last executing test programs:

14m55.315646337s ago: executing program 4 (id=1531):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={0x0, 0x0, r3, r4, 0x8006, 0x0, 0xfffffffe, 0x7, {0xac7e, 0x5, 0x6, 0x6a, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0xd, 0x3, 0xa0d0, 0x3, "fe1d0000341300000000000008b4271800100000000000000000000e00"}})

14m55.137038489s ago: executing program 4 (id=1534):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0x3, 0xfb}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)

14m54.758392538s ago: executing program 4 (id=1538):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xddf5, 0x8, 0xfffffffe, 0x183})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
close_range(r0, r0, 0x0)

14m52.748561096s ago: executing program 4 (id=1544):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092d917d39ed975", "98999999", "50f641306280c4e9"}, 0x28)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, 0x0, 0x0)

14m50.78776723s ago: executing program 4 (id=1550):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0xac}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

14m49.517170229s ago: executing program 4 (id=1551):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)

14m34.328453104s ago: executing program 32 (id=1551):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)

13m50.415331314s ago: executing program 1 (id=1776):
socket$kcm(0x2, 0xa, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8)

13m49.752563582s ago: executing program 1 (id=1779):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010026bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="d66100000800000005001100060000000c0019800500020000000000080004"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

13m49.222147634s ago: executing program 1 (id=1782):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x0, 0x5, 0x2, "cda0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000e00)={0x2c, &(0x7f0000000cc0)={0x0, 0x16, 0x2, "1544"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x20, 0x16, 0x2, "b9ca"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000000180)={0x0, 0x10, 0x1, "fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

13m46.074964478s ago: executing program 1 (id=1793):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x111099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

13m45.634541118s ago: executing program 1 (id=1796):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0xc, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x1, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x0, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0x102, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x8, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x4, 0x7ff, 0x1ff, 0xe25c, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0xff, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x7, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0xfffffff7, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0x1001, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375d, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x801, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000)
sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)

13m41.415646582s ago: executing program 1 (id=1808):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13m40.852253653s ago: executing program 33 (id=1808):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12m43.297419369s ago: executing program 0 (id=1998):
socket$kcm(0x10, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

12m42.851899686s ago: executing program 0 (id=1999):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x1ff, 0x2, 0x6}})

12m41.46228003s ago: executing program 0 (id=2001):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']})

12m40.027643553s ago: executing program 0 (id=2002):
mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x391e1000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/54, 0x36}], 0x1)

12m37.522164162s ago: executing program 0 (id=2009):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1a8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x47)
mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1)
chdir(&(0x7f0000000140)='./bus\x00')
linkat(r1, &(0x7f0000000000)='./file1\x00', r1, &(0x7f00000001c0)='./bus\x00', 0x400)
setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3)

12m35.833612099s ago: executing program 0 (id=2015):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
r3 = socket(0x1e, 0x4, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x1e, 0x4e20, @remote}, 0x10)

12m20.528851361s ago: executing program 34 (id=2015):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
r3 = socket(0x1e, 0x4, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x1e, 0x4e20, @remote}, 0x10)

12m11.959691465s ago: executing program 3 (id=2056):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000002c00), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000100)=0xd0)

12m10.554910638s ago: executing program 3 (id=2058):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0xa, 0x148, 0x0, 0x10, 0x300, 0x2a8, 0x2a8, 0x300, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0xc9e5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x2, 0x6, 0x0, 0x3, 0x1], 0x3, 0x3}, {0x2, [0x0, 0x8, 0x1, 0x5, 0x7, 0x7], 0x2, 0x5}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x278)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000040)={0xb1, 0x5, 0x8, 0x4, '\x00', 0x5})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000440)="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", 0x2000, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="01002bbdb3dc00"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffd, 0x5479, 0x1035, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0x7, 0xbf7, 0xfff, 0x8000000000005, 0x800000068], 0x41000, 0x80cd4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12m3.820964797s ago: executing program 3 (id=2065):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x20000000)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000380)={{0x6, @null, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)

12m0.5528259s ago: executing program 3 (id=2069):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x201b, 0x6, 0x9, 0x700, 0x3, 0x362cf9b5827262cb}})
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./control\x00', 0x0, 0x400)

11m59.016199808s ago: executing program 3 (id=2071):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0))
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r4 = memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x3)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="14043600d3fc03fc01004788031c091006", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
statx(0xffffffffffffff9c, 0x0, 0x400, 0x1, 0x0)

11m53.85071714s ago: executing program 3 (id=2078):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
times(0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0\x00'})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x140040c4}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008041)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000080))
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x40000005}, @nfc={0x27, 0x0, 0x1, 0x3}, @nl=@unspec, 0xc, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='bond_slave_1\x00', 0x500000, 0x100000a, 0x1})

11m38.621080339s ago: executing program 35 (id=2078):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
times(0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0\x00'})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x140040c4}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008041)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000080))
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x40000005}, @nfc={0x27, 0x0, 0x1, 0x3}, @nl=@unspec, 0xc, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='bond_slave_1\x00', 0x500000, 0x100000a, 0x1})

7m16.165481097s ago: executing program 6 (id=3216):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = timerfd_create(0x7, 0x0)
timerfd_gettime(r4, &(0x7f0000000000))

7m13.794919802s ago: executing program 6 (id=3221):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TIOCGPGRP(r1, 0x5437, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7, 0xc0, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1a, 0x6, 0xf, 0xf0}, {0x6, 0x24, 0x1a, 0x400, 0x39}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xff, 0x2, 0x99}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc0, 0x81, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0xa, 0x80}}}}}}}]}}, 0x0)

7m9.356262279s ago: executing program 6 (id=3233):
io_setup(0x80000000, &(0x7f0000000000))
openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
fanotify_init(0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)

7m7.343466837s ago: executing program 6 (id=3236):
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private2, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f00000001c0)=0xe8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x18)
r1 = msgget$private(0x0, 0x193)
msgsnd(r1, &(0x7f0000000080)=ANY=[], 0x3f9, 0x0)
msgrcv(r1, 0x0, 0x0, 0x1, 0x800)
r2 = getuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6}, 0x0, @in6=@private0}}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, <r4=>0x0}, 0x0)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000500)={{0x0, r2, 0x0, r3, r4, 0xcc, 0x101}, 0x0, 0x0, 0x6e28, 0xbbc, 0x3, 0x400, 0x5, 0xf3b, 0x100, 0x1})
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})

7m4.671162125s ago: executing program 6 (id=3238):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

7m3.069066018s ago: executing program 6 (id=3242):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x378, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)
socket$nl_xfrm(0x10, 0x3, 0x6)

6m46.804020746s ago: executing program 36 (id=3242):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x378, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)
socket$nl_xfrm(0x10, 0x3, 0x6)

5m38.870124479s ago: executing program 2 (id=3407):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)=""/29, 0x1d}, 0x2}], 0x400000000000194, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000001340), 0x0, 0x20000001)
recvmmsg(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/109, 0x6d}], 0x1}, 0x8}], 0x2, 0x100, 0x0)
sendmmsg$sock(r1, 0x0, 0x0, 0x44000)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240410500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0)
listen(r0, 0xfff)

5m37.394416984s ago: executing program 2 (id=3409):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x48)
socket(0x1e, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f)
splice(r2, 0x0, r1, 0x0, 0x7f, 0xe)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
socket(0x1e, 0x805, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00')
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)

5m37.195833406s ago: executing program 2 (id=3411):
socket$inet6_icmp(0xa, 0x2, 0x3a)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
prctl$PR_SET_SECUREBITS(0x1c, 0x73)
setuid(0xee01)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
sendto(0xffffffffffffffff, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8)
sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x40008, @loopback, 0x1}, 0x1c)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x2000c041)
close(r0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@index_on}, {@workdir={'workdir', 0x3d, './bus'}}]})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='qnx4\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x2, 0x3000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

5m36.467921049s ago: executing program 2 (id=3415):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setgroups(0x0, 0x0)
fsopen(0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})

5m32.90486668s ago: executing program 2 (id=3423):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0)
r0 = getpid()
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr\x00')
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r2, &(0x7f0000001f80)=""/4096, 0x1000)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r6, 0x20, &(0x7f0000001080)={0x0, 0x0, <r7=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r7, 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r5, 0x0, 0x29, 0x14, @val=@tracing={r7, 0x3}}, 0x20)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480))
io_setup(0x7, &(0x7f0000000280))
openat$sysfs(0xffffff9c, &(0x7f0000000740)='/sys/kernel/address_bits', 0x8042, 0x120)

5m25.149313405s ago: executing program 2 (id=3432):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'hsr0\x00', 0x3}, 0x18)
rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8)
r1 = gettid()
tkill(r1, 0x16)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x145bc2, 0xab)
copy_file_range(r2, 0x0, r2, &(0x7f0000000000)=0x6e65cea5, 0x5, 0x0)
io_setup(0x1, &(0x7f00000001c0)=<r3=>0x0)
io_pgetevents(r3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={[0xb]}, 0x8})
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x1263, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x44}, {0x6, 0x2, 0x0, 0x7ffffdbe}]})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000280)=0x8)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r4, r8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={r7}, 0x8)

5m8.983896667s ago: executing program 37 (id=3432):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'hsr0\x00', 0x3}, 0x18)
rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8)
r1 = gettid()
tkill(r1, 0x16)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x145bc2, 0xab)
copy_file_range(r2, 0x0, r2, &(0x7f0000000000)=0x6e65cea5, 0x5, 0x0)
io_setup(0x1, &(0x7f00000001c0)=<r3=>0x0)
io_pgetevents(r3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={[0xb]}, 0x8})
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x1263, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x44}, {0x6, 0x2, 0x0, 0x7ffffdbe}]})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000280)=0x8)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r4, r8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={r7}, 0x8)

24.666618295s ago: executing program 8 (id=4113):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
accept4(r1, 0x0, 0x0, 0x800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x40841)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
preadv(r7, &(0x7f0000001280)=[{&(0x7f0000001180)=""/226, 0xe2}], 0x1, 0xfffffffd, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r1])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x900, 0x0)

24.171433339s ago: executing program 8 (id=4115):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630000dd000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0xfffffe09}, 0x23)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x6576, 0x7f})

23.822134894s ago: executing program 8 (id=4116):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0xfe, 0x6, @link_local}, 0x14)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000c4000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e01000004240201010248"], 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendfile(r0, r0, 0x0, 0x200000)

23.726807865s ago: executing program 5 (id=4117):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000b40)=ANY=[@ANYRESDEC=r0, @ANYBLOB="46c8bf8e3d076ce94152bdba11e15378a6647ebaa84b649be8a8cd0fb0a98fabac27a686147869976e06a8b5fb5e2dc32f72f50b8f375c5b7056ccf8048f985bb799caed396daa0717afd6b501d0f1356d24c42a25b205a04e1387ad500b32c3e7150eb9dc137d12642b5e8dcba41e61db5f4adca1f9b9c59fd72aef0ab7c80b544ffd347775eea80e94bf0e9b9002966bf58424d165d8e6a31286d26981e9f586a485b1a53cab5023ac0c5f1aafd08b71d70c72d3b4d54c8c363a7d27ba78c2b5ec8f409430a3c461"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r1], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22})
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)

23.538756017s ago: executing program 5 (id=4118):
syz_open_dev$vim2m(&(0x7f00000003c0), 0x6, 0x2)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004800010000000000000000000a003800", @ANYRES32=0x0, @ANYBLOB="00000000080002000700000014000100ff"], 0x38}}, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24040084}, 0x84)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000800)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

22.603115128s ago: executing program 5 (id=4121):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0xa, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xda0, 0x0, 0x81}]}) (async)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xda0, 0x0, 0x81}]})
r3 = getpid()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000080)={0xfffffffffffffbff}) (async)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000080)={0xfffffffffffffbff})
kcmp(r3, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) (async)
kcmp(r3, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000140)={0x1d, 0x7, 0xfefffff6})
ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x9)

22.525547084s ago: executing program 7 (id=4122):
socket$inet6(0xa, 0x2, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'})

22.516578861s ago: executing program 7 (id=4123):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24000040)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(r1, 0x0)
unshare(0x20010080)
accept4(r1, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x4c20068d, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)

22.364280805s ago: executing program 8 (id=4124):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630000dd000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0xfffffe09}, 0x23)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x6576, 0x7f})

21.888674462s ago: executing program 8 (id=4125):
r0 = socket(0xa, 0x3, 0x87)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0})
mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0xffffff7f, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8a\xbc\xe63\xc5P}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99a\x7f\xb8\xab\x1a\xe7\xc1\xab\x16\xc77<r\xe9\x9cD\xb0\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92\xfa\xe8e\x8cD\"\xa3wA\xf6`\xbe\x00'/103)

21.888336055s ago: executing program 5 (id=4126):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x80002, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24000040)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(r1, 0x0)
unshare(0x20010080)
accept4(r1, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x4c20068d, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)

21.853032404s ago: executing program 8 (id=4127):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002e09000018000180140002006261746164765f736c6176655f31"], 0x2c}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0)
ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000140)={0xf, 0xc46, 0x1})
writev(r1, &(0x7f0000000880)=[{&(0x7f0000000040)='g', 0x1}, {&(0x7f0000000340)="e3be", 0x2}], 0x2)

21.353524098s ago: executing program 7 (id=4128):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
getresgid(&(0x7f0000000380), &(0x7f0000002500), &(0x7f0000002540))

20.952350971s ago: executing program 7 (id=4129):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
accept4(r1, 0x0, 0x0, 0x800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x40841)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
preadv(r7, &(0x7f0000001280)=[{&(0x7f0000001180)=""/226, 0xe2}], 0x1, 0xfffffffd, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r1])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x900, 0x0)

16.30617754s ago: executing program 7 (id=4130):
syz_open_dev$vim2m(&(0x7f00000003c0), 0x6, 0x2)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004800010000000000000000000a003800", @ANYRES32=0x0, @ANYBLOB="00000000080002000700000014000100ff"], 0x38}}, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24040084}, 0x84)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000800)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

16.06890989s ago: executing program 5 (id=4131):
socket$inet6(0xa, 0x2, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)

15.98442376s ago: executing program 5 (id=4132):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48)

15.344425548s ago: executing program 7 (id=4133):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x20502, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x6)
setsockopt(r5, 0x10e, 0xb, &(0x7f0000000100)='\x00\x00', 0x2)
sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@flushsa={0x58, 0x1c, 0x905, 0x0, 0x0, {}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, @in6=@remote}]}]}, 0x58}}, 0x0)
connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38)

6.578641768s ago: executing program 38 (id=4127):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002e09000018000180140002006261746164765f736c6176655f31"], 0x2c}}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0)
ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000140)={0xf, 0xc46, 0x1})
writev(r1, &(0x7f0000000880)=[{&(0x7f0000000040)='g', 0x1}, {&(0x7f0000000340)="e3be", 0x2}], 0x2)

476.44667ms ago: executing program 39 (id=4132):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48)

0s ago: executing program 40 (id=4133):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x20502, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x6)
setsockopt(r5, 0x10e, 0xb, &(0x7f0000000100)='\x00\x00', 0x2)
sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@flushsa={0x58, 0x1c, 0x905, 0x0, 0x0, {}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, @in6=@remote}]}]}, 0x58}}, 0x0)
connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38)

kernel console output (not intermixed with test programs):

____sys_sendmsg+0x10/0x10
[  985.809723][T16069]  ? import_iovec+0x74/0xa0
[  985.809754][T16069]  ___sys_sendmsg+0x21f/0x2a0
[  985.809780][T16069]  ? __pfx____sys_sendmsg+0x10/0x10
[  985.809844][T16069]  ? __fget_files+0x2a/0x420
[  985.809865][T16069]  ? __fget_files+0x3a6/0x420
[  985.809899][T16069]  __x64_sys_sendmsg+0x1a1/0x260
[  985.809925][T16069]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  985.809960][T16069]  ? __pfx_ksys_write+0x10/0x10
[  985.809992][T16069]  ? do_syscall_64+0xbe/0xf80
[  985.810026][T16069]  do_syscall_64+0xfa/0xf80
[  985.810054][T16069]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  985.810075][T16069]  ? clear_bhb_loop+0x60/0xb0
[  985.810100][T16069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  985.810120][T16069] RIP: 0033:0x7f9caf7af749
[  985.810137][T16069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  985.810155][T16069] RSP: 002b:00007f9cada0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  985.810177][T16069] RAX: ffffffffffffffda RBX: 00007f9cafa05fa0 RCX: 00007f9caf7af749
[  985.810193][T16069] RDX: 0000000040000080 RSI: 0000200000000180 RDI: 0000000000000004
[  985.810206][T16069] RBP: 00007f9cada0e090 R08: 0000000000000000 R09: 0000000000000000
[  985.810219][T16069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  985.810231][T16069] R13: 00007f9cafa06038 R14: 00007f9cafa05fa0 R15: 00007ffe7de95dc8
[  985.810267][T16069]  </TASK>
[  985.931709][T16072] FAULT_INJECTION: forcing a failure.
[  985.931709][T16072] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  985.931749][T16072] CPU: 0 UID: 0 PID: 16072 Comm: syz.5.3612 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  985.931777][T16072] Tainted: [L]=SOFTLOCKUP
[  985.931784][T16072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  985.931796][T16072] Call Trace:
[  985.931805][T16072]  <TASK>
[  985.931814][T16072]  dump_stack_lvl+0x189/0x250
[  985.931847][T16072]  ? __pfx____ratelimit+0x10/0x10
[  985.931875][T16072]  ? __pfx_dump_stack_lvl+0x10/0x10
[  985.931902][T16072]  ? __pfx__printk+0x10/0x10
[  985.931942][T16072]  should_fail_ex+0x46c/0x600
[  985.931973][T16072]  _copy_to_user+0x31/0xb0
[  985.932005][T16072]  simple_read_from_buffer+0xe1/0x170
[  985.932033][T16072]  proc_fail_nth_read+0x1b6/0x220
[  985.932068][T16072]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  985.932103][T16072]  ? rw_verify_area+0x2ac/0x4e0
[  985.932130][T16072]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  985.932162][T16072]  vfs_read+0x206/0xa30
[  985.932201][T16072]  ? __pfx_vfs_read+0x10/0x10
[  985.932225][T16072]  ? try_to_take_rt_mutex+0x7fd/0xac0
[  985.932261][T16072]  ? mutex_lock_nested+0x154/0x1d0
[  985.932291][T16072]  ? fdget_pos+0x253/0x320
[  985.932325][T16072]  ksys_read+0x14b/0x260
[  985.932357][T16072]  ? __pfx_ksys_read+0x10/0x10
[  985.932391][T16072]  ? do_syscall_64+0xbe/0xf80
[  985.932424][T16072]  do_syscall_64+0xfa/0xf80
[  985.932453][T16072]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  985.932474][T16072]  ? clear_bhb_loop+0x60/0xb0
[  985.932501][T16072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  985.932521][T16072] RIP: 0033:0x7f9caf7ae15c
[  985.932540][T16072] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  985.932558][T16072] RSP: 002b:00007f9cada0e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  985.932590][T16072] RAX: ffffffffffffffda RBX: 00007f9cafa05fa0 RCX: 00007f9caf7ae15c
[  985.932606][T16072] RDX: 000000000000000f RSI: 00007f9cada0e0a0 RDI: 0000000000000006
[  985.932619][T16072] RBP: 00007f9cada0e090 R08: 0000000000000000 R09: 0000000000000000
[  985.932632][T16072] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001
[  985.932644][T16072] R13: 00007f9cafa06038 R14: 00007f9cafa05fa0 R15: 00007ffe7de95dc8
[  985.932682][T16072]  </TASK>
[  991.680394][   T44] team0 (unregistering): Port device team_slave_1 removed
[  992.000663][   T44] team0 (unregistering): Port device team_slave_0 removed
[  995.597158][T15276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  995.684205][T15276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  995.694337][T15276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  995.710194][T15276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  995.727565][T15276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  996.150833][   T44] team0 (unregistering): Port device team_slave_1 removed
[  996.356146][   T44] team0 (unregistering): Port device team_slave_0 removed
[  997.627055][ T6024] infiniband syz1: ib_query_port failed (-19)
[  997.719397][ T6664] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  997.738339][ T6664] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  997.868558][ T5808] Bluetooth: hci0: command tx timeout
[  997.886761][   T37] audit: type=1326 audit(1765657825.302:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16108 comm="syz.5.3618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9caf7af749 code=0x0
[  998.225256][ T6664] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  998.247099][ T6664] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  998.538313][T16125] FAULT_INJECTION: forcing a failure.
[  998.538313][T16125] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  998.538341][T16125] CPU: 0 UID: 0 PID: 16125 Comm: syz.8.3623 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  998.538358][T16125] Tainted: [L]=SOFTLOCKUP
[  998.538362][T16125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  998.538369][T16125] Call Trace:
[  998.538375][T16125]  <TASK>
[  998.538380][T16125]  dump_stack_lvl+0x189/0x250
[  998.538399][T16125]  ? __pfx____ratelimit+0x10/0x10
[  998.538415][T16125]  ? __pfx_dump_stack_lvl+0x10/0x10
[  998.538430][T16125]  ? __pfx__printk+0x10/0x10
[  998.538442][T16125]  ? __might_fault+0xb0/0x130
[  998.538471][T16125]  should_fail_ex+0x46c/0x600
[  998.538497][T16125]  _copy_from_iter+0x1cd/0x1630
[  998.538527][T16125]  ? __build_skb_around+0x22d/0x3c0
[  998.538563][T16125]  ? __pfx__copy_from_iter+0x10/0x10
[  998.538589][T16125]  ? __alloc_skb+0x2f1/0x430
[  998.538621][T16125]  ? __pfx___alloc_skb+0x10/0x10
[  998.538648][T16125]  ? netlink_sendmsg+0x642/0xb30
[  998.538660][T16125]  ? skb_put+0x11b/0x210
[  998.538674][T16125]  netlink_sendmsg+0x6b2/0xb30
[  998.538693][T16125]  ? __pfx_netlink_sendmsg+0x10/0x10
[  998.538711][T16125]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  998.538726][T16125]  ? __pfx_netlink_sendmsg+0x10/0x10
[  998.538740][T16125]  __sock_sendmsg+0x21c/0x270
[  998.538758][T16125]  ____sys_sendmsg+0x508/0x810
[  998.538773][T16125]  ? __pfx_____sys_sendmsg+0x10/0x10
[  998.538792][T16125]  ? import_iovec+0x74/0xa0
[  998.538809][T16125]  ___sys_sendmsg+0x21f/0x2a0
[  998.538823][T16125]  ? __pfx____sys_sendmsg+0x10/0x10
[  998.538858][T16125]  ? __fget_files+0x2a/0x420
[  998.538870][T16125]  ? __fget_files+0x3a6/0x420
[  998.538889][T16125]  __x64_sys_sendmsg+0x1a1/0x260
[  998.538903][T16125]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  998.538922][T16125]  ? __pfx_ksys_write+0x10/0x10
[  998.538941][T16125]  ? do_syscall_64+0xbe/0xf80
[  998.538960][T16125]  do_syscall_64+0xfa/0xf80
[  998.538976][T16125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  998.538987][T16125]  ? clear_bhb_loop+0x60/0xb0
[  998.539002][T16125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  998.539013][T16125] RIP: 0033:0x7f2af1fcf749
[  998.539025][T16125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  998.539036][T16125] RSP: 002b:00007f2af0236038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  998.539051][T16125] RAX: ffffffffffffffda RBX: 00007f2af2225fa0 RCX: 00007f2af1fcf749
[  998.539059][T16125] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  998.539067][T16125] RBP: 00007f2af0236090 R08: 0000000000000000 R09: 0000000000000000
[  998.539074][T16125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  998.539081][T16125] R13: 00007f2af2226038 R14: 00007f2af2225fa0 R15: 00007ffd78cbfb18
[  998.539108][T16125]  </TASK>
[  998.676975][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1000.649994][T15276] Bluetooth: hci0: command tx timeout
[ 1001.390038][T16143] FAULT_INJECTION: forcing a failure.
[ 1001.390038][T16143] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1001.390079][T16143] CPU: 0 UID: 0 PID: 16143 Comm: syz.8.3630 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1001.390103][T16143] Tainted: [L]=SOFTLOCKUP
[ 1001.390108][T16143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1001.390115][T16143] Call Trace:
[ 1001.390121][T16143]  <TASK>
[ 1001.390127][T16143]  dump_stack_lvl+0x189/0x250
[ 1001.390147][T16143]  ? __pfx____ratelimit+0x10/0x10
[ 1001.390163][T16143]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1001.390178][T16143]  ? __pfx__printk+0x10/0x10
[ 1001.390191][T16143]  ? __might_fault+0xb0/0x130
[ 1001.390214][T16143]  should_fail_ex+0x46c/0x600
[ 1001.390231][T16143]  _copy_from_user+0x2d/0xb0
[ 1001.390249][T16143]  ___sys_recvmsg+0x12e/0x510
[ 1001.390268][T16143]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1001.390299][T16143]  ? __might_fault+0xb0/0x130
[ 1001.390317][T16143]  do_recvmmsg+0x30d/0x770
[ 1001.390335][T16143]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1001.390345][T16143]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1001.390362][T16143]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1001.390384][T16143]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1001.390407][T16143]  __x64_sys_recvmmsg+0x190/0x240
[ 1001.390421][T16143]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1001.390437][T16143]  ? do_syscall_64+0xbe/0xf80
[ 1001.390455][T16143]  do_syscall_64+0xfa/0xf80
[ 1001.390470][T16143]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.390482][T16143]  ? clear_bhb_loop+0x60/0xb0
[ 1001.390503][T16143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.390515][T16143] RIP: 0033:0x7f2af1fcf749
[ 1001.390526][T16143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1001.390537][T16143] RSP: 002b:00007f2af0215038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1001.390551][T16143] RAX: ffffffffffffffda RBX: 00007f2af2226090 RCX: 00007f2af1fcf749
[ 1001.390560][T16143] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1001.390567][T16143] RBP: 00007f2af0215090 R08: 0000000000000000 R09: 0000000000000000
[ 1001.390574][T16143] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[ 1001.390581][T16143] R13: 00007f2af2226128 R14: 00007f2af2226090 R15: 00007ffd78cbfb18
[ 1001.390600][T16143]  </TASK>
[ 1001.990079][T15980] chnl_net:caif_netlink_parms(): no params data found
[ 1002.679476][ T5808] Bluetooth: hci0: command tx timeout
[ 1003.038701][ T8688] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1003.234043][ T8688] usb 6-1: config 0 has an invalid interface number: 207 but max is 0
[ 1003.234075][ T8688] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1003.234095][ T8688] usb 6-1: config 0 has no interface number 0
[ 1003.300670][ T8688] usb 6-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[ 1003.300701][ T8688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1003.300721][ T8688] usb 6-1: Product: syz
[ 1003.300733][ T8688] usb 6-1: Manufacturer: syz
[ 1003.300746][ T8688] usb 6-1: SerialNumber: syz
[ 1003.303637][T15980] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1003.319445][T15980] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1003.319732][T15980] bridge_slave_0: entered allmulticast mode
[ 1003.335446][T15980] bridge_slave_0: entered promiscuous mode
[ 1003.344596][ T8688] usb 6-1: config 0 descriptor??
[ 1003.354243][ T8688] qmi_wwan 6-1:0.207: probe with driver qmi_wwan failed with error -22
[ 1003.408520][T16103] chnl_net:caif_netlink_parms(): no params data found
[ 1003.421977][T15980] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1003.422153][T15980] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1003.422446][T15980] bridge_slave_1: entered allmulticast mode
[ 1003.425647][T15980] bridge_slave_1: entered promiscuous mode
[ 1003.532812][T16163] FAULT_INJECTION: forcing a failure.
[ 1003.532812][T16163] name failslab, interval 1, probability 0, space 0, times 0
[ 1003.532846][T16163] CPU: 1 UID: 0 PID: 16163 Comm: syz.8.3634 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1003.532864][T16163] Tainted: [L]=SOFTLOCKUP
[ 1003.532869][T16163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1003.532876][T16163] Call Trace:
[ 1003.532881][T16163]  <TASK>
[ 1003.532887][T16163]  dump_stack_lvl+0x189/0x250
[ 1003.532907][T16163]  ? __pfx____ratelimit+0x10/0x10
[ 1003.532922][T16163]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1003.532937][T16163]  ? __pfx__printk+0x10/0x10
[ 1003.532952][T16163]  ? __pfx___might_resched+0x10/0x10
[ 1003.532967][T16163]  should_fail_ex+0x46c/0x600
[ 1003.532984][T16163]  should_failslab+0xa8/0x100
[ 1003.532997][T16163]  __kmalloc_cache_noprof+0x84/0x6d0
[ 1003.533015][T16163]  ? proc_self_get_link+0xe6/0x180
[ 1003.533030][T16163]  ? __task_pid_nr_ns+0x3ac/0x490
[ 1003.533048][T16163]  proc_self_get_link+0xe6/0x180
[ 1003.533064][T16163]  ? __pfx_proc_self_get_link+0x10/0x10
[ 1003.533080][T16163]  pick_link+0x732/0xfa0
[ 1003.533099][T16163]  step_into_slowpath+0x53b/0x7d0
[ 1003.533116][T16163]  ? __pfx_step_into_slowpath+0x10/0x10
[ 1003.533135][T16163]  link_path_walk+0xd50/0x18d0
[ 1003.533159][T16163]  path_openat+0x2bf/0x3df0
[ 1003.533187][T16163]  ? __pfx_stack_trace_save+0x10/0x10
[ 1003.533216][T16163]  ? __pfx_path_openat+0x10/0x10
[ 1003.533231][T16163]  ? do_raw_spin_lock+0x121/0x290
[ 1003.533251][T16163]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1003.533267][T16163]  ? lockdep_hardirqs_on+0x98/0x140
[ 1003.533284][T16163]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1003.533303][T16163]  do_filp_open+0x1fa/0x410
[ 1003.533320][T16163]  ? __pfx_do_filp_open+0x10/0x10
[ 1003.533333][T16163]  ? rt_mutex_slowunlock+0x493/0x8a0
[ 1003.533360][T16163]  ? alloc_fd+0x64f/0x6c0
[ 1003.533379][T16163]  do_sys_openat2+0x121/0x200
[ 1003.533394][T16163]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1003.533409][T16163]  ? ksys_write+0x230/0x260
[ 1003.533425][T16163]  ? __pfx_ksys_write+0x10/0x10
[ 1003.533442][T16163]  __x64_sys_openat+0x138/0x170
[ 1003.533461][T16163]  do_syscall_64+0xfa/0xf80
[ 1003.533478][T16163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1003.533489][T16163]  ? clear_bhb_loop+0x60/0xb0
[ 1003.533503][T16163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1003.533514][T16163] RIP: 0033:0x7f2af1fcdf90
[ 1003.533526][T16163] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[ 1003.533536][T16163] RSP: 002b:00007f2af0235f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1003.533550][T16163] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2af1fcdf90
[ 1003.533560][T16163] RDX: 0000000000000000 RSI: 00007f2af205407e RDI: 00000000ffffff9c
[ 1003.533567][T16163] RBP: 00007f2af205407e R08: 0000000000000000 R09: 0000000000000000
[ 1003.533574][T16163] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1003.533581][T16163] R13: 00007f2af2226038 R14: 00007f2af2225fa0 R15: 00007ffd78cbfb18
[ 1003.533601][T16163]  </TASK>
[ 1003.556701][T16155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1003.558087][T16155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1003.573596][ T8688] usb 6-1: USB disconnect, device number 22
[ 1003.902188][   T44] IPVS: stop unused estimator thread 0...
[ 1004.143720][T15980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1004.273426][T15980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1004.499361][T11574] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1004.654270][T11574] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[ 1004.654338][T11574] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1004.654363][T11574] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1004.693907][T11574] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1004.693928][T11574] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1004.693940][T11574] usb 6-1: Product: syz
[ 1004.693949][T11574] usb 6-1: Manufacturer: syz
[ 1004.693957][T11574] usb 6-1: SerialNumber: syz
[ 1004.698188][T15980] team0: Port device team_slave_0 added
[ 1004.739623][ T5808] Bluetooth: hci0: command tx timeout
[ 1004.740219][T11574] usb 6-1: config 0 descriptor??
[ 1004.742696][T11574] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1004.742719][T11574] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1004.745852][T11574] usb 6-1: selecting invalid altsetting 0
[ 1004.834412][T15980] team0: Port device team_slave_1 added
[ 1004.834680][T16103] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1004.834920][T16103] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1004.835180][T16103] bridge_slave_0: entered allmulticast mode
[ 1004.838612][T16103] bridge_slave_0: entered promiscuous mode
[ 1004.853947][T16186] FAULT_INJECTION: forcing a failure.
[ 1004.853947][T16186] name failslab, interval 1, probability 0, space 0, times 0
[ 1004.853983][T16186] CPU: 0 UID: 0 PID: 16186 Comm: syz.8.3641 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1004.854008][T16186] Tainted: [L]=SOFTLOCKUP
[ 1004.854015][T16186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1004.854025][T16186] Call Trace:
[ 1004.854033][T16186]  <TASK>
[ 1004.854041][T16186]  dump_stack_lvl+0x189/0x250
[ 1004.854069][T16186]  ? __pfx____ratelimit+0x10/0x10
[ 1004.854093][T16186]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1004.854115][T16186]  ? __pfx__printk+0x10/0x10
[ 1004.854141][T16186]  ? __pfx___might_resched+0x10/0x10
[ 1004.854159][T16186]  ? fs_reclaim_acquire+0x7d/0x100
[ 1004.854181][T16186]  should_fail_ex+0x46c/0x600
[ 1004.854206][T16186]  ? ovs_flow_alloc+0x24/0x200
[ 1004.854224][T16186]  should_failslab+0xa8/0x100
[ 1004.854242][T16186]  ? ovs_flow_alloc+0x24/0x200
[ 1004.854258][T16186]  kmem_cache_alloc_noprof+0x84/0x6c0
[ 1004.854291][T16186]  ovs_flow_alloc+0x24/0x200
[ 1004.854313][T16186]  ovs_flow_cmd_new+0x1ee/0xd80
[ 1004.854336][T16186]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1004.854368][T16186]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[ 1004.854445][T16186]  ? rcu_is_watching+0x15/0xb0
[ 1004.854467][T16186]  ? __nla_parse+0x40/0x60
[ 1004.854502][T16186]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1004.854536][T16186]  genl_family_rcv_msg_doit+0x215/0x300
[ 1004.854568][T16186]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1004.854606][T16186]  ? bpf_lsm_capable+0x9/0x20
[ 1004.854623][T16186]  ? security_capable+0x7e/0x2e0
[ 1004.854655][T16186]  genl_rcv_msg+0x60e/0x790
[ 1004.854686][T16186]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1004.854709][T16186]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[ 1004.854747][T16186]  netlink_rcv_skb+0x208/0x470
[ 1004.854768][T16186]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1004.854794][T16186]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1004.854830][T16186]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1004.854849][T16186]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1004.854873][T16186]  genl_rcv+0x28/0x40
[ 1004.854894][T16186]  netlink_unicast+0x846/0xa10
[ 1004.854921][T16186]  ? __pfx_netlink_unicast+0x10/0x10
[ 1004.854941][T16186]  ? netlink_sendmsg+0x642/0xb30
[ 1004.854959][T16186]  ? skb_put+0x11b/0x210
[ 1004.854981][T16186]  netlink_sendmsg+0x805/0xb30
[ 1004.855011][T16186]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1004.855040][T16186]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1004.855063][T16186]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1004.855084][T16186]  __sock_sendmsg+0x21c/0x270
[ 1004.855111][T16186]  ____sys_sendmsg+0x508/0x810
[ 1004.855137][T16186]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1004.855167][T16186]  ? import_iovec+0x74/0xa0
[ 1004.855195][T16186]  ___sys_sendmsg+0x21f/0x2a0
[ 1004.855218][T16186]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1004.855276][T16186]  ? __fget_files+0x2a/0x420
[ 1004.855294][T16186]  ? __fget_files+0x3a6/0x420
[ 1004.855325][T16186]  __x64_sys_sendmsg+0x1a1/0x260
[ 1004.855347][T16186]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1004.855377][T16186]  ? __pfx_ksys_write+0x10/0x10
[ 1004.855405][T16186]  ? do_syscall_64+0xbe/0xf80
[ 1004.855434][T16186]  do_syscall_64+0xfa/0xf80
[ 1004.855458][T16186]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1004.855476][T16186]  ? clear_bhb_loop+0x60/0xb0
[ 1004.855505][T16186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1004.855523][T16186] RIP: 0033:0x7f2af1fcf749
[ 1004.855539][T16186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1004.855555][T16186] RSP: 002b:00007f2af0236038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1004.855576][T16186] RAX: ffffffffffffffda RBX: 00007f2af2225fa0 RCX: 00007f2af1fcf749
[ 1004.855589][T16186] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1004.855601][T16186] RBP: 00007f2af0236090 R08: 0000000000000000 R09: 0000000000000000
[ 1004.855612][T16186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1004.855623][T16186] R13: 00007f2af2226038 R14: 00007f2af2225fa0 R15: 00007ffd78cbfb18
[ 1004.855655][T16186]  </TASK>
[ 1005.011630][T16189] netlink: 676 bytes leftover after parsing attributes in process `syz.5.3637'.
[ 1005.011656][T16189] netlink: 676 bytes leftover after parsing attributes in process `syz.5.3637'.
[ 1005.068690][T16190] program syz.5.3637 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1008.221489][T11574] usb 6-1: USB disconnect, device number 23
[ 1009.833178][T16103] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1009.833340][T16103] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1009.834065][T16103] bridge_slave_1: entered allmulticast mode
[ 1009.837417][T16103] bridge_slave_1: entered promiscuous mode
[ 1010.196933][T16210] 9p: Bad value for 'rfdno'
[ 1010.366675][T15980] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1010.366693][T15980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1010.366722][T15980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1010.593406][T15980] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1010.593425][T15980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1010.593451][T15980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1010.679397][  T191] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1010.836788][  T191] usb 6-1: no configurations
[ 1010.836804][  T191] usb 6-1: can't read configurations, error -22
[ 1010.897429][T16103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1010.931765][T16103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1011.028993][  T191] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1011.180634][  T191] usb 6-1: no configurations
[ 1011.180648][  T191] usb 6-1: can't read configurations, error -22
[ 1011.180983][  T191] usb usb6-port1: attempt power cycle
[ 1011.539421][  T191] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1011.619866][  T191] usb 6-1: no configurations
[ 1011.619888][  T191] usb 6-1: can't read configurations, error -22
[ 1011.747862][T16103] team0: Port device team_slave_0 added
[ 1011.749374][  T191] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1011.771410][  T191] usb 6-1: no configurations
[ 1011.771429][  T191] usb 6-1: can't read configurations, error -22
[ 1011.773675][  T191] usb usb6-port1: unable to enumerate USB device
[ 1012.055555][T16103] team0: Port device team_slave_1 added
[ 1012.363552][T16235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1012.456466][T15980] hsr_slave_0: entered promiscuous mode
[ 1012.458162][T15980] hsr_slave_1: entered promiscuous mode
[ 1012.460348][T15980] debugfs: 'hsr0' already exists in 'hsr'
[ 1012.460378][T15980] Cannot create hsr debugfs directory
[ 1012.711565][T16245] FAULT_INJECTION: forcing a failure.
[ 1012.711565][T16245] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1012.711606][T16245] CPU: 1 UID: 0 PID: 16245 Comm: syz.7.3657 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1012.711635][T16245] Tainted: [L]=SOFTLOCKUP
[ 1012.711643][T16245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1012.711655][T16245] Call Trace:
[ 1012.711664][T16245]  <TASK>
[ 1012.711674][T16245]  dump_stack_lvl+0x189/0x250
[ 1012.711707][T16245]  ? __pfx____ratelimit+0x10/0x10
[ 1012.711735][T16245]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1012.711763][T16245]  ? __pfx__printk+0x10/0x10
[ 1012.711784][T16245]  ? __might_fault+0xb0/0x130
[ 1012.711828][T16245]  should_fail_ex+0x46c/0x600
[ 1012.711857][T16245]  _copy_from_user+0x2d/0xb0
[ 1012.711886][T16245]  ___sys_recvmsg+0x12e/0x510
[ 1012.711918][T16245]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1012.711979][T16245]  ? __might_fault+0xb0/0x130
[ 1012.712015][T16245]  do_recvmmsg+0x30d/0x770
[ 1012.712049][T16245]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1012.712069][T16245]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1012.712099][T16245]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1012.712141][T16245]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1012.712183][T16245]  __x64_sys_recvmmsg+0x190/0x240
[ 1012.712210][T16245]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1012.712238][T16245]  ? do_syscall_64+0xbe/0xf80
[ 1012.712272][T16245]  do_syscall_64+0xfa/0xf80
[ 1012.712301][T16245]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1012.712321][T16245]  ? clear_bhb_loop+0x60/0xb0
[ 1012.712347][T16245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1012.712368][T16245] RIP: 0033:0x7f2c3399f749
[ 1012.712387][T16245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1012.712405][T16245] RSP: 002b:00007f2c31be5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1012.712429][T16245] RAX: ffffffffffffffda RBX: 00007f2c33bf6090 RCX: 00007f2c3399f749
[ 1012.712454][T16245] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1012.712467][T16245] RBP: 00007f2c31be5090 R08: 0000000000000000 R09: 0000000000000000
[ 1012.712480][T16245] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[ 1012.712492][T16245] R13: 00007f2c33bf6128 R14: 00007f2c33bf6090 R15: 00007ffe7eae2078
[ 1012.712528][T16245]  </TASK>
[ 1012.752919][T16103] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1012.752936][T16103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1012.752960][T16103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1013.063792][T16103] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1013.063811][T16103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1013.063837][T16103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1013.246161][T16248] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3658'.
[ 1013.246189][T16248] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3658'.
[ 1013.603498][ T5917] IPVS: starting estimator thread 0...
[ 1013.689401][T16257] IPVS: using max 8 ests per chain, 19200 per kthread
[ 1013.868701][T16103] hsr_slave_0: entered promiscuous mode
[ 1013.894768][T16103] hsr_slave_1: entered promiscuous mode
[ 1013.896604][T16103] debugfs: 'hsr0' already exists in 'hsr'
[ 1013.896628][T16103] Cannot create hsr debugfs directory
[ 1015.407066][T16285] FAULT_INJECTION: forcing a failure.
[ 1015.407066][T16285] name failslab, interval 1, probability 0, space 0, times 0
[ 1015.407094][T16285] CPU: 1 UID: 0 PID: 16285 Comm: syz.8.3667 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1015.407112][T16285] Tainted: [L]=SOFTLOCKUP
[ 1015.407116][T16285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1015.407133][T16285] Call Trace:
[ 1015.407138][T16285]  <TASK>
[ 1015.407143][T16285]  dump_stack_lvl+0x189/0x250
[ 1015.407163][T16285]  ? __pfx____ratelimit+0x10/0x10
[ 1015.407180][T16285]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1015.407194][T16285]  ? __pfx__printk+0x10/0x10
[ 1015.407211][T16285]  ? __pfx___might_resched+0x10/0x10
[ 1015.407223][T16285]  ? fs_reclaim_acquire+0x7d/0x100
[ 1015.407238][T16285]  should_fail_ex+0x46c/0x600
[ 1015.407254][T16285]  should_failslab+0xa8/0x100
[ 1015.407267][T16285]  __kvmalloc_node_noprof+0x181/0x940
[ 1015.407285][T16285]  ? hash_netnet_create+0x7be/0x14d0
[ 1015.407302][T16285]  hash_netnet_create+0x7be/0x14d0
[ 1015.407323][T16285]  ? __pfx_hash_netnet_create+0x10/0x10
[ 1015.407337][T16285]  ? __nla_parse+0x40/0x60
[ 1015.407351][T16285]  ? __pfx_hash_netnet_create+0x10/0x10
[ 1015.407374][T16285]  ip_set_create+0xa9c/0x19c0
[ 1015.407396][T16285]  ? __lock_acquire+0x6b6/0x2cf0
[ 1015.407420][T16285]  ? ip_set_create+0x4a7/0x19c0
[ 1015.407469][T16285]  ? __pfx_ip_set_create+0x10/0x10
[ 1015.407534][T16285]  nfnetlink_rcv_msg+0xb69/0x1150
[ 1015.407554][T16285]  ? arch_stack_walk+0xfc/0x150
[ 1015.407576][T16285]  ? nfnetlink_rcv_msg+0x212/0x1150
[ 1015.407617][T16285]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1015.407667][T16285]  ? __lock_acquire+0x6b6/0x2cf0
[ 1015.407716][T16285]  netlink_rcv_skb+0x208/0x470
[ 1015.407742][T16285]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1015.407764][T16285]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1015.407801][T16285]  ? bpf_lsm_capable+0x9/0x20
[ 1015.407822][T16285]  ? security_capable+0x7e/0x2e0
[ 1015.407855][T16285]  nfnetlink_rcv+0x282/0x2590
[ 1015.407882][T16285]  ? __dev_queue_xmit+0x259/0x31d0
[ 1015.407908][T16285]  ? __dev_queue_xmit+0x259/0x31d0
[ 1015.407930][T16285]  ? __dev_queue_xmit+0x1936/0x31d0
[ 1015.407951][T16285]  ? netlink_unicast+0x811/0xa10
[ 1015.407966][T16285]  ? netlink_sendmsg+0x805/0xb30
[ 1015.407987][T16285]  ? __sock_sendmsg+0x21c/0x270
[ 1015.408024][T16285]  ? __dev_queue_xmit+0x259/0x31d0
[ 1015.408050][T16285]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1015.408077][T16285]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1015.408111][T16285]  ? ref_tracker_free+0x61e/0x7c0
[ 1015.408148][T16285]  ? __asan_memcpy+0x40/0x70
[ 1015.408174][T16285]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1015.408195][T16285]  ? __skb_clone+0x63/0x7a0
[ 1015.408224][T16285]  ? __skb_clone+0x483/0x7a0
[ 1015.408256][T16285]  ? skb_clone+0x246/0x3a0
[ 1015.408284][T16285]  ? __netlink_deliver_tap+0x807/0x850
[ 1015.408307][T16285]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1015.408338][T16285]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1015.408371][T16285]  netlink_unicast+0x846/0xa10
[ 1015.408402][T16285]  ? __pfx_netlink_unicast+0x10/0x10
[ 1015.408426][T16285]  ? netlink_sendmsg+0x642/0xb30
[ 1015.408448][T16285]  ? skb_put+0x11b/0x210
[ 1015.408472][T16285]  netlink_sendmsg+0x805/0xb30
[ 1015.408508][T16285]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1015.408544][T16285]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1015.408572][T16285]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1015.408597][T16285]  __sock_sendmsg+0x21c/0x270
[ 1015.408629][T16285]  ____sys_sendmsg+0x508/0x810
[ 1015.408660][T16285]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1015.408694][T16285]  ? import_iovec+0x74/0xa0
[ 1015.408728][T16285]  ___sys_sendmsg+0x21f/0x2a0
[ 1015.408754][T16285]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1015.408821][T16285]  ? __fget_files+0x2a/0x420
[ 1015.408844][T16285]  ? __fget_files+0x3a6/0x420
[ 1015.408880][T16285]  __x64_sys_sendmsg+0x1a1/0x260
[ 1015.408906][T16285]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1015.408942][T16285]  ? __pfx_ksys_write+0x10/0x10
[ 1015.408976][T16285]  ? do_syscall_64+0xbe/0xf80
[ 1015.409011][T16285]  do_syscall_64+0xfa/0xf80
[ 1015.409042][T16285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1015.409063][T16285]  ? clear_bhb_loop+0x60/0xb0
[ 1015.409103][T16285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1015.409220][T16285] RIP: 0033:0x7f2af1fcf749
[ 1015.409243][T16285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1015.409261][T16285] RSP: 002b:00007f2af0236038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1015.409285][T16285] RAX: ffffffffffffffda RBX: 00007f2af2225fa0 RCX: 00007f2af1fcf749
[ 1015.409300][T16285] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 1015.409313][T16285] RBP: 00007f2af0236090 R08: 0000000000000000 R09: 0000000000000000
[ 1015.409326][T16285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1015.409339][T16285] R13: 00007f2af2226038 R14: 00007f2af2225fa0 R15: 00007ffd78cbfb18
[ 1015.409375][T16285]  </TASK>
[ 1016.480256][ T6024] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1016.629244][ T6024] usb 9-1: Using ep0 maxpacket: 16
[ 1016.650445][ T6024] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1016.650467][ T6024] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1016.650489][ T6024] usb 9-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[ 1016.650502][ T6024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1016.654134][ T6024] usb 9-1: config 0 descriptor??
[ 1019.493701][   T44] bridge_slave_1: left allmulticast mode
[ 1019.493736][   T44] bridge_slave_1: left promiscuous mode
[ 1019.496921][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1019.581958][   T44] bridge_slave_0: left allmulticast mode
[ 1019.581987][   T44] bridge_slave_0: left promiscuous mode
[ 1019.582288][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1019.685896][   T44] bridge_slave_0: left allmulticast mode
[ 1019.685929][   T44] bridge_slave_0: left promiscuous mode
[ 1019.686177][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1020.101501][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1020.180330][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1020.248903][   T44] bond0 (unregistering): Released all slaves
[ 1020.433126][   T44] bond0 (unregistering): Released all slaves
[ 1020.785089][ T6024] usbhid 9-1:0.0: can't add hid device: -71
[ 1020.785242][ T6024] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1020.854309][ T6024] usb 9-1: USB disconnect, device number 15
[ 1020.893596][T16319] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1021.379414][ T6024] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1021.579320][ T6024] usb 9-1: Using ep0 maxpacket: 8
[ 1021.624570][ T6024] usb 9-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d
[ 1021.624604][ T6024] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1021.624625][ T6024] usb 9-1: Product: syz
[ 1021.624641][ T6024] usb 9-1: Manufacturer: syz
[ 1021.624656][ T6024] usb 9-1: SerialNumber: syz
[ 1021.678943][ T6024] usb 9-1: config 0 descriptor??
[ 1021.776261][ T6024] usb_ehset_test 9-1:0.0: probe with driver usb_ehset_test failed with error -32
[ 1022.060042][ T6024] usb 9-1: USB disconnect, device number 16
[ 1022.105436][   T44] hsr_slave_0: left promiscuous mode
[ 1022.179343][   T44] hsr_slave_1: left promiscuous mode
[ 1022.180592][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1022.229923][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1026.250768][T16363] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1026.330433][   T44] team0 (unregistering): Port device team_slave_1 removed
[ 1026.417311][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3686'.
[ 1026.550294][   T44] team0 (unregistering): Port device team_slave_0 removed
[ 1027.533396][T16365] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1027.604502][T16376] fuse: Unknown parameter ''
[ 1030.579451][T16413] netlink: 822 bytes leftover after parsing attributes in process `syz.5.3695'.
[ 1030.688897][T16419] FAULT_INJECTION: forcing a failure.
[ 1030.688897][T16419] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1030.688937][T16419] CPU: 1 UID: 0 PID: 16419 Comm: syz.8.3697 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1030.688967][T16419] Tainted: [L]=SOFTLOCKUP
[ 1030.688974][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1030.689004][T16419] Call Trace:
[ 1030.689012][T16419]  <TASK>
[ 1030.689020][T16419]  dump_stack_lvl+0x189/0x250
[ 1030.689073][T16419]  ? __pfx____ratelimit+0x10/0x10
[ 1030.689099][T16419]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1030.689125][T16419]  ? __pfx__printk+0x10/0x10
[ 1030.689162][T16419]  should_fail_ex+0x46c/0x600
[ 1030.689193][T16419]  _copy_to_user+0x31/0xb0
[ 1030.689222][T16419]  simple_read_from_buffer+0xe1/0x170
[ 1030.689249][T16419]  proc_fail_nth_read+0x1b6/0x220
[ 1030.689281][T16419]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1030.689312][T16419]  ? rw_verify_area+0x2ac/0x4e0
[ 1030.689339][T16419]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1030.689369][T16419]  vfs_read+0x206/0xa30
[ 1030.689407][T16419]  ? __pfx_vfs_read+0x10/0x10
[ 1030.689431][T16419]  ? try_to_take_rt_mutex+0x7fd/0xac0
[ 1030.689466][T16419]  ? mutex_lock_nested+0x154/0x1d0
[ 1030.689487][T16419]  ? fdget_pos+0x253/0x320
[ 1030.689520][T16419]  ksys_read+0x14b/0x260
[ 1030.689551][T16419]  ? __pfx_ksys_read+0x10/0x10
[ 1030.689583][T16419]  ? do_syscall_64+0xbe/0xf80
[ 1030.689616][T16419]  do_syscall_64+0xfa/0xf80
[ 1030.689645][T16419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1030.689665][T16419]  ? clear_bhb_loop+0x60/0xb0
[ 1030.689691][T16419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1030.689711][T16419] RIP: 0033:0x7f2af1fce15c
[ 1030.689731][T16419] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1030.689749][T16419] RSP: 002b:00007f2af0236030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1030.689773][T16419] RAX: ffffffffffffffda RBX: 00007f2af2225fa0 RCX: 00007f2af1fce15c
[ 1030.689789][T16419] RDX: 000000000000000f RSI: 00007f2af02360a0 RDI: 0000000000000003
[ 1030.689802][T16419] RBP: 00007f2af0236090 R08: 0000000000000000 R09: 0000000000000000
[ 1030.689815][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1030.689828][T16419] R13: 00007f2af2226038 R14: 00007f2af2225fa0 R15: 00007ffd78cbfb18
[ 1030.689865][T16419]  </TASK>
[ 1031.177522][T16433] fuse: Bad value for 'fd'
[ 1031.204385][   T37] audit: type=1326 audit(1765657858.602:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.5.3701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9caf7af749 code=0x0
[ 1031.298026][   T37] audit: type=1326 audit(1765657858.712:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.5.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9caf7af749 code=0x7ffc0000
[ 1031.298100][   T37] audit: type=1326 audit(1765657858.712:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.5.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9caf7adf90 code=0x7ffc0000
[ 1031.298151][   T37] audit: type=1326 audit(1765657858.712:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.5.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9caf7b0f77 code=0x7ffc0000
[ 1031.298200][   T37] audit: type=1326 audit(1765657858.712:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.5.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9caf7af749 code=0x7ffc0000
[ 1031.298249][   T37] audit: type=1326 audit(1765657858.712:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.5.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9caf7b0f77 code=0x7ffc0000
[ 1031.298297][   T37] audit: type=1326 audit(1765657858.712:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.5.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9caf7ae3aa code=0x7ffc0000
[ 1031.298344][   T37] audit: type=1326 audit(1765657858.712:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.5.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9caf7af749 code=0x7ffc0000
[ 1031.298391][   T37] audit: type=1326 audit(1765657858.712:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.5.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f9caf7af749 code=0x7ffc0000
[ 1031.298439][   T37] audit: type=1326 audit(1765657858.712:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.5.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9caf7af749 code=0x7ffc0000
[ 1031.343642][T16442] CUSE: unknown device info ""
[ 1031.343660][T16442] CUSE: zero length info key specified
[ 1033.721853][T16474] 9p: Bad value for 'rfdno'
[ 1033.899539][T16470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1033.980092][ T5917] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[ 1034.109393][ T5917] usb 6-1: device descriptor read/64, error -71
[ 1034.421253][ T5917] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[ 1034.509792][T16489] FAULT_INJECTION: forcing a failure.
[ 1034.509792][T16489] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1034.509837][T16489] CPU: 0 UID: 0 PID: 16489 Comm: syz.8.3711 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1034.509865][T16489] Tainted: [L]=SOFTLOCKUP
[ 1034.509872][T16489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1034.509884][T16489] Call Trace:
[ 1034.509893][T16489]  <TASK>
[ 1034.509902][T16489]  dump_stack_lvl+0x189/0x250
[ 1034.509929][T16489]  ? __pfx____ratelimit+0x10/0x10
[ 1034.509950][T16489]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1034.509985][T16489]  ? __pfx__printk+0x10/0x10
[ 1034.510001][T16489]  ? __might_fault+0xb0/0x130
[ 1034.510033][T16489]  should_fail_ex+0x46c/0x600
[ 1034.510056][T16489]  _copy_from_user+0x2d/0xb0
[ 1034.510077][T16489]  ___sys_recvmsg+0x12e/0x510
[ 1034.510100][T16489]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1034.510145][T16489]  ? __might_fault+0xb0/0x130
[ 1034.510169][T16489]  do_recvmmsg+0x30d/0x770
[ 1034.510194][T16489]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1034.510209][T16489]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1034.510232][T16489]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1034.510262][T16489]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1034.510294][T16489]  __x64_sys_recvmmsg+0x190/0x240
[ 1034.510313][T16489]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1034.510334][T16489]  ? do_syscall_64+0xbe/0xf80
[ 1034.510358][T16489]  do_syscall_64+0xfa/0xf80
[ 1034.510379][T16489]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1034.510394][T16489]  ? clear_bhb_loop+0x60/0xb0
[ 1034.510413][T16489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1034.510427][T16489] RIP: 0033:0x7f2af1fcf749
[ 1034.510441][T16489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1034.510455][T16489] RSP: 002b:00007f2af0215038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1034.510482][T16489] RAX: ffffffffffffffda RBX: 00007f2af2226090 RCX: 00007f2af1fcf749
[ 1034.510493][T16489] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1034.510503][T16489] RBP: 00007f2af0215090 R08: 0000000000000000 R09: 0000000000000000
[ 1034.510512][T16489] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002
[ 1034.510521][T16489] R13: 00007f2af2226128 R14: 00007f2af2226090 R15: 00007ffd78cbfb18
[ 1034.510548][T16489]  </TASK>
[ 1034.551450][ T5917] usb 6-1: device descriptor read/64, error -71
[ 1034.659830][ T5917] usb usb6-port1: attempt power cycle
[ 1034.862584][T15980] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1034.971340][T15980] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1035.019342][ T5917] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[ 1035.040131][ T5917] usb 6-1: device descriptor read/8, error -71
[ 1035.057168][T15980] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1035.248098][T16480] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3709'.
[ 1035.281314][ T5917] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[ 1035.300718][ T5917] usb 6-1: device descriptor read/8, error -71
[ 1035.392809][T15980] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1035.419540][ T5917] usb usb6-port1: unable to enumerate USB device
[ 1035.704252][T16103] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1035.766292][T16103] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1035.839062][T16510] netlink: 'syz.7.3713': attribute type 1 has an invalid length.
[ 1035.910569][T16103] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1036.038786][T16103] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1036.398049][T16503] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1036.398184][T16503] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1038.066581][T16545] netlink: 'syz.5.3717': attribute type 26 has an invalid length.
[ 1038.196718][T16549] FAULT_INJECTION: forcing a failure.
[ 1038.196718][T16549] name failslab, interval 1, probability 0, space 0, times 0
[ 1038.196761][T16549] CPU: 1 UID: 0 PID: 16549 Comm: syz.7.3718 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1038.196790][T16549] Tainted: [L]=SOFTLOCKUP
[ 1038.196797][T16549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1038.196810][T16549] Call Trace:
[ 1038.196818][T16549]  <TASK>
[ 1038.196828][T16549]  dump_stack_lvl+0x189/0x250
[ 1038.196857][T16549]  ? __pfx____ratelimit+0x10/0x10
[ 1038.196885][T16549]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1038.196912][T16549]  ? __pfx__printk+0x10/0x10
[ 1038.196940][T16549]  ? __pfx___might_resched+0x10/0x10
[ 1038.197076][T16549]  ? fs_reclaim_acquire+0x7d/0x100
[ 1038.197100][T16549]  should_fail_ex+0x46c/0x600
[ 1038.197129][T16549]  ? __d_alloc+0x37/0x6f0
[ 1038.197152][T16549]  should_failslab+0xa8/0x100
[ 1038.197172][T16549]  ? __d_alloc+0x37/0x6f0
[ 1038.197191][T16549]  kmem_cache_alloc_lru_noprof+0x88/0x6c0
[ 1038.197223][T16549]  __d_alloc+0x37/0x6f0
[ 1038.197241][T16549]  ? rt_mutex_slowunlock+0x493/0x8a0
[ 1038.197272][T16549]  d_alloc_pseudo+0x21/0xc0
[ 1038.197297][T16549]  alloc_file_pseudo+0xcc/0x210
[ 1038.197323][T16549]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1038.197360][T16549]  sock_alloc_file+0xb8/0x2f0
[ 1038.197383][T16549]  ? __sys_socketpair+0x2c6/0x560
[ 1038.197414][T16549]  __sys_socketpair+0x2db/0x560
[ 1038.197447][T16549]  __x64_sys_socketpair+0x9b/0xb0
[ 1038.197476][T16549]  do_syscall_64+0xfa/0xf80
[ 1038.197504][T16549]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1038.197525][T16549]  ? clear_bhb_loop+0x60/0xb0
[ 1038.197550][T16549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1038.197571][T16549] RIP: 0033:0x7f2c3399f749
[ 1038.197589][T16549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1038.197607][T16549] RSP: 002b:00007f2c31c06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[ 1038.197629][T16549] RAX: ffffffffffffffda RBX: 00007f2c33bf5fa0 RCX: 00007f2c3399f749
[ 1038.197644][T16549] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001
[ 1038.197656][T16549] RBP: 00007f2c31c06090 R08: 0000000000000000 R09: 0000000000000000
[ 1038.197669][T16549] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002
[ 1038.197694][T16549] R13: 00007f2c33bf6038 R14: 00007f2c33bf5fa0 R15: 00007ffe7eae2078
[ 1038.197730][T16549]  </TASK>
[ 1038.491218][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3719'.
[ 1038.516062][T16503] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1038.516086][T16503] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1038.571583][T16553] netlink: 'syz.5.3719': attribute type 2 has an invalid length.
[ 1038.611079][T16503] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1038.611105][T16503] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1038.655886][T16103] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1038.730286][T16103] 8021q: adding VLAN 0 to HW filter on device team0
[ 1039.195135][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1039.195396][ T1398] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1039.208083][T16503] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1039.208108][T16503] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1039.257098][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1039.257354][ T1398] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1039.444749][T15276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1039.473284][T15276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1039.475421][T15276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1039.479311][T15276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1039.506846][T15276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1039.618367][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1039.629421][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1039.636786][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1039.655009][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1039.656052][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1041.243993][T16565] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3721'.
[ 1041.798728][ T5808] Bluetooth: hci3: command tx timeout
[ 1043.886034][ T5808] Bluetooth: hci3: command tx timeout
[ 1045.949303][ T5808] Bluetooth: hci3: command tx timeout
[ 1046.003910][T16604] FAULT_INJECTION: forcing a failure.
[ 1046.003910][T16604] name failslab, interval 1, probability 0, space 0, times 0
[ 1046.003936][T16604] CPU: 1 UID: 0 PID: 16604 Comm: syz.8.3731 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1046.003954][T16604] Tainted: [L]=SOFTLOCKUP
[ 1046.003958][T16604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1046.003965][T16604] Call Trace:
[ 1046.003970][T16604]  <TASK>
[ 1046.003975][T16604]  dump_stack_lvl+0x189/0x250
[ 1046.003995][T16604]  ? __pfx____ratelimit+0x10/0x10
[ 1046.004011][T16604]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1046.004026][T16604]  ? __pfx__printk+0x10/0x10
[ 1046.004041][T16604]  ? __pfx___might_resched+0x10/0x10
[ 1046.004054][T16604]  ? fs_reclaim_acquire+0x7d/0x100
[ 1046.004068][T16604]  should_fail_ex+0x46c/0x600
[ 1046.004084][T16604]  should_failslab+0xa8/0x100
[ 1046.004097][T16604]  __kmalloc_cache_noprof+0x84/0x6d0
[ 1046.004114][T16604]  ? __kmalloc_cache_noprof+0x1fb/0x6d0
[ 1046.004128][T16604]  ? nfs_alloc_fhandle+0x4a/0xa0
[ 1046.004144][T16604]  nfs_alloc_fhandle+0x4a/0xa0
[ 1046.004155][T16604]  nfs_init_fs_context+0x69/0x1330
[ 1046.004172][T16604]  ? get_user_ns+0xff/0x1f0
[ 1046.004188][T16604]  alloc_fs_context+0x4ab/0x5a0
[ 1046.004207][T16604]  do_new_mount+0x172/0xa10
[ 1046.004218][T16604]  ? safesetid_security_capable+0xa9/0x1a0
[ 1046.004234][T16604]  ? security_capable+0x7e/0x2e0
[ 1046.004260][T16604]  ? __pfx_do_new_mount+0x10/0x10
[ 1046.004272][T16604]  ? ns_capable+0x8a/0xf0
[ 1046.004286][T16604]  ? path_mount+0x628/0xff0
[ 1046.004304][T16604]  __se_sys_mount+0x313/0x410
[ 1046.004320][T16604]  ? __pfx___se_sys_mount+0x10/0x10
[ 1046.004334][T16604]  ? do_syscall_64+0xbe/0xf80
[ 1046.004349][T16604]  ? __x64_sys_mount+0x20/0xc0
[ 1046.004362][T16604]  do_syscall_64+0xfa/0xf80
[ 1046.004378][T16604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1046.004389][T16604]  ? clear_bhb_loop+0x60/0xb0
[ 1046.004403][T16604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1046.004414][T16604] RIP: 0033:0x7f2af1fcf749
[ 1046.004425][T16604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1046.004436][T16604] RSP: 002b:00007f2af0236038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1046.004449][T16604] RAX: ffffffffffffffda RBX: 00007f2af2225fa0 RCX: 00007f2af1fcf749
[ 1046.004458][T16604] RDX: 0000200000000240 RSI: 0000200000000100 RDI: 0000000000000000
[ 1046.004466][T16604] RBP: 00007f2af0236090 R08: 00002000000001c0 R09: 0000000000000000
[ 1046.004473][T16604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1046.004480][T16604] R13: 00007f2af2226038 R14: 00007f2af2225fa0 R15: 00007ffd78cbfb18
[ 1046.004499][T16604]  </TASK>
[ 1046.029369][ T5917] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1046.179268][ T5917] usb 6-1: Using ep0 maxpacket: 32
[ 1046.183501][ T5917] usb 6-1: config 0 has an invalid interface number: 226 but max is 3
[ 1046.183530][ T5917] usb 6-1: config 0 has an invalid interface number: 104 but max is 3
[ 1046.183548][ T5917] usb 6-1: config 0 has an invalid interface number: 248 but max is 3
[ 1046.183566][ T5917] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[ 1046.183584][ T5917] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[ 1046.183600][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1046.183617][ T5917] usb 6-1: config 0 has no interface number 0
[ 1046.183631][ T5917] usb 6-1: config 0 has no interface number 1
[ 1046.183646][ T5917] usb 6-1: config 0 has no interface number 2
[ 1046.183732][ T5917] usb 6-1: config 0 interface 226 altsetting 4 endpoint 0x2 has invalid maxpacket 1057, setting to 64
[ 1046.183758][ T5917] usb 6-1: config 0 interface 226 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64
[ 1046.183798][ T5917] usb 6-1: config 0 interface 104 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[ 1046.183836][ T5917] usb 6-1: config 0 interface 248 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1046.183859][ T5917] usb 6-1: config 0 interface 248 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[ 1046.183878][ T5917] usb 6-1: config 0 interface 248 altsetting 9 endpoint 0x3 has invalid maxpacket 512, setting to 64
[ 1046.183901][ T5917] usb 6-1: config 0 interface 248 altsetting 9 has a duplicate endpoint with address 0xA, skipping
[ 1046.183920][ T5917] usb 6-1: config 0 interface 248 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1046.183959][ T5917] usb 6-1: config 0 interface 3 altsetting 1 has a duplicate endpoint with address 0x5, skipping
[ 1046.183980][ T5917] usb 6-1: config 0 interface 3 altsetting 1 has a duplicate endpoint with address 0x7, skipping
[ 1046.184000][ T5917] usb 6-1: config 0 interface 3 altsetting 1 has a duplicate endpoint with address 0xA, skipping
[ 1046.184019][ T5917] usb 6-1: config 0 interface 3 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[ 1046.184040][ T5917] usb 6-1: config 0 interface 3 altsetting 1 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1046.184062][ T5917] usb 6-1: config 0 interface 3 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1046.184081][ T5917] usb 6-1: config 0 interface 3 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 8
[ 1046.184104][ T5917] usb 6-1: config 0 interface 226 has no altsetting 0
[ 1046.184119][ T5917] usb 6-1: config 0 interface 104 has no altsetting 0
[ 1046.184135][ T5917] usb 6-1: config 0 interface 248 has no altsetting 0
[ 1046.184200][ T5917] usb 6-1: config 0 interface 3 has no altsetting 0
[ 1046.188815][ T5917] usb 6-1: New USB device found, idVendor=1410, idProduct=1430, bcdDevice=e8.90
[ 1046.188843][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1046.188861][ T5917] usb 6-1: Product: syz
[ 1046.188873][ T5917] usb 6-1: Manufacturer: syz
[ 1046.188886][ T5917] usb 6-1: SerialNumber: syz
[ 1046.210439][ T5917] usb 6-1: config 0 descriptor??
[ 1046.451823][ T5917] option 6-1:0.226: GSM modem (1-port) converter detected
[ 1046.572044][ T5917] option 6-1:0.104: GSM modem (1-port) converter detected
[ 1046.611110][ T5917] usb 6-1: bad CDC descriptors
[ 1046.670328][ T5917] option 6-1:0.248: GSM modem (1-port) converter detected
[ 1046.729866][ T5917] option 6-1:0.3: GSM modem (1-port) converter detected
[ 1046.786000][ T5917] usb 6-1: USB disconnect, device number 32
[ 1046.793144][ T5917] option 6-1:0.226: device disconnected
[ 1046.817065][ T5917] option 6-1:0.104: device disconnected
[ 1046.856726][ T5917] option 6-1:0.248: device disconnected
[ 1046.860357][ T5917] option 6-1:0.3: device disconnected
[ 1048.021666][ T5808] Bluetooth: hci3: command tx timeout
[ 1048.311740][T16644] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3740'.
[ 1049.389875][T16103] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1049.614661][T16667] netlink: 'syz.7.3742': attribute type 1 has an invalid length.
[ 1049.614687][T16667] netlink: 'syz.7.3742': attribute type 2 has an invalid length.
[ 1050.512944][T16674] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3744'.
[ 1051.647467][T16538] chnl_net:caif_netlink_parms(): no params data found
[ 1052.339535][ T5971] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1052.538247][ T5971] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1052.538269][ T5971] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1052.538281][ T5971] usb 9-1: Product: syz
[ 1052.538289][ T5971] usb 9-1: Manufacturer: syz
[ 1052.538297][ T5971] usb 9-1: SerialNumber: syz
[ 1052.587932][ T5971] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1052.953374][ T5183] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1053.720392][T16538] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1053.751503][T16538] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1053.752614][T16538] bridge_slave_0: entered allmulticast mode
[ 1053.836113][T16538] bridge_slave_0: entered promiscuous mode
[ 1054.879181][ T5183] usb 9-1: Service connection timeout for: 256
[ 1054.879208][ T5183] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1055.006155][T15433] usb 9-1: USB disconnect, device number 17
[ 1055.047499][ T5183] ath9k_htc: Failed to initialize the device
[ 1055.084505][T15433] usb 9-1: ath9k_htc: USB layer deinitialized
[ 1055.087077][T16538] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1055.088901][T16538] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1055.089302][T16538] bridge_slave_1: entered allmulticast mode
[ 1055.119484][T16538] bridge_slave_1: entered promiscuous mode
[ 1058.200386][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3746'.
[ 1058.200412][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3746'.
[ 1058.296614][T16538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1058.396562][T16538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1059.600439][ T7059] bridge_slave_1: left allmulticast mode
[ 1059.600472][ T7059] bridge_slave_1: left promiscuous mode
[ 1059.600750][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1060.179430][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1060.614763][ T7059] bridge_slave_0: left allmulticast mode
[ 1060.614919][ T7059] bridge_slave_0: left promiscuous mode
[ 1060.655101][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1061.995034][T15276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1062.063820][T16737] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1062.596938][T15276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1062.629472][T15276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1062.698473][T15276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1062.706854][T15276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1063.238025][ T7059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1063.386015][ T7059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1063.393454][ T5971] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1063.474041][ T7059] bond0 (unregistering): Released all slaves
[ 1063.549394][ T5971] usb 6-1: Using ep0 maxpacket: 16
[ 1063.556874][ T5971] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1063.556906][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1063.556927][ T5971] usb 6-1: Product: syz
[ 1063.556942][ T5971] usb 6-1: Manufacturer: syz
[ 1063.556956][ T5971] usb 6-1: SerialNumber: syz
[ 1063.566201][ T5971] r8152-cfgselector 6-1: Unknown version 0x0000
[ 1063.566225][ T5971] r8152-cfgselector 6-1: config 0 descriptor??
[ 1063.892929][T16766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1063.893379][T16766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1064.008890][ T5971] r8152-cfgselector 6-1: Unknown version 0x0000
[ 1064.010240][ T5971] r8152-cfgselector 6-1: bad CDC descriptors
[ 1064.107090][T16753] slcan: can't register candev
[ 1064.150208][ T5971] r8152-cfgselector 6-1: USB disconnect, device number 33
[ 1064.508987][T16538] team0: Port device team_slave_0 added
[ 1064.669522][ T7059] hsr_slave_0: left promiscuous mode
[ 1064.709346][ T7059] hsr_slave_1: left promiscuous mode
[ 1064.710222][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1064.749314][T15276] Bluetooth: hci0: command tx timeout
[ 1064.783969][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1064.813241][T16780] tmpfs: Unknown parameter 'measure'
[ 1064.835453][T16782] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1064.910842][   T37] kauditd_printk_skb: 5 callbacks suppressed
[ 1064.910863][   T37] audit: type=1326 audit(1765657892.332:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16783 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af1fcf749 code=0x7ffc0000
[ 1064.911481][   T37] audit: type=1326 audit(1765657892.332:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16783 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2af1fcdf90 code=0x7ffc0000
[ 1064.929931][   T37] audit: type=1326 audit(1765657892.342:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16783 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af1fcf749 code=0x7ffc0000
[ 1064.930251][   T37] audit: type=1326 audit(1765657892.352:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16783 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af1fcf749 code=0x7ffc0000
[ 1064.931733][   T37] audit: type=1326 audit(1765657892.352:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16783 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2af1fcf749 code=0x7ffc0000
[ 1066.855459][T15276] Bluetooth: hci0: command tx timeout
[ 1066.999332][T11574] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1067.163242][T11574] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1067.163266][T11574] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1067.163291][T11574] usb 9-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[ 1067.163305][T11574] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1067.239513][T11574] usb 9-1: config 0 descriptor??
[ 1067.640982][ T7059] team0 (unregistering): Port device team_slave_1 removed
[ 1067.728383][T11574] logitech 0003:046D:CA04.002C: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.8-1/input0
[ 1067.728420][T11574] logitech 0003:046D:CA04.002C: no inputs found
[ 1067.913060][ T7059] team0 (unregistering): Port device team_slave_0 removed
[ 1068.004321][T16809] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1068.168333][T16812] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3772'.
[ 1068.414493][ T5183] usb 9-1: USB disconnect, device number 18
[ 1068.774607][T16538] team0: Port device team_slave_1 added
[ 1068.899351][T15276] Bluetooth: hci0: command tx timeout
[ 1068.909332][ T5183] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1069.057199][T16538] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1069.057212][T16538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1069.057228][T16538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1069.073295][T16538] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1069.073313][T16538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1069.073338][T16538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1069.079644][ T5183] usb 9-1: Using ep0 maxpacket: 32
[ 1069.124935][ T5183] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1069.124968][ T5183] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1069.125004][ T5183] usb 9-1: New USB device found, idVendor=056a, idProduct=00e2, bcdDevice= 0.00
[ 1069.125025][ T5183] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1069.132975][ T5183] usb 9-1: config 0 descriptor??
[ 1069.232636][T16780] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1069.232660][T16780] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1069.542916][T16780] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1069.542943][T16780] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1069.632832][T16814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1069.633241][T16814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1069.745573][T16538] hsr_slave_0: entered promiscuous mode
[ 1069.746656][T16538] hsr_slave_1: entered promiscuous mode
[ 1069.747322][T16538] debugfs: 'hsr0' already exists in 'hsr'
[ 1069.747340][T16538] Cannot create hsr debugfs directory
[ 1069.862721][T15433] usb 9-1: USB disconnect, device number 19
[ 1070.640477][T16828] No control pipe specified
[ 1071.831194][T16837] FAULT_INJECTION: forcing a failure.
[ 1071.831194][T16837] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1071.831221][T16837] CPU: 1 UID: 0 PID: 16837 Comm: syz.8.3779 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1071.831239][T16837] Tainted: [L]=SOFTLOCKUP
[ 1071.831243][T16837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1071.831250][T16837] Call Trace:
[ 1071.831255][T16837]  <TASK>
[ 1071.831261][T16837]  dump_stack_lvl+0x189/0x250
[ 1071.831281][T16837]  ? __pfx____ratelimit+0x10/0x10
[ 1071.831297][T16837]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1071.831312][T16837]  ? __pfx__printk+0x10/0x10
[ 1071.831334][T16837]  should_fail_ex+0x46c/0x600
[ 1071.831353][T16837]  _copy_to_user+0x31/0xb0
[ 1071.831372][T16837]  simple_read_from_buffer+0xe1/0x170
[ 1071.831388][T16837]  proc_fail_nth_read+0x1b6/0x220
[ 1071.831407][T16837]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1071.831425][T16837]  ? rw_verify_area+0x2ac/0x4e0
[ 1071.831440][T16837]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1071.831457][T16837]  vfs_read+0x206/0xa30
[ 1071.831477][T16837]  ? __pfx_vfs_read+0x10/0x10
[ 1071.831490][T16837]  ? try_to_take_rt_mutex+0x7fd/0xac0
[ 1071.831509][T16837]  ? mutex_lock_nested+0x154/0x1d0
[ 1071.831521][T16837]  ? fdget_pos+0x253/0x320
[ 1071.831543][T16837]  ksys_read+0x14b/0x260
[ 1071.831560][T16837]  ? __pfx_ksys_read+0x10/0x10
[ 1071.831578][T16837]  ? do_syscall_64+0xbe/0xf80
[ 1071.831597][T16837]  do_syscall_64+0xfa/0xf80
[ 1071.831613][T16837]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1071.831624][T16837]  ? clear_bhb_loop+0x60/0xb0
[ 1071.831638][T16837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1071.831649][T16837] RIP: 0033:0x7f2af1fce15c
[ 1071.831666][T16837] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1071.831677][T16837] RSP: 002b:00007f2af0236030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1071.831691][T16837] RAX: ffffffffffffffda RBX: 00007f2af2225fa0 RCX: 00007f2af1fce15c
[ 1071.831700][T16837] RDX: 000000000000000f RSI: 00007f2af02360a0 RDI: 0000000000000005
[ 1071.831707][T16837] RBP: 00007f2af0236090 R08: 0000000000000000 R09: 0000000000000000
[ 1071.831714][T16837] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002
[ 1071.831721][T16837] R13: 00007f2af2226038 R14: 00007f2af2225fa0 R15: 00007ffd78cbfb18
[ 1071.831741][T16837]  </TASK>
[ 1072.764926][ T5917] kernel write not supported for file /input/mice (pid: 5917 comm: kworker/1:6)
[ 1073.065322][T16732] chnl_net:caif_netlink_parms(): no params data found
[ 1073.069230][ T5183] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1073.310972][ T5183] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1073.312373][ T5183] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1073.312398][ T5183] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 0
[ 1073.312411][ T5183] usb 6-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1073.312427][ T5183] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1073.388319][ T5183] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1073.388351][ T5183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1073.388372][ T5183] usb 6-1: Product: syz
[ 1073.388387][ T5183] usb 6-1: Manufacturer: syz
[ 1073.388402][ T5183] usb 6-1: SerialNumber: syz
[ 1075.976501][T16881] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3794'.
[ 1076.270387][ T5183] usb 6-1: USB disconnect, device number 34
[ 1077.072676][T16892] No control pipe specified
[ 1077.812124][T16902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3798'.
[ 1081.263519][T16915] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1082.311893][T16929] No control pipe specified
[ 1082.872475][T16732] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1082.876831][T16732] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1082.877146][T16732] bridge_slave_0: entered allmulticast mode
[ 1082.880846][T16732] bridge_slave_0: entered promiscuous mode
[ 1083.001200][T16732] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1083.001363][T16732] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1083.001830][T16732] bridge_slave_1: entered allmulticast mode
[ 1083.005122][T16732] bridge_slave_1: entered promiscuous mode
[ 1084.351004][T16936] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3810'.
[ 1085.535887][T16732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1085.573565][T16732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1086.061574][T16732] team0: Port device team_slave_0 added
[ 1086.073666][T16732] team0: Port device team_slave_1 added
[ 1087.811517][T16732] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1087.811538][T16732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1087.811569][T16732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1087.913024][T16732] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1087.913038][T16732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1087.913055][T16732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1088.223251][T16955] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1091.612577][ T7059] bridge_slave_1: left allmulticast mode
[ 1091.612657][ T7059] bridge_slave_1: left promiscuous mode
[ 1091.641058][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1091.812756][ T7059] bridge_slave_0: left allmulticast mode
[ 1091.812778][ T7059] bridge_slave_0: left promiscuous mode
[ 1091.812968][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1092.283457][T16968] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3820'.
[ 1093.731237][T16971] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3821'.
[ 1094.552145][T16978] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3823'.
[ 1096.665516][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1096.756914][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1096.759682][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1096.761312][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1096.772710][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1096.855155][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1096.869634][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1096.870244][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1096.878363][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1096.882886][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1097.080210][ T7059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1097.159797][ T7059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1097.193329][ T7059] bond0 (unregistering): Released all slaves
[ 1097.384693][T16977] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3823'.
[ 1097.444757][T16732] hsr_slave_0: entered promiscuous mode
[ 1097.446422][T16732] hsr_slave_1: entered promiscuous mode
[ 1097.534468][T16732] debugfs: 'hsr0' already exists in 'hsr'
[ 1097.534497][T16732] Cannot create hsr debugfs directory
[ 1097.662653][T16996] netlink: 'syz.8.3825': attribute type 1 has an invalid length.
[ 1097.664677][T16996] tmpfs: User quota inode hardlimit too large.
[ 1097.666306][T16996] loop2: detected capacity change from 0 to 7
[ 1097.666968][T16996] Dev loop2: unable to read RDB block 7
[ 1097.666988][T16996]  loop2: AHDI p1 p2 p3
[ 1097.667005][T16996] loop2: partition table partially beyond EOD, truncated
[ 1097.667069][T16996] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1097.667080][T16996] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1098.371991][ T7059] hsr_slave_0: left promiscuous mode
[ 1098.389508][ T7059] hsr_slave_1: left promiscuous mode
[ 1098.390758][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1098.450549][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1098.980627][T15276] Bluetooth: hci5: command tx timeout
[ 1100.479823][T17041] netlink: 988 bytes leftover after parsing attributes in process `syz.8.3838'.
[ 1100.479850][T17041] netlink: 21100 bytes leftover after parsing attributes in process `syz.8.3838'.
[ 1101.061089][T15276] Bluetooth: hci5: command tx timeout
[ 1101.601330][ T7059] team0 (unregistering): Port device team_slave_1 removed
[ 1102.210575][ T7059] team0 (unregistering): Port device team_slave_0 removed
[ 1103.139377][T15276] Bluetooth: hci5: command tx timeout
[ 1105.219713][T15276] Bluetooth: hci5: command tx timeout
[ 1106.438354][T17033] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1106.438383][T17033] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1110.002805][T12459] usb 9-1: new full-speed USB device number 20 using dummy_hcd
[ 1110.085029][T16988] chnl_net:caif_netlink_parms(): no params data found
[ 1110.167299][T12459] usb 9-1: config 4 has an invalid interface number: 85 but max is 0
[ 1110.167334][T12459] usb 9-1: config 4 has no interface number 0
[ 1110.167379][T12459] usb 9-1: config 4 interface 85 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[ 1110.167395][T12459] usb 9-1: config 4 interface 85 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[ 1110.167408][T12459] usb 9-1: config 4 interface 85 altsetting 8 endpoint 0x6 has invalid maxpacket 55657, setting to 64
[ 1110.167423][T12459] usb 9-1: config 4 interface 85 altsetting 8 endpoint 0xE has invalid maxpacket 512, setting to 64
[ 1110.167438][T12459] usb 9-1: config 4 interface 85 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[ 1110.167451][T12459] usb 9-1: config 4 interface 85 altsetting 8 endpoint 0x3 has invalid maxpacket 512, setting to 64
[ 1110.167467][T12459] usb 9-1: config 4 interface 85 altsetting 8 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[ 1110.167482][T12459] usb 9-1: config 4 interface 85 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[ 1110.167494][T12459] usb 9-1: config 4 interface 85 altsetting 8 has a duplicate endpoint with address 0x6, skipping
[ 1110.167507][T12459] usb 9-1: config 4 interface 85 altsetting 8 endpoint 0x7 has invalid maxpacket 25635, setting to 64
[ 1110.167522][T12459] usb 9-1: config 4 interface 85 altsetting 8 has 16 endpoint descriptors, different from the interface descriptor's value: 15
[ 1110.167537][T12459] usb 9-1: config 4 interface 85 has no altsetting 0
[ 1110.176856][T12459] usb 9-1: New USB device found, idVendor=182d, idProduct=207c, bcdDevice=e1.a4
[ 1110.176888][T12459] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1110.176907][T12459] usb 9-1: Product: Ч
[ 1110.176920][T12459] usb 9-1: Manufacturer: 瀣螑縥䓟怞㞅崳鐺㑿纖䁝
[ 1110.176934][T12459] usb 9-1: SerialNumber: syz
[ 1110.220770][T17115] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1110.221301][T17115] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1110.222259][T17115] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1110.424520][T17115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1110.424966][T17115] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1110.434849][T12459] cdc_subset 9-1:4.85: probe with driver cdc_subset failed with error -22
[ 1110.517247][T12459] usb 9-1: USB disconnect, device number 20
[ 1111.329901][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3865'.
[ 1111.554672][T16988] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1111.554933][T16988] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1111.555218][T16988] bridge_slave_0: entered allmulticast mode
[ 1111.558474][T16988] bridge_slave_0: entered promiscuous mode
[ 1111.612856][T16988] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1111.613093][T16988] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1111.613363][T16988] bridge_slave_1: entered allmulticast mode
[ 1111.669680][T16988] bridge_slave_1: entered promiscuous mode
[ 1111.894337][T17139] Context (ID=0x1) not attached to queue pair (handle=0x1:0xfffffffe)
[ 1112.374394][T17151] sctp: [Deprecated]: syz.7.3875 (pid 17151) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1112.374394][T17151] Use struct sctp_sack_info instead
[ 1112.414152][T16988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1112.801433][T16988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1113.335105][T16988] team0: Port device team_slave_0 added
[ 1113.349292][T17169] 9p: Bad value for 'rfdno'
[ 1113.372493][T16988] team0: Port device team_slave_1 added
[ 1113.372578][T16732] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1114.296517][T17176] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3881'.
[ 1115.639686][T16732] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1115.927810][T16732] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1115.999628][T16988] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1115.999641][T16988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1115.999658][T16988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1116.097826][T16988] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1116.097843][T16988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1116.097868][T16988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1116.098268][T16732] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1116.486914][T17192] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[ 1116.731531][ T7059] bridge_slave_1: left allmulticast mode
[ 1116.731566][ T7059] bridge_slave_1: left promiscuous mode
[ 1116.731865][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1116.799175][ T5183] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1116.841580][ T7059] bridge_slave_0: left allmulticast mode
[ 1116.841614][ T7059] bridge_slave_0: left promiscuous mode
[ 1116.841920][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1116.896597][T17185] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3885'.
[ 1116.971361][ T5183] usb 6-1: Using ep0 maxpacket: 32
[ 1117.693362][ T7059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1117.716336][T17220] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1117.783471][ T7059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1117.874519][ T7059] bond0 (unregistering): Released all slaves
[ 1117.985202][T16988] hsr_slave_0: entered promiscuous mode
[ 1117.994042][T16988] hsr_slave_1: entered promiscuous mode
[ 1117.996179][T16988] debugfs: 'hsr0' already exists in 'hsr'
[ 1117.996209][T16988] Cannot create hsr debugfs directory
[ 1119.059471][ T6674] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1119.119834][ T7059] hsr_slave_0: left promiscuous mode
[ 1119.161246][ T7059] hsr_slave_1: left promiscuous mode
[ 1119.162436][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1119.221965][ T6674] usb 9-1: config index 0 descriptor too short (expected 65409, got 72)
[ 1119.225164][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1119.225620][ T6674] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1119.225650][ T6674] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1119.225671][ T6674] usb 9-1: Product: syz
[ 1119.225687][ T6674] usb 9-1: Manufacturer: syz
[ 1119.225702][ T6674] usb 9-1: SerialNumber: syz
[ 1119.290613][ T6674] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1119.381923][T15433] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1119.754521][ T5183] usb 6-1: device descriptor read/all, error -71
[ 1119.849961][ T8688] usb 9-1: USB disconnect, device number 21
[ 1120.020768][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1120.047351][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1120.050394][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1120.052448][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1120.053280][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1120.059369][T15433] usb 9-1: ath9k_htc: Unable to allocate URBs
[ 1120.070177][ T8688] usb 9-1: ath9k_htc: USB layer deinitialized
[ 1120.106510][T15276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1120.107089][T15276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1120.107604][T15276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1120.114210][T15276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1120.115183][T15276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1121.025745][T17253] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad)
[ 1121.025765][T17253] PKCS7: Only support pkcs7_signedData type
[ 1121.138973][T17255] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1121.548471][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1121.578035][T17263] netlink: 'syz.7.3904': attribute type 2 has an invalid length.
[ 1121.900043][ T7059] team0 (unregistering): Port device team_slave_1 removed
[ 1122.035232][ T6674] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[ 1122.090195][ T7059] team0 (unregistering): Port device team_slave_0 removed
[ 1122.179317][T15276] Bluetooth: hci3: command tx timeout
[ 1122.184982][ T6674] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1122.185043][ T6674] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1122.185067][ T6674] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1122.185092][ T6674] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1122.185113][ T6674] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1122.188236][ T6674] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1122.188263][ T6674] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1122.188282][ T6674] usb 9-1: Product: syz
[ 1122.188295][ T6674] usb 9-1: Manufacturer: syz
[ 1122.188308][ T6674] usb 9-1: SerialNumber: syz
[ 1122.194459][ T6674] usb 9-1: config 0 descriptor??
[ 1122.473852][ T6674] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 1122.473874][ T6674] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 1122.679337][ T6674] radio-si470x 9-1:0.0: software version 0, hardware version 0
[ 1122.679356][ T6674] radio-si470x 9-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[ 1122.679368][ T6674] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[ 1122.880925][ T6674] radio-si470x 9-1:0.0: submitting int urb failed (-90)
[ 1123.083504][T17268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1123.084782][T17268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1123.272999][T17273] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad)
[ 1123.273012][T17273] PKCS7: Only support pkcs7_signedData type
[ 1123.396851][ T6674] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -110
[ 1123.401288][ T6674] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22
[ 1123.566879][ T6674] usb 9-1: USB disconnect, device number 22
[ 1124.261285][T15276] Bluetooth: hci3: command tx timeout
[ 1124.549160][ T8688] usb 9-1: new full-speed USB device number 23 using dummy_hcd
[ 1124.755514][ T8688] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1124.755547][ T8688] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1124.755577][ T8688] usb 9-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[ 1124.755590][ T8688] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1124.865454][ T8688] usb 9-1: config 0 descriptor??
[ 1125.665095][ T8688] usbhid 9-1:0.0: can't add hid device: -71
[ 1125.665226][ T8688] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1125.686780][ T8688] usb 9-1: USB disconnect, device number 23
[ 1126.339673][T15276] Bluetooth: hci3: command tx timeout
[ 1126.639304][T15433] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[ 1126.809278][T15433] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 143, changing to 11
[ 1126.809319][T15433] usb 9-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00
[ 1126.809332][T15433] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1126.812818][T15433] usb 9-1: config 0 descriptor??
[ 1127.235782][T15433] evision 0003:320F:5041.002E: hidraw0: USB HID v0.00 Device [HID 320f:5041] on usb-dummy_hcd.8-1/input0
[ 1127.324852][T17242] chnl_net:caif_netlink_parms(): no params data found
[ 1127.434510][T17299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1127.434782][T17299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1127.436847][T15433] usb 9-1: USB disconnect, device number 24
[ 1127.861947][T15433] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[ 1128.011972][T15433] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1128.012006][T15433] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1128.012038][T15433] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[ 1128.012051][T15433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1128.015570][T15433] usb 6-1: config 0 descriptor??
[ 1128.429190][T15276] Bluetooth: hci3: command tx timeout
[ 1128.494765][T17327] netlink: 'syz.8.3927': attribute type 1 has an invalid length.
[ 1128.606255][T15433] hid (null): unknown global tag 0xe
[ 1128.606285][T15433] hid (null): nested delimiters
[ 1128.606312][T15433] hid (null): nested delimiters
[ 1128.607322][T15433] hid (null): invalid report_size 29797
[ 1128.625526][T15433] cougar 0003:060B:500A.002F: unknown main item tag 0x0
[ 1128.625562][T15433] cougar 0003:060B:500A.002F: unknown main item tag 0x0
[ 1128.625586][T15433] cougar 0003:060B:500A.002F: unknown main item tag 0x0
[ 1128.625609][T15433] cougar 0003:060B:500A.002F: unknown main item tag 0x0
[ 1128.625633][T15433] cougar 0003:060B:500A.002F: unknown main item tag 0x0
[ 1128.625656][T15433] cougar 0003:060B:500A.002F: unknown main item tag 0x0
[ 1128.625679][T15433] cougar 0003:060B:500A.002F: unknown main item tag 0x0
[ 1128.625703][T15433] cougar 0003:060B:500A.002F: unknown main item tag 0x0
[ 1128.625734][T15433] cougar 0003:060B:500A.002F: unknown main item tag 0x0
[ 1128.625756][T15433] cougar 0003:060B:500A.002F: unknown main item tag 0x0
[ 1128.626275][T15433] cougar 0003:060B:500A.002F: collection stack underflow
[ 1128.626297][T15433] cougar 0003:060B:500A.002F: item 0 0 0 12 parsing failed
[ 1128.627173][T15433] cougar 0003:060B:500A.002F: parse failed
[ 1128.627272][T15433] cougar 0003:060B:500A.002F: probe with driver cougar failed with error -22
[ 1128.807981][T17325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1128.808496][T17325] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1128.809375][T15433] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1128.853064][T17324] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check.
[ 1128.865579][ T6674] usb 6-1: USB disconnect, device number 37
[ 1128.909722][T17242] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1128.909951][T17242] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1128.910231][T17242] bridge_slave_0: entered allmulticast mode
[ 1128.913337][T17242] bridge_slave_0: entered promiscuous mode
[ 1129.099263][T15433] usb 9-1: Using ep0 maxpacket: 32
[ 1129.101638][T15433] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1129.101659][T15433] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1129.105280][T15433] usb 9-1: config 0 descriptor??
[ 1129.112467][T15433] as10x_usb: device has been detected
[ 1129.113515][T15433] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 1129.125360][T15433] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[ 1130.240592][T15433] as10x_usb: error during firmware upload part1
[ 1130.241466][T15433] Registered device nBox DVB-T Dongle
[ 1132.370289][T17242] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1132.370469][T17242] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1132.370763][T17242] bridge_slave_1: entered allmulticast mode
[ 1132.373958][T17242] bridge_slave_1: entered promiscuous mode
[ 1132.497241][ T8688] usb 9-1: USB disconnect, device number 25
[ 1132.590095][ T8688] Unregistered device nBox DVB-T Dongle
[ 1132.620642][ T8688] as10x_usb: device has been disconnected
[ 1132.659520][T17350] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3935'.
[ 1132.794008][T17242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1132.810971][T16988] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1132.936925][T17242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1132.949563][T16988] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1133.111074][T16988] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1133.303334][T16988] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1133.352891][T17242] team0: Port device team_slave_0 added
[ 1133.460266][T17242] team0: Port device team_slave_1 added
[ 1134.771892][T17367] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3934'.
[ 1136.496688][T17242] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1136.496708][T17242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1136.496737][T17242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1136.550501][T17242] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1136.550518][T17242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1136.550546][T17242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1137.878376][T17397] No control pipe specified
[ 1141.417660][T17404] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3948'.
[ 1141.715176][ T7059] bridge_slave_1: left allmulticast mode
[ 1141.715209][ T7059] bridge_slave_1: left promiscuous mode
[ 1141.715493][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1141.799399][ T7059] bridge_slave_0: left allmulticast mode
[ 1141.799432][ T7059] bridge_slave_0: left promiscuous mode
[ 1141.799724][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1142.049298][ T5917] usb 6-1: new full-speed USB device number 38 using dummy_hcd
[ 1142.204551][ T5917] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1142.204594][ T5917] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1142.204630][ T5917] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[ 1142.204654][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1142.246839][ T5917] usb 6-1: config 0 descriptor??
[ 1142.882981][ T5917] hid (null): invalid report_size 29797
[ 1142.892760][ T5917] hid_parser_main: 48 callbacks suppressed
[ 1142.892783][ T5917] cougar 0003:060B:500A.0030: unknown main item tag 0x0
[ 1142.892810][ T5917] cougar 0003:060B:500A.0030: unknown main item tag 0x0
[ 1142.892835][ T5917] cougar 0003:060B:500A.0030: unknown main item tag 0x0
[ 1142.892859][ T5917] cougar 0003:060B:500A.0030: unknown main item tag 0x0
[ 1142.892883][ T5917] cougar 0003:060B:500A.0030: unknown main item tag 0x0
[ 1142.892906][ T5917] cougar 0003:060B:500A.0030: unknown main item tag 0x0
[ 1142.892930][ T5917] cougar 0003:060B:500A.0030: unknown main item tag 0x0
[ 1142.892954][ T5917] cougar 0003:060B:500A.0030: unknown main item tag 0x0
[ 1142.892977][ T5917] cougar 0003:060B:500A.0030: unknown main item tag 0x0
[ 1142.893000][ T5917] cougar 0003:060B:500A.0030: unknown main item tag 0x0
[ 1142.893521][ T5917] cougar 0003:060B:500A.0030: collection stack underflow
[ 1142.893543][ T5917] cougar 0003:060B:500A.0030: item 0 0 0 12 parsing failed
[ 1142.894363][ T5917] cougar 0003:060B:500A.0030: parse failed
[ 1142.894466][ T5917] cougar 0003:060B:500A.0030: probe with driver cougar failed with error -22
[ 1142.965330][ T7059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1143.228204][T17432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1143.228676][T17432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1143.370534][ T7059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1143.441847][ T7059] bond0 (unregistering): Released all slaves
[ 1143.632801][T17446] netlink: 'syz.8.3960': attribute type 6 has an invalid length.
[ 1143.765347][  T191] usb 6-1: USB disconnect, device number 38
[ 1143.817813][T17242] hsr_slave_0: entered promiscuous mode
[ 1143.830907][T17242] hsr_slave_1: entered promiscuous mode
[ 1143.833290][T17242] debugfs: 'hsr0' already exists in 'hsr'
[ 1143.833320][T17242] Cannot create hsr debugfs directory
[ 1143.833348][T17450] CUSE: unknown device info ""
[ 1143.833362][T17450] CUSE: zero length info key specified
[ 1144.050956][ T7059] hsr_slave_0: left promiscuous mode
[ 1144.248987][ T7059] hsr_slave_1: left promiscuous mode
[ 1144.615311][T17460] No control pipe specified
[ 1145.242992][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1145.470175][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1146.980953][T17496] CUSE: unknown device info ""
[ 1146.980971][T17496] CUSE: zero length info key specified
[ 1147.299247][ T6674] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[ 1147.475367][ T6674] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1147.476164][ T6674] usb 6-1: not running at top speed; connect to a high speed hub
[ 1147.479767][ T6674] usb 6-1: config 0 has an invalid interface number: 26 but max is 1
[ 1147.479794][ T6674] usb 6-1: config 0 has an invalid interface number: 239 but max is 1
[ 1147.479812][ T6674] usb 6-1: config 0 has no interface number 0
[ 1147.479827][ T6674] usb 6-1: config 0 has no interface number 1
[ 1147.479888][ T6674] usb 6-1: config 0 interface 26 has no altsetting 0
[ 1147.479904][ T6674] usb 6-1: config 0 interface 239 has no altsetting 0
[ 1147.484638][ T6674] usb 6-1: New USB device found, idVendor=0572, idProduct=cb07, bcdDevice=44.20
[ 1147.484664][ T6674] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1147.484682][ T6674] usb 6-1: Product: syz
[ 1147.484696][ T6674] usb 6-1: Manufacturer: syz
[ 1147.484708][ T6674] usb 6-1: SerialNumber: syz
[ 1147.517398][ T6674] usb 6-1: config 0 descriptor??
[ 1148.025134][T17514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1148.028116][T17514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1149.356187][ T7059] team0 (unregistering): Port device team_slave_1 removed
[ 1149.893572][ T7059] team0 (unregistering): Port device team_slave_0 removed
[ 1152.055127][ T6674] cxacru 6-1:0.26: cxacru_bind: interface has incorrect endpoints
[ 1152.055300][ T6674] cxacru 6-1:0.26: usbatm_usb_probe: bind failed: -19!
[ 1152.070574][ T6674] cxacru 6-1:0.239: cxacru_bind: interface has incorrect endpoints
[ 1152.070733][ T6674] cxacru 6-1:0.239: usbatm_usb_probe: bind failed: -19!
[ 1152.086067][ T6674] usb 6-1: USB disconnect, device number 39
[ 1153.232136][T17573] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3987'.
[ 1153.406919][T17579] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad)
[ 1153.406934][T17579] PKCS7: Only support pkcs7_signedData type
[ 1154.177192][T16988] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1154.672232][T16988] 8021q: adding VLAN 0 to HW filter on device team0
[ 1154.693861][ T1464] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1154.697814][ T1464] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1154.943727][ T7059] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1154.943837][ T7059] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1155.389725][  T191] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1155.599193][  T191] usb 9-1: Using ep0 maxpacket: 32
[ 1155.606197][  T191] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1155.607401][  T191] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1155.607441][  T191] usb 9-1: can't read configurations, error -71
[ 1157.234712][T16988] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1157.345207][T17242] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1157.401122][T17242] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1157.451994][T17242] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1157.527240][T17242] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1158.057939][T17242] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1158.345300][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1158.370844][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1158.372743][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1158.374837][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1158.430653][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1158.894634][T17641] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4006'.
[ 1159.119478][T17242] 8021q: adding VLAN 0 to HW filter on device team0
[ 1159.130896][ T1464] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1159.131056][ T1464] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1159.197791][ T3581] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1159.218663][ T3581] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1159.398296][T17647] CUSE: unknown device info ""
[ 1159.398313][T17647] CUSE: zero length info key specified
[ 1160.499208][T15276] Bluetooth: hci0: command tx timeout
[ 1161.763001][   T37] audit: type=1326 audit(1765657989.182:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.8.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af1fcf749 code=0x7ffc0000
[ 1161.801396][   T37] audit: type=1326 audit(1765657989.222:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.8.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f2af1fcf749 code=0x7ffc0000
[ 1161.801683][   T37] audit: type=1326 audit(1765657989.222:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.8.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af1fcf749 code=0x7ffc0000
[ 1161.802131][   T37] audit: type=1326 audit(1765657989.222:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.8.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2af1fcf749 code=0x7ffc0000
[ 1161.802514][   T37] audit: type=1326 audit(1765657989.222:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.8.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af1fcf749 code=0x7ffc0000
[ 1161.803182][   T37] audit: type=1326 audit(1765657989.222:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.8.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2af1fcf749 code=0x7ffc0000
[ 1161.803678][   T37] audit: type=1326 audit(1765657989.222:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.8.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af1fcf749 code=0x7ffc0000
[ 1161.804179][   T37] audit: type=1326 audit(1765657989.222:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.8.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2af1fcf749 code=0x7ffc0000
[ 1161.804601][   T37] audit: type=1326 audit(1765657989.222:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.8.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af1fcf749 code=0x7ffc0000
[ 1161.806023][   T37] audit: type=1326 audit(1765657989.222:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17667 comm="syz.8.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2af1fcf749 code=0x7ffc0000
[ 1162.259342][T17666] pim6reg1: entered promiscuous mode
[ 1162.259374][T17666] pim6reg1: entered allmulticast mode
[ 1162.579346][T15276] Bluetooth: hci0: command tx timeout
[ 1163.387051][T17678] CUSE: unknown device info ""
[ 1163.387070][T17678] CUSE: zero length info key specified
[ 1163.715792][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4022'.
[ 1163.890759][T17684] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4022'.
[ 1165.042982][T17694] CUSE: unknown device info ""
[ 1165.043001][T17694] CUSE: zero length info key specified
[ 1165.050873][T15276] Bluetooth: hci0: command tx timeout
[ 1165.194450][T17697] FAULT_INJECTION: forcing a failure.
[ 1165.194450][T17697] name failslab, interval 1, probability 0, space 0, times 0
[ 1165.194645][T17697] CPU: 1 UID: 0 PID: 17697 Comm: syz.5.4027 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1165.194672][T17697] Tainted: [L]=SOFTLOCKUP
[ 1165.194679][T17697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1165.194690][T17697] Call Trace:
[ 1165.194697][T17697]  <TASK>
[ 1165.194705][T17697]  dump_stack_lvl+0x189/0x250
[ 1165.194734][T17697]  ? __pfx____ratelimit+0x10/0x10
[ 1165.194757][T17697]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1165.194781][T17697]  ? __pfx__printk+0x10/0x10
[ 1165.194801][T17697]  ? __pfx___might_resched+0x10/0x10
[ 1165.194828][T17697]  should_fail_ex+0x46c/0x600
[ 1165.194856][T17697]  should_failslab+0xa8/0x100
[ 1165.194879][T17697]  __kmalloc_cache_noprof+0x84/0x6d0
[ 1165.194911][T17697]  ? __se_sys_mount+0x166/0x410
[ 1165.194938][T17697]  __se_sys_mount+0x166/0x410
[ 1165.194966][T17697]  ? __pfx___se_sys_mount+0x10/0x10
[ 1165.194993][T17697]  ? do_syscall_64+0xbe/0xf80
[ 1165.195020][T17697]  ? __x64_sys_mount+0x20/0xc0
[ 1165.195044][T17697]  do_syscall_64+0xfa/0xf80
[ 1165.195071][T17697]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1165.195091][T17697]  ? clear_bhb_loop+0x60/0xb0
[ 1165.195115][T17697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1165.195134][T17697] RIP: 0033:0x7f9caf7af749
[ 1165.195153][T17697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1165.195170][T17697] RSP: 002b:00007f9cada0e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1165.195192][T17697] RAX: ffffffffffffffda RBX: 00007f9cafa05fa0 RCX: 00007f9caf7af749
[ 1165.195207][T17697] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000
[ 1165.195220][T17697] RBP: 00007f9cada0e090 R08: 00002000000001c0 R09: 0000000000000000
[ 1165.195232][T17697] R10: 00000000ffffff7f R11: 0000000000000246 R12: 0000000000000001
[ 1165.195243][T17697] R13: 00007f9cafa06038 R14: 00007f9cafa05fa0 R15: 00007ffe7de95dc8
[ 1165.195291][T17697]  </TASK>
[ 1166.595371][T17702] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4029'.
[ 1166.833104][T17708] IPVS: length: 139 != 8
[ 1166.881337][T17637] chnl_net:caif_netlink_parms(): no params data found
[ 1167.059461][ T5808] Bluetooth: hci0: command tx timeout
[ 1167.710105][ T4509] bridge_slave_1: left allmulticast mode
[ 1167.710139][ T4509] bridge_slave_1: left promiscuous mode
[ 1167.710446][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1167.840909][ T4509] bridge_slave_0: left allmulticast mode
[ 1167.840932][ T4509] bridge_slave_0: left promiscuous mode
[ 1167.841117][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1168.030687][ T8688] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 1168.189173][ T8688] usb 9-1: Using ep0 maxpacket: 8
[ 1168.195260][ T8688] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1168.196719][ T8688] usb 9-1: config 199 has an invalid interface number: 224 but max is 0
[ 1168.196750][ T8688] usb 9-1: config 199 has no interface number 0
[ 1168.196796][ T8688] usb 9-1: config 199 interface 224 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[ 1168.196821][ T8688] usb 9-1: config 199 interface 224 has no altsetting 0
[ 1168.206982][ T8688] usb 9-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=92.83
[ 1168.207015][ T8688] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1168.207035][ T8688] usb 9-1: Product: syz
[ 1168.207049][ T8688] usb 9-1: Manufacturer: syz
[ 1168.207064][ T8688] usb 9-1: SerialNumber: syz
[ 1168.252281][T17724] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4032'.
[ 1168.252316][T17724] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4032'.
[ 1168.684493][T17722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1168.685043][T17722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1168.688509][ T8688] lg-vl600 9-1:199.224: skipping garbage
[ 1168.688531][ T8688] usb 9-1: bad CDC descriptors
[ 1168.888187][ T6674] usb 9-1: USB disconnect, device number 28
[ 1171.098691][T17737] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4040'.
[ 1172.839974][T17741] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4042'.
[ 1174.100168][ T4509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1174.166657][T17758] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4047'.
[ 1174.181435][ T4509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1174.202179][ T4509] bond0 (unregistering): Released all slaves
[ 1174.255540][T17762] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4048'.
[ 1174.375535][T17724] gretap0: entered promiscuous mode
[ 1174.430224][T17724] gretap0: left promiscuous mode
[ 1174.917093][T17242] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1176.634454][T17775] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4051'.
[ 1176.837844][ T4509] hsr_slave_0: left promiscuous mode
[ 1176.901502][ T4509] hsr_slave_1: left promiscuous mode
[ 1176.902484][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1177.980463][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1178.292346][T17782] syz.5.4054 uses old SIOCAX25GETINFO
[ 1179.177563][T17785] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4055'.
[ 1181.120416][T17786] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4056'.
[ 1182.561063][T17792] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1182.591578][T17792] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1182.593858][T17792] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1182.595606][T17792] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1182.596820][T17792] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1182.758121][T17795] CUSE: unknown device info ""
[ 1182.758139][T17795] CUSE: zero length info key specified
[ 1183.197660][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1184.659247][T17792] Bluetooth: hci5: command tx timeout
[ 1184.720578][T17815] random: crng reseeded on system resumption
[ 1184.976918][ T4509] team0 (unregistering): Port device team_slave_1 removed
[ 1185.322664][ T4509] team0 (unregistering): Port device team_slave_0 removed
[ 1186.739206][T17792] Bluetooth: hci5: command tx timeout
[ 1188.690504][T17637] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1188.690664][T17637] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1188.690860][T17637] bridge_slave_0: entered allmulticast mode
[ 1188.692611][T17637] bridge_slave_0: entered promiscuous mode
[ 1188.764099][T17637] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1188.764235][T17637] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1188.764539][T17637] bridge_slave_1: entered allmulticast mode
[ 1188.767798][T17637] bridge_slave_1: entered promiscuous mode
[ 1188.825731][T17792] Bluetooth: hci5: command tx timeout
[ 1189.608734][T17637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1189.788950][T17838] CUSE: unknown device info ""
[ 1189.789333][T17838] CUSE: zero length info key specified
[ 1189.800965][T17637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1190.079101][T17839] No control pipe specified
[ 1190.612001][ T8688] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1190.909897][T17792] Bluetooth: hci5: command tx timeout
[ 1190.931448][ T8688] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1190.931487][ T8688] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1190.931539][ T8688] usb 9-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[ 1190.931563][ T8688] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1190.981559][ T8688] usb 9-1: config 0 descriptor??
[ 1191.465392][ T8688] usbhid 9-1:0.0: can't add hid device: -71
[ 1191.465481][ T8688] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1191.487457][ T8688] usb 9-1: USB disconnect, device number 29
[ 1191.802906][T17637] team0: Port device team_slave_0 added
[ 1192.081425][T17637] team0: Port device team_slave_1 added
[ 1192.133956][T17862] hsr0: entered promiscuous mode
[ 1192.135211][T17861] hsr0: left promiscuous mode
[ 1193.773165][T17637] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1193.773185][T17637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1193.773214][T17637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1193.827217][T17637] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1193.827231][T17637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1193.827248][T17637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1194.072210][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4084'.
[ 1194.329266][ T6674] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1194.479996][ T6674] usb 6-1: Using ep0 maxpacket: 16
[ 1194.529292][ T6674] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1194.529325][ T6674] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1194.529341][ T6674] usb 6-1: Product: syz
[ 1194.529350][ T6674] usb 6-1: Manufacturer: syz
[ 1194.529358][ T6674] usb 6-1: SerialNumber: syz
[ 1194.576338][ T6674] usb 6-1: config 0 descriptor??
[ 1194.587212][ T6674] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1194.802055][ T6674] ssu100 6-1:0.0: probe with driver ssu100 failed with error -5
[ 1194.832917][T17884] comedi comedi1: adq12b: I/O port conflict (0xffffffffffffffff,16)
[ 1194.997033][T17637] hsr_slave_0: entered promiscuous mode
[ 1194.998710][T17637] hsr_slave_1: entered promiscuous mode
[ 1195.006275][T17637] debugfs: 'hsr0' already exists in 'hsr'
[ 1195.006310][T17637] Cannot create hsr debugfs directory
[ 1195.655713][T17903] overlayfs: missing 'lowerdir'
[ 1196.205043][T17791] chnl_net:caif_netlink_parms(): no params data found
[ 1196.536928][T17926] netlink: 'syz.7.4106': attribute type 1 has an invalid length.
[ 1196.951939][T17935] loop4: detected capacity change from 0 to 7
[ 1196.984265][T17935] Dev loop4: unable to read RDB block 7
[ 1196.984304][T17935]  loop4: AHDI p1 p2 p3
[ 1196.984339][T17935] loop4: partition table partially beyond EOD, truncated
[ 1196.984460][T17935] loop4: p1 start 1601398130 is beyond EOD, truncated
[ 1196.984479][T17935] loop4: p2 start 1702059890 is beyond EOD, truncated
[ 1197.112835][ T6674] usb 6-1: USB disconnect, device number 40
[ 1198.442539][T17870] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1198.599670][T17870] usb 9-1: Using ep0 maxpacket: 16
[ 1198.601907][T17870] usb 9-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1198.629231][T17870] usb 9-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[ 1198.629266][T17870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1198.629285][T17870] usb 9-1: Product: syz
[ 1198.629300][T17870] usb 9-1: Manufacturer: syz
[ 1198.629315][T17870] usb 9-1: SerialNumber: syz
[ 1198.636406][T17870] usb 9-1: config 0 descriptor??
[ 1198.707857][T17870] uvcvideo 9-1:0.0: probe with driver uvcvideo failed with error -22
[ 1198.771466][T17791] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1198.771813][T17791] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1198.774121][T17791] bridge_slave_0: entered allmulticast mode
[ 1198.812833][T17791] bridge_slave_0: entered promiscuous mode
[ 1198.895027][ T6674] usb 9-1: USB disconnect, device number 30
[ 1199.039712][T17791] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1199.040451][T17791] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1199.040749][T17791] bridge_slave_1: entered allmulticast mode
[ 1199.043995][T17791] bridge_slave_1: entered promiscuous mode
[ 1199.794472][T17791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1200.097778][T17791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1200.312291][ T4509] bridge_slave_1: left allmulticast mode
[ 1200.312334][ T4509] bridge_slave_1: left promiscuous mode
[ 1200.312631][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1200.399499][ T5971] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1200.580123][ T5971] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1200.580158][ T5971] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1200.580179][ T5971] usb 9-1: Product: syz
[ 1200.580194][ T5971] usb 9-1: Manufacturer: syz
[ 1200.580209][ T5971] usb 9-1: SerialNumber: syz
[ 1200.645586][ T5971] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1200.699121][   T10] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1200.923591][T17987] random: crng reseeded on system resumption
[ 1202.245498][T18000] No control pipe specified
[ 1203.442711][   T10] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[ 1205.291095][ T4509] bridge_slave_0: left allmulticast mode
[ 1205.291131][ T4509] bridge_slave_0: left promiscuous mode
[ 1205.291442][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1215.607947][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1215.642828][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1215.645771][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1215.659222][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1215.676598][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1217.779251][ T5808] Bluetooth: hci3: command tx timeout
[ 1218.506696][T17792] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1218.523989][T17792] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1218.546589][T17792] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1218.581613][T17792] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1218.582690][T17792] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1219.859483][T17792] Bluetooth: hci3: command tx timeout
[ 1220.662683][T17792] Bluetooth: hci6: command tx timeout
[ 1221.663231][ T5808] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1221.698190][ T5808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1221.719566][ T5808] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1221.722372][ T5808] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1221.728515][ T5808] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1221.941999][ T5808] Bluetooth: hci3: command tx timeout
[ 1222.092724][T17792] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1222.133924][T17792] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1222.138569][T17792] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1222.161595][T17792] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1222.162592][T17792] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1222.739454][T17792] Bluetooth: hci6: command tx timeout
[ 1223.859318][T17792] Bluetooth: hci7: command tx timeout
[ 1224.019301][T17792] Bluetooth: hci3: command tx timeout
[ 1224.259478][T17792] Bluetooth: hci8: command tx timeout
[ 1224.819687][T17792] Bluetooth: hci6: command tx timeout
[ 1225.939407][T17792] Bluetooth: hci7: command tx timeout
[ 1226.339578][T17792] Bluetooth: hci8: command tx timeout
[ 1226.899639][T17792] Bluetooth: hci6: command tx timeout
[ 1228.019368][T17792] Bluetooth: hci7: command tx timeout
[ 1228.419902][T17792] Bluetooth: hci8: command tx timeout
[ 1230.099431][T17792] Bluetooth: hci7: command tx timeout
[ 1230.499397][T17792] Bluetooth: hci8: command tx timeout
[ 1244.427898][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1244.568913][ T5808] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1244.607994][ T5808] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1244.618697][ T5808] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1244.628689][ T5808] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1244.645820][ T5808] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1246.739429][T17792] Bluetooth: hci9: command tx timeout
[ 1248.819265][T17792] Bluetooth: hci9: command tx timeout
[ 1250.899492][T17792] Bluetooth: hci9: command tx timeout
[ 1252.979357][T17792] Bluetooth: hci9: command tx timeout
[ 1276.318060][ T5808] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1276.366576][ T5808] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1276.384311][ T5808] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1276.411348][ T5808] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1276.412348][ T5808] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1278.499287][ T5808] Bluetooth: hci10: command tx timeout
[ 1279.854826][T17792] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1279.882474][T17792] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1279.884852][T17792] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1279.887188][T17792] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1279.888218][T17792] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1280.312654][   T10] ath9k_htc: Failed to initialize the device
[ 1280.581910][T17792] Bluetooth: hci10: command tx timeout
[ 1282.019812][T17792] Bluetooth: hci11: command tx timeout
[ 1282.122390][T15276] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1282.154580][T15276] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1282.156843][T15276] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1282.158332][T15276] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1282.192535][T15276] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1282.346604][T15276] Bluetooth: hci0: command 0x0406 tx timeout
[ 1282.583396][T17792] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1282.613755][T17792] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1282.615944][T17792] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1282.652707][T17792] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1282.653717][T17792] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1282.672278][T15276] Bluetooth: hci10: command tx timeout
[ 1284.109152][T15276] Bluetooth: hci11: command tx timeout
[ 1284.259494][T18032] Bluetooth: hci12: command tx timeout
[ 1284.741288][T18032] Bluetooth: hci10: command tx timeout
[ 1286.179357][T18032] Bluetooth: hci11: command tx timeout
[ 1286.341077][T18032] Bluetooth: hci12: command tx timeout
[ 1288.259234][T18032] Bluetooth: hci11: command tx timeout
[ 1288.419244][T18032] Bluetooth: hci12: command tx timeout
[ 1290.500429][T18032] Bluetooth: hci12: command tx timeout
[ 1305.874152][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1306.564941][T15276] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1306.592429][T15276] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1306.595795][T15276] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1306.636636][T15276] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1306.646801][T15276] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1308.019195][T15276] Bluetooth: hci5: command 0x0406 tx timeout
[ 1310.328928][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1310.328949][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P12505/2:b..l P17987/2:b..l
[ 1310.328998][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=81097, q=2472 ncpus=2)
[ 1310.329019][    C1] task:syz.8.4127      state:R  running task     stack:25360 pid:17987 tgid:17985 ppid:11847  task_flags:0x40044c flags:0x00080001
[ 1310.329082][    C1] Call Trace:
[ 1310.329089][    C1]  <TASK>
[ 1310.329103][    C1]  __schedule+0x1480/0x50a0
[ 1310.329160][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[ 1310.329193][    C1]  ? __pfx___schedule+0x10/0x10
[ 1310.329225][    C1]  ? __lock_acquire+0x6b6/0x2cf0
[ 1310.329258][    C1]  ? preempt_schedule_irq+0xaa/0x150
[ 1310.329288][    C1]  preempt_schedule_irq+0xb5/0x150
[ 1310.329315][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1310.329341][    C1]  ? __lock_acquire+0x6b6/0x2cf0
[ 1310.329373][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 1310.329407][    C1]  irqentry_exit+0x5d8/0x660
[ 1310.329442][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1310.329463][    C1] RIP: 0010:unwind_next_frame+0x1965/0x2390
[ 1310.329491][    C1] Code: 48 4c 8b 64 24 20 41 0f b6 04 2c 84 c0 0f 85 2d 03 00 00 41 c7 06 00 00 00 00 31 db e8 64 00 5f 09 85 c0 74 3a e8 3b 03 32 00 <84> c0 75 31 e8 52 00 5f 09 85 c0 74 28 80 3d a0 e5 50 0d 00 75 1f
[ 1310.329508][    C1] RSP: 0018:ffffc900015ef1b8 EFLAGS: 00000202
[ 1310.329525][    C1] RAX: 0000000000000001 RBX: ffffffff8fa96001 RCX: 0c084cebb86e2b00
[ 1310.329540][    C1] RDX: ffffc900015ef201 RSI: ffffffff8b3f4f40 RDI: ffffffff8b3f4f00
[ 1310.329555][    C1] RBP: dffffc0000000000 R08: ffffc900015ef8a0 R09: 0000000000000000
[ 1310.329568][    C1] R10: ffffc900015ef2d8 R11: fffff520002bde5d R12: ffffc900015ef8b0
[ 1310.329583][    C1] R13: ffffc900015e8000 R14: ffffc900015ef288 R15: ffffffff81742f55
[ 1310.329598][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1310.329639][    C1]  ? unwind_next_frame+0x1965/0x2390
[ 1310.329670][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1310.329695][    C1]  ? device_release_driver_internal+0x46f/0x800
[ 1310.329723][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1310.329749][    C1]  arch_stack_walk+0x11c/0x150
[ 1310.329780][    C1]  ? driver_detach+0x1f3/0x2d0
[ 1310.329805][    C1]  stack_trace_save+0x9c/0xe0
[ 1310.329828][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1310.329850][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1310.329882][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1310.329909][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1310.329939][    C1]  kasan_save_track+0x3e/0x80
[ 1310.329964][    C1]  ? kasan_save_track+0x3e/0x80
[ 1310.329988][    C1]  ? __kasan_kmalloc+0x93/0xb0
[ 1310.330013][    C1]  ? __kmalloc_noprof+0x23e/0x7e0
[ 1310.330040][    C1]  ? raw_queue_event+0x83/0x2e0
[ 1310.330062][    C1]  ? gadget_suspend+0x51/0xf0
[ 1310.330083][    C1]  ? set_link_state+0xb9b/0x1220
[ 1310.330104][    C1]  ? dummy_pullup+0xc9/0x1e0
[ 1310.330124][    C1]  ? usb_gadget_disconnect_locked+0x143/0x490
[ 1310.330148][    C1]  ? gadget_unbind_driver+0xc7/0x460
[ 1310.330174][    C1]  ? device_release_driver_internal+0x46f/0x800
[ 1310.330243][    C1]  ? __slab_alloc+0xc6/0x1f0
[ 1310.330266][    C1]  __kasan_kmalloc+0x93/0xb0
[ 1310.330295][    C1]  __kmalloc_noprof+0x23e/0x7e0
[ 1310.330322][    C1]  ? raw_queue_event+0x83/0x2e0
[ 1310.330352][    C1]  raw_queue_event+0x83/0x2e0
[ 1310.330382][    C1]  gadget_suspend+0x51/0xf0
[ 1310.330413][    C1]  ? __pfx_gadget_suspend+0x10/0x10
[ 1310.330437][    C1]  set_link_state+0xb9b/0x1220
[ 1310.330474][    C1]  dummy_pullup+0xc9/0x1e0
[ 1310.330496][    C1]  ? __pfx_dummy_pullup+0x10/0x10
[ 1310.330521][    C1]  usb_gadget_disconnect_locked+0x143/0x490
[ 1310.330553][    C1]  gadget_unbind_driver+0xc7/0x460
[ 1310.330584][    C1]  ? __pfx_gadget_unbind_driver+0x10/0x10
[ 1310.330614][    C1]  device_release_driver_internal+0x46f/0x800
[ 1310.330641][    C1]  driver_detach+0x1f3/0x2d0
[ 1310.330663][    C1]  bus_remove_driver+0x229/0x320
[ 1310.330690][    C1]  ? __pfx_raw_release+0x10/0x10
[ 1310.330714][    C1]  usb_gadget_unregister_driver+0x4e/0x70
[ 1310.330744][    C1]  raw_release+0xd2/0x260
[ 1310.330771][    C1]  __fput+0x45b/0xa80
[ 1310.330808][    C1]  task_work_run+0x1d4/0x260
[ 1310.330842][    C1]  ? __pfx_task_work_run+0x10/0x10
[ 1310.330872][    C1]  ? rt_spin_unlock+0x161/0x200
[ 1310.330903][    C1]  do_exit+0x6c5/0x2310
[ 1310.330932][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1310.330971][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1310.330996][    C1]  ? rt_mutex_slowunlock+0x493/0x8a0
[ 1310.331018][    C1]  ? rt_spin_lock+0x1c1/0x3e0
[ 1310.331056][    C1]  do_group_exit+0x21c/0x2d0
[ 1310.331085][    C1]  ? rt_spin_unlock+0x161/0x200
[ 1310.331111][    C1]  get_signal+0x125d/0x1310
[ 1310.331160][    C1]  arch_do_signal_or_restart+0x9a/0x7a0
[ 1310.331194][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1310.331222][    C1]  ? do_sys_openat2+0x15a/0x200
[ 1310.331261][    C1]  ? exit_to_user_mode_loop+0x55/0x4f0
[ 1310.331292][    C1]  exit_to_user_mode_loop+0x87/0x4f0
[ 1310.331318][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1310.331344][    C1]  do_syscall_64+0x2d0/0xf80
[ 1310.331374][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1310.331405][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1310.331431][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1310.331451][    C1] RIP: 0033:0x7f2af1fcf749
[ 1310.331468][    C1] RSP: 002b:00007f2af0236038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1310.331488][    C1] RAX: 0000000000000005 RBX: 00007f2af2225fa0 RCX: 00007f2af1fcf749
[ 1310.331502][    C1] RDX: 0000000000002501 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1310.331517][    C1] RBP: 00007f2af2053f91 R08: 0000000000000000 R09: 0000000000000000
[ 1310.331531][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1310.331544][    C1] R13: 00007f2af2226038 R14: 00007f2af2225fa0 R15: 00007ffd78cbfb18
[ 1310.331580][    C1]  </TASK>
[ 1310.331589][    C1] task:kworker/u8:18   state:R  running task     stack:20584 pid:12505 tgid:12505 ppid:2      task_flags:0x4208160 flags:0x00080000
[ 1310.331648][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[ 1310.331674][    C1] Call Trace:
[ 1310.331682][    C1]  <TASK>
[ 1310.331695][    C1]  __schedule+0x1480/0x50a0
[ 1310.331754][    C1]  ? __pfx___schedule+0x10/0x10
[ 1310.331791][    C1]  ? irqentry_exit+0x5dd/0x660
[ 1310.331818][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[ 1310.331851][    C1]  preempt_schedule_notrace+0xd1/0x110
[ 1310.331878][    C1]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[ 1310.331914][    C1]  preempt_schedule_notrace_thunk+0x16/0x30
[ 1310.331939][    C1]  ? __local_bh_disable_ip+0xa1/0x530
[ 1310.331967][    C1]  rcu_is_watching+0x7f/0xb0
[ 1310.331988][    C1]  __local_bh_disable_ip+0x315/0x530
[ 1310.332017][    C1]  ? __local_bh_disable_ip+0xa1/0x530
[ 1310.332038][    C1]  ? __alloc_skb+0x200/0x430
[ 1310.332067][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[ 1310.332092][    C1]  ? rt_spin_lock+0x1c1/0x3e0
[ 1310.332126][    C1]  ? __alloc_skb+0x200/0x430
[ 1310.332156][    C1]  __alloc_skb+0x20d/0x430
[ 1310.332189][    C1]  ? __pfx___alloc_skb+0x10/0x10
[ 1310.332226][    C1]  ? rt_spin_unlock+0x161/0x200
[ 1310.332252][    C1]  nsim_dev_trap_report_work+0x29f/0xbc0
[ 1310.332297][    C1]  ? process_scheduled_works+0x9ef/0x1770
[ 1310.332323][    C1]  process_scheduled_works+0xad1/0x1770
[ 1310.332379][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1310.332432][    C1]  worker_thread+0x8a0/0xda0
[ 1310.332459][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1310.332497][    C1]  ? __kthread_parkme+0x7b/0x200
[ 1310.332534][    C1]  kthread+0x711/0x8a0
[ 1310.332566][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1310.332590][    C1]  ? __pfx_kthread+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1310.332614][    C1]  ? rt_spin_unlock+0x150/0x200
[ 1310.332640][    C1]  ? rt_spin_unlock+0x161/0x200
[ 1310.332660][    C1]  ? __pfx_kthread+0x10/0x10
[ 1310.332689][    C1]  ret_from_fork+0x599/0xb30
[ 1310.332715][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1310.332751][    C1]  ? __switch_to_asm+0x39/0x70
[ 1310.332777][    C1]  ? __switch_to_asm+0x33/0x70
[ 1310.332803][    C1]  ? __pfx_kthread+0x10/0x10
[ 1310.332832][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1310.332880][    C1]  </TASK>