21400777c28e17db4fb812005013bb3757954a1a0afb786ff326d58e04ef4dbe847bb06c9f5de85081c7b27cfe9ff66b223e5e29f7d8801490a448e6b32f7eaeba9721d913604be16af93e228c68ab346e4212bbbe8d03ee9e49b878ff911e8f9512ca2b9ffca6453960901415a8b75eec9fdc13c1551a7fc4dbc778275730172e4a2bdd85a2a55e9aa6d1cce824cb3106f913a3827fdb8c00ae4585806a78cbf9360f11107f5cccfb9360cb242c7d03c3daa56a02666620fe5f6cf4315660581e5eac2fc4141ebd873f60e325600e6fe809a7d61075ffd50911b65af638f243fd9e011cd9ca0558f188602b7f18315467fc71241c064dc07e1ee669a61e4c336bb4ec21694c1d3b72960833e90b26919a5720092d6cc193d95deb93c20850e0cbcff3c2f461204b3cdac33616577ca9363b9976ad30376fd288bbcd4459f59c2f82e1fcab2affc8d92f0148a92ea724623bea1e9beb6e0629a395a3d5885653c122babc4fa02d613ac40348c28a1052669ff"}}, &(0x7f0000002b80))
syz_ublk_setup_io_uring(0x2483, &(0x7f0000002bc0)={0x0, 0xa11b, 0x10, 0x1, 0xdb, 0x0, r9}, &(0x7f0000002c40), &(0x7f0000002c80), &(0x7f0000002cc0))
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x20, 0x4, 0x8, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0x81, 0x0, 0x0, @u64=0xbe}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004080d}, 0x40)
ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000040)={0xf, "44f7d6b090c2972ec0aa38d4f349cecac4decd54e99718348e76d4dc170ee915", 0x0, 0x220, 0xf, 0x7fffffff, 0x2, 0x2, 0x7766f1cd, 0x5})

46.808919503s ago: executing program 7 (id=4287):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010000400000000f5ff0000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000030000380"], 0xfc}}, 0x0)

45.577591994s ago: executing program 9 (id=4288):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, {0xeda7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x9})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206})
ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000)

42.467594986s ago: executing program 38 (id=4273):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
r1 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x70bd29, 0x0, {0x0, 0x7, 0x0, 0x2d, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x100000000000000, 0x0, 0x3dd66fec0ddfba6f}, 0x40000)

40.389663238s ago: executing program 0 (id=4290):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range(r0, r0, 0x2)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r1, 0x30d, 0x70bd2d, 0x0, {}, [@TIPC_NLA_MEDIA={0x0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x6514}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0xfffffffffffffddb, 0x2, 0xc1}]}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'eth\x00'}]}]}, 0x71}}, 0x0)

32.262927764s ago: executing program 0 (id=4291):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002f00090027bd70002000000004"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000)

30.056470491s ago: executing program 39 (id=4287):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010000400000000f5ff0000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000030000380"], 0xfc}}, 0x0)

28.026723803s ago: executing program 40 (id=4288):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, {0xeda7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x9})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206})
ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000)

20.519494434s ago: executing program 0 (id=4294):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}], {0x14}}, 0x48}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb2521000000", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

20.197446844s ago: executing program 0 (id=4295):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2)
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
open(0x0, 0x808400, 0x43)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

15.290736423s ago: executing program 0 (id=4296):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000b80), 0x4000000000000000, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

0s ago: executing program 41 (id=4296):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000b80), 0x4000000000000000, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

kernel console output (not intermixed with test programs):

808.356978][T17827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  808.357002][T17827] RIP: 0033:0x7f164d80ce59
[  808.357024][T17827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  808.357044][T17827] RSP: 002b:00007f164ba66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  808.357069][T17827] RAX: ffffffffffffffda RBX: 00007f164da85fa0 RCX: 00007f164d80ce59
[  808.357086][T17827] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003
[  808.357101][T17827] RBP: 00007f164ba66090 R08: 0000000000000000 R09: 0000000000000000
[  808.357116][T17827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  808.357129][T17827] R13: 00007f164da86038 R14: 00007f164da85fa0 R15: 00007ffdfe6915d8
[  808.357164][T17827]  </TASK>
[  808.637487][T17833] overlayfs: failed to resolve './file1': -2
[  808.667853][T17833] overlayfs: overlapping lowerdir path
[  808.813926][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3805'.
[  808.841450][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  808.841565][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  809.159967][T17857] overlayfs: failed to resolve './file1': -2
[  809.197297][T17857] overlayfs: overlapping lowerdir path
[  809.312921][ T9558] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[  809.471421][ T9558] usb 6-1: unable to get BOS descriptor or descriptor too short
[  809.477066][ T9558] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  809.477125][ T9558] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  809.477151][ T9558] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  809.477173][ T9558] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  809.487887][ T9558] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40
[  809.487920][ T9558] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.487941][ T9558] usb 6-1: Product: syz
[  809.487956][ T9558] usb 6-1: Manufacturer: syz
[  809.487970][ T9558] usb 6-1: SerialNumber: syz
[  809.578390][T17873] openvswitch: netlink: EtherType 53b is less than min 600
[  809.745479][T17854] comedi comedi1: 8255: I/O base address not correctly aligned
[  809.815486][ T9558] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  809.930906][ T9558] usb 6-1: USB disconnect, device number 119
[  810.087249][ T9566] udevd[9566]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  810.399376][T17904] f2fs: Unknown parameter 'ÿÿÿ'
[  810.911332][T17928] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  811.162828][ T9558] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  811.322754][ T9558] usb 1-1: Using ep0 maxpacket: 16
[  811.326068][ T9558] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  811.326099][ T9558] usb 1-1: config 0 has no interface number 0
[  811.358889][ T9558] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  811.358926][ T9558] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.359042][ T9558] usb 1-1: Product: syz
[  811.359059][ T9558] usb 1-1: Manufacturer: syz
[  811.359075][ T9558] usb 1-1: SerialNumber: syz
[  811.397551][ T9558] usb 1-1: config 0 descriptor??
[  811.434717][ T9558] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  811.948694][ T9558] gspca_spca1528: reg_w err -110
[  811.969506][ T9558] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110
[  812.020486][   T10] usb 1-1: USB disconnect, device number 52
[  812.577590][T17956] sg_write: data in/out 451179/114 bytes for SCSI command 0x0-- guessing data in;
[  812.577590][T17956]    program syz.7.3857 not setting count and/or reply_len properly
[  812.579053][T17956] FAULT_INJECTION: forcing a failure.
[  812.579053][T17956] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  812.579089][T17956] CPU: 1 UID: 0 PID: 17956 Comm: syz.7.3857 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  812.579115][T17956] Tainted: [L]=SOFTLOCKUP
[  812.579122][T17956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  812.579134][T17956] Call Trace:
[  812.579142][T17956]  <TASK>
[  812.579151][T17956]  dump_stack_lvl+0xe8/0x150
[  812.579178][T17956]  should_fail_ex+0x46b/0x600
[  812.579211][T17956]  _copy_from_iter+0x1d3/0x1670
[  812.579230][T17956]  ? irqentry_exit+0x218/0x8b0
[  812.579259][T17956]  ? trace_irq_disable+0x3b/0x140
[  812.579283][T17956]  ? __pfx__copy_from_iter+0x10/0x10
[  812.579307][T17956]  ? copy_page_from_iter+0x64/0x2d0
[  812.579330][T17956]  copy_page_from_iter+0x220/0x2d0
[  812.579352][T17956]  blk_rq_map_user_iov+0xa14/0x1790
[  812.579408][T17956]  ? __pfx_blk_rq_map_user_iov+0x10/0x10
[  812.579449][T17956]  ? import_ubuf+0xfb/0x1d0
[  812.579471][T17956]  blk_rq_map_user_io+0x2ae/0x440
[  812.579503][T17956]  ? __pfx_blk_rq_map_user_io+0x10/0x10
[  812.579534][T17956]  ? do_raw_spin_lock+0x12b/0x2f0
[  812.579562][T17956]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  812.579590][T17956]  ? lockdep_hardirqs_on+0x7a/0x110
[  812.579616][T17956]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  812.579643][T17956]  ? rt_mutex_slowunlock+0x1cb/0x300
[  812.579665][T17956]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  812.579698][T17956]  sg_common_write+0xcff/0x13e0
[  812.579732][T17956]  ? __pfx_sg_common_write+0x10/0x10
[  812.579752][T17956]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  812.579778][T17956]  ? ___ratelimit+0x58c/0x8d0
[  812.579809][T17956]  sg_write+0xafb/0xf00
[  812.579842][T17956]  ? __pfx_sg_write+0x10/0x10
[  812.579871][T17956]  ? __pfx_aa_file_perm+0x10/0x10
[  812.579928][T17956]  ? rw_verify_area+0x25b/0x4e0
[  812.579956][T17956]  ? __pfx_sg_write+0x10/0x10
[  812.579986][T17956]  vfs_write+0x2a3/0xba0
[  812.580021][T17956]  ? __pfx_vfs_write+0x10/0x10
[  812.580053][T17956]  ? __fget_files+0x2a/0x420
[  812.580082][T17956]  ? __fget_files+0x2a/0x420
[  812.580106][T17956]  ? __fget_files+0x3a6/0x420
[  812.580127][T17956]  ? __fget_files+0x2a/0x420
[  812.580161][T17956]  ksys_write+0x156/0x270
[  812.580192][T17956]  ? __pfx_ksys_write+0x10/0x10
[  812.580229][T17956]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  812.580253][T17956]  do_syscall_64+0x174/0x580
[  812.580285][T17956]  ? trace_irq_disable+0x3b/0x140
[  812.580308][T17956]  ? clear_bhb_loop+0x40/0x90
[  812.580334][T17956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  812.580354][T17956] RIP: 0033:0x7f083d92ce59
[  812.580391][T17956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  812.580411][T17956] RSP: 002b:00007f083bb7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  812.580435][T17956] RAX: ffffffffffffffda RBX: 00007f083dba5fa0 RCX: 00007f083d92ce59
[  812.580451][T17956] RDX: 000000000000009c RSI: 0000200000000c40 RDI: 0000000000000004
[  812.580465][T17956] RBP: 00007f083bb7e090 R08: 0000000000000000 R09: 0000000000000000
[  812.580497][T17956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  812.580511][T17956] R13: 00007f083dba6038 R14: 00007f083dba5fa0 R15: 00007fff4f97f018
[  812.580544][T17956]  </TASK>
[  812.883761][T17963] overlayfs: overlapping lowerdir path
[  813.108687][T17968] netlink: 'syz.7.3863': attribute type 10 has an invalid length.
[  813.108710][T17968] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3863'.
[  813.148501][T17968] team0: Port device geneve1 added
[  813.348446][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3865'.
[  813.690731][T16497] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  813.733780][T16497] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  813.736281][T16497] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  813.742269][T16497] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  813.747512][T16497] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  813.940918][T17986] overlayfs: overlapping lowerdir path
[  814.635986][T17978] bridge0: port 1(bridge_slave_0) entered blocking state
[  814.636269][T17978] bridge0: port 1(bridge_slave_0) entered disabled state
[  814.636452][T17978] bridge_slave_0: entered allmulticast mode
[  814.638610][T17978] bridge_slave_0: entered promiscuous mode
[  814.681555][T17978] bridge0: port 2(bridge_slave_1) entered blocking state
[  814.681846][T17978] bridge0: port 2(bridge_slave_1) entered disabled state
[  814.682121][T17978] bridge_slave_1: entered allmulticast mode
[  814.686758][T17978] bridge_slave_1: entered promiscuous mode
[  814.757755][T17978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  814.765839][T17978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  814.807141][T17978] team0: Port device team_slave_0 added
[  814.810601][T17978] team0: Port device team_slave_1 added
[  814.848775][T17978] batman_adv: batadv0: Adding interface: batadv_slave_0
[  814.848789][T17978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  814.848807][T17978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  814.851013][T17978] batman_adv: batadv0: Adding interface: batadv_slave_1
[  814.851024][T17978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  814.851041][T17978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  814.939732][T17978] hsr_slave_0: entered promiscuous mode
[  814.941967][T17978] hsr_slave_1: entered promiscuous mode
[  814.951531][T17978] debugfs: 'hsr0' already exists in 'hsr'
[  814.951564][T17978] Cannot create hsr debugfs directory
[  815.430826][T17978] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.917218][T17978] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.964124][T16521] Bluetooth: hci1: command tx timeout
[  816.269377][T17978] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.565516][T17978] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.993256][T17978] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  817.036348][T17978] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  817.037491][T17978] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  817.066910][T17978] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  817.067970][T17978] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  817.100819][T17978] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  817.101903][T17978] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  817.171634][T17978] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  817.304237][T17978] 8021q: adding VLAN 0 to HW filter on device bond0
[  817.337066][T17978] 8021q: adding VLAN 0 to HW filter on device team0
[  817.358422][ T6405] bridge0: port 1(bridge_slave_0) entered blocking state
[  817.358601][ T6405] bridge0: port 1(bridge_slave_0) entered forwarding state
[  817.382613][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state
[  817.382755][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state
[  817.926343][T17978] 8021q: adding VLAN 0 to HW filter on device batadv0
[  818.032560][T16521] Bluetooth: hci1: command tx timeout
[  818.188652][T17978] veth0_vlan: entered promiscuous mode
[  818.201061][T17978] veth1_vlan: entered promiscuous mode
[  818.281996][T17978] veth0_macvtap: entered promiscuous mode
[  818.297260][T17978] veth1_macvtap: entered promiscuous mode
[  818.328623][T17978] batman_adv: batadv0: Interface activated: batadv_slave_0
[  818.365502][T17978] batman_adv: batadv0: Interface activated: batadv_slave_1
[  818.397737][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  818.399491][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  818.400873][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  818.400917][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  819.452293][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  819.452315][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  819.756354][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  819.756378][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  820.025551][T18026] netlink: 'syz.5.3862': attribute type 5 has an invalid length.
[  820.112295][T16521] Bluetooth: hci1: command tx timeout
[  820.333863][T16497] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  820.421150][T16497] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  820.433182][T16497] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  820.450998][T16497] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  820.488259][T16497] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  821.498088][T18038] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.498369][T18038] bridge0: port 1(bridge_slave_0) entered disabled state
[  821.498554][T18038] bridge_slave_0: entered allmulticast mode
[  821.500645][T18038] bridge_slave_0: entered promiscuous mode
[  821.507212][T18038] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.507612][T18038] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.507886][T18038] bridge_slave_1: entered allmulticast mode
[  821.511376][T18038] bridge_slave_1: entered promiscuous mode
[  821.575651][T18038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  821.580615][T18038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  821.623955][T18038] team0: Port device team_slave_0 added
[  821.627569][T18038] team0: Port device team_slave_1 added
[  821.674191][T18038] batman_adv: batadv0: Adding interface: batadv_slave_0
[  821.674205][T18038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  821.674223][T18038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  821.676552][T18038] batman_adv: batadv0: Adding interface: batadv_slave_1
[  821.676562][T18038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  821.676580][T18038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  821.929980][T18038] hsr_slave_0: entered promiscuous mode
[  821.931522][T18038] hsr_slave_1: entered promiscuous mode
[  821.943885][T18038] debugfs: 'hsr0' already exists in 'hsr'
[  821.943921][T18038] Cannot create hsr debugfs directory
[  822.193447][T16497] Bluetooth: hci1: command tx timeout
[  822.385392][T18038] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  822.426532][T18038] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  822.427605][T18038] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  822.470936][T18038] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  822.479651][T18038] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  822.540410][T18038] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  822.541478][T18038] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  822.568799][T18038] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  822.717659][T18038] 8021q: adding VLAN 0 to HW filter on device bond0
[  822.747399][T18038] 8021q: adding VLAN 0 to HW filter on device team0
[  822.770265][ T7554] bridge0: port 1(bridge_slave_0) entered blocking state
[  822.770385][ T7554] bridge0: port 1(bridge_slave_0) entered forwarding state
[  822.803459][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state
[  822.803748][ T7554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  822.833641][T16497] Bluetooth: hci2: command tx timeout
[  823.365871][T18038] 8021q: adding VLAN 0 to HW filter on device batadv0
[  823.689342][T18038] veth0_vlan: entered promiscuous mode
[  823.706738][T18038] veth1_vlan: entered promiscuous mode
[  823.774989][T18038] veth0_macvtap: entered promiscuous mode
[  823.799609][T18038] veth1_macvtap: entered promiscuous mode
[  823.841285][T18038] batman_adv: batadv0: Interface activated: batadv_slave_0
[  823.871663][T18038] batman_adv: batadv0: Interface activated: batadv_slave_1
[  823.897759][ T7555] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  823.899177][ T7555] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  823.906255][ T7555] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  823.938331][ T7555] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  824.928853][T16497] Bluetooth: hci2: command tx timeout
[  825.627908][ T6407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  825.627934][ T6407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  825.857550][ T6842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  825.857631][ T6842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  826.079948][T18086] openvswitch: netlink: EtherType 53b is less than min 600
[  826.993383][T16497] Bluetooth: hci2: command tx timeout
[  829.074441][T16497] Bluetooth: hci2: command tx timeout
[  838.640371][T18105] loop7: detected capacity change from 0 to 7
[  838.873850][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  838.980033][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  838.981190][ T5716] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  839.047902][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  839.048157][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  839.065792][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  839.065829][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  839.066596][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  839.066622][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  839.067278][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  839.067303][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  839.068011][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  839.068036][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  839.131429][ T5716] usb 9-1: Using ep0 maxpacket: 16
[  839.135301][ T5716] usb 9-1: config 251 has an invalid interface number: 202 but max is 0
[  839.135330][ T5716] usb 9-1: config 251 has no interface number 0
[  839.135376][ T5716] usb 9-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  839.135400][ T5716] usb 9-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  839.135424][ T5716] usb 9-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  839.135446][ T5716] usb 9-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  839.135473][ T5716] usb 9-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  839.135507][ T5716] usb 9-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  839.135533][ T5716] usb 9-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 42496, setting to 1024
[  839.135559][ T5716] usb 9-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  839.135585][ T5716] usb 9-1: config 251 interface 202 has no altsetting 0
[  839.138442][ T5716] usb 9-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  839.138472][ T5716] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  839.138492][ T5716] usb 9-1: Product: syz
[  839.138506][ T5716] usb 9-1: SerialNumber: syz
[  839.153056][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  839.153100][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  839.202815][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  839.202852][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  839.224728][T18107] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  839.245232][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  839.245267][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  839.246507][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  839.247736][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  839.487688][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3892'.
[  839.514659][ T5716] cxacru 9-1:251.202: cxacru_bind: interface has incorrect endpoints
[  839.514834][ T5716] cxacru 9-1:251.202: usbatm_usb_probe: bind failed: -19!
[  839.677130][ T5716] usb 9-1: USB disconnect, device number 2
[  839.842075][ T5694] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  839.973423][ T5694] usb 8-1: device descriptor read/64, error -71
[  840.080682][T18148] tipc: Enabled bearer <eth:macvtap0>, priority 6
[  840.241131][ T5694] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  840.381154][ T5694] usb 8-1: device descriptor read/64, error -71
[  840.493782][ T5694] usb usb8-port1: attempt power cycle
[  840.654459][T18176] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3913'.
[  840.784938][T18179] overlayfs: missing 'lowerdir'
[  840.817199][T18179] overlayfs: overlapping lowerdir path
[  840.851583][ T5694] usb 8-1: new high-speed USB device number 40 using dummy_hcd
[  840.872990][ T5694] usb 8-1: device descriptor read/8, error -71
[  841.133577][ T5694] usb 8-1: new high-speed USB device number 41 using dummy_hcd
[  841.143537][T18197] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3923'.
[  841.152425][ T5694] usb 8-1: device descriptor read/8, error -71
[  841.215418][T18200] tipc: Started in network mode
[  841.215440][T18200] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  841.215663][T18200] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  841.217500][T18200] tipc: Enabled bearer <udp:syz0>, priority 10
[  841.262534][ T5694] usb usb8-port1: unable to enumerate USB device
[  841.281055][ T5716] usb 9-1: new low-speed USB device number 3 using dummy_hcd
[  841.411728][ T5715] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  841.434353][ T5716] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  841.435367][ T5716] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  841.435417][ T5716] usb 9-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  841.435445][ T5716] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.441725][ T5716] usb 9-1: config 0 descriptor??
[  841.593995][ T5715] usb 1-1: Using ep0 maxpacket: 8
[  841.596311][ T5715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  841.596432][ T5715] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  841.596450][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.603595][ T5715] usb 1-1: config 0 descriptor??
[  841.640978][ T5758] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[  841.665980][ T5715] gspca_main: vc032x-2.14.0 probing 046d:0892
[  841.800987][ T5758] usb 6-1: Using ep0 maxpacket: 16
[  841.803252][ T5758] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  841.803311][ T5758] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  841.803344][ T5758] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  841.803369][ T5758] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  841.803393][ T5758] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  841.804959][ T5758] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  841.804990][ T5758] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  841.805013][ T5758] usb 6-1: Manufacturer: syz
[  841.857611][ T5758] usb 6-1: config 0 descriptor??
[  841.860252][T18198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  841.864231][T18198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  841.870087][T18198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  841.875112][T18198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  841.884239][T18198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  841.886376][T18198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  841.978949][T18198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  841.987803][T18198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  841.990504][T18198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  841.996412][T18198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  842.086611][ T5715] gspca_vc032x: reg_r err -71
[  842.086717][ T5715] vc032x 1-1:0.0: probe with driver vc032x failed with error -71
[  842.108349][ T5716] aquacomputer_d5next 0003:0C70:F0B6.0016: unknown main item tag 0x7
[  842.109032][ T5715] usb 1-1: USB disconnect, device number 53
[  842.185460][T18190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  842.186086][T18190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  842.214048][ T5758] rc_core: IR keymap rc-hauppauge not found
[  842.214070][ T5758] Registered IR keymap rc-empty
[  842.214243][ T5758] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  842.216611][ T5716] aquacomputer_d5next 0003:0C70:F0B6.0016: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.8-1/input0
[  842.230981][ T5758] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  842.265481][ T5758] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  842.267388][ T5758] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input50
[  842.295636][ T5758] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  842.311150][ T5758] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  842.331084][ T5758] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  842.350685][ T5715] tipc: Node number set to 1
[  842.355894][ T5758] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  842.371415][ T5758] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  842.384297][ T5716] usb 9-1: USB disconnect, device number 3
[  842.391345][ T5758] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  842.413237][ T5758] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  842.431246][ T5758] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  842.450952][ T5758] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  842.475137][ T5758] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  842.527695][ T5758] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  842.527726][ T5758] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  842.689835][T18212] overlayfs: missing 'lowerdir'
[  842.758565][T18213] overlayfs: overlapping lowerdir path
[  842.801986][T18208] fido_id[18208]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[  843.173481][T18219] FAULT_INJECTION: forcing a failure.
[  843.173481][T18219] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  843.173519][T18219] CPU: 0 UID: 0 PID: 18219 Comm: syz.8.3929 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  843.173549][T18219] Tainted: [L]=SOFTLOCKUP
[  843.173556][T18219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  843.173568][T18219] Call Trace:
[  843.173576][T18219]  <TASK>
[  843.173585][T18219]  dump_stack_lvl+0xe8/0x150
[  843.173612][T18219]  should_fail_ex+0x46b/0x600
[  843.173643][T18219]  _copy_to_user+0x31/0xb0
[  843.173666][T18219]  simple_read_from_buffer+0xe1/0x170
[  843.173693][T18219]  proc_fail_nth_read+0x1be/0x230
[  843.173718][T18219]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  843.173741][T18219]  ? rw_verify_area+0x2ac/0x4e0
[  843.173766][T18219]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  843.173787][T18219]  vfs_read+0x212/0xa80
[  843.173819][T18219]  ? __pfx_vfs_read+0x10/0x10
[  843.173846][T18219]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  843.173874][T18219]  ? lockdep_hardirqs_on+0x7a/0x110
[  843.173901][T18219]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  843.173926][T18219]  ? mutex_lock_nested+0x152/0x1d0
[  843.173946][T18219]  ? fdget_pos+0x252/0x320
[  843.173979][T18219]  ksys_read+0x156/0x270
[  843.174008][T18219]  ? __pfx_ksys_read+0x10/0x10
[  843.174035][T18219]  ? __se_sys_renameat+0x187/0x2c0
[  843.174064][T18219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.174088][T18219]  do_syscall_64+0x174/0x580
[  843.174117][T18219]  ? trace_irq_disable+0x3b/0x140
[  843.174148][T18219]  ? clear_bhb_loop+0x40/0x90
[  843.174176][T18219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.174195][T18219] RIP: 0033:0x7f654f84d68e
[  843.174217][T18219] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  843.174236][T18219] RSP: 002b:00007f654dae5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  843.174260][T18219] RAX: ffffffffffffffda RBX: 00007f654dae66c0 RCX: 00007f654f84d68e
[  843.174277][T18219] RDX: 000000000000000f RSI: 00007f654dae60a0 RDI: 0000000000000003
[  843.174300][T18219] RBP: 00007f654dae6090 R08: 0000000000000000 R09: 0000000000000000
[  843.174316][T18219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  843.174329][T18219] R13: 00007f654fb06038 R14: 00007f654fb05fa0 R15: 00007fff05cb5338
[  843.174363][T18219]  </TASK>
[  843.967588][T18231] tmpfs: Bad value for 'mpol'
[  844.091823][ T5716] usb 9-1: new low-speed USB device number 4 using dummy_hcd
[  844.267656][ T5716] usb 9-1: No LPM exit latency info found, disabling LPM.
[  844.291590][ T5716] usb 9-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  844.291627][ T5716] usb 9-1: config 1 interface 0 has no altsetting 0
[  844.303360][ T5716] usb 9-1: string descriptor 0 read error: -22
[  844.303521][ T5716] usb 9-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.40
[  844.303546][ T5716] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  844.350181][T18229] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  844.490786][ T9558] usb 8-1: new high-speed USB device number 42 using dummy_hcd
[  844.648161][ T9558] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  844.648472][ T9558] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  844.648501][ T9558] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.828510][ T9558] usb 8-1: config 0 descriptor??
[  845.137162][ T5716] usbhid 9-1:1.0: can't add hid device: -71
[  845.137294][ T5716] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[  845.149512][ T5716] usb 9-1: USB disconnect, device number 4
[  845.243666][ T5694] usb 6-1: USB disconnect, device number 120
[  845.244597][T16521] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  845.389414][T16521] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  845.398332][T16521] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  845.461087][T16521] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  845.511065][T16521] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  845.536313][ T9558] ath6kl: Unsupported hardware version: 0x6eedddca
[  845.547806][ T9558] ath6kl: Failed to init ath6kl core: -22
[  845.548423][ T9558] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -22
[  846.469968][T18252] ieee802154 phy0 wpan0: encryption failed: -22
[  846.578937][T18256] overlayfs: missing 'lowerdir'
[  846.613930][T18256] overlayfs: overlapping lowerdir path
[  846.999174][ T5716] usb 8-1: USB disconnect, device number 42
[  847.332391][ T5796] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  847.491132][ T5796] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  847.491168][ T5796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.491191][ T5796] usb 9-1: Product: syz
[  847.491207][ T5796] usb 9-1: Manufacturer: syz
[  847.491223][ T5796] usb 9-1: SerialNumber: syz
[  847.497806][ T5796] usb 9-1: config 0 descriptor??
[  847.556813][ T5796] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 005
[  848.030857][T16497] Bluetooth: hci5: command tx timeout
[  848.236694][T18273] netlink: 'syz.7.3944': attribute type 4 has an invalid length.
[  848.236721][T18273] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3944'.
[  848.282979][T18273] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  848.317603][ T5796] i2c i2c-3: connected i2c-tiny-usb device
[  848.482036][T18283] overlayfs: missing 'lowerdir'
[  848.521682][T18283] overlayfs: overlapping lowerdir path
[  848.824678][T18291] tipc: Invalid UDP bearer configuration
[  848.824729][T18291] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  848.830059][T18236] bridge0: port 1(bridge_slave_0) entered blocking state
[  848.831809][T18236] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.832175][T18236] bridge_slave_0: entered allmulticast mode
[  848.840684][T18236] bridge_slave_0: entered promiscuous mode
[  848.849270][T18236] bridge0: port 2(bridge_slave_1) entered blocking state
[  848.850847][T18236] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.851201][T18236] bridge_slave_1: entered allmulticast mode
[  848.858984][T18236] bridge_slave_1: entered promiscuous mode
[  849.104930][T18236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  849.136214][T18236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  849.329869][T18236] team0: Port device team_slave_0 added
[  849.341658][T18236] team0: Port device team_slave_1 added
[  849.355020][T18308] overlayfs: missing 'lowerdir'
[  849.395776][T18308] overlayfs: overlapping lowerdir path
[  849.398714][T18236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  849.398732][T18236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  849.398763][T18236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  849.403903][T18236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  849.403919][T18236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  849.403963][T18236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  849.600053][T18310] netlink: 'syz.7.3957': attribute type 3 has an invalid length.
[  849.600079][T18310] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3957'.
[  849.647043][T18236] hsr_slave_0: entered promiscuous mode
[  849.653745][T18236] hsr_slave_1: entered promiscuous mode
[  849.660971][T18236] debugfs: 'hsr0' already exists in 'hsr'
[  849.661000][T18236] Cannot create hsr debugfs directory
[  849.736360][T16497] Bluetooth: hci0: unexpected cc 0x1407 length: 2 < 9
[  849.736395][T16497] Bluetooth: hci0: unexpected event for opcode 0x1407
[  850.074857][ T5715] usb 9-1: USB disconnect, device number 5
[  850.111522][T16497] Bluetooth: hci5: command tx timeout
[  850.203771][ T9527] usb 6-1: new full-speed USB device number 121 using dummy_hcd
[  850.220265][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3962'.
[  850.377705][T18328] overlayfs: missing 'lowerdir'
[  850.379153][ T9527] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  850.379190][ T9527] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  850.379218][ T9527] usb 6-1: config 1 interface 0 has no altsetting 0
[  850.379767][ T9527] usb 6-1: language id specifier not provided by device, defaulting to English
[  850.411013][ T9527] usb 6-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.40
[  850.411046][ T9527] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.411066][ T9527] usb 6-1: Product: 쳺ቛᤊ�릂솂 㤴�㢛꫉ح溜槧뒷
[  850.411083][ T9527] usb 6-1: Manufacturer: 뗢᫠䎤뼪㛒䂕렶鰃裶⒜毠顱≪ᰤ묾疤ﻘ㘂꙳떎텥캤賧蚾䫷ی騴�㵎헲⹒ಯ䉜�ᬷ䂹価䈛嘊䜎ꃚ锅䯈犔﹊�礶娌�ቷ魿�鵚妿꤇澕㰇뷠齓忖��衧뙙嵱ᆖ�嶭좎��ϻ凋넸�缿蜌��伣ģ둖Ḣ슣
[  850.411111][ T9527] usb 6-1: SerialNumber: 翿鱉ჿ髄�ϋ逬㦰栳ᘑK왻轧뎨뼼ᱮ೘抦҆䩕銎衳Ǻᷴ謘㟮苭葒�Ⅵ擯᎕㽓�戊⪗넅瑀⛿ᡠ飯䥖뜬ꃛ鳓쿫墳鋦ᬨ︼蜾ힽ칯⮞꧰孑仩�逡㲯��兣鱢꩟뽰῅�弽郠ἴ誫쫘欙巢�삀居ꊄᣔ횷뢛罖ᶼ�쫨뜕昺�᨟�煠�쇮㻼�䨓뇇�䢷邙틒ú蚢�鞽��涼螷
[  850.431013][T18328] overlayfs: overlapping lowerdir path
[  850.455447][ T9527] usb 6-1: rejected 1 configuration due to insufficient available bus power
[  850.455476][ T9527] usb 6-1: no configuration chosen from 1 choice
[  850.726682][T18332] netlink: 'syz.7.3965': attribute type 3 has an invalid length.
[  850.726707][T18332] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3965'.
[  850.958360][T18339] FAULT_INJECTION: forcing a failure.
[  850.958360][T18339] name failslab, interval 1, probability 0, space 0, times 0
[  850.958405][T18339] CPU: 1 UID: 0 PID: 18339 Comm: syz.8.3967 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  850.958437][T18339] Tainted: [L]=SOFTLOCKUP
[  850.958446][T18339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  850.958460][T18339] Call Trace:
[  850.958469][T18339]  <TASK>
[  850.958479][T18339]  dump_stack_lvl+0xe8/0x150
[  850.958515][T18339]  should_fail_ex+0x46b/0x600
[  850.958567][T18339]  should_failslab+0xa8/0x100
[  850.958599][T18339]  __kmalloc_cache_noprof+0x84/0x690
[  850.958627][T18339]  ? sctp_add_bind_addr+0xb0/0x370
[  850.958656][T18339]  ? sctp_add_bind_addr+0x8c/0x370
[  850.958688][T18339]  sctp_add_bind_addr+0x8c/0x370
[  850.958721][T18339]  sctp_copy_local_addr_list+0x314/0x4f0
[  850.958755][T18339]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  850.958784][T18339]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  850.958817][T18339]  ? sctp_v6_is_any+0x64/0x80
[  850.958850][T18339]  ? sctp_copy_one_addr+0x93/0x360
[  850.958895][T18339]  sctp_bind_addr_copy+0xb3/0x3c0
[  850.958926][T18339]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  850.958959][T18339]  sctp_connect_new_asoc+0x2ff/0x6b0
[  850.958986][T18339]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  850.959018][T18339]  ? sctp_inet6_send_verify+0x23a/0x300
[  850.959048][T18339]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  850.959082][T18339]  __sctp_connect+0x5cb/0xdc0
[  850.959118][T18339]  ? __pfx___sctp_connect+0x10/0x10
[  850.959141][T18339]  ? security_sctp_bind_connect+0x7e/0x2c0
[  850.959178][T18339]  ? __sctp_setsockopt_connectx+0xc7/0x190
[  850.959210][T18339]  sctp_getsockopt_connectx3+0x227/0x360
[  850.959246][T18339]  ? __pfx_sctp_getsockopt_connectx3+0x10/0x10
[  850.959284][T18339]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  850.959318][T18339]  ? lockdep_hardirqs_on+0x7a/0x110
[  850.959362][T18339]  sctp_getsockopt+0x984/0xb90
[  850.959397][T18339]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  850.959427][T18339]  do_sock_getsockopt+0x51d/0x7e0
[  850.959468][T18339]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  850.959515][T18339]  ? __fget_files+0x3a6/0x420
[  850.959540][T18339]  ? __fget_files+0x2a/0x420
[  850.959573][T18339]  __x64_sys_getsockopt+0x1aa/0x250
[  850.959612][T18339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.959638][T18339]  do_syscall_64+0x174/0x580
[  850.959669][T18339]  ? trace_irq_disable+0x3b/0x140
[  850.959695][T18339]  ? clear_bhb_loop+0x40/0x90
[  850.959723][T18339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.959746][T18339] RIP: 0033:0x7f654f88ce59
[  850.959769][T18339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  850.959788][T18339] RSP: 002b:00007f654dae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  850.959814][T18339] RAX: ffffffffffffffda RBX: 00007f654fb05fa0 RCX: 00007f654f88ce59
[  850.959831][T18339] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003
[  850.959845][T18339] RBP: 00007f654dae6090 R08: 0000200000000140 R09: 0000000000000000
[  850.959860][T18339] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000002
[  850.959875][T18339] R13: 00007f654fb06038 R14: 00007f654fb05fa0 R15: 00007fff05cb5338
[  850.959911][T18339]  </TASK>
[  851.628379][T18236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.946717][T18345] overlayfs: missing 'workdir'
[  851.973377][T18345] overlayfs: overlapping lowerdir path
[  852.099712][T18349] netlink: 'syz.7.3973': attribute type 3 has an invalid length.
[  852.099736][T18349] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3973'.
[  852.192597][T16497] Bluetooth: hci5: command tx timeout
[  852.334688][T18236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.419713][T18355] netlink: 264 bytes leftover after parsing attributes in process `syz.8.3976'.
[  852.419743][T18355] netlink: 264 bytes leftover after parsing attributes in process `syz.8.3976'.
[  852.692962][T18361] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3979'.
[  852.692981][T18361] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3979'.
[  852.780415][ T5758] usb 8-1: new high-speed USB device number 43 using dummy_hcd
[  852.950718][ T5758] usb 8-1: Using ep0 maxpacket: 16
[  852.953424][ T5758] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  852.953483][ T5758] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  852.953515][ T5758] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  852.953539][ T5758] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  852.953565][ T5758] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  852.955027][ T5758] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  852.955060][ T5758] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  852.955083][ T5758] usb 8-1: Manufacturer: syz
[  853.053969][ T5758] usb 8-1: config 0 descriptor??
[  853.089417][ T9558] usb 6-1: USB disconnect, device number 121
[  853.092539][T18236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.148035][T18368] overlayfs: missing 'workdir'
[  853.170653][T18369] overlayfs: overlapping lowerdir path
[  853.254595][T18371] netlink: 'syz.5.3982': attribute type 10 has an invalid length.
[  853.393228][ T5758] rc_core: IR keymap rc-hauppauge not found
[  853.393254][ T5758] Registered IR keymap rc-empty
[  853.393410][ T5758] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  853.393806][T18376] netlink: 'syz.5.3984': attribute type 3 has an invalid length.
[  853.393824][T18376] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3984'.
[  853.437934][ T5758] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  853.451492][ T5758] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  853.458299][ T5758] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input51
[  853.468698][ T5758] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  853.480771][ T5758] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  853.503042][ T5758] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  853.522675][ T5758] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  853.551350][ T5758] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  853.570386][ T5758] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  853.590463][ T5758] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  853.610511][ T5758] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  853.639314][ T5758] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  853.654414][ T5758] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  853.774259][ T5758] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  853.774364][ T5758] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  854.054656][T18388] netlink: 324 bytes leftover after parsing attributes in process `syz.8.3989'.
[  854.303450][T16497] Bluetooth: hci5: command tx timeout
[  854.350484][ T5694] usb 6-1: new full-speed USB device number 122 using dummy_hcd
[  854.403499][T18390] overlayfs: missing 'workdir'
[  854.444117][T18390] overlayfs: overlapping lowerdir path
[  854.521670][ T5694] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  854.521714][ T5694] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  854.521737][ T5694] usb 6-1: config 0 has no interface number 0
[  854.521786][ T5694] usb 6-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  854.521817][ T5694] usb 6-1: config 0 interface 41 has no altsetting 0
[  854.525124][ T5694] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  854.525157][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.525178][ T5694] usb 6-1: Product: syz
[  854.525195][ T5694] usb 6-1: Manufacturer: syz
[  854.525212][ T5694] usb 6-1: SerialNumber: syz
[  854.618551][ T5694] usb 6-1: config 0 descriptor??
[  854.633821][ T5694] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -22
[  854.782110][T18394] netlink: 'syz.8.3992': attribute type 3 has an invalid length.
[  854.782156][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3992'.
[  854.842953][ T5694] usb 6-1: USB disconnect, device number 122
[  855.034659][T18236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  855.139345][ T5694] usb 8-1: USB disconnect, device number 43
[  855.580978][ T9527] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  855.750322][ T9527] usb 9-1: Using ep0 maxpacket: 16
[  855.771944][ T9527] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  855.771977][ T9527] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  855.812572][ T9527] usb 9-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40
[  855.812604][ T9527] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.812625][ T9527] usb 9-1: Product: syz
[  855.812641][ T9527] usb 9-1: Manufacturer: syz
[  855.812656][ T9527] usb 9-1: SerialNumber: syz
[  856.279813][T18410] overlayfs: missing 'lowerdir'
[  856.317457][T18410] overlayfs: overlapping lowerdir path
[  856.341054][ T9527] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[  856.364696][ T9527] usb 9-1: USB disconnect, device number 6
[  856.466894][T18116] udevd[18116]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  856.635310][T18417] netlink: 'syz.8.4000': attribute type 3 has an invalid length.
[  856.635337][T18417] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4000'.
[  856.819028][T18236] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  856.921128][T18236] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  856.924352][T18236] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  857.161756][T18236] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  857.166427][T18236] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  857.168381][T18433] overlayfs: missing 'lowerdir'
[  857.209346][T18433] overlayfs: overlapping lowerdir path
[  857.216493][T18236] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  857.219202][T18236] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  857.346814][T18236] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  857.361637][ T5694] usb 8-1: new high-speed USB device number 44 using dummy_hcd
[  857.510272][ T5694] usb 8-1: Using ep0 maxpacket: 8
[  857.513526][ T5694] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  857.513560][ T5694] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.547536][ T5694] usb 8-1: config 0 descriptor??
[  857.759809][ T5694] usb 8-1: string descriptor 0 read error: -71
[  857.786902][ T5694] uvcvideo 8-1:0.0: Found UVC 0.00 device <unnamed> (2833:0201)
[  857.787014][ T5694] uvcvideo 8-1:0.0: No valid video chain found.
[  857.829759][ T5694] usb 8-1: USB disconnect, device number 44
[  857.894223][T18236] 8021q: adding VLAN 0 to HW filter on device bond0
[  858.106407][T18236] 8021q: adding VLAN 0 to HW filter on device team0
[  858.255662][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state
[  858.255869][ T6414] bridge0: port 1(bridge_slave_0) entered forwarding state
[  858.309420][T18447] netlink: 'syz.8.4010': attribute type 3 has an invalid length.
[  858.309446][T18447] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4010'.
[  858.381612][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[  858.418086][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[  858.663542][T18454] binder: 18452:18454 ioctl c0306201 2000000001c0 returned -14
[  858.796493][T18461] overlayfs: missing 'lowerdir'
[  858.920247][T18461] overlayfs: overlapping lowerdir path
[  859.420688][T18475] autofs4:pid:18475:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[  859.429465][T18474] netlink: 'syz.5.4019': attribute type 3 has an invalid length.
[  859.429491][T18474] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4019'.
[  859.629327][   T38] audit: type=1326 audit(1780131952.760:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18481 comm="syz.8.4021" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f654f88ce59 code=0x0
[  859.875134][T18486] loop8: detected capacity change from 0 to 7
[  859.901405][ T9527] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[  859.935935][T18486] Dev loop8: unable to read RDB block 7
[  859.936006][T18486]  loop8: unable to read partition table
[  859.936574][T18486] loop8: partition table beyond EOD, truncated
[  859.959069][T18486] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  860.088289][ T9527] usb 6-1: unable to get BOS descriptor or descriptor too short
[  860.102351][ T9527] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  860.102383][ T9527] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  860.102462][ T9527] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  860.148234][ T9527] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  860.148270][ T9527] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.148294][ T9527] usb 6-1: Product: syz
[  860.148310][ T9527] usb 6-1: Manufacturer: syz
[  860.148336][ T9527] usb 6-1: SerialNumber: syz
[  860.500637][T18480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  860.501328][T18480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  860.563062][ T9527] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1
[  860.564191][T18493] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  860.564253][T18493] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  860.664622][T18493] overlayfs: overlapping lowerdir path
[  860.874704][ T9527] usb 6-1: USB disconnect, device number 123
[  861.167634][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4028'.
[  861.167664][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4028'.
[  861.178889][T18206] udevd[18206]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  861.203599][T18236] 8021q: adding VLAN 0 to HW filter on device batadv0
[  861.411549][T18504] netlink: 'syz.5.4029': attribute type 3 has an invalid length.
[  861.411575][T18504] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4029'.
[  861.712334][ T9527] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  861.781285][T18236] veth0_vlan: entered promiscuous mode
[  861.811411][T18236] veth1_vlan: entered promiscuous mode
[  861.834706][T18517] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  861.834764][T18517] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  861.865410][T18517] overlayfs: overlapping lowerdir path
[  861.904312][ T9527] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  861.904351][ T9527] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.927660][ T9527] usb 9-1: config 0 descriptor??
[  862.070078][ T5796] usb 8-1: new full-speed USB device number 45 using dummy_hcd
[  862.129571][T18236] veth0_macvtap: entered promiscuous mode
[  862.142106][ T9527] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  862.194182][T18236] veth1_macvtap: entered promiscuous mode
[  862.257648][T18236] batman_adv: batadv0: Interface activated: batadv_slave_0
[  862.282071][ T5796] usb 8-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc
[  862.282107][ T5796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.318489][ T5796] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280
[  862.359306][T18236] batman_adv: batadv0: Interface activated: batadv_slave_1
[  862.479307][   T73] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  862.494174][   T73] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  862.508706][   T73] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  862.508766][   T73] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  862.619122][ T9527] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2
[  862.619154][ T9527] [drm] Initialized udl on minor 2
[  862.743465][ T9527] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  862.768012][ T5796] gspca_sn9c20x: Write register 1001 failed -71
[  862.768038][ T5796] gspca_sn9c20x: Device initialization failed
[  862.768126][ T5796] gspca_sn9c20x 8-1:252.0: probe with driver gspca_sn9c20x failed with error -71
[  862.841795][ T5796] usb 8-1: USB disconnect, device number 45
[  862.927497][ T9527] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  863.049491][T18521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  863.067800][T18521] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  863.227034][T16160] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  863.234128][   T32] usb 9-1: USB disconnect, device number 7
[  863.389386][T16160] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  864.882593][T18538] overlayfs: overlapping lowerdir path
[  864.888680][T18541] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  864.888745][T18541] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  865.421789][ T7562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  865.421812][ T7562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  865.825755][ T6414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  865.825780][ T6414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  866.143810][T18557] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  866.467837][T18564] netlink: 'syz.7.4051': attribute type 3 has an invalid length.
[  866.467861][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4051'.
[  866.820501][T18568] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  867.236103][T18574] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4057'.
[  867.305669][ T7548] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.312162][T18575] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4057'.
[  867.550583][T16497] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  867.634864][T16497] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  867.682889][T16497] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  867.685279][T16497] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  867.761853][T16497] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  867.777112][T16497] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  868.123127][T18589] netlink: 'syz.7.4061': attribute type 3 has an invalid length.
[  868.123150][T18589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4061'.
[  868.910374][T18602] overlayfs: overlapping lowerdir path
[  868.984281][   T32] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  869.152945][   T32] usb 9-1: unable to get BOS descriptor or descriptor too short
[  869.157820][   T32] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  869.157854][   T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.157878][   T32] usb 9-1: Product: syz
[  869.157895][   T32] usb 9-1: Manufacturer: syz
[  869.157911][   T32] usb 9-1: SerialNumber: syz
[  869.228045][ T7548] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  869.449481][   T32] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  869.450719][   T32] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  869.741459][   T32] usb 9-1: USB disconnect, device number 8
[  869.869874][T18502] udevd[18502]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  870.025282][ T7548] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.040710][T16521] Bluetooth: hci1: command tx timeout
[  870.053998][T18617] netlink: 'syz.8.4070': attribute type 3 has an invalid length.
[  870.054014][T18617] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4070'.
[  870.277321][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  870.277434][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  870.565470][T18624] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3)
[  870.565503][T18624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  870.565909][T18624] vhci_hcd vhci_hcd.0: Device attached
[  870.625022][T18625] overlayfs: overlapping lowerdir path
[  870.646626][T18632] netlink: 'syz.0.4075': attribute type 83 has an invalid length.
[  870.819098][T18637] netlink: 'syz.0.4078': attribute type 3 has an invalid length.
[  870.819122][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4078'.
[  870.825623][ T5796] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  870.863734][ T7548] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.899351][ T5694] usb 49-1: new low-speed USB device number 2 using vhci_hcd
[  870.992313][ T5796] usb 9-1: Using ep0 maxpacket: 32
[  871.006755][ T5796] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  871.006783][ T5796] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  871.038395][ T5796] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  871.038431][ T5796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.038453][ T5796] usb 9-1: Product: syz
[  871.038469][ T5796] usb 9-1: Manufacturer: syz
[  871.038486][ T5796] usb 9-1: SerialNumber: syz
[  871.294622][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4077'.
[  871.340876][T18627] usbip_core: unknown command
[  871.340891][T18627] vhci_hcd: unknown pdu 184549379
[  871.340903][T18627] usbip_core: unknown command
[  871.348672][ T5796] usb 9-1: USB disconnect, device number 9
[  871.371910][ T7582] vhci_hcd vhci_hcd.8: stop threads
[  871.371941][ T7582] vhci_hcd vhci_hcd.8: release socket
[  871.372035][ T7582] vhci_hcd vhci_hcd.8: disconnect device
[  871.934837][T18658] overlayfs: overlapping lowerdir path
[  872.109378][T16521] Bluetooth: hci1: command tx timeout
[  872.137630][T18665] netlink: 'syz.0.4086': attribute type 3 has an invalid length.
[  872.137656][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4086'.
[  872.245667][T18670] vxcan0: tx address claim with different name
[  872.637294][T18580] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.637943][T18580] bridge0: port 1(bridge_slave_0) entered disabled state
[  872.638295][T18580] bridge_slave_0: entered allmulticast mode
[  872.665758][T18580] bridge_slave_0: entered promiscuous mode
[  872.709392][   T32] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  872.800091][ T7548] bridge_slave_1: left allmulticast mode
[  872.800133][ T7548] bridge_slave_1: left promiscuous mode
[  872.800457][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state
[  872.859149][   T32] usb 9-1: Using ep0 maxpacket: 8
[  872.862183][   T32] usb 9-1: config 0 has an invalid interface number: 30 but max is 0
[  872.862216][   T32] usb 9-1: config 0 has no interface number 0
[  872.862251][   T32] usb 9-1: too many endpoints for config 0 interface 30 altsetting 222: 254, using maximum allowed: 30
[  872.862295][   T32] usb 9-1: config 0 interface 30 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  872.862326][   T32] usb 9-1: config 0 interface 30 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0
[  872.862360][   T32] usb 9-1: config 0 interface 30 altsetting 222 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  872.862390][   T32] usb 9-1: config 0 interface 30 has no altsetting 0
[  872.862427][   T32] usb 9-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00
[  872.862456][   T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  872.882805][   T32] usb 9-1: config 0 descriptor??
[  872.959294][ T9527] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  872.966321][ T7548] bridge_slave_0: left allmulticast mode
[  872.966356][ T7548] bridge_slave_0: left promiscuous mode
[  873.056991][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state
[  873.164830][ T9527] usb 1-1: no configurations
[  873.164853][ T9527] usb 1-1: can't read configurations, error -22
[  873.299453][ T9527] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  873.333326][   T32] uclogic 0003:256C:006E.0017: interface is invalid, ignoring
[  873.353870][T18690] netlink: 'syz.7.4095': attribute type 3 has an invalid length.
[  873.506183][ T9527] usb 1-1: no configurations
[  873.506207][ T9527] usb 1-1: can't read configurations, error -22
[  873.521353][ T9527] usb usb1-port1: attempt power cycle
[  873.598920][T18676] 9pnet_fd: p9_fd_create_tcp (18676): problem connecting socket to 127.0.0.1
[  873.625902][T16160] usb 9-1: USB disconnect, device number 10
[  873.914035][ T9527] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  873.943306][ T9527] usb 1-1: no configurations
[  873.943322][ T9527] usb 1-1: can't read configurations, error -22
[  874.146750][ T9527] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  874.171230][ T9527] usb 1-1: no configurations
[  874.171246][ T9527] usb 1-1: can't read configurations, error -22
[  874.171600][ T9527] usb usb1-port1: unable to enumerate USB device
[  874.189652][T16521] Bluetooth: hci1: command tx timeout
[  874.262485][T18693] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4096'.
[  874.262515][T18693] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  874.499245][T16160] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  874.559797][ T7548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  874.620239][ T7548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  874.641817][ T7548] bond0 (unregistering): Released all slaves
[  874.652251][T16160] usb 9-1: config 0 has an invalid interface number: 106 but max is 0
[  874.652287][T16160] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  874.652308][T16160] usb 9-1: config 0 has no interface number 0
[  874.652940][T16160] usb 9-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  874.652964][T16160] usb 9-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  874.653006][T16160] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  874.653030][T16160] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.661960][T16160] usb 9-1: config 0 descriptor??
[  874.693844][T18580] bridge0: port 2(bridge_slave_1) entered blocking state
[  874.694171][T18580] bridge0: port 2(bridge_slave_1) entered disabled state
[  874.694522][T18580] bridge_slave_1: entered allmulticast mode
[  874.711029][T18580] bridge_slave_1: entered promiscuous mode
[  874.848979][T16160] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  874.925922][ T1180] usb 9-1: Failed to submit usb control message: -71
[  874.925959][ T1180] usb 9-1: unable to send the bmi data to the device: -71
[  874.925975][ T1180] usb 9-1: unable to get target info from device
[  874.925989][ T1180] usb 9-1: could not get target info (-71)
[  874.926005][ T1180] usb 9-1: could not probe fw (-71)
[  874.938629][ T4990] usb 9-1: USB disconnect, device number 11
[  875.160057][T18580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  875.160980][ T7548] tipc: Disabling bearer <udp:syz0>
[  875.161126][ T7548] tipc: Left network mode
[  875.165422][T18580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  875.303222][T18580] team0: Port device team_slave_0 added
[  875.315421][T18580] team0: Port device team_slave_1 added
[  875.600138][T18580] batman_adv: batadv0: Adding interface: batadv_slave_0
[  875.600160][T18580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  875.600192][T18580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  875.640738][T18580] batman_adv: batadv0: Adding interface: batadv_slave_1
[  875.640759][T18580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  875.640793][T18580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  875.897993][T18707] Device name cannot be null; rc = [-22]
[  876.277522][T16521] Bluetooth: hci1: command tx timeout
[  876.309223][   T32] usb 8-1: new high-speed USB device number 46 using dummy_hcd
[  876.359247][ T5694] vhci_hcd vhci_hcd.8: vhci_device speed not set
[  876.459043][   T32] usb 8-1: Using ep0 maxpacket: 32
[  876.461455][   T32] usb 8-1: config 2 has an invalid interface number: 88 but max is 0
[  876.461486][   T32] usb 8-1: config 2 has no interface number 0
[  876.461538][   T32] usb 8-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  876.461567][   T32] usb 8-1: config 2 interface 88 has no altsetting 0
[  876.467278][   T32] usb 8-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  876.467312][   T32] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.467336][   T32] usb 8-1: Product: syz
[  876.467353][   T32] usb 8-1: Manufacturer: syz
[  876.467370][   T32] usb 8-1: SerialNumber: syz
[  876.542139][T18725] netlink: 'syz.8.4104': attribute type 3 has an invalid length.
[  876.563960][T18713] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  876.775825][T18713] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  877.013644][ T5270] 8021q: adding VLAN 0 to HW filter on device eth17
[  877.174193][T18732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4106'.
[  877.174228][T18732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4106'.
[  877.636580][T18580] hsr_slave_0: entered promiscuous mode
[  877.644280][T18580] hsr_slave_1: entered promiscuous mode
[  877.668270][T18580] debugfs: 'hsr0' already exists in 'hsr'
[  877.668399][T18580] Cannot create hsr debugfs directory
[  877.697648][T18742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4108'.
[  878.233114][   T32] asix 8-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  878.233435][   T32] asix 8-1:2.88: probe with driver asix failed with error -71
[  878.288921][   T32] usb 8-1: USB disconnect, device number 46
[  878.525428][T18764] netlink: 'syz.0.4114': attribute type 3 has an invalid length.
[  878.580534][ T7548] hsr_slave_0: left promiscuous mode
[  878.629089][ T7548] hsr_slave_1: left promiscuous mode
[  878.630736][ T7548] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  878.630765][ T7548] batman_adv: batadv0: Removing interface: batadv_slave_0
[  878.672262][ T7548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  878.672293][ T7548] batman_adv: batadv0: Removing interface: batadv_slave_1
[  878.826298][ T7548] veth1_macvtap: left promiscuous mode
[  878.826431][ T7548] veth0_macvtap: left promiscuous mode
[  878.826752][ T7548] veth1_vlan: left promiscuous mode
[  878.826968][ T7548] veth0_vlan: left promiscuous mode
[  879.150630][ T5715] usb 8-1: new full-speed USB device number 47 using dummy_hcd
[  879.342731][ T5715] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  879.345550][ T5715] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  879.345583][ T5715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.345605][ T5715] usb 8-1: Product: syz
[  879.345621][ T5715] usb 8-1: Manufacturer: syz
[  879.345637][ T5715] usb 8-1: SerialNumber: syz
[  879.355250][ T5715] usb 8-1: config 0 descriptor??
[  879.456030][ T5715] hub 8-1:0.0: bad descriptor, ignoring hub
[  879.456076][ T5715] hub 8-1:0.0: probe with driver hub failed with error -5
[  879.478929][ T5715] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  879.538833][ T5715] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -2
[  879.585925][T18502] udevd[18502]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  879.719410][ T5796] usb 8-1: USB disconnect, device number 47
[  879.883477][ T7548] team0 (unregistering): Port device team_slave_1 removed
[  879.940234][ T7548] team0 (unregistering): Port device team_slave_0 removed
[  880.207286][ T5270] 8021q: adding VLAN 0 to HW filter on device eth18
[  880.271960][T18777] loop8: detected capacity change from 0 to 7
[  880.276157][T18777] Dev loop8: unable to read RDB block 7
[  880.276202][T18777]  loop8: unable to read partition table
[  880.276434][T18777] loop8: partition table beyond EOD, truncated
[  880.276455][T18777] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  880.452009][T18781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  880.458057][T18781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  880.464325][T18781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  880.464901][T18781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  880.476293][T18781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  880.476899][T18781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  880.488153][T18781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  880.493495][T18781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  880.496710][T18781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  880.505173][T18781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  880.683532][ T5796] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  880.878904][ T5796] usb 1-1: Using ep0 maxpacket: 32
[  880.895714][ T5796] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  880.895748][ T5796] usb 1-1: config 0 has no interface number 0
[  880.916927][ T5796] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  880.916972][ T5796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.916996][ T5796] usb 1-1: Product: syz
[  880.917013][ T5796] usb 1-1: Manufacturer: syz
[  880.917032][ T5796] usb 1-1: SerialNumber: syz
[  880.924087][ T5796] usb 1-1: config 0 descriptor??
[  880.929526][ T5796] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  881.167183][ T5796] usb 1-1: qt2_attach - failed to power on unit: -71
[  881.167517][ T5796] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71
[  881.232070][T16521] Bluetooth: hci0: unexpected event for opcode 0x2062
[  881.344339][ T5796] usb 1-1: USB disconnect, device number 58
[  881.539177][ T4990] usb 8-1: new high-speed USB device number 48 using dummy_hcd
[  881.785840][ T4990] usb 8-1: Using ep0 maxpacket: 32
[  881.861316][ T4990] usb 8-1: config 1 has an invalid interface number: 9 but max is 2
[  881.861349][ T4990] usb 8-1: config 1 has an invalid interface number: 85 but max is 2
[  881.861371][ T4990] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  881.861393][ T4990] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  881.861414][ T4990] usb 8-1: config 1 has an invalid interface number: 187 but max is 2
[  881.861438][ T4990] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  881.861458][ T4990] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  881.861479][ T4990] usb 8-1: config 1 has no interface number 0
[  881.861497][ T4990] usb 8-1: config 1 has no interface number 1
[  881.861514][ T4990] usb 8-1: config 1 has no interface number 2
[  881.861602][ T4990] usb 8-1: config 1 interface 9 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0
[  881.861629][ T4990] usb 8-1: config 1 interface 9 altsetting 1 has a duplicate endpoint with address 0xA, skipping
[  881.861656][ T4990] usb 8-1: config 1 interface 9 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  881.861684][ T4990] usb 8-1: config 1 interface 9 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  881.861725][ T4990] usb 8-1: config 1 interface 85 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  881.861757][ T4990] usb 8-1: config 1 interface 85 altsetting 3 has a duplicate endpoint with address 0x9, skipping
[  881.861782][ T4990] usb 8-1: config 1 interface 85 altsetting 3 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  881.861810][ T4990] usb 8-1: config 1 interface 85 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  881.861834][ T4990] usb 8-1: config 1 interface 85 altsetting 3 has a duplicate endpoint with address 0x9, skipping
[  881.861861][ T4990] usb 8-1: config 1 interface 85 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[  881.861891][ T4990] usb 8-1: config 1 interface 85 altsetting 3 has a duplicate endpoint with address 0x4, skipping
[  881.861918][ T4990] usb 8-1: config 1 interface 85 altsetting 3 has a duplicate endpoint with address 0x2, skipping
[  881.861942][ T4990] usb 8-1: config 1 interface 85 altsetting 3 has a duplicate endpoint with address 0x9, skipping
[  881.861994][ T4990] usb 8-1: config 1 interface 187 altsetting 11 endpoint 0xC has invalid maxpacket 512, setting to 64
[  881.862023][ T4990] usb 8-1: config 1 interface 187 altsetting 11 has a duplicate endpoint with address 0x1, skipping
[  881.862049][ T4990] usb 8-1: config 1 interface 187 altsetting 11 has a duplicate endpoint with address 0x2, skipping
[  881.862075][ T4990] usb 8-1: config 1 interface 187 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[  881.862099][ T4990] usb 8-1: config 1 interface 187 altsetting 11 has a duplicate endpoint with address 0x9, skipping
[  881.862124][ T4990] usb 8-1: config 1 interface 187 altsetting 11 has an endpoint descriptor with address 0x11, changing to 0x1
[  881.862151][ T4990] usb 8-1: config 1 interface 187 altsetting 11 has a duplicate endpoint with address 0x1, skipping
[  881.862175][ T4990] usb 8-1: config 1 interface 187 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[  881.862198][ T4990] usb 8-1: config 1 interface 187 altsetting 11 has a duplicate endpoint with address 0xB, skipping
[  881.862223][ T4990] usb 8-1: config 1 interface 187 altsetting 11 has a duplicate endpoint with address 0xC, skipping
[  881.862245][ T4990] usb 8-1: config 1 interface 187 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[  881.862266][ T4990] usb 8-1: config 1 interface 187 altsetting 11 has a duplicate endpoint with address 0x4, skipping
[  881.862290][ T4990] usb 8-1: config 1 interface 187 altsetting 11 has a duplicate endpoint with address 0x6, skipping
[  881.862315][ T4990] usb 8-1: config 1 interface 187 altsetting 11 has 13 endpoint descriptors, different from the interface descriptor's value: 12
[  881.862346][ T4990] usb 8-1: config 1 interface 9 has no altsetting 0
[  881.862372][ T4990] usb 8-1: config 1 interface 85 has no altsetting 0
[  881.862392][ T4990] usb 8-1: config 1 interface 187 has no altsetting 0
[  881.879235][ T4990] usb 8-1: New USB device found, idVendor=0c52, idProduct=2211, bcdDevice=c7.4a
[  881.879268][ T4990] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.879289][ T4990] usb 8-1: Product: syz
[  881.879304][ T4990] usb 8-1: Manufacturer: �
[  881.879319][ T4990] usb 8-1: SerialNumber: syz
[  882.225647][ T4990] ftdi_sio 8-1:1.9: FTDI USB Serial Device converter detected
[  882.234233][ T4990] ftdi_sio ttyUSB0: unknown device type: 0xc74a
[  882.264326][ T4990] ftdi_sio 8-1:1.85: FTDI USB Serial Device converter detected
[  882.279672][ T4990] ftdi_sio ttyUSB1: unknown device type: 0xc74a
[  882.340199][ T4990] ftdi_sio 8-1:1.187: FTDI USB Serial Device converter detected
[  882.355363][ T4990] ftdi_sio ttyUSB2: unknown device type: 0xc74a
[  882.467636][T18810] netlink: 'syz.0.4125': attribute type 3 has an invalid length.
[  882.507568][ T4990] usb 8-1: USB disconnect, device number 48
[  882.863213][ T4990] ftdi_sio 8-1:1.9: device disconnected
[  882.958359][ T4990] ftdi_sio 8-1:1.85: device disconnected
[  883.017981][ T4990] ftdi_sio 8-1:1.187: device disconnected
[  883.599401][T18828] IPVS: set_ctl: invalid protocol: 41 100.1.1.0:20004
[  883.816372][ T5270] 8021q: adding VLAN 0 to HW filter on device eth19
[  884.802912][ T4990] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  884.904120][T18580] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  884.991974][ T4990] usb 9-1: Using ep0 maxpacket: 32
[  885.001112][ T4990] usb 9-1: unable to get BOS descriptor or descriptor too short
[  885.003063][ T4990] usb 9-1: config 255 has an invalid interface number: 8 but max is 3
[  885.003094][ T4990] usb 9-1: config 255 has an invalid interface number: 207 but max is 3
[  885.003117][ T4990] usb 9-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  885.003139][ T4990] usb 9-1: config 255 has 2 interfaces, different from the descriptor's value: 4
[  885.003164][ T4990] usb 9-1: config 255 has no interface number 0
[  885.003182][ T4990] usb 9-1: config 255 has no interface number 1
[  885.003273][ T4990] usb 9-1: config 255 interface 207 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  885.003304][ T4990] usb 9-1: config 255 interface 8 has no altsetting 0
[  885.003325][ T4990] usb 9-1: config 255 interface 207 has no altsetting 0
[  885.051588][T18580] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  885.057504][T18580] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  885.066519][ T4990] usb 9-1: New USB device found, idVendor=1199, idProduct=9041, bcdDevice=31.cc
[  885.066554][ T4990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  885.066577][ T4990] usb 9-1: Product: syz
[  885.066595][ T4990] usb 9-1: Manufacturer: syz
[  885.066612][ T4990] usb 9-1: SerialNumber: syz
[  885.261695][T18580] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  885.264737][T18861] loop2: detected capacity change from 0 to 7
[  885.270636][T18580] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  885.282209][ T5715] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[  885.314707][T18861] Dev loop2: unable to read RDB block 7
[  885.314821][T18861]  loop2: unable to read partition table
[  885.315370][T18861] loop2: partition table beyond EOD, truncated
[  885.315394][T18861] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  885.408872][T18580] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  885.410636][T18580] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  885.439680][ T5715] usb 1-1: device descriptor read/64, error -71
[  885.701860][T18580] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  885.758623][ T5715] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  885.898454][ T5715] usb 1-1: device descriptor read/64, error -71
[  886.009020][ T5715] usb usb1-port1: attempt power cycle
[  886.056098][T18873] netlink: 'syz.7.4138': attribute type 3 has an invalid length.
[  886.347129][ T4990] usb 9-1: USB disconnect, device number 12
[  886.408472][ T5715] usb 1-1: new full-speed USB device number 61 using dummy_hcd
[  886.431552][ T5715] usb 1-1: device descriptor read/8, error -71
[  886.583091][ T5270] 8021q: adding VLAN 0 to HW filter on device eth20
[  886.680185][ T5715] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  886.699207][ T5715] usb 1-1: device descriptor read/8, error -71
[  886.704162][T18580] 8021q: adding VLAN 0 to HW filter on device bond0
[  886.754295][T18580] 8021q: adding VLAN 0 to HW filter on device team0
[  886.776051][ T7550] bridge0: port 1(bridge_slave_0) entered blocking state
[  886.776334][ T7550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  886.809873][ T5715] usb usb1-port1: unable to enumerate USB device
[  886.894820][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state
[  886.895163][ T7324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  887.609677][T18889] binder: 18888:18889 ioctl c0306201 2000000004c0 returned -14
[  887.618751][T18889] binder: 18888:18889 ioctl c0306201 2000000001c0 returned -14
[  887.799483][ T4990] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  887.954933][ T4990] usb 9-1: too many configurations: 168, using maximum allowed: 8
[  887.956921][ T4990] usb 9-1: config index 0 descriptor too short (expected 65016, got 133)
[  887.956953][ T4990] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  888.001052][ T4990] usb 9-1: config index 1 descriptor too short (expected 65016, got 133)
[  888.001086][ T4990] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  888.073176][ T4990] usb 9-1: config index 2 descriptor too short (expected 65016, got 133)
[  888.073210][ T4990] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  888.093488][ T4990] usb 9-1: config index 3 descriptor too short (expected 65016, got 133)
[  888.093522][ T4990] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  888.126106][ T4990] usb 9-1: config index 4 descriptor too short (expected 65016, got 133)
[  888.126142][ T4990] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  888.154540][ T4990] usb 9-1: config index 5 descriptor too short (expected 65016, got 133)
[  888.154573][ T4990] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  888.156604][ T4990] usb 9-1: config index 6 descriptor too short (expected 65016, got 133)
[  888.156635][ T4990] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  888.180139][ T4990] usb 9-1: config index 7 descriptor too short (expected 65016, got 133)
[  888.180170][ T4990] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  888.235062][ T4990] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  888.235099][ T4990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.235123][ T4990] usb 9-1: Product: syz
[  888.235140][ T4990] usb 9-1: Manufacturer: syz
[  888.235156][ T4990] usb 9-1: SerialNumber: syz
[  888.287114][ T4990] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  888.372462][ T5796] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  888.395701][T18902] netlink: 'syz.0.4146': attribute type 3 has an invalid length.
[  889.031551][T18892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  889.032242][T18892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  889.039493][ T5694] usb 9-1: USB disconnect, device number 13
[  889.391292][T18580] 8021q: adding VLAN 0 to HW filter on device batadv0
[  889.598706][ T9527] usb 8-1: new high-speed USB device number 49 using dummy_hcd
[  889.630533][ T5796] usb 9-1: Service connection timeout for: 256
[  889.630560][ T5796] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services
[  889.709521][ T5796] ath9k_htc: Failed to initialize the device
[  889.709824][ T5694] usb 9-1: ath9k_htc: USB layer deinitialized
[  889.738775][   T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  889.750514][ T9527] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  889.750543][ T9527] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  889.750564][ T9527] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  889.750614][ T9527] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  889.750641][ T9527] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  889.752725][ T9527] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  889.752753][ T9527] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  889.752773][ T9527] usb 8-1: Product: syz
[  889.752787][ T9527] usb 8-1: Manufacturer: syz
[  889.794825][ T9527] cdc_wdm 8-1:1.0: skipping garbage
[  889.794848][ T9527] cdc_wdm 8-1:1.0: skipping garbage
[  889.802629][ T9527] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  889.802650][ T9527] cdc_wdm 8-1:1.0: Unknown control protocol
[  889.891604][   T10] usb 1-1: Using ep0 maxpacket: 8
[  889.893967][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  889.898901][   T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16
[  889.898935][   T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  889.898959][   T10] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A
[  889.898983][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 107, changing to 10
[  889.975453][   T10] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  889.975489][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  889.975505][   T10] usb 1-1: Product: syz
[  889.975515][   T10] usb 1-1: Manufacturer: syz
[  889.975524][   T10] usb 1-1: SerialNumber: syz
[  890.010011][T18923] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  890.010179][T18923] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  890.021402][    C0] wdm_int_callback: 28 callbacks suppressed
[  890.021424][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  890.021441][    C0] wdm_int_callback: 28 callbacks suppressed
[  890.021455][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  890.021719][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  890.021737][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  890.021962][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  890.021980][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  890.022212][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  890.022231][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  890.022452][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  890.022469][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  890.022701][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  890.022718][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  890.022955][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  890.022973][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  890.023233][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  890.023251][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  890.023472][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  890.023488][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  890.023715][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  890.023733][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  890.058716][ T5694] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  890.240983][ T5694] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  890.241066][ T5694] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  890.241079][ T5694] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  890.241180][ T5694] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  890.241199][ T5694] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  890.247971][ T5694] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  890.248427][ T5694] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  890.248451][ T5694] usb 9-1: Product: syz
[  890.248466][ T5694] usb 9-1: Manufacturer: syz
[  890.343230][T16160] usb 8-1: USB disconnect, device number 49
[  890.343290][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  890.349745][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  890.349804][   T10] usb 1-1: MIDIStreaming interface descriptor not found
[  890.426559][ T5694] cdc_wdm 9-1:1.0: skipping garbage
[  890.426576][ T5694] cdc_wdm 9-1:1.0: skipping garbage
[  890.523053][ T5694] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  890.523098][ T5694] cdc_wdm 9-1:1.0: Unknown control protocol
[  890.645648][T18580] veth0_vlan: entered promiscuous mode
[  890.658322][ T4990] usb 9-1: USB disconnect, device number 14
[  890.660999][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  890.787197][T18580] veth1_vlan: entered promiscuous mode
[  890.880318][   T10] usb 1-1: USB disconnect, device number 63
[  890.901573][T18933] 9pnet_fd: p9_fd_create_unix (18933): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  890.973560][ T7554] bridge_slave_1: left allmulticast mode
[  890.973600][ T7554] bridge_slave_1: left promiscuous mode
[  890.973982][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.185133][T18938] netlink: 'syz.7.4154': attribute type 3 has an invalid length.
[  891.185157][T18938] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4154'.
[  891.243281][ T7554] bridge_slave_0: left allmulticast mode
[  891.243322][ T7554] bridge_slave_0: left promiscuous mode
[  891.243671][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.250797][T18114] udevd[18114]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  891.338371][ T5694] usb 9-1: new low-speed USB device number 15 using dummy_hcd
[  891.480927][ T5694] usb 9-1: device descriptor read/64, error -71
[  891.778240][ T5694] usb 9-1: new low-speed USB device number 16 using dummy_hcd
[  891.908152][ T5694] usb 9-1: device descriptor read/64, error -71
[  892.019392][ T5694] usb usb9-port1: attempt power cycle
[  892.318787][ T7554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  892.369965][ T5694] usb 9-1: new low-speed USB device number 17 using dummy_hcd
[  892.382340][ T7554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  892.394853][ T5694] usb 9-1: device descriptor read/8, error -71
[  892.406842][ T7554] bond0 (unregistering): Released all slaves
[  892.633215][T18580] veth0_macvtap: entered promiscuous mode
[  892.647048][T18580] veth1_macvtap: entered promiscuous mode
[  892.669053][ T5694] usb 9-1: new low-speed USB device number 18 using dummy_hcd
[  892.759511][ T5694] usb 9-1: device descriptor read/8, error -71
[  892.804749][ T7554] tipc: Disabling bearer <udp:syz0>
[  892.805401][ T7554] tipc: Disabling bearer <udp:s>
[  892.805962][ T7554] tipc: Disabling bearer <eth:macvtap0>
[  892.871332][ T5694] usb usb9-port1: unable to enumerate USB device
[  892.885788][ T7554] tipc: Left network mode
[  892.974633][T18580] batman_adv: batadv0: Interface activated: batadv_slave_0
[  893.010827][T18580] batman_adv: batadv0: Interface activated: batadv_slave_1
[  893.040803][ T7582] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  893.046506][ T7582] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  893.046765][ T7582] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  893.046803][ T7582] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  893.522270][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4160'.
[  895.431387][ T6840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  895.431409][ T6840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  895.449921][T18983] loop5: detected capacity change from 0 to 7
[  895.453863][T18983]  loop5: [POWERTEC] p1 p2 p3 p4
[  895.454101][T18983] loop5: p1 size 1153433600 extends beyond EOD, truncated
[  895.582485][T18983] loop5: p2 size 327680 extends beyond EOD, truncated
[  895.612717][T18983] loop5: p3 start 589824 is beyond EOD, truncated
[  895.612751][T18983] loop5: p4 start 1848407154 is beyond EOD, truncated
[  895.687948][   T32] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[  895.840800][   T32] usb 8-1: Using ep0 maxpacket: 32
[  895.844112][   T32] usb 8-1: config index 0 descriptor too short (expected 11556, got 36)
[  895.844145][   T32] usb 8-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config
[  895.844168][   T32] usb 8-1: config 0 has no interfaces?
[  895.847198][   T32] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  895.847236][   T32] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  895.847259][   T32] usb 8-1: Product: syz
[  895.847274][   T32] usb 8-1: Manufacturer: syz
[  895.847286][   T32] usb 8-1: SerialNumber: syz
[  895.963908][   T32] usb 8-1: config 0 descriptor??
[  896.168462][ T4990] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  896.181490][   T32] usb 8-1: USB disconnect, device number 50
[  896.319742][ T4990] usb 9-1: Using ep0 maxpacket: 16
[  896.321666][ T4990] usb 9-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  896.321699][ T4990] usb 9-1: config 0 interface 0 altsetting 44 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  896.321717][ T4990] usb 9-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  896.321734][ T4990] usb 9-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  896.321750][ T4990] usb 9-1: config 0 interface 0 has no altsetting 0
[  896.324141][ T4990] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  896.324171][ T4990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.324186][ T4990] usb 9-1: Product: syz
[  896.324195][ T4990] usb 9-1: Manufacturer: syz
[  896.324205][ T4990] usb 9-1: SerialNumber: syz
[  896.421551][ T4990] usb 9-1: config 0 descriptor??
[  896.422405][T18995] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  896.440761][ T4990] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input52
[  896.646850][    C0] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1
[  896.722602][T18998] netlink: 380 bytes leftover after parsing attributes in process `syz.8.4168'.
[  897.408120][   T32] usb 1-1: new full-speed USB device number 64 using dummy_hcd
[  897.558336][T19011] netlink: 'syz.7.4174': attribute type 3 has an invalid length.
[  897.558363][T19011] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4174'.
[  897.618228][   T32] usb 1-1: not running at top speed; connect to a high speed hub
[  897.619892][   T32] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  897.619921][   T32] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  897.620000][   T32] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  897.685350][   T32] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[  897.685386][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  897.685409][   T32] usb 1-1: Product: syz
[  897.685425][   T32] usb 1-1: Manufacturer: syz
[  897.685441][   T32] usb 1-1: SerialNumber: syz
[  898.523112][T19017] overlayfs: missing 'lowerdir'
[  898.581459][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  898.581483][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  900.723885][ T7554] hsr_slave_0: left promiscuous mode
[  900.857718][ T7554] hsr_slave_1: left promiscuous mode
[  900.860004][ T7554] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  900.860105][ T7554] batman_adv: batadv0: Removing interface: batadv_slave_0
[  901.011314][ T7554] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  901.011413][ T7554] batman_adv: batadv0: Removing interface: batadv_slave_1
[  901.107772][ T5796] usb 8-1: new low-speed USB device number 51 using dummy_hcd
[  901.271796][ T5796] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  901.271896][ T5796] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  901.271950][ T5796] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  901.271981][ T5796] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8
[  901.272093][ T5796] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  901.272120][ T5796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.350442][T19027] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  901.377365][ T5796] hub 8-1:1.0: bad descriptor, ignoring hub
[  901.387370][ T5796] hub 8-1:1.0: probe with driver hub failed with error -5
[  901.398358][ T5796] cdc_wdm 8-1:1.0: skipping garbage
[  901.398383][ T5796] cdc_wdm 8-1:1.0: skipping garbage
[  901.398557][ T5796] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22
[  901.753795][ T5796] usb 8-1: USB disconnect, device number 51
[  902.334025][ T7554] veth1_macvtap: left promiscuous mode
[  902.413776][ T7554] veth0_macvtap: left promiscuous mode
[  902.596042][ T7554] veth1_vlan: left promiscuous mode
[  902.777085][ T7554] veth0_vlan: left promiscuous mode
[  902.808660][T19040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  902.809993][T19040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  902.847173][   T32] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor
[  902.847205][   T32] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  902.861933][   T32] usb 1-1: 0:2 : does not exist
[  903.449171][T19047] binder: 19046:19047 unknown command 0
[  903.449198][T19047] binder: 19046:19047 ioctl c0306201 2000000001c0 returned -22
[  903.656667][T19051] Bluetooth: MGMT ver 1.23
[  903.926890][T19056] overlayfs: missing 'lowerdir'
[  905.429918][ T7554] team0 (unregistering): Port device team_slave_1 removed
[  905.629254][ T7554] team0 (unregistering): Port device team_slave_0 removed
[  905.707489][T16497] Bluetooth: hci0: command 0x0c1a tx timeout
[  905.773317][T16521] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  906.288087][T19051] dvmrp2: entered allmulticast mode
[  906.579945][T19065] netlink: 324 bytes leftover after parsing attributes in process `syz.9.4056'.
[  907.762740][T19083] overlayfs: missing 'lowerdir'
[  908.712507][ T5758] usb 1-1: USB disconnect, device number 64
[  909.154163][T19103] FAULT_INJECTION: forcing a failure.
[  909.154163][T19103] name failslab, interval 1, probability 0, space 0, times 0
[  909.154225][T19103] CPU: 1 UID: 0 PID: 19103 Comm: syz.7.4194 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  909.154258][T19103] Tainted: [L]=SOFTLOCKUP
[  909.154267][T19103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  909.154281][T19103] Call Trace:
[  909.154290][T19103]  <TASK>
[  909.154307][T19103]  dump_stack_lvl+0xe8/0x150
[  909.154342][T19103]  should_fail_ex+0x46b/0x600
[  909.154382][T19103]  should_failslab+0xa8/0x100
[  909.154413][T19103]  kmem_cache_alloc_noprof+0x87/0x680
[  909.154440][T19103]  ? __pmd_alloc+0xa4/0x5e0
[  909.154472][T19103]  __pmd_alloc+0xa4/0x5e0
[  909.154503][T19103]  handle_mm_fault+0xf4d/0x14d0
[  909.154536][T19103]  ? handle_mm_fault+0xed/0x14d0
[  909.154567][T19103]  ? __pfx_handle_mm_fault+0x10/0x10
[  909.154608][T19103]  ? __lock_acquire+0x6b5/0x2d10
[  909.154639][T19103]  ? lock_mm_and_find_vma+0xa7/0x340
[  909.154674][T19103]  do_user_addr_fault+0x75b/0x1340
[  909.154719][T19103]  exc_page_fault+0x6a/0xc0
[  909.154754][T19103]  asm_exc_page_fault+0x26/0x30
[  909.154776][T19103] RIP: 0010:rep_movs_alternative+0xf/0xa0
[  909.154805][T19103] Code: c4 10 e9 14 2a 05 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e
[  909.154825][T19103] RSP: 0018:ffffc90003e37c98 EFLAGS: 00050202
[  909.154846][T19103] RAX: 00007ffffffff001 RBX: 0000000000000001 RCX: 0000000000000001
[  909.154862][T19103] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90003e37da0
[  909.154877][T19103] RBP: ffffc90003e37e48 R08: 0000000000000000 R09: 0000000000000001
[  909.154892][T19103] R10: dffffc0000000000 R11: fffff520007c6fb4 R12: ffff888036eaa000
[  909.154908][T19103] R13: dffffc0000000000 R14: ffffc90003e37da0 R15: 0000200000000000
[  909.154952][T19103]  _copy_from_user+0x7a/0xb0
[  909.154980][T19103]  l2cap_sock_setsockopt+0xe82/0x20d0
[  909.155018][T19103]  ? aa_sk_perm+0x703/0x950
[  909.155043][T19103]  ? __pfx_l2cap_sock_setsockopt+0x10/0x10
[  909.155074][T19103]  ? __vec_find+0x320/0x450
[  909.155111][T19103]  ? apparmor_unix_stream_connect+0x60/0x5e0
[  909.155151][T19103]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  909.155179][T19103]  ? __pfx_l2cap_sock_setsockopt+0x10/0x10
[  909.155208][T19103]  do_sock_setsockopt+0x17c/0x1b0
[  909.155249][T19103]  __x64_sys_setsockopt+0x143/0x1b0
[  909.155284][T19103]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.155309][T19103]  do_syscall_64+0x174/0x580
[  909.155341][T19103]  ? trace_irq_disable+0x3b/0x140
[  909.155368][T19103]  ? clear_bhb_loop+0x40/0x90
[  909.155396][T19103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.155420][T19103] RIP: 0033:0x7f083d92ce59
[  909.155441][T19103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  909.155460][T19103] RSP: 002b:00007f083bb7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  909.155483][T19103] RAX: ffffffffffffffda RBX: 00007f083dba5fa0 RCX: 00007f083d92ce59
[  909.155498][T19103] RDX: 0000000000000009 RSI: 0000000000000112 RDI: 0000000000000004
[  909.155512][T19103] RBP: 00007f083bb7e090 R08: 0000000000000001 R09: 0000000000000000
[  909.155526][T19103] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  909.155541][T19103] R13: 00007f083dba6038 R14: 00007f083dba5fa0 R15: 00007fff4f97f018
[  909.155578][T19103]  </TASK>
[  909.659244][ T7554] IPVS: stop unused estimator thread 0...
[  910.309949][T19121] overlay: Unknown parameter '//file0'
[  910.513427][T19127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4205'.
[  910.676635][T19120] netlink: 'syz.7.4203': attribute type 16 has an invalid length.
[  910.676665][T19120] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.4203'.
[  911.005289][T19131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  911.006002][T19131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  911.172128][T19131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  911.172837][T19131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  913.012760][T19162] overlay: Unknown parameter '//file0'
[  914.057454][T19178] netlink: 'syz.7.4219': attribute type 5 has an invalid length.
[  914.834901][T19194] overlay: Unknown parameter '//file0'
[  914.899951][T19198] batadv_slave_0: entered promiscuous mode
[  915.045595][T19197] batadv_slave_0: left promiscuous mode
[  916.835927][T19237] overlay: Unknown parameter '/'
[  918.924266][T19267] 9pnet_fd: p9_fd_create_tcp (19267): problem connecting socket to 127.0.0.1
[  919.203128][T19282] netlink: 'syz.0.4248': attribute type 46 has an invalid length.
[  919.231653][T19281] overlay: Unknown parameter '/'
[  919.804289][T19293] 9pnet_fd: p9_fd_create_tcp (19293): problem connecting socket to 127.0.0.1
[  920.044066][T19299] netlink: 'syz.9.4254': attribute type 15 has an invalid length.
[  920.146859][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4257'.
[  920.338730][T19303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  920.339429][T19303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  922.219665][T19312] overlay: Unknown parameter '/'
[  923.015861][T19317] 9p: Bad value for 'rfdno'
[  931.916989][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  931.917103][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  934.800945][T19352] FAULT_INJECTION: forcing a failure.
[  934.800945][T19352] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  934.800987][T19352] CPU: 1 UID: 0 PID: 19352 Comm: syz.7.4277 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  934.801018][T19352] Tainted: [L]=SOFTLOCKUP
[  934.801026][T19352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  934.801039][T19352] Call Trace:
[  934.801048][T19352]  <TASK>
[  934.801057][T19352]  dump_stack_lvl+0xe8/0x150
[  934.801091][T19352]  should_fail_ex+0x46b/0x600
[  934.801140][T19352]  _copy_from_iter+0x1d3/0x1670
[  934.801173][T19352]  ? trace_kmem_cache_alloc+0x29/0xe0
[  934.801200][T19352]  ? __alloc_skb+0x27d/0x7d0
[  934.801231][T19352]  ? __pfx__copy_from_iter+0x10/0x10
[  934.801251][T19352]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  934.801278][T19352]  ? __alloc_skb+0x27d/0x7d0
[  934.801313][T19352]  ? netlink_sendmsg+0x650/0xb40
[  934.801333][T19352]  ? skb_put+0x11b/0x210
[  934.801367][T19352]  netlink_sendmsg+0x6c0/0xb40
[  934.801397][T19352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  934.801421][T19352]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  934.801454][T19352]  ? aa_sock_msg_perm+0x122/0x200
[  934.801478][T19352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  934.801499][T19352]  sock_sendmsg_nosec+0x13a/0x180
[  934.801529][T19352]  ____sys_sendmsg+0x55c/0x870
[  934.801569][T19352]  ? __pfx_____sys_sendmsg+0x10/0x10
[  934.801619][T19352]  ? import_iovec+0x73/0xa0
[  934.801647][T19352]  ___sys_sendmsg+0x2a5/0x360
[  934.801678][T19352]  ? __lock_acquire+0x6b5/0x2d10
[  934.801709][T19352]  ? __pfx____sys_sendmsg+0x10/0x10
[  934.801779][T19352]  ? __fget_files+0x2a/0x420
[  934.801806][T19352]  ? __fget_files+0x3a6/0x420
[  934.801843][T19352]  __x64_sys_sendmsg+0x1c3/0x2a0
[  934.801879][T19352]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  934.801924][T19352]  ? __pfx_ksys_write+0x10/0x10
[  934.801964][T19352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.801989][T19352]  do_syscall_64+0x174/0x580
[  934.802021][T19352]  ? trace_irq_disable+0x3b/0x140
[  934.802046][T19352]  ? clear_bhb_loop+0x40/0x90
[  934.802073][T19352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.802095][T19352] RIP: 0033:0x7f083d92ce59
[  934.802116][T19352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  934.802148][T19352] RSP: 002b:00007f083bb7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  934.802172][T19352] RAX: ffffffffffffffda RBX: 00007f083dba5fa0 RCX: 00007f083d92ce59
[  934.802188][T19352] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003
[  934.802202][T19352] RBP: 00007f083bb7e090 R08: 0000000000000000 R09: 0000000000000000
[  934.802216][T19352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  934.802229][T19352] R13: 00007f083dba6038 R14: 00007f083dba5fa0 R15: 00007fff4f97f018
[  934.802263][T19352]  </TASK>
[  936.975165][T19365] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  936.975215][T19365] overlayfs: overlapping lowerdir path
[  938.347514][   T32] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  938.496645][   T32] usb 10-1: device descriptor read/64, error -71
[  938.737017][   T32] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  938.844733][T19373] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4284'.
[  938.877068][   T32] usb 10-1: device descriptor read/64, error -71
[  938.990449][   T32] usb usb10-port1: attempt power cycle
[  939.415413][   T32] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  939.446546][   T32] usb 10-1: device descriptor read/8, error -71
[  940.226432][   T32] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  942.373287][   T32] usb 10-1: device descriptor read/8, error -71
[  942.811796][   T32] usb usb10-port1: unable to enumerate USB device
[  944.267184][T19386] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  945.340541][T19378] Bluetooth: hci2: command 0x0406 tx timeout
[  945.555126][   T32] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  947.945499][   T32] usb 1-1: device descriptor read/all, error -71
[  951.752096][T19165] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  951.878570][T19165] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  951.892974][T19165] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  953.241099][T19165] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  953.251133][T19165] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  956.277856][T19165] Bluetooth: hci4: command tx timeout
[  958.679213][T19165] Bluetooth: hci4: command tx timeout
[  960.184736][T19411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4291'.
[  960.744225][T19165] Bluetooth: hci4: command tx timeout
[  962.824184][T19165] Bluetooth: hci4: command tx timeout
[  963.045011][T19378] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  963.113148][T19378] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  963.130704][T19378] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  963.168530][T19378] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  963.279688][T19378] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  963.477380][T19378] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  963.565500][T19378] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  963.674011][T19378] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  963.988511][T19378] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  963.989864][T19378] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  965.951004][T19165] Bluetooth: hci6: command tx timeout
[  966.969342][T19165] Bluetooth: hci7: command tx timeout
[  968.027012][T19165] Bluetooth: hci6: command tx timeout
[  968.989569][T19432] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4294'.
[  969.066632][T19165] Bluetooth: hci7: command tx timeout
[  970.035740][T19165] Bluetooth: hci5: command 0x0406 tx timeout
[  970.112887][T19165] Bluetooth: hci6: command tx timeout
[  971.152671][T19165] Bluetooth: hci7: command tx timeout
[  972.485406][T19165] Bluetooth: hci6: command tx timeout
[  973.223854][T19165] Bluetooth: hci7: command tx timeout
[  990.107665][T19378] Bluetooth: hci1: command 0x0406 tx timeout
[  990.910480][T19187] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  991.005264][T19187] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  991.021182][T19187] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  991.034997][T19187] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  991.060830][T19187] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  993.363965][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  993.364078][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  994.102465][T19187] Bluetooth: hci0: command tx timeout
[  996.260816][T19165] Bluetooth: hci0: command tx timeout
[  998.269030][T19165] Bluetooth: hci0: command tx timeout
[ 1000.342059][T19165] Bluetooth: hci0: command tx timeout
[ 1012.474006][T19187] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1012.685208][T19187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1012.726895][T19187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1012.759677][T19187] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1012.784653][T19187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1014.986324][T19165] Bluetooth: hci2: command tx timeout
[ 1017.061286][T19165] Bluetooth: hci2: command tx timeout
[ 1019.140954][T19165] Bluetooth: hci2: command tx timeout
[ 1021.220814][T19165] Bluetooth: hci2: command tx timeout
[ 1024.685722][T19187] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1024.847499][T19187] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1024.860685][T19187] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1024.863713][T19187] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1024.864591][T19187] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1026.092487][T19187] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1026.230179][T19187] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1026.239589][T19187] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1026.250339][T19187] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1026.254339][T19187] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1027.156617][T19165] Bluetooth: hci5: command tx timeout
[ 1028.500552][T19165] Bluetooth: hci8: command tx timeout
[ 1029.220510][T19165] Bluetooth: hci5: command tx timeout
[ 1030.580265][T19165] Bluetooth: hci8: command tx timeout
[ 1031.300226][T19165] Bluetooth: hci5: command tx timeout
[ 1032.660181][T19165] Bluetooth: hci8: command tx timeout
[ 1033.380232][T19165] Bluetooth: hci5: command tx timeout
[ 1034.740945][T19165] Bluetooth: hci8: command tx timeout
[ 1054.591554][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.591673][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.107026][T19165] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1055.179194][T19165] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1055.283842][T19165] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1055.285791][T19165] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1055.347020][T19165] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1057.698817][T19187] Bluetooth: hci9: command tx timeout
[ 1059.780230][T19187] Bluetooth: hci9: command tx timeout
[ 1061.858531][T19187] Bluetooth: hci9: command tx timeout
[ 1063.938711][T19187] Bluetooth: hci9: command tx timeout
[ 1075.105050][T19165] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1075.360598][T19165] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1075.366747][T19165] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1075.398808][T19165] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1075.530681][T19165] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1078.401423][T19187] Bluetooth: hci10: command tx timeout
[ 1080.500041][T19187] Bluetooth: hci10: command tx timeout
[ 1082.267498][T19187] Bluetooth: hci4: command 0x0406 tx timeout
[ 1082.583758][T19187] Bluetooth: hci10: command tx timeout
[ 1083.385616][T19378] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1083.463002][T19378] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1083.482357][T19378] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1083.524488][T19378] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1083.542208][T19378] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1087.654208][T19378] Bluetooth: hci10: command tx timeout
[ 1088.536751][T19187] Bluetooth: hci11: command tx timeout
[ 1092.791509][T19187] Bluetooth: hci7: command 0x0406 tx timeout
[ 1098.486791][T19187] Bluetooth: hci6: command 0x0406 tx timeout
[ 1098.502608][T19548] Bluetooth: hci11: command tx timeout
[ 1100.576385][T19187] Bluetooth: hci11: command tx timeout
[ 1102.657813][T19542] Bluetooth: hci11: command tx timeout
[ 1102.983335][T19521] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1102.983841][T19521] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1102.984205][T19521] bridge_slave_0: entered allmulticast mode
[ 1103.015921][T19521] bridge_slave_0: entered promiscuous mode
[ 1103.063881][T19521] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1103.064357][T19521] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1103.064715][T19521] bridge_slave_1: entered allmulticast mode
[ 1103.091787][T19521] bridge_slave_1: entered promiscuous mode
[ 1103.195751][T19542] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1103.401593][T19542] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1103.519311][T19542] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1103.631572][T19378] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1103.673368][T19378] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1104.122196][T19521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1104.195416][T19521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1104.650311][T19521] team0: Port device team_slave_0 added
[ 1104.823040][T19521] team0: Port device team_slave_1 added
[ 1105.912008][T19393] Bluetooth: hci12: command tx timeout
[ 1108.095890][T19393] Bluetooth: hci12: command tx timeout
[ 1110.175838][T19393] Bluetooth: hci12: command tx timeout
[ 1110.652980][T19521] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1110.653002][T19521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1110.653035][T19521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1111.983870][T19521] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1111.983892][T19521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1111.983923][T19521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1112.255981][T19393] Bluetooth: hci12: command tx timeout
[ 1115.613897][T19378] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1116.109768][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.109881][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.160033][T19378] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1117.190182][T19378] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1117.192193][T19378] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1117.193057][T19378] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1118.264095][T19378] Bluetooth: hci0: command 0x0406 tx timeout
[ 1126.635004][T19378] Bluetooth: hci13: command tx timeout
[ 1128.792462][T19542] Bluetooth: hci13: command tx timeout
[ 1130.565713][T19521] hsr_slave_0: entered promiscuous mode
[ 1130.570142][T19521] hsr_slave_1: entered promiscuous mode
[ 1130.581387][T19521] debugfs: 'hsr0' already exists in 'hsr'
[ 1130.581418][T19521] Cannot create hsr debugfs directory
[ 1130.814714][T19542] Bluetooth: hci13: command tx timeout
[ 1132.895975][T19542] Bluetooth: hci13: command tx timeout
[ 1136.483648][T19378] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1136.600460][T19378] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1136.621411][T19378] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1136.672823][T19378] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1136.673820][T19378] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1139.446680][T19542] Bluetooth: hci1: command tx timeout
[ 1141.542186][T19378] Bluetooth: hci1: command tx timeout
[ 1143.379818][T19542] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1143.463559][T19542] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1143.477069][T19542] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1143.480558][T19542] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1143.481973][T19542] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1143.616536][T19542] Bluetooth: hci1: command tx timeout
[ 1145.534412][T19542] Bluetooth: hci2: command tx timeout
[ 1145.693901][T19542] Bluetooth: hci1: command tx timeout
[ 1147.613688][T19542] Bluetooth: hci2: command tx timeout
[ 1149.693563][T19542] Bluetooth: hci2: command tx timeout
[ 1151.773422][T19542] Bluetooth: hci2: command tx timeout
[ 1152.951070][T19378] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1153.065317][T19378] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1153.073385][T19378] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1153.079676][T19378] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1153.161895][T19378] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1155.297583][T19542] Bluetooth: hci5: command tx timeout
[ 1157.373221][T19542] Bluetooth: hci5: command tx timeout
[ 1159.453038][T19542] Bluetooth: hci5: command tx timeout
[ 1161.533012][T19542] Bluetooth: hci5: command tx timeout
[ 1174.606873][T19378] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1174.682678][T19378] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1174.684760][T19378] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1174.688328][T19378] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1174.691380][T19378] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1178.798222][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[ 1178.798339][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.802423][T19542] Bluetooth: hci8: command tx timeout
[ 1180.652791][   T39] INFO: task syz.8.4168:19006 blocked for more than 152 seconds.
[ 1180.652827][   T39]       Tainted: G             L      syzkaller #0
[ 1180.652840][   T39]       Blocked by coredump.
[ 1180.652848][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1180.652859][   T39] task:syz.8.4168      state:D stack:22808 pid:19006 tgid:19006 ppid:18038  task_flags:0x40044c flags:0x00080003
[ 1180.652927][   T39] Call Trace:
[ 1180.652936][   T39]  <TASK>
[ 1180.652951][   T39]  __schedule+0x16f9/0x5500
[ 1180.653024][   T39]  ? __pfx___schedule+0x10/0x10
[ 1180.653074][   T39]  rt_mutex_schedule+0x76/0xf0
[ 1180.653105][   T39]  rt_mutex_slowlock_block+0x508/0x680
[ 1180.653151][   T39]  rt_mutex_slowlock+0x2dc/0x780
[ 1180.653181][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[ 1180.653208][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1180.653246][   T39]  ? rcu_barrier+0x4c/0x580
[ 1180.653286][   T39]  ? rcu_barrier+0x4c/0x580
[ 1180.653324][   T39]  ? rcu_barrier+0x4c/0x580
[ 1180.653354][   T39]  mutex_lock_nested+0x168/0x1d0
[ 1180.653379][   T39]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1180.653411][   T39]  rcu_barrier+0x4c/0x580
[ 1180.653455][   T39]  netdev_run_todo+0x2fc/0x12b0
[ 1180.653479][   T39]  ? irqentry_exit+0x218/0x8b0
[ 1180.653512][   T39]  ? rtnl_is_locked+0x9/0x20
[ 1180.653534][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1180.653570][   T39]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1180.653609][   T39]  ? netdev_state_change+0x1ca/0x220
[ 1180.653642][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[ 1180.653677][   T39]  tun_chr_close+0x13f/0x1c0
[ 1180.653720][   T39]  __fput+0x461/0xa70
[ 1180.653759][   T39]  task_work_run+0x1d9/0x270
[ 1180.653791][   T39]  ? __pfx_task_work_run+0x10/0x10
[ 1180.653819][   T39]  ? do_exit+0x70a/0x22c0
[ 1180.653842][   T39]  ? kmem_cache_free+0x187/0x6c0
[ 1180.653869][   T39]  ? put_net+0x191/0x260
[ 1180.653897][   T39]  ? do_exit+0x70a/0x22c0
[ 1180.653926][   T39]  do_exit+0x70f/0x22c0
[ 1180.653954][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1180.653992][   T39]  ? __pfx_do_exit+0x10/0x10
[ 1180.654024][   T39]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1180.654052][   T39]  ? reacquire_held_locks+0x104/0x190
[ 1180.654083][   T39]  ? rt_spin_lock+0x1e0/0x400
[ 1180.654122][   T39]  do_group_exit+0x21b/0x2d0
[ 1180.654148][   T39]  ? rt_spin_unlock+0x160/0x200
[ 1180.654177][   T39]  get_signal+0x1284/0x1330
[ 1180.654231][   T39]  arch_do_signal_or_restart+0xbc/0x840
[ 1180.654254][   T39]  ? __pfx_hrtimer_wakeup+0x10/0x10
[ 1180.654279][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1180.654313][   T39]  ? __se_sys_clock_nanosleep+0x35b/0x3b0
[ 1180.654359][   T39]  exit_to_user_mode_loop+0xa9/0x680
[ 1180.654385][   T39]  ? rcu_is_watching+0x15/0xb0
[ 1180.654417][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1180.654449][   T39]  do_syscall_64+0x353/0x580
[ 1180.654481][   T39]  ? trace_irq_disable+0x3b/0x140
[ 1180.654507][   T39]  ? clear_bhb_loop+0x40/0x90
[ 1180.654537][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1180.654562][   T39] RIP: 0033:0x7f654f84d68e
[ 1180.654583][   T39] RSP: 002b:00007f654dac4f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[ 1180.654609][   T39] RAX: fffffffffffffdfc RBX: 00007f654dac56c0 RCX: 00007f654f84d68e
[ 1180.654626][   T39] RDX: 00007f654dac4fb0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1180.654640][   T39] RBP: 00007f654f922d6f R08: 0000000000000000 R09: 0000000000000000
[ 1180.654655][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1180.654668][   T39] R13: 00007f654fb06128 R14: 00007f654fb06090 R15: 00007fff05cb5338
[ 1180.654704][   T39]  </TASK>
[ 1180.654745][   T39] 
[ 1180.654745][   T39] Showing all locks held in the system:
[ 1180.654757][   T39] 4 locks held by rcuc/0/21:
[ 1180.654769][   T39]  #0: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1180.654834][   T39]  #1: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: process_backl[ 1180.654834][   T39]  #1: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60
[ 1180.654889][   T39]  #2: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[ 1180.654937][   T39]  #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550
[ 1180.654995][   T39] 1 lock held by khungtaskd/39:
[ 1180.655009][   T39]  #0: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1180.655070][   T39] 2 locks held by kworker/u9:0/61:
[ 1180.655082][   T39]  #0: ffff888027119138 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.655141][   T39]  #1: ffffc9000127fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.655203][   T39] 3 locks held by kworker/u8:6/132:
[ 1180.655216][   T39]  #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.655275][   T39]  #1: ffffc900038e7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.655334][   T39]  #2: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1180.655385][   T39] 2 locks held by kworker/R-nbd3-/942:
[ 1180.655397][   T39]  #0: ffff8880271bd138 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.655455][   T39]  #1: ffffc90005a87c00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.655528][   T39] 2 locks held by kworker/u9:1/4923:
[ 1180.655541][   T39]  #0: ffff888027119138 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.655599][   T39]  #1: ffffc90010ef7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.655659][   T39] 3 locks held by kworker/1:3/4990:
[ 1180.655671][   T39]  #0: ffff88813fe17938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.655739][   T39]  #1: ffffc90003977c40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.655801][   T39]  #2: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[ 1180.655868][   T39] 2 locks held by getty/5363:
[ 1180.655880][   T39]  #0: ffff8880207360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1180.655933][   T39]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[ 1180.655993][   T39] 2 locks held by kworker/u9:2/5610:
[ 1180.656006][   T39]  #0: ffff88802705b138 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.656066][   T39]  #1: ffffc90004767c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.656124][   T39] 2 locks held by kworker/u9:3/5612:
[ 1180.656137][   T39]  #0: ffff88802705b138 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.656195][   T39]  #1: ffffc90004787c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.656255][   T39] 2 locks held by kworker/u9:4/5615:
[ 1180.656269][   T39]  #0: ffff88802711f138 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.656329][   T39]  #1: ffffc900047b7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.656388][   T39] 2 locks held by kworker/u9:5/5617:
[ 1180.656400][   T39]  #0: ffff88802711f138 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.656458][   T39]  #1: ffffc900047d7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.656515][   T39] 2 locks held by kworker/u9:6/5619:
[ 1180.656528][   T39]  #0: ffff88802705b138 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.656586][   T39]  #1: ffffc900047f7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.656646][   T39] 2 locks held by kworker/u9:7/5620:
[ 1180.656658][   T39]  #0: ffff888027119138 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.656724][   T39]  #1: ffffc90004807c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.656788][   T39] 7 locks held by kworker/u8:17/6011:
[ 1180.656802][   T39]  #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.656869][   T39]  #1: ffffc9000612fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.656929][   T39]  #2: ffff8880395d4310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[ 1180.656990][   T39]  #3: ffff888059c91120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[ 1180.657048][   T39]  #4: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1180.657099][   T39]  #5: ffff8880b8746420 ((&pcs->lock)){+.+.}-{3:3}, at: kmem_cache_alloc_node_noprof+0x304/0x6e0
[ 1180.657153][   T39]  #6: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0
[ 1180.657206][   T39] 2 locks held by kworker/u8:18/6012:
[ 1180.657220][   T39]  #0: ffff8880586e7138 ((wq_completion)wg-kex-wg0#15){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.657286][   T39]  #1: ffffc900060ffc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.657350][   T39] 5 locks held by kworker/u8:33/6827:
[ 1180.657363][   T39]  #0: ffff88803285a938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.657421][   T39]  #1: ffffc9000dd67c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.657479][   T39]  #2: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1180.657537][   T39]  #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1180.657597][   T39]  #4: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1180.657650][   T39] 5 locks held by kworker/u8:40/6842:
[ 1180.657662][   T39]  #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.657728][   T39]  #1: ffffc9000dec7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.657791][   T39]  #2: ffff88804bfe0310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[ 1180.657856][   T39]  #3: ffff888059a6a920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[ 1180.657913][   T39]  #4: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1180.657965][   T39] 9 locks held by kworker/u8:47/7549:
[ 1180.657977][   T39]  #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.658034][   T39]  #1: ffffc9001b0afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.658095][   T39]  #2: ffff8880398ec310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[ 1180.658156][   T39]  #3: ffff888029576d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[ 1180.658213][   T39]  #4: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1180.658266][   T39]  #5: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1180.658326][   T39]  #6: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60
[ 1180.658386][   T39]  #7: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[ 1180.658435][   T39]  #8: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550
[ 1180.658493][   T39] 3 locks held by kworker/u8:52/7554:
[ 1180.658505][   T39]  #0: ffff888031cc5938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.658563][   T39]  #1: ffffc9001b0ffc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.658622][   T39]  #2: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[ 1180.658682][   T39] 4 locks held by kworker/u8:61/7563:
[ 1180.658695][   T39]  #0: ffff88803571d938 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.658766][   T39]  #1: ffffc9001b18fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.658825][   T39]  #2: ffff8880593096f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830
[ 1180.658888][   T39]  #3: ffff8880594143e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830
[ 1180.658953][   T39] 2 locks held by kworker/u9:8/7948:
[ 1180.658966][   T39]  #0: ffff88802711f138 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.659026][   T39]  #1: ffffc9001c337c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.659087][   T39] 3 locks held by kworker/0:8/9527:
[ 1180.659099][   T39]  #0: ffff88813fe17938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.659157][   T39]  #1: ffffc90003ac7c40 ((debug_obj_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.659215][   T39]  #2: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550
[ 1180.659273][   T39] 2 locks held by kworker/u9:9/12679:
[ 1180.659286][   T39]  #0: ffff8880271bd138 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.659354][   T39]  #1: ffffc90003ff7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.659414][   T39] 2 locks held by kworker/u9:10/12747:
[ 1180.659426][   T39]  #0: ffff8880271bd138 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.659485][   T39]  #1: ffffc900045d7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.659546][   T39] 2 locks held by kworker/u9:11/13841:
[ 1180.659558][   T39]  #0: ffff8880272b3138 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.659616][   T39]  #1: ffffc9000730fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.659674][   T39] 2 locks held by kworker/u9:12/13878:
[ 1180.659687][   T39]  #0: ffff8880272b3138 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.659753][   T39]  #1: ffffc90006877c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.659812][   T39] 2 locks held by kworker/u9:13/14180:
[ 1180.659824][   T39]  #0: ffff8880272b3138 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.659882][   T39]  #1: ffffc90005defc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.659945][   T39] 2 locks held by kworker/0:2/16160:
[ 1180.659958][   T39]  #0: ffff88813fe16538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.660019][   T39]  #1: ffffc9000608fc40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.660078][   T39] 2 locks held by kworker/u9:14/16497:
[ 1180.660090][   T39]  #0: ffff888027319138 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.660148][   T39]  #1: ffffc90004837c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.660207][   T39] 2 locks held by kworker/u9:15/16521:
[ 1180.660221][   T39]  #0: ffff888027319138 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.660278][   T39]  #1: ffffc90004687c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.660337][   T39] 2 locks held by kworker/u9:16/17979:
[ 1180.660350][   T39]  #0: ffff888027319138 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.660406][   T39]  #1: ffffc900066bfc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.660468][   T39] 1 lock held by syz-executor/18236:
[ 1180.660481][   T39]  #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1180.660545][   T39] 1 lock held by syz.7.3958/18324:
[ 1180.660557][   T39]  #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1180.660619][   T39] 1 lock held by syz.8.4168/19006:
[ 1180.660632][   T39]  #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1180.660691][   T39] 3 locks held by kworker/1:1/19019:
[ 1180.660703][   T39]  #0: ffff88813fe17938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1180.660770][   T39]  #1: ffffc90004597c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1180.660828][   T39]  #2: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1180.660888][   T39] 1 lock held by syz.9.4288/19383:
[ 1180.660900][   T39]  #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1180.660961][   T39] 2 locks held by syz-executor/19391:
[ 1180.660973][   T39]  #0: ffffffff8f59d4e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1180.661032][   T39]  #1: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1180.661092][   T39] 2 locks held by syz-executor/19414:
[ 1180.661105][   T39]  #0: ffffffff8f59d4e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1180.661158][   T39]  #1: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1180.661218][   T39] 2 locks held by syz-executor/19415:
[ 1180.661230][   T39]  #0: ffffffff8f59d4e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1180.661286][   T39]  #1: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1180.661344][   T39] 2 locks held by syz-executor/19449:
[ 1180.661356][   T39]  #0: ffffffff8f59d4e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1180.661409][   T39]  #1: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1180.661469][   T39] 1 lock held by syz-executor/19455:
[ 1180.661482][   T39]  #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[ 1180.661545][   T39] 1 lock held by syz-executor/19465:
[ 1180.661558][   T39]  #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1180.661617][   T39] 1 lock held by syz-executor/19478:
[ 1180.661629][   T39]  #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1180.676592][   T39] 1 lock held by syz-executor/19505:
[ 1180.676607][   T39]  #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[ 1180.676671][   T39] 1 lock held by syz-executor/19521:
[ 1180.676684][   T39]  #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[ 1180.676757][   T39] 2 locks held by syz-executor/19539:
[ 1180.676770][   T39]  #0: ffffffff8f59d4e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1180.676830][   T39]  #1: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940
[ 1180.676887][   T39] 2 locks held by syz-executor/19558:
[ 1180.676899][   T39]  #0: ffffffff8f59d4e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1180.676952][   T39]  #1: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x850
[ 1180.677011][   T39] 1 lock held by syz-executor/19589:
[ 1180.677025][   T39]  #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[ 1180.677082][   T39] 1 lock held by syz-executor/19598:
[ 1180.677093][   T39]  #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1180.677146][   T39] 1 lock held by syz-executor/19603:
[ 1180.677159][   T39]  #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1180.677212][   T39] 1 lock held by syz-executor/19612:
[ 1180.677226][   T39]  #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1180.677281][   T39] 1 lock held by syz-executor/19625:
[ 1180.677295][   T39]  #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1180.677349][   T39] 1 lock held by dhcpcd/19630:
[ 1180.677361][   T39]  #0: ffff888037d3e358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70
[ 1180.677417][   T39] 
[ 1180.677423][   T39] =============================================
[ 1180.677423][   T39] 
[ 1180.677433][   T39] NMI backtrace for cpu 1
[ 1180.677452][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1180.677481][   T39] Tainted: [L]=SOFTLOCKUP
[ 1180.677489][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1180.677502][   T39] Call Trace:
[ 1180.677512][   T39]  <TASK>
[ 1180.677522][   T39]  dump_stack_lvl+0xe8/0x150
[ 1180.677553][   T39]  nmi_cpu_backtrace+0x274/0x2d0
[ 1180.677580][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1180.677617][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[ 1180.677647][   T39]  sys_info+0x135/0x170
[ 1180.677670][   T39]  watchdog+0xfd3/0x1030
[ 1180.677701][   T39]  ? watchdog+0x1c9/0x1030
[ 1180.677739][   T39]  kthread+0x388/0x470
[ 1180.677772][   T39]  ? __pfx_watchdog+0x10/0x10
[ 1180.677794][   T39]  ? __pfx_kthread+0x10/0x10
[ 1180.677820][   T39]  ret_from_fork+0x514/0xb70
[ 1180.677850][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[ 1180.677876][   T39]  ? __switch_to+0xc79/0x1410
[ 1180.677899][   T39]  ? __pfx_kthread+0x10/0x10
[ 1180.677924][   T39]  ret_from_fork_asm+0x1a/0x30
[ 1180.677968][   T39]  </TASK>
[ 1180.677977][   T39] Sending NMI from CPU 1 to CPUs 0:
[ 1180.678009][    C0] NMI backtrace for cpu 0
[ 1180.678028][    C0] CPU: 0 UID: 0 PID: 21 Comm: rcuc/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1180.678054][    C0] Tainted: [L]=SOFTLOCKUP
[ 1180.678061][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1180.678072][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80
[ 1180.678093][    C0] Code: 89 fb e8 23 00 00 00 48 8b 3d b4 d5 db 0b 48 89 de 5b e9 83 47 5f 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 04 24 65 48 8b 0d 58 85 d4 10 65 8b 35 79 85 d4
[ 1180.678110][    C0] RSP: 0018:ffffc900001a68f8 EFLAGS: 00000282
[ 1180.678126][    C0] RAX: dffffc0000000000 RBX: ffffffff9a75b5e0 RCX: ffff88801deb5d00
[ 1180.678140][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
[ 1180.678152][    C0] RBP: ffffc900001a6a90 R08: 0000000000000000 R09: 0000000000000100
[ 1180.678164][    C0] R10: ffffc900001a6860 R11: fffff52000034d10 R12: e00000000cb14943
[ 1180.678177][    C0] R13: e00000000cb14942 R14: 1ffffffff34eb6bc R15: e00000000cb14942
[ 1180.678191][    C0] FS:  0000000000000000(0000) GS:ffff888125c7e000(0000) knlGS:0000000000000000
[ 1180.678206][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1180.678219][    C0] CR2: 00007fffe8d34fc0 CR3: 00000000371c2000 CR4: 00000000003526f0
[ 1180.678237][    C0] Call Trace:
[ 1180.678244][    C0]  <TASK>
[ 1180.678251][    C0]  save_dst_trace_buffer+0x1a9/0x5b0
[ 1180.678274][    C0]  ? __pfx_save_dst_trace_buffer+0x10/0x10
[ 1180.678292][    C0]  ? ip_route_output_key_hash_rcu+0x1d1f/0x25e0
[ 1180.678314][    C0]  ? ip_route_output_key_hash+0x18d/0x2a0
[ 1180.678334][    C0]  ? ip_route_output_flow+0x2a/0x150
[ 1180.678353][    C0]  ? ip_route_me_harder+0x742/0xf90
[ 1180.678372][    C0]  ? synproxy_send_tcp+0x34c/0x670
[ 1180.678391][    C0]  ? synproxy_send_client_synack+0x8c1/0xe30
[ 1180.678410][    C0]  ? nft_synproxy_eval_v4+0x34a/0x4e0
[ 1180.678430][    C0]  ? nft_synproxy_do_eval+0x305/0x580
[ 1180.678450][    C0]  ? nft_do_chain+0x48d/0x1ae0
[ 1180.678479][    C0]  ? nft_do_chain_inet+0x360/0x4b0
[ 1180.678499][    C0]  ? nf_hook_slow+0xc5/0x220
[ 1180.678516][    C0]  ? NF_HOOK+0x21f/0x3c0
[ 1180.678531][    C0]  ? NF_HOOK+0x336/0x3c0
[ 1180.678545][    C0]  ? process_backlog+0x569/0xc60
[ 1180.678565][    C0]  ? __napi_poll+0xab/0x550
[ 1180.678584][    C0]  ? net_rx_action+0x696/0xe00
[ 1180.678603][    C0]  ? handle_softirqs+0x1de/0x6d0
[ 1180.678626][    C0]  ? __local_bh_enable_ip+0x170/0x2b0
[ 1180.678649][    C0]  ? rcu_cpu_kthread+0x9e8/0x1470
[ 1180.678669][    C0]  ? smpboot_thread_fn+0x541/0xa50
[ 1180.678688][    C0]  ? ip_route_output_key_hash_rcu+0x1331/0x25e0
[ 1180.678712][    C0]  ip_route_output_key_hash_rcu+0x1d1f/0x25e0
[ 1180.678734][    C0]  ? ip_route_output_key_hash_rcu+0x1331/0x25e0
[ 1180.678758][    C0]  ? ip_route_output_key_hash+0xd8/0x2a0
[ 1180.678780][    C0]  ip_route_output_key_hash+0x18d/0x2a0
[ 1180.678802][    C0]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[ 1180.678830][    C0]  ip_route_output_flow+0x2a/0x150
[ 1180.678848][    C0]  ? ip_route_me_harder+0x730/0xf90
[ 1180.678869][    C0]  ip_route_me_harder+0x742/0xf90
[ 1180.678893][    C0]  ? __pfx_ip_route_me_harder+0x10/0x10
[ 1180.678920][    C0]  ? __cookie_v4_init_sequence+0x25d/0x500
[ 1180.678949][    C0]  synproxy_send_tcp+0x34c/0x670
[ 1180.678970][    C0]  synproxy_send_client_synack+0x8c1/0xe30
[ 1180.678996][    C0]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[ 1180.679016][    C0]  ? nft_tunnel_obj_init+0x1318/0x1960
[ 1180.679042][    C0]  ? synproxy_pernet+0x45/0x270
[ 1180.679064][    C0]  nft_synproxy_eval_v4+0x34a/0x4e0
[ 1180.679088][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[ 1180.679110][    C0]  ? nf_ip_checksum+0x13c/0x510
[ 1180.679133][    C0]  nft_synproxy_do_eval+0x305/0x580
[ 1180.679156][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[ 1180.679183][    C0]  nft_do_chain+0x48d/0x1ae0
[ 1180.679204][    C0]  ? __pfx_nft_rt_get_eval+0x10/0x10
[ 1180.679229][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[ 1180.679254][    C0]  ? nft_do_chain+0x18b6/0x1ae0
[ 1180.679282][    C0]  ? __lock_acquire+0x6b5/0x2d10
[ 1180.679305][    C0]  nft_do_chain_inet+0x360/0x4b0
[ 1180.679327][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1180.679352][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1180.679368][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1180.679383][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1180.679405][    C0]  nf_hook_slow+0xc5/0x220
[ 1180.679425][    C0]  NF_HOOK+0x21f/0x3c0
[ 1180.679442][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1180.679464][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1180.679480][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1180.679495][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[ 1180.679513][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1180.679532][    C0]  ? ip_local_deliver+0x12a/0x1b0
[ 1180.679549][    C0]  NF_HOOK+0x336/0x3c0
[ 1180.679564][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1180.679590][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1180.679606][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1180.679621][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1180.679637][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1180.679656][    C0]  ? __pfx_ip_rcv+0x10/0x10
[ 1180.679671][    C0]  ? process_backlog+0x271/0xc60
[ 1180.679690][    C0]  ? __pfx_ip_rcv+0x10/0x10
[ 1180.679706][    C0]  process_backlog+0x569/0xc60
[ 1180.679728][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1180.679751][    C0]  __napi_poll+0xab/0x550
[ 1180.679772][    C0]  net_rx_action+0x696/0xe00
[ 1180.679800][    C0]  ? __pfx_net_rx_action+0x10/0x10
[ 1180.679820][    C0]  ? kvm_sched_clock_read+0x11/0x20
[ 1180.679848][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[ 1180.679876][    C0]  handle_softirqs+0x1de/0x6d0
[ 1180.679904][    C0]  __local_bh_enable_ip+0x170/0x2b0
[ 1180.679928][    C0]  ? rcu_cpu_kthread+0x205/0x1470
[ 1180.679948][    C0]  rcu_cpu_kthread+0x9e8/0x1470
[ 1180.679972][    C0]  ? rcu_cpu_kthread+0x205/0x1470
[ 1180.679996][    C0]  ? __pfx_rcu_cpu_kthread+0x10/0x10
[ 1180.680017][    C0]  ? schedule+0x90/0x360
[ 1180.680042][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[ 1180.680057][    C0]  smpboot_thread_fn+0x541/0xa50
[ 1180.680073][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[ 1180.680093][    C0]  kthread+0x388/0x470
[ 1180.680111][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1180.680126][    C0]  ? __pfx_kthread+0x10/0x10
[ 1180.680144][    C0]  ret_from_fork+0x514/0xb70
[ 1180.680165][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1180.680183][    C0]  ? __switch_to+0xc79/0x1410
[ 1180.680201][    C0]  ? __pfx_kthread+0x10/0x10
[ 1180.680220][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1180.680248][    C0]  </TASK>
[ 1180.891772][T19542] Bluetooth: hci8: command tx timeout
[ 1181.141803][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[ 1181.141835][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1181.141868][   T39] Tainted: [L]=SOFTLOCKUP
[ 1181.141876][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1181.141890][   T39] Call Trace:
[ 1181.141899][   T39]  <TASK>
[ 1181.141910][   T39]  vpanic+0x56c/0xa60
[ 1181.141948][   T39]  ? __pfx___schedule+0x10/0x10
[ 1181.141986][   T39]  ? __pfx_vpanic+0x10/0x10
[ 1181.142025][   T39]  panic+0xc5/0xd0
[ 1181.142055][   T39]  ? __pfx_panic+0x10/0x10
[ 1181.142088][   T39]  ? preempt_schedule_thunk+0x16/0x40
[ 1181.142129][   T39]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[ 1181.142162][   T39]  watchdog+0x102c/0x1030
[ 1181.142193][   T39]  ? watchdog+0x1c9/0x1030
[ 1181.142221][   T39]  kthread+0x388/0x470
[ 1181.142246][   T39]  ? __pfx_watchdog+0x10/0x10
[ 1181.142267][   T39]  ? __pfx_kthread+0x10/0x10
[ 1181.142293][   T39]  ret_from_fork+0x514/0xb70
[ 1181.142323][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[ 1181.142360][   T39]  ? __switch_to+0xc79/0x1410
[ 1181.142384][   T39]  ? __pfx_kthread+0x10/0x10
[ 1181.142411][   T39]  ret_from_fork_asm+0x1a/0x30
[ 1181.142533][   T39]  </TASK>
[ 1181.142899][   T39] Kernel Offset: disabled