last executing test programs:

13m45.935408836s ago: executing program 32 (id=442):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0xfffffffd, 0x3, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x2043, 0x4, 0x2, 0x3}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000140)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008040}, 0x8c4)

12m35.513252567s ago: executing program 3 (id=784):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)

12m34.232457693s ago: executing program 3 (id=788):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r1}, &(0x7f0000000940), &(0x7f0000000980)=r1}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20)

12m33.943598777s ago: executing program 3 (id=790):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x102, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="140100003000010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

12m31.826190525s ago: executing program 3 (id=798):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00')

12m31.207558005s ago: executing program 3 (id=804):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc8}}}, 0x6)
socketpair(0x1, 0x2, 0x0, 0x0)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
removexattr(0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

12m26.893763752s ago: executing program 3 (id=823):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000002180)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000002200)='wchan\x00')
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r3, 0x0)
pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4)

12m26.170690927s ago: executing program 33 (id=823):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000002180)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000002200)='wchan\x00')
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r3, 0x0)
pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4)

11m20.249377859s ago: executing program 2 (id=1175):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/lo/statistics/rx_frame_errors\x00', 0x0, 0x0)
read(r0, &(0x7f0000000100), 0x100)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/virtual/net/lo/statistics/rx_frame_errors\x00', 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x100)
close(r1)

11m19.813883953s ago: executing program 2 (id=1178):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f0000000200)='m', 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r2, &(0x7f0000000200)="a3", 0x1)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040))

11m18.708172508s ago: executing program 2 (id=1181):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x254fe)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r2, &(0x7f0000000240)=""/238, 0xee, 0x20, 0x0, 0x0)

11m18.287229053s ago: executing program 2 (id=1182):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

11m15.952595512s ago: executing program 2 (id=1185):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000380)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500)=0x2000000, &(0x7f0000000440)=r1}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r0, &(0x7f0000000040), 0x0}, 0x20)

11m15.08433183s ago: executing program 2 (id=1191):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000005600)={0x1, [{0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0xefc, 0x0}, {0x1, 0x0, 0x29, 0x0}, {0x0, 0x0, 0xc, 0x0}, {0x2, 0x7a18, 0xfffffff7, &(0x7f00000020c0)="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"}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0xc, 0x0}, {0x1, 0x0, 0x100, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0xffff, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x523, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1, 0x0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x40}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0xf000, 0xffff, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x1})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002000)={[], 0x0, 0x20002})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11m14.807985821s ago: executing program 34 (id=1191):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000005600)={0x1, [{0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0xefc, 0x0}, {0x1, 0x0, 0x29, 0x0}, {0x0, 0x0, 0xc, 0x0}, {0x2, 0x7a18, 0xfffffff7, &(0x7f00000020c0)="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"}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0xc, 0x0}, {0x1, 0x0, 0x100, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0xffff, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x523, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1, 0x0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x40}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0xf000, 0xffff, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x1})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002000)={[], 0x0, 0x20002})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10m55.413169068s ago: executing program 4 (id=1260):
socket$inet(0x2, 0x3, 0x2)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa1, 0xffffffff, 0xda, 0x6, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x8, 0x3, 0x3, 0x882e, 0x8, 0x6, 0x4, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x3fc, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x8, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x20d5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x5, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffffe, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x1, 0x0, 0x8, 0x5, 0x8001, 0x4, 0x1, 0xfff, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x4, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0x200, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0xd06, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0x1a, 0x7, 0x6, 0x4, 0x7ff, 0xfe, 0xfffffffc, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x8, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x6b2, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x8, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x80000000, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x2, 0xa, 0x6, 0x2, 0x6, 0x8, 0x8000048, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x1, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

10m54.670607156s ago: executing program 4 (id=1263):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffe8f, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x2000)
newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000)

10m54.346413823s ago: executing program 4 (id=1266):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000})

10m53.378931012s ago: executing program 4 (id=1271):
mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)

10m53.277179436s ago: executing program 4 (id=1272):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10)

10m48.382412267s ago: executing program 4 (id=1293):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
syz_emit_ethernet(0x80, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x1c, 0x66, 0x0, 0xf, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0)

10m47.578886193s ago: executing program 35 (id=1293):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
syz_emit_ethernet(0x80, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x1c, 0x66, 0x0, 0xf, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0)

7m4.596274866s ago: executing program 6 (id=2496):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="5000508011000100ec3bd87b59ecb393bce7f9ac6700000009000100c8803781500000000400060007000400478d000005000900020000000c0008"], 0xa8}, 0x1, 0x0, 0x0, 0x20080000}, 0x40000)

7m3.946743901s ago: executing program 6 (id=2498):
r0 = io_uring_setup(0x136a, &(0x7f00000001c0)={0x0, 0xd7e7, 0x40, 0x1, 0xef})
unshare(0x22020600)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x2000000, 0x1, 0x0, 0x0, 0x1, 0x80000003, 0x0, 0xfffffffc], [0x8, 0xfffffffe, 0x0, 0x2, 0xfffffffd, 0x0, 0x2, 0xfffffffd]], '\x00', [{0xfffffffe, 0xf8}, {}, {0xffffffff, 0x10000}, {0xfffffff, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0x0, 0x4004}, {0x0, 0x7f}, {0x2}, {0x0, 0x8}, {0x401, 0xfffffffc}], '\x00', 0x1, 0x0, 0x0, 0xf8})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl(r2, 0x4048aec9, &(0x7f0000000140)="030000000000000001000000050000000000000001")
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)

7m2.709510827s ago: executing program 6 (id=2503):
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x27cb, &(0x7f0000000180)={0x0, 0x800069ec, 0x3000, 0x3, 0x166}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

7m2.267702913s ago: executing program 6 (id=2507):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

7m0.86739336s ago: executing program 6 (id=2514):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000085000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x4000, 0x1})

6m56.925847344s ago: executing program 1 (id=2533):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x1, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

6m56.476123308s ago: executing program 1 (id=2537):
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20009825}, 0x40040c0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r2, 0x40047438, &(0x7f0000000040))
readv(r2, &(0x7f0000000280), 0x37)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0)

6m56.240846861s ago: executing program 6 (id=2539):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4)

6m55.676678648s ago: executing program 36 (id=2539):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4)

6m55.656742853s ago: executing program 1 (id=2544):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000300)={0xc0, 0x0, 0x4000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x280000a, 0x31, r2, 0xfd5e6000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m54.402329195s ago: executing program 1 (id=2550):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT=r0], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

6m53.353323067s ago: executing program 1 (id=2554):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10f)
write(r1, &(0x7f0000000000)='7', 0x1)
accept(r0, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101801)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)

6m52.776157179s ago: executing program 1 (id=2555):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, 0x0, 0x0)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4a}]}, 0x24}, 0x1, 0x0, 0x0, 0x20050881}, 0x40050)
write$nci(r0, 0x0, 0x0)

6m37.509829279s ago: executing program 37 (id=2555):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, 0x0, 0x0)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4a}]}, 0x24}, 0x1, 0x0, 0x0, 0x20050881}, 0x40050)
write$nci(r0, 0x0, 0x0)

10.326274734s ago: executing program 9 (id=4111):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x24000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x112)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000000)=0x4a3, 0x4)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

10.293188028s ago: executing program 7 (id=4112):
r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6f, 0x0, 0x7fff0000}]})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r3, 0x5b03, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

10.260733381s ago: executing program 8 (id=4114):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x4745]}, 0x8)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@rand_addr=0x64010102}]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, 0x0, &(0x7f0000000000))
ioctl$int_out(r0, 0x5460, &(0x7f00000000c0))
mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0)
fsopen(&(0x7f0000000240)='btrfs\x00', 0x1)
socket$alg(0x26, 0x5, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000005c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@quota}]})

9.779779829s ago: executing program 5 (id=4116):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
close(r1)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

9.572696393s ago: executing program 7 (id=4117):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20040840)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x20000255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x2, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x252, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x29ae9b63a7468d04, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

8.262910669s ago: executing program 5 (id=4119):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

8.255723339s ago: executing program 8 (id=4120):
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0400001920bb"], 0x7)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x94}, @l2cap_cid_signaling={{0x90}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0xc4c9}}, @l2cap_move_chan_rsp={{0xf, 0x72, 0x4}, {0x9444, 0x3}}, @l2cap_create_chan_req={{0xc, 0xfa, 0x5}, {0xff, 0x7, 0xc}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x6, 0x7}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x2}}, @l2cap_info_rsp={{0xb, 0x1, 0x68}, {0xfffa, 0x9, "28c5a633579b381cd395af20f32103442a695fe8c64a72800f0a6c4ed7bd262b1e83e2664f4b9ea75eb21329ce6ec5a66886a66fbc325b780fefa2ac7b7e3692200ca5d6bdf6615c0fb73040642727481834d2309c566e0016ee17c08fd0688f1921fecc"}}]}}, 0x99)
r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000100)='oom_score_adj\x00')
syz_usb_disconnect(0xffffffffffffffff)
write$sysctl(r2, &(0x7f0000000200)='5\x00', 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40)

8.126383097s ago: executing program 0 (id=4121):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340))
r4 = dup(r3)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4})
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1})

7.850401372s ago: executing program 9 (id=4122):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x62, 0x0, 0x7, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, {{0x6e22, 0x4, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x606d, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "0e95cd0fb083e7d135ecec0400000041"}]}}}}}}}, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000011c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x9)
socket$inet(0x2, 0x4000000000000001, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0)

7.749306783s ago: executing program 0 (id=4123):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_io_uring_setup(0x61, &(0x7f0000000300)={0x0, 0xd004, 0x2, 0xfffffb, 0x29c}, 0x0, 0x0, 0x0)

7.582792233s ago: executing program 9 (id=4124):
socket$nl_netfilter(0x10, 0x3, 0xc)
open(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
setpriority(0x0, 0x1, 0xa7a8)
gettid()
futex(&(0x7f000000cffc)=0x1, 0x6, 0xfffffffe, 0x0, 0x0, 0xfffffffc)

7.0703573s ago: executing program 8 (id=4125):
r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x440, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be4248cdc138408ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c590bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r1, 0x0, 0xe, 0x0, &(0x7f0000000880)="3a173357f297c605804ab3828443", 0x0, 0x8cfd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0)

7.038562044s ago: executing program 7 (id=4126):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000003, 0x200000e, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000003580)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000a6", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x4, 0x23ff, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x95, {}, {}, @raw32}], 0xffc8)

6.725233502s ago: executing program 0 (id=4127):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x15})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = syz_open_dev$evdev(&(0x7f0000000440), 0x72, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000500)={0x50, 0x3ff, 0x1d, {0x1000, 0xfffe}, {0x8000, 0x61a3}, @period={0x5c, 0x0, 0x3, 0xff80, 0xfff7, {0x3, 0x9, 0xd8c, 0x389}, 0x0, 0x0}})
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
semop(0x0, 0x0, 0x0)

6.718896709s ago: executing program 7 (id=4128):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0)
sendfile(r3, r1, 0x0, 0x100000000)

6.614848283s ago: executing program 8 (id=4129):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800)
r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x3c7, 0x0, r0}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000001080)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x110a}, 0x1})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
listen(r6, 0x0)
accept4(r6, 0x0, 0x0, 0x80800)

6.590817922s ago: executing program 0 (id=4130):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
read$alg(r2, &(0x7f0000002300)=""/4128, 0x1020)
sendmmsg$alg(r2, &(0x7f0000001080)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24018000}], 0x1, 0x404c0d1)

6.509250835s ago: executing program 5 (id=4131):
syz_ublk_setup_io_uring(0x174c, 0x0, 0x0, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x3, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x3, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800})

6.460931657s ago: executing program 7 (id=4132):
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
gettid()
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1)
unshare(0x6020400)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r1, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad2107c752f91b25380987f70e06d038e7ff7fc6e5539b3264078b089b3b083468060890e0878f0e1ac6e70a9b3365959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d06ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7dafbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85800056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e1c7943a52a2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dab54c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb204c1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10746fc4090ac97b77e4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39956741d93768f5f71d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc07d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810930500ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab974c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca5987d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc660db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d154d8a5ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21e5ec68cb068ea88067d905ea917bb03eefdaebdeabf2c0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xffffffffffffff08}}, 0x1006)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f00000002c0)={{0x2, 0xfffffffe}, {0xffffffffffffffff, 0x8}, 0x100001, 0x2})

6.397195987s ago: executing program 9 (id=4133):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0)

4.986433275s ago: executing program 0 (id=4134):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9feddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
fcntl$setown(r1, 0x8, r0)

4.581353751s ago: executing program 8 (id=4135):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

4.580435174s ago: executing program 5 (id=4136):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x400000e0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000880)={0x0, 0xfffffffe, 0x800, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

3.44658157s ago: executing program 7 (id=4137):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f00000004c0)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
syz_ublk_setup_queues(r6, r5, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x4020, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_usb_disconnect(0xffffffffffffffff)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
io_uring_setup(0x7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0xc0000, 0x0, 0x19, 0x0, 0x0, 0x0)

3.365419292s ago: executing program 9 (id=4138):
r0 = socket$inet6(0xa, 0x1, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0)

1.90941844s ago: executing program 0 (id=4139):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
io_submit(0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0xa, 0x810, 0xffffffffffffffff, 0x0)
setresuid(0x0, 0xee01, 0x0)
socket(0xa, 0x3, 0xff)

1.793914516s ago: executing program 5 (id=4140):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x2)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1)

1.253495656s ago: executing program 9 (id=4141):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x3b8e, &(0x7f0000000000))
unshare(0x2040400)
syz_pidfd_open(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/instances/foo\x00', 0x1ff)

649.045686ms ago: executing program 5 (id=4142):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xf, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x5, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x6, 0x5, 0x0, 0x4, 0x0, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x3, 0x1, 0xf], [0x1, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x2, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x3ff, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x0, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000400)={0x0, 0x30b5, 0x400, 0x2, 0x154}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r7}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f41, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffe97d, 0x40000, 0x10001, 0x149}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x0, 0x0, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10, 0x2, 0x1f5}}], 0x1, &(0x7f0000000340)={0x2e, 0x2b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x5c0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

0s ago: executing program 8 (id=4143):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
socket$kcm(0x11, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x7, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x7, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x4, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x6, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x5}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x2}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x7, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x10, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x5, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x7f}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x0, 0x1}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

kernel console output (not intermixed with test programs):

x115/0x1e0
[  617.534527][T14276]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  617.534546][T14276]  ? security_inode_alloc+0xd5/0x310
[  617.534571][T14276]  ? inode_init_always_gfp+0x999/0xd40
[  617.534600][T14276]  sock_alloc_file+0xb8/0x2f0
[  617.534707][T14276]  do_accept+0x3ab/0x760
[  617.534736][T14276]  ? __pfx_do_accept+0x10/0x10
[  617.534777][T14276]  __sys_accept4+0x139/0x230
[  617.534803][T14276]  ? __pfx___sys_accept4+0x10/0x10
[  617.534844][T14276]  __x64_sys_accept+0x7d/0x90
[  617.534868][T14276]  do_syscall_64+0x166/0x520
[  617.534895][T14276]  ? trace_irq_disable+0x3b/0x140
[  617.534926][T14276]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.534950][T14276]  ? clear_bhb_loop+0x70/0xc0
[  617.534978][T14276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.535002][T14276] RIP: 0033:0x7f2aad71e159
[  617.535025][T14276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  617.535057][T14276] RSP: 002b:00007f2aab976028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  617.535082][T14276] RAX: ffffffffffffffda RBX: 00007f2aad9a5fa0 RCX: 00007f2aad71e159
[  617.535100][T14276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  617.535115][T14276] RBP: 00007f2aad7b506b R08: 0000000000000000 R09: 0000000000000000
[  617.535130][T14276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  617.535145][T14276] R13: 00007f2aad9a6038 R14: 00007f2aad9a5fa0 R15: 00007ffcf6bb9868
[  617.535177][T14276]  </TASK>
[  617.859972][ T5597] Bluetooth: hci1: command tx timeout
[  618.947166][T14291] vlan3: entered allmulticast mode
[  618.947473][T14291] bridge0: port 4(vlan3) entered blocking state
[  618.951010][T14291] bridge0: port 4(vlan3) entered disabled state
[  618.976170][T14291] vlan3: entered promiscuous mode
[  618.983391][T14236] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.983521][T14236] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.983701][T14236] bridge_slave_0: entered allmulticast mode
[  619.046662][T14236] bridge_slave_0: entered promiscuous mode
[  619.050689][T14236] bridge0: port 2(bridge_slave_1) entered blocking state
[  619.050924][T14236] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.051106][T14236] bridge_slave_1: entered allmulticast mode
[  619.053926][T14236] bridge_slave_1: entered promiscuous mode
[  619.254622][T14236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  619.280077][T14236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  619.383767][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2560'.
[  619.529569][ T7511] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  619.613025][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2560'.
[  619.753808][T14236] team0: Port device team_slave_0 added
[  619.788983][T14236] team0: Port device team_slave_1 added
[  619.930602][ T5597] Bluetooth: hci1: command tx timeout
[  620.061873][T14236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  620.061895][T14236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  620.061926][T14236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  620.067185][ T7511] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  620.243983][T14236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  620.244005][T14236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  620.244038][T14236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  620.787660][T14236] hsr_slave_0: entered promiscuous mode
[  620.792022][T14236] hsr_slave_1: entered promiscuous mode
[  620.812821][ T7550] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  620.813024][ T7550] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  620.813068][ T7550] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  622.016617][ T5597] Bluetooth: hci1: command tx timeout
[  622.688682][T14331] netlink: 'syz.5.2574': attribute type 1 has an invalid length.
[  623.236189][T14329] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.242225][T14329] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.299537][T14335] FAULT_INJECTION: forcing a failure.
[  623.299537][T14335] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  623.299578][T14335] CPU: 1 UID: 0 PID: 14335 Comm: syz.8.2575 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  623.299611][T14335] Tainted: [L]=SOFTLOCKUP
[  623.299619][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  623.299633][T14335] Call Trace:
[  623.299642][T14335]  <TASK>
[  623.299652][T14335]  dump_stack_lvl+0xe8/0x150
[  623.299692][T14335]  should_fail_ex+0x46b/0x600
[  623.299731][T14335]  prepare_alloc_pages+0x223/0x650
[  623.299777][T14335]  __alloc_frozen_pages_noprof+0x1a1/0x5c0
[  623.299816][T14335]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  623.299855][T14335]  ? __pfx_policy_nodemask+0x10/0x10
[  623.299883][T14335]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  623.299913][T14335]  alloc_pages_mpol+0xd4/0x280
[  623.299941][T14335]  folio_alloc_mpol_noprof+0x3b/0x1e0
[  623.299969][T14335]  vma_alloc_folio_noprof+0xe1/0x1e0
[  623.299998][T14335]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  623.300024][T14335]  ? do_pte_missing+0x1da5/0x28f0
[  623.300066][T14335]  do_pte_missing+0x835/0x28f0
[  623.300114][T14335]  handle_mm_fault+0xf64/0x28c0
[  623.300148][T14335]  ? handle_mm_fault+0xeb/0x28c0
[  623.300184][T14335]  ? __rcu_read_unlock+0x83/0xe0
[  623.300212][T14335]  ? __pfx_handle_mm_fault+0x10/0x10
[  623.300251][T14335]  ? lock_vma_under_rcu+0x45a/0x500
[  623.300313][T14335]  do_user_addr_fault+0xa4f/0x1340
[  623.300349][T14335]  ? trace_page_fault_user+0x84/0x1e0
[  623.300375][T14335]  exc_page_fault+0x6a/0xc0
[  623.300400][T14335]  asm_exc_page_fault+0x26/0x30
[  623.300421][T14335] RIP: 0033:0x7f2bb42d0082
[  623.300442][T14335] Code: 8d 15 13 1a 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41
[  623.300462][T14335] RSP: 002b:00007f2bb2564d20 EFLAGS: 00010286
[  623.300483][T14335] RAX: ffffffffffffffff RBX: 00007f2bac000000 RCX: 00007f2bb430df57
[  623.300501][T14335] RDX: 00007f2bb43c1a71 RSI: 0000000000021000 RDI: 00007f2bac000000
[  623.300517][T14335] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[  623.300532][T14335] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000
[  623.300547][T14335] R13: 0000000000001000 R14: 00007f2bb0000000 R15: 0000000001aba000
[  623.300581][T14335]  </TASK>
[  623.300975][T14335] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  623.938571][T14329] bridge_slave_0: left allmulticast mode
[  623.938609][T14329] bridge_slave_0: left promiscuous mode
[  623.939021][T14329] bridge0: port 1(bridge_slave_0) entered disabled state
[  624.119938][ T5597] Bluetooth: hci1: command tx timeout
[  624.244179][T14329] bridge_slave_1: left allmulticast mode
[  624.244217][T14329] bridge_slave_1: left promiscuous mode
[  624.244480][T14329] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.437442][T14329] bond0: (slave bond_slave_0): Releasing backup interface
[  624.526390][ T5735] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  624.528471][T14329] bond0: (slave bond_slave_1): Releasing backup interface
[  624.607484][T14329] team0: Port device team_slave_0 removed
[  624.650982][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  624.651068][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  624.680231][ T5735] usb 9-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  624.688917][ T5735] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  624.689008][ T5735] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  624.689067][ T5735] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  624.689103][ T5735] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9799, setting to 1024
[  624.689263][ T5735] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.769897][T14329] team0: Port device team_slave_1 removed
[  624.818861][T14341] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  624.819185][T14341] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  624.819383][T14341] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  624.874065][ T5735] pl2303 9-1:1.0: pl2303 converter detected
[  624.948982][T14329] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  624.992678][T14329] batman_adv: batadv0: Removing interface: batadv_slave_0
[  625.093594][T14329] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  625.119218][T14329] batman_adv: batadv0: Removing interface: batadv_slave_1
[  625.133736][ T5735] usb 9-1: pl2303 converter now attached to ttyUSB0
[  625.169299][ T5735] usb 9-1: USB disconnect, device number 9
[  625.195243][T14329] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  625.354551][ T5735] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  625.377941][ T5735] pl2303 9-1:1.0: device disconnected
[  625.437612][T14331] 8021q: adding VLAN 0 to HW filter on device bond2
[  625.573425][T14333] bond2: (slave geneve2): making interface the new active one
[  625.752076][T14333] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  625.952186][T14358] netlink: 'syz.5.2583': attribute type 4 has an invalid length.
[  625.990090][T14350] syz_tun: entered allmulticast mode
[  626.036933][T14359] netlink: 'syz.5.2583': attribute type 4 has an invalid length.
[  626.058289][T14351] dvmrp6: entered allmulticast mode
[  626.319804][T14348] syz_tun: left allmulticast mode
[  626.562606][ T5713] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  626.730177][ T5713] usb 9-1: New USB device found, idVendor=22b8, idProduct=2d99, bcdDevice=fb.a5
[  626.748668][ T5713] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.748697][ T5713] usb 9-1: Product: syz
[  626.748712][ T5713] usb 9-1: Manufacturer: syz
[  626.748728][ T5713] usb 9-1: SerialNumber: syz
[  627.055752][T14236] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  627.172992][ T5713] usb 9-1: USB disconnect, device number 10
[  627.241707][T14236] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  627.262162][T14236] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  627.356859][T14236] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  627.364120][T14236] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  627.544347][T14236] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  627.550675][T14236] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  627.630601][T14236] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  628.079042][T14236] 8021q: adding VLAN 0 to HW filter on device bond0
[  628.127739][T14236] 8021q: adding VLAN 0 to HW filter on device team0
[  628.194480][ T7532] bridge0: port 1(bridge_slave_0) entered blocking state
[  628.194634][ T7532] bridge0: port 1(bridge_slave_0) entered forwarding state
[  628.319067][ T7532] bridge0: port 2(bridge_slave_1) entered blocking state
[  628.321639][ T7532] bridge0: port 2(bridge_slave_1) entered forwarding state
[  628.718793][T14396] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2596'.
[  628.785552][T14397] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2596'.
[  628.967139][T14396] bond3: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms
[  628.978081][T14397] bond3: Unable to set peer notification delay as MII monitoring is disabled
[  630.910232][T14236] 8021q: adding VLAN 0 to HW filter on device batadv0
[  631.929878][T14236] veth0_vlan: entered promiscuous mode
[  632.072954][T14236] veth1_vlan: entered promiscuous mode
[  632.469839][T14236] veth0_macvtap: entered promiscuous mode
[  632.499131][T14236] veth1_macvtap: entered promiscuous mode
[  632.845522][T14236] batman_adv: batadv0: Interface activated: batadv_slave_0
[  633.224011][T14236] batman_adv: batadv0: Interface activated: batadv_slave_1
[  634.007214][ T7511] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  634.008576][ T7511] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  634.135972][ T5601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  634.192199][ T5601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  634.232464][ T5601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  634.306944][ T5601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  634.309139][ T5601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  635.153370][ T7511] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  635.191855][ T7511] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  636.414435][ T5597] Bluetooth: hci5: command tx timeout
[  637.002251][ T7550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  637.002278][ T7550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.145865][ T7522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  637.145889][ T7522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.238839][   T37] kauditd_printk_skb: 13 callbacks suppressed
[  637.238860][   T37] audit: type=1326 audit(1791021246.010:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14491 comm="syz.8.2620" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bb430e159 code=0x0
[  637.991435][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2542'.
[  638.067171][T14509] fuse: fd is not a fuse device
[  638.438272][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2627'.
[  638.438306][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2627'.
[  638.486951][ T5597] Bluetooth: hci5: command tx timeout
[  638.549746][T14473] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.549984][T14473] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.550216][T14473] bridge_slave_0: entered allmulticast mode
[  638.558496][T14473] bridge_slave_0: entered promiscuous mode
[  638.624934][T14473] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.625241][T14473] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.625465][T14473] bridge_slave_1: entered allmulticast mode
[  638.650545][T14473] bridge_slave_1: entered promiscuous mode
[  639.034236][T14473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  639.129519][T14473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  639.339425][T14473] team0: Port device team_slave_0 added
[  639.359476][T14473] team0: Port device team_slave_1 added
[  639.588420][T14473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  639.588441][T14473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  639.588473][T14473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  639.590811][T14473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  639.590835][T14473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  639.590863][T14473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  639.996619][T14473] hsr_slave_0: entered promiscuous mode
[  640.050099][T14473] hsr_slave_1: entered promiscuous mode
[  640.058525][T14473] debugfs: 'hsr0' already exists in 'hsr'
[  640.058603][T14473] Cannot create hsr debugfs directory
[  640.567126][ T5597] Bluetooth: hci5: command tx timeout
[  641.369075][   T31] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  641.512682][T14570] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2646'.
[  641.523711][   T31] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  641.562554][   T31] usb 10-1: config 1 has an invalid interface number: 3 but max is 0
[  641.562586][   T31] usb 10-1: config 1 has no interface number 0
[  641.600175][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.600208][   T31] usb 10-1: Product: syz
[  641.600226][   T31] usb 10-1: Manufacturer: syz
[  641.600243][   T31] usb 10-1: SerialNumber: syz
[  641.707621][T14570] bond0: (slave bond_slave_0): Releasing backup interface
[  641.751882][   T31] usb 10-1: 3:0 : does not exist
[  641.751917][   T31] usb 10-1: 3:0 : does not exist
[  642.319998][T14570] bond_slave_0: entered promiscuous mode
[  642.320033][T14570] bond_slave_0: entered allmulticast mode
[  642.511705][   T31] usb 10-1: USB disconnect, device number 2
[  642.650686][ T5597] Bluetooth: hci5: command tx timeout
[  643.385220][T14563] udevd[14563]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  643.617034][   T31] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  643.871037][   T31] usb 10-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00
[  643.872314][   T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  643.875640][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.875668][   T31] usb 10-1: Product: syz
[  643.875684][   T31] usb 10-1: Manufacturer: syz
[  643.875701][   T31] usb 10-1: SerialNumber: syz
[  643.977784][   T31] keyspan 10-1:1.0: Keyspan 1 port adapter converter detected
[  643.978087][   T31] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84
[  643.984941][   T31] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81
[  643.985001][   T31] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 82
[  643.985053][   T31] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1
[  643.985105][   T31] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2
[  643.985157][   T31] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 83
[  643.985210][   T31] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 3
[  644.095760][   T31] usb 10-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  644.479429][ T5785] usb 10-1: USB disconnect, device number 3
[  644.538625][ T5785] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  644.539479][ T5785] keyspan 10-1:1.0: device disconnected
[  644.774272][T14473] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  645.697455][ T5720] hid_parser_main: 7 callbacks suppressed
[  645.697573][ T5720] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  645.700776][ T5720] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  645.931891][T14638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2666'.
[  645.931923][T14638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2666'.
[  646.012095][ T5720] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  646.544636][T14641] fido_id[14641]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  648.756513][T14668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2674'.
[  648.902431][T14473] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  649.038713][T14668] 8021q: adding VLAN 0 to HW filter on device bond4
[  649.146348][T14670] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  649.299204][T14683] overlay: filesystem on ./file1 not supported
[  649.388122][T14673] bond4 (unregistering): (slave gretap2): Releasing backup interface
[  649.500868][T14673] bond4 (unregistering): Released all slaves
[  649.889736][T14701] program syz.9.2682 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  650.052193][T14704] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2683'.
[  650.339349][T14473] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.605662][T14711] fuse: fd is not a fuse device
[  650.626113][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2680'.
[  650.626149][T14695] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2680'.
[  650.626170][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2680'.
[  650.878845][T14695] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2680'.
[  650.878897][T14695] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2680'.
[  651.543076][ T7532] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  653.534738][T14473] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  654.219096][ T5597] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  654.303852][ T5597] Bluetooth: hci1: Injecting HCI hardware error event
[  654.379038][ T5597] Bluetooth: hci1: hardware error 0x00
[  657.542945][ T5597] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  658.197448][T14818] fuse: fd is not a fuse device
[  659.418245][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2715'.
[  659.555211][T14838] netlink: 'syz.8.2715': attribute type 10 has an invalid length.
[  660.013088][T14835] vlan0: entered promiscuous mode
[  660.013114][T14835] bond0: entered promiscuous mode
[  660.013127][T14835] bond_slave_1: entered promiscuous mode
[  660.958891][T14838] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  661.081220][T14838] netdevsim netdevsim8 netdevsim1: entered promiscuous mode
[  661.307915][T14838] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  661.880787][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2728'.
[  661.880819][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2728'.
[  663.724579][T14923] netlink: 348 bytes leftover after parsing attributes in process `syz.8.2735'.
[  664.346235][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  666.580284][T14473] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  666.628875][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  666.630008][T14473] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  666.981046][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  666.998400][T14473] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  667.122052][T14975] binder_alloc: 14974: binder_alloc_buf size -448 failed, no address space
[  667.122719][T14975] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  667.664104][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  667.708775][T14473] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  667.903823][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  668.325484][T14986] FAULT_INJECTION: forcing a failure.
[  668.325484][T14986] name failslab, interval 1, probability 0, space 0, times 0
[  668.325531][T14986] CPU: 0 UID: 0 PID: 14986 Comm: syz.9.2753 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  668.325565][T14986] Tainted: [L]=SOFTLOCKUP
[  668.325575][T14986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  668.325591][T14986] Call Trace:
[  668.325601][T14986]  <TASK>
[  668.325612][T14986]  dump_stack_lvl+0xe8/0x150
[  668.325657][T14986]  should_fail_ex+0x46b/0x600
[  668.325699][T14986]  should_failslab+0xa8/0x100
[  668.325727][T14986]  __kmalloc_noprof+0xfb/0x790
[  668.325760][T14986]  ? full_name_hash+0x92/0xe0
[  668.325785][T14986]  ? start_sync_thread+0xa9a/0x2880
[  668.325900][T14986]  ? start_sync_thread+0xa9a/0x2880
[  668.325937][T14986]  start_sync_thread+0xa9a/0x2880
[  668.325969][T14986]  ? __lock_acquire+0x747/0x2de0
[  668.326006][T14986]  ? __lock_acquire+0x747/0x2de0
[  668.326036][T14986]  ? __pfx_sync_thread_backup+0x10/0x10
[  668.326076][T14986]  ? do_raw_spin_lock+0x12b/0x2f0
[  668.326103][T14986]  ? __pfx_start_sync_thread+0x10/0x10
[  668.326132][T14986]  ? lock_acquire+0x115/0x350
[  668.326190][T14986]  do_ip_vs_set_ctl+0x4b5/0xaf0
[  668.326227][T14986]  ? __pfx_do_ip_vs_set_ctl+0x10/0x10
[  668.326273][T14986]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  668.326321][T14986]  ? nf_setsockopt+0x221/0x290
[  668.326388][T14986]  nf_setsockopt+0x26f/0x290
[  668.326416][T14986]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  668.326453][T14986]  smc_setsockopt+0x232/0xb00
[  668.326551][T14986]  ? __pfx_smc_setsockopt+0x10/0x10
[  668.326600][T14986]  ? __fget_files+0x2a/0x420
[  668.326624][T14986]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  668.326648][T14986]  ? __pfx_smc_setsockopt+0x10/0x10
[  668.326682][T14986]  do_sock_setsockopt+0x17c/0x1b0
[  668.326711][T14986]  __x64_sys_setsockopt+0x143/0x1b0
[  668.326742][T14986]  do_syscall_64+0x166/0x520
[  668.326766][T14986]  ? trace_irq_disable+0x3b/0x140
[  668.326795][T14986]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.326820][T14986]  ? clear_bhb_loop+0x70/0xc0
[  668.326855][T14986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.326877][T14986] RIP: 0033:0x7fe315eae159
[  668.326899][T14986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  668.326919][T14986] RSP: 002b:00007fe314106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  668.326944][T14986] RAX: ffffffffffffffda RBX: 00007fe316135fa0 RCX: 00007fe315eae159
[  668.326961][T14986] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000004
[  668.326976][T14986] RBP: 00007fe315f4506b R08: 0000000000000018 R09: 0000000000000000
[  668.326990][T14986] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000000
[  668.327005][T14986] R13: 00007fe316136038 R14: 00007fe316135fa0 R15: 00007ffd761eba98
[  668.327041][T14986]  </TASK>
[  671.589268][ T7550] bridge_slave_1: left allmulticast mode
[  671.589313][ T7550] bridge_slave_1: left promiscuous mode
[  671.589602][ T7550] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.747874][ T7550] bridge_slave_0: left allmulticast mode
[  671.747939][ T7550] bridge_slave_0: left promiscuous mode
[  671.748223][ T7550] bridge0: port 1(bridge_slave_0) entered disabled state
[  674.918698][ T7550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  674.988375][ T7550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  675.058145][ T7550] bond0 (unregistering): Released all slaves
[  675.236375][   T69] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  675.236433][   T69] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  675.236476][   T69] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  675.287135][ T7538] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  675.682476][ T7550] tipc: Disabling bearer <udp:syz0>
[  675.682576][T15102] overlayfs: failed to clone upperpath
[  675.683741][ T7550] tipc: Left network mode
[  675.717653][T14473] 8021q: adding VLAN 0 to HW filter on device bond0
[  675.994263][T14473] 8021q: adding VLAN 0 to HW filter on device team0
[  678.814635][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.814781][ T7538] bridge0: port 1(bridge_slave_0) entered forwarding state
[  678.923063][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state
[  678.923194][ T7538] bridge0: port 2(bridge_slave_1) entered forwarding state
[  679.304152][T15122] ubi0: attaching mtd0
[  679.529752][T15122] ubi0: scanning is finished
[  679.529845][T15122] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  681.886113][T14473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  681.982527][T15170] vlan2: entered allmulticast mode
[  681.982555][T15170] bridge_slave_0: entered allmulticast mode
[  681.982935][T15170] bridge0: port 1(vlan2) entered blocking state
[  681.983226][T15170] bridge0: port 1(vlan2) entered disabled state
[  682.024737][T15170] vlan2: entered promiscuous mode
[  682.024765][T15170] bridge_slave_0: entered promiscuous mode
[  682.472791][T14473] veth0_vlan: entered promiscuous mode
[  682.492669][T14473] veth1_vlan: entered promiscuous mode
[  683.282319][T14473] veth0_macvtap: entered promiscuous mode
[  683.324140][T14473] veth1_macvtap: entered promiscuous mode
[  683.395849][T14473] batman_adv: batadv0: Interface activated: batadv_slave_0
[  683.450035][T14473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  683.537311][   T56] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  683.603715][T15208] netlink: 'syz.5.2807': attribute type 4 has an invalid length.
[  683.645302][T15210] netlink: 'syz.5.2807': attribute type 4 has an invalid length.
[  683.738384][T15122] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  684.668278][ T7519] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  684.694514][   T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  684.694862][   T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  685.126119][ T7550] hsr_slave_0: left promiscuous mode
[  685.183725][ T7550] hsr_slave_1: left promiscuous mode
[  685.194451][ T7550] batman_adv: batadv0: Removing interface: batadv_slave_0
[  685.228303][ T7550] batman_adv: batadv0: Removing interface: batadv_slave_1
[  686.089996][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  686.090065][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  687.486357][ T5700] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  687.648557][ T5700] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  687.650585][ T5700] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  687.650632][ T5700] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.695906][ T5700] usb 10-1: config 0 descriptor??
[  687.920285][ T5700] usbhid 10-1:0.0: can't add hid device: -71
[  687.920430][ T5700] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  687.995732][ T5700] usb 10-1: USB disconnect, device number 4
[  688.566941][ T5700] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  688.717234][ T5700] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  688.893041][ T5700] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  688.893105][ T5700] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.946065][ T5700] usb 10-1: config 0 descriptor??
[  689.819837][ T5700] aiptek 10-1:0.0: Aiptek using 400 ms programming speed
[  689.848974][ T5700] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input14
[  689.983929][ T7550] team0 (unregistering): Port device team_slave_1 removed
[  690.349772][ T7550] team0 (unregistering): Port device team_slave_0 removed
[  691.181710][ T5700] usb 10-1: USB disconnect, device number 5
[  691.181802][    C0] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  692.047999][ T5700] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  692.120530][T15237] vlan2: entered allmulticast mode
[  692.120870][T15237] bridge0: port 3(vlan2) entered blocking state
[  692.122468][T15237] bridge0: port 3(vlan2) entered disabled state
[  692.125545][T15237] vlan2: entered promiscuous mode
[  692.234001][T15322] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2821'.
[  692.236084][ T5700] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  692.392783][ T5700] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  692.392824][ T5700] usb 10-1: config 0 has no interfaces?
[  692.392858][ T5700] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.498425][ T5700] usb 10-1: config 0 descriptor??
[  692.977366][ T7519] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  693.468913][ T9792] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  693.798502][ T9792] usb 9-1: Using ep0 maxpacket: 32
[  693.806967][ T9792] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  693.809014][ T9792] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  693.809038][ T9792] usb 9-1: config 0 has no interface number 0
[  693.809078][ T9792] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  693.809098][ T9792] usb 9-1: config 0 interface 1 has no altsetting 0
[  694.056455][ T9792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.056488][ T9792] usb 9-1: Product: syz
[  694.056506][ T9792] usb 9-1: Manufacturer: syz
[  694.056524][ T9792] usb 9-1: SerialNumber: syz
[  694.116471][ T9792] usb 9-1: config 0 descriptor??
[  694.445720][ T9792] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  694.570615][ T9792] cx231xx 9-1:0.1: Failed to read PCB config
[  694.570833][ T9792] cx231xx 9-1:0.1: probe with driver cx231xx failed with error -71
[  694.594868][ T9792] usb 9-1: USB disconnect, device number 11
[  694.713838][ T5720] usb 10-1: USB disconnect, device number 6
[  695.216392][ T9792] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  695.390369][ T9792] usb 9-1: Using ep0 maxpacket: 32
[  695.418691][ T9792] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  695.420695][ T9792] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  695.420725][ T9792] usb 9-1: config 0 has no interface number 0
[  695.420772][ T9792] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  695.420797][ T9792] usb 9-1: config 0 interface 1 has no altsetting 0
[  695.486537][ T9792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.486564][ T9792] usb 9-1: Product: syz
[  695.486578][ T9792] usb 9-1: Manufacturer: syz
[  695.486592][ T9792] usb 9-1: SerialNumber: syz
[  695.556035][ T9792] usb 9-1: config 0 descriptor??
[  695.577798][T15346] overlayfs: failed to clone upperpath
[  695.799327][ T9792] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  695.845990][ T9792] cx231xx 9-1:0.1: bad scenario!!!!!
[  695.845990][ T9792] config_info=0
[  695.846051][ T9792] cx231xx 9-1:0.1: Failed to read PCB config
[  696.019708][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  696.168937][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  696.212208][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  696.230165][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  696.262612][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  696.397687][T15331] usb 9-1: USB disconnect, device number 12
[  697.137185][ T7550] IPVS: stop unused estimator thread 0...
[  697.633905][T15377] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  698.423170][ T5252] 8021q: adding VLAN 0 to HW filter on device eth1
[  698.662334][ T5597] Bluetooth: hci0: command tx timeout
[  698.665056][T15393] FAULT_INJECTION: forcing a failure.
[  698.665056][T15393] name failslab, interval 1, probability 0, space 0, times 0
[  698.665100][T15393] CPU: 0 UID: 0 PID: 15393 Comm: syz.8.2839 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  698.665134][T15393] Tainted: [L]=SOFTLOCKUP
[  698.665144][T15393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  698.665159][T15393] Call Trace:
[  698.665170][T15393]  <TASK>
[  698.665181][T15393]  dump_stack_lvl+0xe8/0x150
[  698.665225][T15393]  should_fail_ex+0x46b/0x600
[  698.665266][T15393]  should_failslab+0xa8/0x100
[  698.665294][T15393]  __kmalloc_node_track_caller_noprof+0xfb/0x7b0
[  698.665331][T15393]  ? x509_cert_parse+0x2ee/0x7a0
[  698.665357][T15393]  ? x509_cert_parse+0x2ee/0x7a0
[  698.665398][T15393]  kmemdup_noprof+0x2b/0x70
[  698.665427][T15393]  x509_cert_parse+0x2ee/0x7a0
[  698.665466][T15393]  x509_key_preparse+0x64/0x6d0
[  698.665496][T15393]  ? __pfx_smack_key_permission+0x10/0x10
[  698.665526][T15393]  asymmetric_key_preparse+0xb9/0x1b0
[  698.665567][T15393]  __key_create_or_update+0x3a9/0xa80
[  698.665604][T15393]  ? __pfx___key_create_or_update+0x10/0x10
[  698.665637][T15393]  ? lookup_user_key+0xb68/0x1150
[  698.665688][T15393]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  698.665737][T15393]  key_create_or_update+0x42/0x60
[  698.665768][T15393]  __se_sys_add_key+0x349/0x420
[  698.665806][T15393]  ? __pfx___se_sys_add_key+0x10/0x10
[  698.665850][T15393]  ? __x64_sys_add_key+0x20/0xc0
[  698.665885][T15393]  do_syscall_64+0x166/0x520
[  698.665911][T15393]  ? trace_irq_disable+0x3b/0x140
[  698.665942][T15393]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.665979][T15393]  ? clear_bhb_loop+0x70/0xc0
[  698.666006][T15393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.666030][T15393] RIP: 0033:0x7f2bb430e159
[  698.666052][T15393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  698.666073][T15393] RSP: 002b:00007f2bb2566028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  698.666099][T15393] RAX: ffffffffffffffda RBX: 00007f2bb4595fa0 RCX: 00007f2bb430e159
[  698.666118][T15393] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  698.666134][T15393] RBP: 00007f2bb43a506b R08: ffffffffffffffff R09: 0000000000000000
[  698.666151][T15393] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  698.666170][T15393] R13: 00007f2bb4596038 R14: 00007f2bb4595fa0 R15: 00007fff61fc0d28
[  698.666206][T15393]  </TASK>
[  700.748106][   T37] audit: type=1804 audit(1791021309.450:239): pid=15443 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.2850" name="/newroot/45/file0" dev="tmpfs" ino=255 res=1 errno=0
[  700.748777][ T5597] Bluetooth: hci0: command tx timeout
[  700.837189][T15443] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1
[  700.837219][T15443] ref_ctr increment failed for inode: 0xff offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807aa81a00
[  701.080633][T15436] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1
[  701.080658][T15436] ref_ctr decrement failed for inode: 0xff offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807aa81a00
[  701.121083][T15436] uprobe: syz.9.2850:15436 failed to unregister, leaking uprobe
[  701.191363][ T7550] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  701.842632][ T5252] 8021q: adding VLAN 0 to HW filter on device eth2
[  702.807793][ T5597] Bluetooth: hci0: command tx timeout
[  704.433541][ T7550] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.737504][T15499] fuse-io-uring is disabled by module parameter
[  704.897175][ T5597] Bluetooth: hci0: command tx timeout
[  707.517996][ T7550] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.671157][ T5252] 8021q: adding VLAN 0 to HW filter on device eth3
[  709.756552][ T7550] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.182918][T15344] bridge0: port 1(bridge_slave_0) entered blocking state
[  710.183148][T15344] bridge0: port 1(bridge_slave_0) entered disabled state
[  710.183405][T15344] bridge_slave_0: entered allmulticast mode
[  710.213272][T15344] bridge_slave_0: entered promiscuous mode
[  710.248798][T15344] bridge0: port 2(bridge_slave_1) entered blocking state
[  710.334690][T15344] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.334940][T15344] bridge_slave_1: entered allmulticast mode
[  710.355772][T15344] bridge_slave_1: entered promiscuous mode
[  710.925370][T15344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  711.000724][T15344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  712.052328][T15344] team0: Port device team_slave_0 added
[  712.069146][ T5252] 8021q: adding VLAN 0 to HW filter on device eth4
[  712.134221][T15344] team0: Port device team_slave_1 added
[  712.557329][T15606] syz_tun: entered allmulticast mode
[  712.693690][T15344] batman_adv: batadv0: Adding interface: batadv_slave_0
[  712.693712][T15344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  712.693746][T15344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  712.695735][T15606] syz_tun: left allmulticast mode
[  712.896103][T15344] batman_adv: batadv0: Adding interface: batadv_slave_1
[  712.896125][T15344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  712.931585][T15344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  714.036245][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  714.056229][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  714.066215][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  714.076216][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  714.086222][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  714.096220][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  714.106220][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  714.116225][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  714.126221][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  714.635063][T15643] CIFS: Attempting to mount //127.0.0.1/share
[  714.690669][T15642] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2901'.
[  715.545447][ T7513] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  715.827438][T15344] hsr_slave_0: entered promiscuous mode
[  715.829720][T15344] hsr_slave_1: entered promiscuous mode
[  715.974890][T15643] CIFS: VFS: Error connecting to socket. Aborting operation.
[  715.975070][T15643] CIFS: VFS: cifs_mount failed w/return code = -4
[  716.047005][T15344] debugfs: 'hsr0' already exists in 'hsr'
[  716.047055][T15344] Cannot create hsr debugfs directory
[  717.283568][ T7550] bridge_slave_1: left allmulticast mode
[  717.283611][ T7550] bridge_slave_1: left promiscuous mode
[  717.283912][ T7550] bridge0: port 2(bridge_slave_1) entered disabled state
[  717.326560][ T9775] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  717.419525][ T7550] bridge_slave_0: left allmulticast mode
[  717.419569][ T7550] bridge_slave_0: left promiscuous mode
[  717.419865][ T7550] bridge0: port 1(bridge_slave_0) entered disabled state
[  717.476505][ T9775] usb 9-1: Using ep0 maxpacket: 16
[  717.477215][ T9775] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  717.478798][ T9775] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  717.478832][ T9775] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  717.481424][ T9775] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.481455][ T9775] usb 9-1: Product: syz
[  717.481475][ T9775] usb 9-1: Manufacturer: syz
[  717.481488][ T9775] usb 9-1: SerialNumber: syz
[  717.588838][T15690] netlink: 'syz.7.2917': attribute type 4 has an invalid length.
[  717.594580][ T9775] usb 9-1: config 0 descriptor??
[  717.656038][T15691] netlink: 'syz.7.2917': attribute type 4 has an invalid length.
[  717.675558][ T9775] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  717.675600][ T9775] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class)
[  718.238652][ T9775] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[  718.239482][ T9775] em28xx 9-1:0.0: Config register raw data: 0xfffffffb
[  718.891784][ T9775] em28xx 9-1:0.0: Unknown AC97 audio processor detected!
[  719.102098][ T9775] em28xx 9-1:0.0: couldn't setup AC97 register 2
[  719.102576][ T9775] em28xx 9-1:0.0: couldn't setup AC97 register 4
[  719.103028][ T9775] em28xx 9-1:0.0: couldn't setup AC97 register 6
[  719.103795][ T9775] em28xx 9-1:0.0: couldn't setup AC97 register 54
[  719.282304][ T9775] em28xx 9-1:0.0: couldn't setup AC97 register 56
[  719.332017][ T9775] usb 9-1: USB disconnect, device number 13
[  720.799169][ T7550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  720.877730][ T7550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  720.919102][ T7550] bond0 (unregistering): Released all slaves
[  721.407698][T15716] 9p: Bad value for 'wfdno'
[  721.591783][T15715] syz_tun: entered allmulticast mode
[  721.820724][T15728] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2926'.
[  722.010236][T15729] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2926'.
[  722.525355][T15711] syz_tun: left allmulticast mode
[  722.623586][ T7519] netdevsim netdevsim0 eth16: set [0, 0] type 1 family 0 port 8472 - 0
[  722.623643][ T7519] netdevsim netdevsim0 eth15: set [0, 0] type 1 family 0 port 8472 - 0
[  722.623687][ T7519] netdevsim netdevsim0 eth13: set [0, 0] type 1 family 0 port 8472 - 0
[  722.623729][ T7519] netdevsim netdevsim0 eth14: set [0, 0] type 1 family 0 port 8472 - 0
[  724.187964][ T7550] hsr_slave_0: left promiscuous mode
[  724.244036][ T7550] hsr_slave_1: left promiscuous mode
[  724.253933][ T7550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  724.253983][ T7550] batman_adv: batadv0: Removing interface: batadv_slave_0
[  724.321953][ T7550] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  724.321986][ T7550] batman_adv: batadv0: Removing interface: batadv_slave_1
[  724.674706][ T7550] veth1_macvtap: left promiscuous mode
[  724.674794][ T7550] veth0_macvtap: left promiscuous mode
[  724.674977][ T7550] veth1_vlan: left promiscuous mode
[  724.675108][ T7550] veth0_vlan: left promiscuous mode
[  725.727210][ T7550] team0 (unregistering): Port device team_slave_1 removed
[  725.757256][ T7550] team0 (unregistering): Port device team_slave_0 removed
[  726.605860][T15783] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2940'.
[  727.101237][T15344] netdevsim netdevsim0 eth16 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  727.709231][ T5252] 8021q: adding VLAN 0 to HW filter on device eth13
[  727.762440][T15783] ip6gre1: entered promiscuous mode
[  727.762473][T15783] ip6gre1: entered allmulticast mode
[  727.785411][T15788] netlink: 'syz.9.2940': attribute type 6 has an invalid length.
[  727.785442][T15788] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2940'.
[  728.067568][T15794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  728.080110][T15803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  728.144843][T15806] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2943'.
[  728.291988][T15798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  728.426808][T15811] Device name cannot be null; rc = [-22]
[  729.528471][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2943'.
[  730.854615][T15344] netdevsim netdevsim0 eth15 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  731.406615][T15844] batadv_slave_1: entered promiscuous mode
[  731.409746][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2956'.
[  731.798574][T15844] batadv_slave_1 (unregistering): left promiscuous mode
[  733.166931][T15344] netdevsim netdevsim0 eth14 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  733.765577][   T37] audit: type=1800 audit(1791021342.530:240): pid=15865 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.2961" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  736.257380][T15344] netdevsim netdevsim0 eth13 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  736.385575][T15901] fuse: fd is not a fuse device
[  741.167423][T15344] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  741.271574][T15344] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  741.284162][T15977] Bluetooth: MGMT ver 1.23
[  741.284732][T15344] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  741.727100][T15344] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  741.731846][T15344] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  741.839990][T15344] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  741.858570][T15344] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  744.021993][T15344] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  744.362690][T15344] 8021q: adding VLAN 0 to HW filter on device bond0
[  744.488813][   T31] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  744.604577][T15344] 8021q: adding VLAN 0 to HW filter on device team0
[  744.644828][ T3369] bridge0: port 1(bridge_slave_0) entered blocking state
[  744.652663][   T31] usb 10-1: Using ep0 maxpacket: 16
[  744.653969][   T31] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  744.669549][   T31] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  744.670855][   T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  744.724544][ T3369] bridge0: port 1(bridge_slave_0) entered forwarding state
[  744.833357][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.833391][   T31] usb 10-1: Product: syz
[  744.833408][   T31] usb 10-1: Manufacturer: syz
[  744.833426][   T31] usb 10-1: SerialNumber: syz
[  744.907725][   T31] usb 10-1: config 0 descriptor??
[  744.953303][   T31] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  744.953351][   T31] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[  745.127986][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state
[  745.128208][ T7546] bridge0: port 2(bridge_slave_1) entered forwarding state
[  745.439921][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3000'.
[  745.442975][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3000'.
[  745.612079][   T31] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[  745.614160][   T31] em28xx 10-1:0.0: Config register raw data: 0xfffffffb
[  746.337284][   T31] em28xx 10-1:0.0: AC97 command still being executed: not handled properly!
[  746.337311][   T31] em28xx 10-1:0.0: Unknown AC97 audio processor detected!
[  746.556297][   T31] em28xx 10-1:0.0: AC97 command still being executed: not handled properly!
[  746.556325][   T31] em28xx 10-1:0.0: couldn't setup AC97 register 2
[  746.759518][   T31] em28xx 10-1:0.0: couldn't setup AC97 register 4
[  746.761559][   T31] em28xx 10-1:0.0: couldn't setup AC97 register 6
[  747.043931][   T31] em28xx 10-1:0.0: couldn't setup AC97 register 54
[  747.048847][   T31] em28xx 10-1:0.0: couldn't setup AC97 register 56
[  747.146718][   T31] usb 10-1: USB disconnect, device number 7
[  747.533293][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  747.533371][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  747.544029][ T7527] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  748.442171][T15344] 8021q: adding VLAN 0 to HW filter on device batadv0
[  748.945294][T15344] veth0_vlan: entered promiscuous mode
[  749.015724][T15344] veth1_vlan: entered promiscuous mode
[  749.269001][T15344] veth0_macvtap: entered promiscuous mode
[  749.315936][T15344] veth1_macvtap: entered promiscuous mode
[  749.444311][T15344] batman_adv: batadv0: Interface activated: batadv_slave_0
[  749.534131][T15344] batman_adv: batadv0: Interface activated: batadv_slave_1
[  749.869289][ T3369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  749.869356][ T3369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  749.869406][ T3369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  749.869447][ T3369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  750.223035][T16111] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3012'.
[  750.647914][T16114] bridge1: port 1(veth0_to_bond) entered blocking state
[  750.648040][T16114] bridge1: port 1(veth0_to_bond) entered disabled state
[  750.648226][T16114] veth0_to_bond: entered allmulticast mode
[  750.768563][T16114] veth0_to_bond: entered promiscuous mode
[  751.778342][ T3369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  751.778368][ T3369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  753.360653][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  753.360679][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  756.935822][T16201] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3035'.
[  756.935861][T16201] netlink: 'syz.5.3035': attribute type 7 has an invalid length.
[  756.935876][T16201] netlink: 'syz.5.3035': attribute type 8 has an invalid length.
[  756.935891][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3035'.
[  757.069421][T16203] binder: 16202:16203 ioctl c0306201 200000000080 returned -14
[  757.139119][T16203] binder: 16202:16203 ioctl c0306201 2000000003c0 returned -14
[  757.145659][T16201] netdevsim netdevsim5 netdevsim1: entered promiscuous mode
[  757.472007][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3037'.
[  757.562971][T16201] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  757.758311][T16201] erspan0: entered promiscuous mode
[  757.873523][T16201] 8021q: adding VLAN 0 to HW filter on device hsr1
[  759.639393][T16243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3043'.
[  759.783168][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3043'.
[  759.866263][ T5727] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  760.038170][ T5727] usb 1-1: Using ep0 maxpacket: 16
[  760.042110][ T5727] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  760.045766][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  760.089378][ T5727] usb 1-1: config 0 descriptor??
[  760.124659][ T5727] gspca_main: sonixj-2.14.0 probing 0471:0327
[  761.870135][   T37] audit: type=1800 audit(1791021370.570:241): pid=16258 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.3049" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  761.921040][T16258] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  761.921094][T16258] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  761.921133][T16258] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  762.329443][ T5727] gspca_sonixj: reg_r err -71
[  762.329619][ T5727] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  762.356606][ T5727] usb 1-1: USB disconnect, device number 5
[  762.692607][T16285] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[  767.064360][T16324] FAULT_INJECTION: forcing a failure.
[  767.064360][T16324] name failslab, interval 1, probability 0, space 0, times 0
[  767.064410][T16324] CPU: 0 UID: 0 PID: 16324 Comm: syz.0.3062 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  767.064465][T16324] Tainted: [L]=SOFTLOCKUP
[  767.064475][T16324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  767.064490][T16324] Call Trace:
[  767.064499][T16324]  <TASK>
[  767.064510][T16324]  dump_stack_lvl+0xe8/0x150
[  767.064553][T16324]  should_fail_ex+0x46b/0x600
[  767.064593][T16324]  should_failslab+0xa8/0x100
[  767.064620][T16324]  __kmalloc_cache_noprof+0xa1/0x680
[  767.064655][T16324]  ? sctp_transport_new+0x7e/0x620
[  767.064766][T16324]  ? sctp_transport_new+0x7e/0x620
[  767.064791][T16324]  ? sctp_add_bind_addr+0x8c/0x370
[  767.064824][T16324]  sctp_transport_new+0x7e/0x620
[  767.064851][T16324]  sctp_assoc_add_peer+0x299/0x1430
[  767.064927][T16324]  sctp_connect_new_asoc+0x329/0x6b0
[  767.064966][T16324]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  767.065004][T16324]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  767.065039][T16324]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  767.065071][T16324]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  767.065108][T16324]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  767.065135][T16324]  ? security_sctp_bind_connect+0x7e/0x2c0
[  767.065173][T16324]  sctp_sendmsg+0x1506/0x2a50
[  767.065223][T16324]  ? __pfx_sctp_sendmsg+0x10/0x10
[  767.065253][T16324]  ? smack_socket_sendmsg+0x4b8/0x5a0
[  767.065292][T16324]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[  767.065347][T16324]  ? sock_rps_record_flow+0x19/0x350
[  767.065431][T16324]  ? inet_sendmsg+0x298/0x320
[  767.065470][T16324]  ? __pfx_inet_sendmsg+0x10/0x10
[  767.065498][T16324]  sock_sendmsg_nosec+0x10e/0x180
[  767.065536][T16324]  __sys_sendto+0x41e/0x5d0
[  767.065567][T16324]  ? __pfx___sys_sendto+0x10/0x10
[  767.065621][T16324]  ? rcu_is_watching+0x16/0xb0
[  767.065669][T16324]  __x64_sys_sendto+0xde/0x100
[  767.065698][T16324]  do_syscall_64+0x166/0x520
[  767.065724][T16324]  ? trace_irq_disable+0x3b/0x140
[  767.065755][T16324]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.065780][T16324]  ? clear_bhb_loop+0x70/0xc0
[  767.065808][T16324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.065831][T16324] RIP: 0033:0x7ffa5148e159
[  767.065854][T16324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  767.065875][T16324] RSP: 002b:00007ffa4f6e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  767.065901][T16324] RAX: ffffffffffffffda RBX: 00007ffa51715fa0 RCX: 00007ffa5148e159
[  767.065919][T16324] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004
[  767.065936][T16324] RBP: 00007ffa5152506b R08: 000020000005ffe4 R09: 000000000000001c
[  767.065953][T16324] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000000
[  767.065968][T16324] R13: 00007ffa51716038 R14: 00007ffa51715fa0 R15: 00007ffd10c0e068
[  767.066006][T16324]  </TASK>
[  767.649739][T16338] uprobe: syz.0.3068:16338 failed to unregister, leaking uprobe
[  767.653922][   T37] audit: type=1804 audit(1791021376.410:242): pid=16339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.3068" name="/newroot/10/file0" dev="tmpfs" ino=70 res=1 errno=0
[  767.941862][ T5597] Bluetooth: hci4: failed to read key size for handle 0
[  767.941926][ T5597] Bluetooth: hci4: unexpected event for opcode 0x1408
[  770.006349][ T5597] Bluetooth: hci4: command 0x0406 tx timeout
[  772.087473][ T5597] Bluetooth: hci4: command 0x0406 tx timeout
[  772.479138][T16387] 9pnet_fd: p9_fd_create_tcp (16387): problem connecting socket to 127.0.0.1
[  772.577168][T16387] 9pnet_fd: p9_fd_create_tcp (16387): problem connecting socket to 127.0.0.1
[  772.579460][T16387] 9pnet_fd: p9_fd_create_tcp (16387): problem connecting socket to 127.0.0.1
[  772.582359][T16387] 9pnet_fd: p9_fd_create_tcp (16387): problem connecting socket to 127.0.0.1
[  772.585075][T16387] 9pnet_fd: p9_fd_create_tcp (16387): problem connecting socket to 127.0.0.1
[  772.613168][T16387] 9pnet_fd: p9_fd_create_tcp (16387): problem connecting socket to 127.0.0.1
[  772.680471][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3090'.
[  773.572777][T16387] 9pnet_fd: p9_fd_create_tcp (16387): problem connecting socket to 127.0.0.1
[  773.722831][T16387] 9pnet_fd: p9_fd_create_tcp (16387): problem connecting socket to 127.0.0.1
[  773.985500][T16413] netlink: 'syz.5.3096': attribute type 2 has an invalid length.
[  774.474455][T16413] : entered promiscuous mode
[  777.957106][ T5713] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  778.106931][ T5713] usb 1-1: Using ep0 maxpacket: 16
[  778.107913][ T5713] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  778.110749][ T5713] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255
[  778.114587][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.114615][ T5713] usb 1-1: Product: syz
[  778.114626][ T5713] usb 1-1: Manufacturer: syz
[  778.114637][ T5713] usb 1-1: SerialNumber: syz
[  778.161709][ T5713] usb 1-1: config 0 descriptor??
[  778.168089][T16465] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  778.402374][ T5713] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected
[  778.988921][    C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71)
[  778.989021][    C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71)
[  778.998996][ T5727] usb 1-1: USB disconnect, device number 6
[  779.042402][ T5727] mcba_usb 1-1:0.0 can0: device disconnected
[  780.377136][ T7492] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  781.111811][T16520] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3127'.
[  781.126606][T16520] netlink: 'syz.8.3127': attribute type 1 has an invalid length.
[  781.126630][T16520] netlink: 'syz.8.3127': attribute type 2 has an invalid length.
[  781.193047][T16525] netlink: 'syz.8.3127': attribute type 1 has an invalid length.
[  781.193074][T16525] netlink: 'syz.8.3127': attribute type 2 has an invalid length.
[  781.224939][T16520] openvswitch: netlink: Message has 46 unknown bytes.
[  781.241441][T16520] openvswitch: netlink: Message has 46 unknown bytes.
[  781.775983][T16520] ovs-dp0: entered promiscuous mode
[  783.006480][T16558] FAULT_INJECTION: forcing a failure.
[  783.006480][T16558] name failslab, interval 1, probability 0, space 0, times 0
[  783.006525][T16558] CPU: 0 UID: 0 PID: 16558 Comm: syz.9.3135 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  783.006558][T16558] Tainted: [L]=SOFTLOCKUP
[  783.006568][T16558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  783.006583][T16558] Call Trace:
[  783.006593][T16558]  <TASK>
[  783.006604][T16558]  dump_stack_lvl+0xe8/0x150
[  783.006651][T16558]  should_fail_ex+0x46b/0x600
[  783.006692][T16558]  should_failslab+0xa8/0x100
[  783.006722][T16558]  __kmalloc_noprof+0xfb/0x790
[  783.006758][T16558]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  783.006786][T16558]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  783.006823][T16558]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  783.006850][T16558]  ? kernel_text_address+0xa5/0xe0
[  783.006887][T16558]  genl_family_rcv_msg_doit+0xda/0x340
[  783.006920][T16558]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  783.006950][T16558]  ? rcu_is_watching+0x16/0xb0
[  783.006987][T16558]  ? cap_capable+0x123/0x460
[  783.007021][T16558]  ? safesetid_security_capable+0xa9/0x1a0
[  783.007067][T16558]  ? bpf_lsm_capable+0x9/0x20
[  783.007099][T16558]  ? security_capable+0x7e/0x2c0
[  783.007131][T16558]  genl_rcv_msg+0x614/0x7a0
[  783.007164][T16558]  ? __pfx_genl_rcv_msg+0x10/0x10
[  783.007188][T16558]  ? __pfx_vdpa_nl_cmd_dev_add_set_doit+0x10/0x10
[  783.007379][T16558]  netlink_rcv_skb+0x226/0x4a0
[  783.007413][T16558]  ? __pfx_genl_rcv_msg+0x10/0x10
[  783.007439][T16558]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  783.007487][T16558]  ? netlink_deliver_tap+0x2e/0x1b0
[  783.007519][T16558]  ? netlink_deliver_tap+0x2e/0x1b0
[  783.007571][T16558]  genl_rcv+0x28/0x40
[  783.007593][T16558]  netlink_unicast+0x7f5/0x990
[  783.007634][T16558]  netlink_sendmsg+0x813/0xb40
[  783.007668][T16558]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  783.007714][T16558]  ? __pfx_netlink_sendmsg+0x10/0x10
[  783.007749][T16558]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  783.007784][T16558]  ? __pfx_netlink_sendmsg+0x10/0x10
[  783.007821][T16558]  sock_sendmsg_nosec+0x13a/0x180
[  783.007865][T16558]  ____sys_sendmsg+0x565/0x870
[  783.007904][T16558]  ? __pfx_____sys_sendmsg+0x10/0x10
[  783.007944][T16558]  ? import_iovec+0x73/0xa0
[  783.007986][T16558]  ___sys_sendmsg+0x2a5/0x360
[  783.008013][T16558]  ? __lock_acquire+0x747/0x2de0
[  783.008059][T16558]  ? __pfx____sys_sendmsg+0x10/0x10
[  783.008094][T16558]  ? futex_wait+0x2a2/0x390
[  783.008159][T16558]  ? __fget_files+0x2a/0x420
[  783.008189][T16558]  ? __fget_files+0x3a8/0x420
[  783.008228][T16558]  __x64_sys_sendmsg+0x1b7/0x290
[  783.008260][T16558]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  783.008314][T16558]  do_syscall_64+0x166/0x520
[  783.008341][T16558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  783.008366][T16558]  ? clear_bhb_loop+0x70/0xc0
[  783.008397][T16558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  783.008422][T16558] RIP: 0033:0x7fe315eae159
[  783.008445][T16558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  783.008467][T16558] RSP: 002b:00007fe314106028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  783.008494][T16558] RAX: ffffffffffffffda RBX: 00007fe316135fa0 RCX: 00007fe315eae159
[  783.008513][T16558] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006
[  783.008529][T16558] RBP: 00007fe315f4506b R08: 0000000000000000 R09: 0000000000000000
[  783.008545][T16558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  783.008561][T16558] R13: 00007fe316136038 R14: 00007fe316135fa0 R15: 00007ffd761eba98
[  783.008600][T16558]  </TASK>
[  786.455233][T16616] netlink: 'syz.8.3150': attribute type 10 has an invalid length.
[  786.457109][T16614] bridge0: port 4(netdevsim0) entered blocking state
[  786.457233][T16614] bridge0: port 4(netdevsim0) entered disabled state
[  786.457466][T16614] netdevsim netdevsim8 netdevsim0: entered allmulticast mode
[  786.464019][T16614] netdevsim netdevsim8 netdevsim0: entered promiscuous mode
[  786.471806][T16614] bridge0: port 4(netdevsim0) entered blocking state
[  786.473200][T16614] bridge0: port 4(netdevsim0) entered forwarding state
[  786.509425][T16616] bridge0: port 4(netdevsim0) entered disabled state
[  786.509673][T16616] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.509872][T16616] bridge0: port 1(bridge_slave_0) entered disabled state
[  786.516707][T16616] bridge0: port 4(netdevsim0) entered blocking state
[  786.516838][T16616] bridge0: port 4(netdevsim0) entered forwarding state
[  786.517667][T16616] bridge0: port 2(bridge_slave_1) entered blocking state
[  786.517803][T16616] bridge0: port 2(bridge_slave_1) entered forwarding state
[  786.518081][T16616] bridge0: port 1(bridge_slave_0) entered blocking state
[  786.518219][T16616] bridge0: port 1(bridge_slave_0) entered forwarding state
[  786.523288][T16616] bridge0: entered promiscuous mode
[  786.529379][T16616] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  789.188205][ T5727] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  789.586335][ T5727] usb 10-1: Using ep0 maxpacket: 32
[  789.604880][ T5727] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  789.619882][ T5727] usb 10-1: config index 0 descriptor too short (expected 27632, got 27)
[  789.619913][ T5727] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  789.619937][ T5727] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92
[  789.619961][ T5727] usb 10-1: config 1 has no interface number 0
[  789.620017][ T5727] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  789.620046][ T5727] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  789.620093][ T5727] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.711059][T16663] binder: 16661:16663 ioctl c0306201 200000000040 returned -14
[  789.727997][T16663] binder: 16661:16663 ioctl c0306201 0 returned -14
[  789.784359][ T5727] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found
[  789.968398][ T5727] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached
[  790.195751][   T37] audit: type=1326 audit(1791021398.960:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16667 comm="syz.7.3170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7fc00000
[  790.220982][   T37] audit: type=1326 audit(1791021398.980:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16667 comm="syz.7.3170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f767532e159 code=0x7fc00000
[  790.357291][   T37] audit: type=1326 audit(1791021399.130:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16667 comm="syz.7.3170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7675327ed7 code=0x7fc00000
[  790.357370][   T37] audit: type=1326 audit(1791021399.130:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16667 comm="syz.7.3170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76752cf4d9 code=0x7fc00000
[  790.357422][   T37] audit: type=1326 audit(1791021399.130:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16667 comm="syz.7.3170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f76752cf59d code=0x7fc00000
[  790.396026][   T37] audit: type=1326 audit(1791021399.160:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16667 comm="syz.7.3170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f767532e159 code=0x7fc00000
[  791.217007][ T5727] snd_usb_pod 10-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  791.452266][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3175'.
[  791.955949][T16704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3179'.
[  792.012694][ T5727] usb 10-1: USB disconnect, device number 8
[  792.038430][ T5727] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected
[  792.244338][ T7555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  792.244381][ T7555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  792.480910][T16699] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  793.114459][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3189'.
[  794.924653][ T7555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  794.924697][ T7555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.495384][T16731] bridge0: port 4(netdevsim0) entered disabled state
[  795.496044][T16731] bridge0: port 2(bridge_slave_1) entered disabled state
[  795.496764][T16731] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.518238][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3201'.
[  795.518261][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3201'.
[  795.846779][ T5727] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  796.069358][ T5727] usb 10-1: Using ep0 maxpacket: 8
[  796.075054][ T5727] usb 10-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  796.099644][ T5727] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  796.099684][ T5727] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  796.099728][ T5727] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  796.163510][ T5727] kobil_sct 10-1:1.0: KOBIL USB smart card terminal converter detected
[  796.225364][ T5727] usb 10-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  796.842889][ T5727] usb 10-1: USB disconnect, device number 9
[  797.762332][   T37] audit: type=1326 audit(1791021406.470:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.0.3208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5148e159 code=0x7ffc0000
[  797.762395][   T37] audit: type=1326 audit(1791021406.530:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.0.3208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5148e159 code=0x7ffc0000
[  797.762446][   T37] audit: type=1326 audit(1791021406.530:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.0.3208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5148e159 code=0x7ffc0000
[  797.762500][   T37] audit: type=1326 audit(1791021406.530:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.0.3208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5148e159 code=0x7ffc0000
[  797.763955][   T37] audit: type=1326 audit(1791021406.530:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.0.3208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ffa5148e159 code=0x7ffc0000
[  797.764015][   T37] audit: type=1326 audit(1791021406.530:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.0.3208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5148e159 code=0x7ffc0000
[  797.764081][   T37] audit: type=1326 audit(1791021406.530:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.0.3208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5148e159 code=0x7ffc0000
[  797.781132][   T37] audit: type=1326 audit(1791021406.550:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.0.3208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5148e159 code=0x7ffc0000
[  797.781185][   T37] audit: type=1326 audit(1791021406.550:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.0.3208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5148e159 code=0x7ffc0000
[  797.785801][   T37] audit: type=1326 audit(1791021406.550:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.0.3208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7ffa5148e159 code=0x7ffc0000
[  798.111602][ T7555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  798.111673][ T7555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.464267][ T5727] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  798.465130][ T5727] kobil_sct 10-1:1.0: device disconnected
[  800.112638][T16821] coredump: 1226(syz.7.3216): Core dump to core aborted: cannot preserve file permissions
[  800.183942][T16817] netlink: 'syz.7.3216': attribute type 1 has an invalid length.
[  800.871138][ T7555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  800.871190][ T7555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  800.972648][T16817] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  802.469951][T16872] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  803.015366][T16873] bond0 (unregistering): (slave geneve1): Releasing backup interface
[  803.131191][T16873] bond0 (unregistering): Released all slaves
[  803.719096][ T5785] bridge0: entered promiscuous mode
[  803.783749][T16891] Device name cannot be null; rc = [-22]
[  806.116317][ T5713] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  806.326969][ T5713] usb 10-1: Using ep0 maxpacket: 32
[  806.330109][ T5713] usb 10-1: unable to get BOS descriptor or descriptor too short
[  806.330168][ T5713] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  806.331761][ T5713] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  806.331789][ T5713] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  806.384479][ T5713] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.384512][ T5713] usb 10-1: Product: syz
[  806.384530][ T5713] usb 10-1: Manufacturer: syz
[  806.384547][ T5713] usb 10-1: SerialNumber: syz
[  806.457465][ T5713] usb 10-1: selecting invalid altsetting 1
[  806.746809][T16943] FAULT_INJECTION: forcing a failure.
[  806.746809][T16943] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  806.746854][T16943] CPU: 1 UID: 0 PID: 16943 Comm: syz.0.3249 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  806.746889][T16943] Tainted: [L]=SOFTLOCKUP
[  806.746899][T16943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  806.746916][T16943] Call Trace:
[  806.746927][T16943]  <TASK>
[  806.746938][T16943]  dump_stack_lvl+0xe8/0x150
[  806.746981][T16943]  should_fail_ex+0x46b/0x600
[  806.747023][T16943]  _copy_from_user+0x2d/0xb0
[  806.747072][T16943]  drm_ioctl+0x61c/0xba0
[  806.747262][T16943]  ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10
[  806.747316][T16943]  ? __pfx_drm_ioctl+0x10/0x10
[  806.747365][T16943]  ? __fget_files+0x2a/0x420
[  806.747398][T16943]  ? bpf_lsm_file_ioctl+0x9/0x20
[  806.747427][T16943]  ? __pfx_drm_ioctl+0x10/0x10
[  806.747463][T16943]  __se_sys_ioctl+0xff/0x170
[  806.747500][T16943]  do_syscall_64+0x166/0x520
[  806.747527][T16943]  ? trace_irq_disable+0x3b/0x140
[  806.747558][T16943]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.747582][T16943]  ? clear_bhb_loop+0x70/0xc0
[  806.747611][T16943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.747636][T16943] RIP: 0033:0x7ffa5148e159
[  806.747658][T16943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  806.747679][T16943] RSP: 002b:00007ffa4f6e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  806.747705][T16943] RAX: ffffffffffffffda RBX: 00007ffa51715fa0 RCX: 00007ffa5148e159
[  806.747723][T16943] RDX: 0000000000000000 RSI: 00000000c02064b2 RDI: 0000000000000003
[  806.747740][T16943] RBP: 00007ffa5152506b R08: 0000000000000000 R09: 0000000000000000
[  806.747756][T16943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  806.747770][T16943] R13: 00007ffa51716038 R14: 00007ffa51715fa0 R15: 00007ffd10c0e068
[  806.747806][T16943]  </TASK>
[  807.042843][ T7501] netdevsim netdevsim1 eth13: set [0, 0] type 1 family 0 port 8472 - 0
[  807.446577][ T5713] usb 10-1: USB disconnect, device number 10
[  807.549303][T16944] udevd[16944]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  808.365964][ T7529] netdevsim netdevsim1 eth14: set [0, 0] type 1 family 0 port 8472 - 0
[  808.383652][ T7557] netdevsim netdevsim1 eth15: set [0, 0] type 1 family 0 port 8472 - 0
[  808.406333][ T7557] netdevsim netdevsim1 eth16: set [0, 0] type 1 family 0 port 8472 - 0
[  808.984491][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  808.984569][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  809.831376][ T7555] bridge_slave_1: left allmulticast mode
[  809.831435][ T7555] bridge_slave_1: left promiscuous mode
[  809.831693][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state
[  810.039862][T16996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  810.152276][ T7555] bridge_slave_0: left allmulticast mode
[  810.152320][ T7555] bridge_slave_0: left promiscuous mode
[  810.242526][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state
[  811.049464][T17015] netlink: 'syz.7.3269': attribute type 1 has an invalid length.
[  812.169660][T14742] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  812.192754][ T7555] bond5 (unregistering): (slave ip6gretap1): Releasing active interface
[  812.340111][T17034] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3274'.
[  812.916972][ T7555] bond2 (unregistering): (slave gretap1): Releasing active interface
[  813.107011][ T7555] bond1 (unregistering): (slave geneve2): Releasing active interface
[  813.828257][ T7555] bond4 (unregistering): (slave bridge1): Releasing backup interface
[  813.828290][ T7555] bridge1 (unregistering): left promiscuous mode
[  814.307229][ T7555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  814.369238][ T7555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  814.388783][ T7555] bond0 (unregistering): Released all slaves
[  814.400105][ T7555] bond1 (unregistering): Released all slaves
[  814.423156][ T7555] bond2 (unregistering): Released all slaves
[  814.498375][ T7555] bond3 (unregistering): Released all slaves
[  814.532591][ T7555] bond4 (unregistering): Released all slaves
[  814.610627][ T7555] bond5 (unregistering): Released all slaves
[  814.666491][ T5252] 8021q: adding VLAN 0 to HW filter on device eth13
[  814.673462][T17015] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  814.685692][T17016] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  814.768537][T17017] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  815.061380][ T7555] tipc: Disabling bearer <udp:syz0>
[  815.061553][ T7555] tipc: Left network mode
[  815.362864][T17054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  815.362887][T17054] IPv6: NLM_F_CREATE should be set when creating new route
[  817.238901][T17077] block nbd9: shutting down sockets
[  818.369614][ T5252] 8021q: adding VLAN 0 to HW filter on device eth14
[  822.030104][ T7555] hsr_slave_0: left promiscuous mode
[  822.175920][ T7555] hsr_slave_1: left promiscuous mode
[  822.586516][ T5700] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[  822.669674][ T7555] dummy0: left allmulticast mode
[  822.685651][ T7555] veth1_macvtap: left promiscuous mode
[  822.685967][ T7555] veth0_macvtap: left promiscuous mode
[  822.703410][ T7555] veth0_vlan: left promiscuous mode
[  822.779193][ T5700] usb 1-1: unable to get BOS descriptor or descriptor too short
[  822.779403][ T5700] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80
[  822.905244][ T5700] usb 1-1: config 142 has an invalid interface number: 251 but max is 0
[  822.905297][ T5700] usb 1-1: config 142 has no interface number 0
[  822.905358][ T5700] usb 1-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  822.905396][ T5700] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt
[  822.905428][ T5700] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt
[  822.905459][ T5700] usb 1-1: config 142 interface 251 has no altsetting 0
[  822.969050][ T5700] usb 1-1: string descriptor 0 read error: -22
[  822.969184][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=224, SerialNumber=3
[  823.023205][T17165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  823.023353][T17165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  823.030506][ T5700] cypress_m8 1-1:142.251: HID->COM RS232 Adapter converter detected
[  823.462264][ T5700] usb 1-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[  823.476459][ T5700] usb 1-1: USB disconnect, device number 7
[  823.587782][ T5727] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  823.588090][    C0] raw-gadget.1 gadget.9: ignoring, device is not running
[  823.782219][ T5700] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[  823.783116][ T5700] cypress_m8 1-1:142.251: device disconnected
[  823.896374][ T5727] usb 10-1: device descriptor read/64, error -32
[  824.171250][ T5727] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  824.357229][ T5727] usb 10-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00
[  824.359306][ T5727] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  824.359349][ T5727] usb 10-1: config 0 interface 0 has no altsetting 0
[  824.359388][ T5727] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.395270][ T5727] usb 10-1: config 0 descriptor??
[  825.165687][ T5727] usbhid 10-1:0.0: can't add hid device: -71
[  825.167191][ T5727] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  825.215763][ T5727] usb 10-1: USB disconnect, device number 12
[  825.867599][   T37] kauditd_printk_skb: 4 callbacks suppressed
[  825.867622][   T37] audit: type=1800 audit(1791021434.620:263): pid=17207 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.3318" name="file0" dev="overlay" ino=373 res=0 errno=0
[  825.912839][ T7555] team0 (unregistering): Port device macvlan2 removed
[  829.337794][ T7555] team0 (unregistering): Port device team_slave_1 removed
[  829.388351][ T7555] team0 (unregistering): Port device team_slave_0 removed
[  829.756646][ T5252] 8021q: adding VLAN 0 to HW filter on device eth15
[  831.703721][ T7555] IPVS: stop unused estimator thread 0...
[  833.038477][ T5252] 8021q: adding VLAN 0 to HW filter on device eth16
[  834.666441][T17340] libceph: resolve 'v2' (ret=-3): failed
[  834.666469][T17340] libceph: Failed to parse monitor IPs: -3
[  835.703972][T17365] fuse: Bad value for 'fd'
[  836.757279][T17385] fuse: fd is not a fuse device
[  837.145266][T17398] fuse: fd is not a fuse device
[  843.047296][T17444] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  843.222080][T17506] bridge0: port 3(gretap0) entered blocking state
[  843.222197][T17506] bridge0: port 3(gretap0) entered disabled state
[  843.260469][T17506] gretap0: entered allmulticast mode
[  843.304051][T17506] gretap0: entered promiscuous mode
[  843.534126][ T3364] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  843.548212][T17506] bridge0: port 3(gretap0) entered blocking state
[  843.548351][T17506] bridge0: port 3(gretap0) entered forwarding state
[  846.553694][T17553] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3412'.
[  846.628346][T17553] 8021q: VLANs not supported on ip6gre0
[  846.788528][T17557] netlink: 'syz.0.3422': attribute type 83 has an invalid length.
[  847.176724][T17570] fuse: fd is not a fuse device
[  848.925192][T17585] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3419'.
[  848.946325][T17585] netlink: 'syz.5.3419': attribute type 1 has an invalid length.
[  848.946351][T17585] netlink: 'syz.5.3419': attribute type 2 has an invalid length.
[  848.954243][T17585] netlink: 'syz.5.3419': attribute type 1 has an invalid length.
[  848.954268][T17585] netlink: 'syz.5.3419': attribute type 2 has an invalid length.
[  848.990860][T17585] openvswitch: netlink: Message has 46 unknown bytes.
[  848.995956][T17585] openvswitch: netlink: Message has 46 unknown bytes.
[  849.640583][T17585] ovs-dp0: entered promiscuous mode
[  849.641706][T17599] C: renamed from lo
[  849.723719][T17599] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  852.220500][T17630] netlink: 'syz.5.3443': attribute type 10 has an invalid length.
[  852.220833][T17630] bridge0: port 2(bridge_slave_1) entered disabled state
[  852.221572][T17630] bridge0: port 1(bridge_slave_0) entered disabled state
[  852.226717][T17630] bridge0: port 2(bridge_slave_1) entered blocking state
[  852.226827][T17630] bridge0: port 2(bridge_slave_1) entered forwarding state
[  852.230204][T17630] bridge0: port 1(bridge_slave_0) entered blocking state
[  852.230336][T17630] bridge0: port 1(bridge_slave_0) entered forwarding state
[  852.233665][T17630] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  855.700788][T17661] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3438'.
[  855.767980][T17661] netlink: 'syz.9.3438': attribute type 1 has an invalid length.
[  855.768006][T17661] netlink: 'syz.9.3438': attribute type 2 has an invalid length.
[  855.768855][T17661] netlink: 'syz.9.3438': attribute type 1 has an invalid length.
[  855.768875][T17661] netlink: 'syz.9.3438': attribute type 2 has an invalid length.
[  855.783853][T17661] openvswitch: netlink: Message has 46 unknown bytes.
[  855.785778][T17661] openvswitch: netlink: Message has 46 unknown bytes.
[  856.591753][T17669] ovs-dp0: entered promiscuous mode
[  858.792306][T17703] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  858.792335][T17703] CIFS: Attempting to mount //127.0.0.1/test
[  859.704005][T17703] CIFS: VFS: Error connecting to socket. Aborting operation.
[  859.704048][T17703] CIFS: VFS: cifs_mount failed w/return code = -4
[  868.225930][T17846] io-wq is not configured for unbound workers
[  868.962750][T17863] binder: 17862:17863 ioctl c0306201 200000000080 returned -14
[  870.413705][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  870.413769][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  870.793892][T17904] fuse: fd is not a fuse device
[  871.635406][T17919] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3505'.
[  871.635579][T17919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  871.874659][T17919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  874.778330][T17962] lo: Caught tx_queue_len zero misconfig
[  874.778371][T17962] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  875.559453][ T3370] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  875.922051][T17970] syz.0.3519 (17970) used greatest stack depth: 17144 bytes left
[  876.150160][T17981] netlink: 'syz.0.3523': attribute type 39 has an invalid length.
[  880.314646][T18024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3534'.
[  880.645579][T18025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3534'.
[  882.175976][T18054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3543'.
[  885.073550][T18104] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3556'.
[  887.912252][T18156] netlink: 'syz.7.3573': attribute type 12 has an invalid length.
[  892.474945][T18236] ceph: No mds server is up or the cluster is laggy
[  892.488560][T18241] ceph: No mds server is up or the cluster is laggy
[  893.590700][ T5601] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  893.976404][T18289] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  894.381711][T18299] overlayfs: failed to clone upperpath
[  895.445959][T18305] overlayfs: failed to clone upperpath
[  896.539480][   T37] audit: type=1800 audit(1791021505.220:264): pid=18312 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.3614" name=08 dev="sda1" ino=2057 res=0 errno=0
[  899.664655][T18408] netlink: 'syz.5.3645': attribute type 3 has an invalid length.
[  903.546248][T16143] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  903.718572][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3661'.
[  903.792405][T16143] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  903.795380][T16143] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  903.795433][T16143] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.953645][T18460] veth1_macvtap: left promiscuous mode
[  904.001231][T16143] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected
[  904.001454][T16143] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81
[  904.001513][T16143] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1
[  904.077472][T16143] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84
[  904.077574][T16143] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2
[  904.250633][T16143] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  904.411368][T16143] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88
[  904.411476][T16143] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6
[  904.497159][T16143] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  904.590067][T18467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3662'.
[  904.690634][T16143] usb 10-1: USB disconnect, device number 13
[  906.837371][T16143] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  907.335310][T16143] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  907.335813][T16143] keyspan 10-1:1.0: device disconnected
[  907.553475][ T7529] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  913.449067][ T5252] veth1_macvtap: entered promiscuous mode
[  925.647332][   T37] audit: type=1326 audit(1791021534.400:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18680 comm="syz.7.3722" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  925.665363][   T37] audit: type=1326 audit(1791021534.420:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18680 comm="syz.7.3722" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  925.715468][   T37] audit: type=1326 audit(1791021534.470:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18680 comm="syz.7.3722" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  925.753100][   T37] audit: type=1326 audit(1791021534.510:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18680 comm="syz.7.3722" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  925.755027][   T37] audit: type=1326 audit(1791021534.520:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18680 comm="syz.7.3722" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  925.838546][   T37] audit: type=1326 audit(1791021534.610:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18680 comm="syz.7.3722" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76752ee98e code=0x7ffc0000
[  925.841055][   T37] audit: type=1326 audit(1791021534.610:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18680 comm="syz.7.3722" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76752ee98e code=0x7ffc0000
[  925.841340][   T37] audit: type=1326 audit(1791021534.610:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18680 comm="syz.7.3722" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76752ee98e code=0x7ffc0000
[  925.842526][   T37] audit: type=1326 audit(1791021534.610:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18680 comm="syz.7.3722" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76752ee98e code=0x7ffc0000
[  925.843889][   T37] audit: type=1326 audit(1791021534.610:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18680 comm="syz.7.3722" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76752ee98e code=0x7ffc0000
[  928.513892][T18712] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  928.652120][T18712] bond1: (slave macvlan2): making interface the new active one
[  928.765499][T18712] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  929.614847][T18732] hsr0: entered promiscuous mode
[  930.677824][T18732] hsr_slave_0: left promiscuous mode
[  930.743990][T18732] hsr_slave_1: left promiscuous mode
[  931.120655][   T37] kauditd_printk_skb: 4 callbacks suppressed
[  931.120677][   T37] audit: type=1326 audit(1791021539.890:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18749 comm="syz.7.3739" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  931.120735][   T37] audit: type=1326 audit(1791021539.890:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18749 comm="syz.7.3739" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  931.122914][   T37] audit: type=1326 audit(1791021539.890:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18749 comm="syz.7.3739" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  931.122976][   T37] audit: type=1326 audit(1791021539.890:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18749 comm="syz.7.3739" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  931.132530][   T37] audit: type=1326 audit(1791021539.890:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18749 comm="syz.7.3739" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  931.132720][   T37] audit: type=1326 audit(1791021539.900:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18749 comm="syz.7.3739" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  931.132850][   T37] audit: type=1326 audit(1791021539.900:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18749 comm="syz.7.3739" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  931.132972][   T37] audit: type=1326 audit(1791021539.900:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18749 comm="syz.7.3739" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  931.151175][   T37] audit: type=1326 audit(1791021539.920:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18749 comm="syz.7.3739" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  931.151293][   T37] audit: type=1326 audit(1791021539.920:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18749 comm="syz.7.3739" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  932.398649][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  932.398725][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  933.576323][ T5785] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  933.753697][ T5785] usb 10-1: Using ep0 maxpacket: 8
[  933.776266][ T5785] usb 10-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  933.919639][ T5785] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.919672][ T5785] usb 10-1: Product: syz
[  933.919689][ T5785] usb 10-1: Manufacturer: syz
[  933.919705][ T5785] usb 10-1: SerialNumber: syz
[  933.970381][ T5785] usb 10-1: config 0 descriptor??
[  933.993243][ T5785] radio-usb-si4713 10-1:0.0: Si4713 development board discovered: (10C4:8244)
[  934.477370][ T5785] radio-usb-si4713 10-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  934.479279][ T5785] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  934.517612][ T5785] usb 10-1: USB disconnect, device number 14
[  936.322312][   T37] kauditd_printk_skb: 4 callbacks suppressed
[  936.322365][   T37] audit: type=1326 audit(1791021544.840:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18816 comm="syz.0.3758" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa5148e159 code=0x0
[  940.653563][ T7529] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  940.907967][T18852] netlink: 'syz.7.3767': attribute type 2 has an invalid length.
[  940.907987][T18852] netlink: 'syz.7.3767': attribute type 2 has an invalid length.
[  941.332214][T18868] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3771'.
[  943.405150][T18901] netlink: 'syz.9.3779': attribute type 12 has an invalid length.
[  945.441569][T18931] fuse: Bad value for 'fd'
[  946.184837][T18937] syz.0.3793 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  952.600354][T19013] netlink: 'syz.9.3812': attribute type 1 has an invalid length.
[  953.338777][T19016] bond1: (slave bridge1): making interface the new active one
[  953.342065][T19016] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  953.425025][T19022] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3816'.
[  958.579601][ T5601] Bluetooth: hci3: command 0x0406 tx timeout
[  962.461976][T19126] sch_tbf: burst 19872 is lower than device lo mtu (65535) !
[  963.814796][T19139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3850'.
[  965.194608][   T37] audit: type=1326 audit(1791021573.950:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19158 comm="syz.5.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  965.194671][   T37] audit: type=1326 audit(1791021573.960:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19158 comm="syz.5.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  965.238900][   T37] audit: type=1326 audit(1791021574.010:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19158 comm="syz.5.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  965.239051][   T37] audit: type=1326 audit(1791021574.010:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19158 comm="syz.5.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  965.253035][   T37] audit: type=1326 audit(1791021574.020:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19158 comm="syz.5.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  965.274288][   T37] audit: type=1326 audit(1791021574.030:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19158 comm="syz.5.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  965.278750][   T37] audit: type=1326 audit(1791021574.050:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19158 comm="syz.5.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  965.290207][   T37] audit: type=1326 audit(1791021574.050:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19158 comm="syz.5.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  965.293202][   T37] audit: type=1326 audit(1791021574.040:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19158 comm="syz.5.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  965.293393][   T37] audit: type=1326 audit(1791021574.060:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19158 comm="syz.5.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  966.824569][ T5597] Bluetooth: hci4: unexpected event for opcode 0x0c58
[  969.217887][T19220] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3878'.
[  969.217929][T19220] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3878'.
[  969.319115][T19220] ip6gretap0: entered promiscuous mode
[  969.324352][T19220] syz_tun: entered promiscuous mode
[  970.765303][   T37] kauditd_printk_skb: 44 callbacks suppressed
[  970.765325][   T37] audit: type=1326 audit(1791021579.530:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.5.3882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  970.769287][   T37] audit: type=1326 audit(1791021579.530:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.5.3882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  970.769362][   T37] audit: type=1326 audit(1791021579.540:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.5.3882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  970.770964][   T37] audit: type=1326 audit(1791021579.540:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.5.3882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ea6757ed7 code=0x7ffc0000
[  970.771021][   T37] audit: type=1326 audit(1791021579.540:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.5.3882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ea66ff4d9 code=0x7ffc0000
[  970.771071][   T37] audit: type=1326 audit(1791021579.540:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.5.3882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ea6757ed7 code=0x7ffc0000
[  970.773303][   T37] audit: type=1326 audit(1791021579.540:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.5.3882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  970.780599][   T37] audit: type=1326 audit(1791021579.540:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.5.3882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  970.780672][   T37] audit: type=1326 audit(1791021579.550:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.5.3882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  970.780723][   T37] audit: type=1326 audit(1791021579.550:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.5.3882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea675e159 code=0x7ffc0000
[  972.885941][ T3390] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  976.330993][T19277] fuse: Bad value for 'fd'
[  976.558742][ T3370] IPVS: starting estimator thread 0...
[  976.573370][T19286] netlink: 'syz.0.3901': attribute type 4 has an invalid length.
[  976.630526][T19288] netlink: 'syz.0.3901': attribute type 4 has an invalid length.
[  976.651318][T19287] IPVS: using max 10 ests per chain, 24000 per kthread
[  982.402566][T19374] 9pnet: p9_errstr2errno: server reported unknown error 0x000
[  984.681450][T19406] netlink: 'syz.7.3934': attribute type 9 has an invalid length.
[  984.681481][T19406] netlink: 'syz.7.3934': attribute type 6 has an invalid length.
[  985.717611][T19410] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  986.418444][   T37] kauditd_printk_skb: 63 callbacks suppressed
[  986.418467][   T37] audit: type=1326 audit(1799410459.189:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19419 comm="syz.0.3937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5148e159 code=0x7ffc0000
[  986.422843][   T37] audit: type=1326 audit(1799410459.189:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19419 comm="syz.0.3937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5148e159 code=0x7ffc0000
[  986.423420][   T37] audit: type=1326 audit(1799410459.189:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19419 comm="syz.0.3937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffa5148e159 code=0x7ffc0000
[  986.424436][   T37] audit: type=1326 audit(1799410459.189:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19419 comm="syz.0.3937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffa5148e159 code=0x7ffc0000
[  986.718574][T19435] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3940'.
[  988.840718][T19463] netlink: 'syz.0.3953': attribute type 1 has an invalid length.
[  988.894170][T19463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3953'.
[  988.912843][T19463] 8021q: adding VLAN 0 to HW filter on device bond1
[  988.962378][T19463] bond1: (slave bridge1): making interface the new active one
[  988.969136][T19463] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  990.933571][T19478] ceph: No mds server is up or the cluster is laggy
[  991.007966][T19491] syzkaller0: entered allmulticast mode
[  991.889741][T19506] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3965'.
[  992.278070][T19517] netlink: 'syz.5.3969': attribute type 10 has an invalid length.
[  992.349839][T19517] bridge0: port 2(bridge_slave_1) entered disabled state
[  992.350898][T19517] bridge0: port 1(bridge_slave_0) entered disabled state
[  993.293079][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  993.293158][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  993.867083][T19549] netlink: 'syz.0.3983': attribute type 11 has an invalid length.
[  994.118537][   T37] audit: type=1326 audit(1799410466.889:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19553 comm="syz.7.3985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  994.118602][   T37] audit: type=1326 audit(1799410466.889:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19553 comm="syz.7.3985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  994.189785][   T37] audit: type=1326 audit(1799410466.959:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19553 comm="syz.7.3985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  994.191055][   T37] audit: type=1326 audit(1799410466.959:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19553 comm="syz.7.3985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  994.191120][   T37] audit: type=1326 audit(1799410466.959:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19553 comm="syz.7.3985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  994.214224][   T37] audit: type=1326 audit(1799410466.979:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19553 comm="syz.7.3985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  994.214380][   T37] audit: type=1326 audit(1799410466.979:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19553 comm="syz.7.3985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  994.224610][   T37] audit: type=1326 audit(1799410466.989:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19553 comm="syz.7.3985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  994.225818][   T37] audit: type=1326 audit(1799410466.989:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19553 comm="syz.7.3985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  994.230920][   T37] audit: type=1326 audit(1799410466.989:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19553 comm="syz.7.3985" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767532e159 code=0x7ffc0000
[  994.798780][T19563] netlink: ct family unspecified
[  994.798817][T19563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  995.127513][T19571] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3991'.
[  999.913662][T19627] vcan0: tx drop: invalid sa for name 0x0102030405060708
[ 1000.106236][ T5700] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1000.165227][T19635] bond4: entered allmulticast mode
[ 1000.196921][T19635] ip6gretap1: entered promiscuous mode
[ 1000.206615][T19635] ip6gretap1: entered allmulticast mode
[ 1000.207035][T19635] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1000.256155][ T5700] usb 10-1: Using ep0 maxpacket: 32
[ 1000.261697][ T5700] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1000.261757][ T5700] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1000.261837][T19635] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1000.261862][T19635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1000.264883][ T5700] usb 10-1: config 14 has an invalid interface number: 57 but max is 1
[ 1000.264915][ T5700] usb 10-1: config 14 has an invalid interface number: 228 but max is 1
[ 1000.264939][ T5700] usb 10-1: config 14 has no interface number 0
[ 1000.264959][ T5700] usb 10-1: config 14 has no interface number 1
[ 1000.265036][ T5700] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1000.265065][ T5700] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1000.265095][ T5700] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1000.265126][ T5700] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1000.265158][ T5700] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 1000.265188][ T5700] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1000.265219][ T5700] usb 10-1: config 14 interface 57 has no altsetting 0
[ 1000.265240][ T5700] usb 10-1: config 14 interface 228 has no altsetting 0
[ 1000.356671][ T5700] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.356767][ T5700] usb 10-1: Product: syz
[ 1000.356811][ T5700] usb 10-1: Manufacturer: syz
[ 1000.356855][ T5700] usb 10-1: SerialNumber: syz
[ 1000.984730][ T5700] legousbtower 10-1:14.57: interrupt endpoints not found
[ 1001.245156][   T37] kauditd_printk_skb: 19 callbacks suppressed
[ 1001.245178][   T37] audit: type=1800 audit(1799410474.009:454): pid=19657 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.4022" name="file1" dev="tmpfs" ino=2811 res=0 errno=0
[ 1001.408726][ T5700] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 0.0 build 0
[ 1001.496199][ T5700] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[ 1001.586956][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4023'.
[ 1002.732929][T19684] xt_IDLETIMER: label is empty or not nul-terminated
[ 1002.841793][    C0] usb 10-1: tower_interrupt_in_callback: usb_submit_urb failed (-1)
[ 1003.681491][T15854] usb 10-1: USB disconnect, device number 15
[ 1003.887805][T15854] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected
[ 1005.039320][   T37] audit: type=1804 audit(1799410477.739:455): pid=19704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.4040" name="bus" dev="ramfs" ino=58518 res=1 errno=0
[ 1005.172341][   T37] audit: type=1804 audit(1799410477.939:456): pid=19705 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.9.4040" name="bus" dev="ramfs" ino=58518 res=1 errno=0
[ 1006.726482][ T7555] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1006.768047][T19736] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[ 1006.768165][T19736] Error validating options; rc = [-22]
[ 1006.843240][   T37] audit: type=1326 audit(1799410479.609:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19735 comm="syz.9.4052" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe315eae159 code=0x7ffc0000
[ 1006.843409][   T37] audit: type=1326 audit(1799410479.609:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19735 comm="syz.9.4052" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe315eae159 code=0x7ffc0000
[ 1006.876730][   T37] audit: type=1326 audit(1799410479.629:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19735 comm="syz.9.4052" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe315eae159 code=0x7ffc0000
[ 1006.876919][   T37] audit: type=1326 audit(1799410479.629:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19735 comm="syz.9.4052" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe315eae159 code=0x7ffc0000
[ 1006.877053][   T37] audit: type=1326 audit(1799410479.629:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19735 comm="syz.9.4052" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe315eae159 code=0x7ffc0000
[ 1006.877178][   T37] audit: type=1326 audit(1799410479.639:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19735 comm="syz.9.4052" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe315eae159 code=0x7ffc0000
[ 1006.925953][   T37] audit: type=1326 audit(1799410479.659:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19735 comm="syz.9.4052" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe315eae159 code=0x7ffc0000
[ 1006.928510][   T37] audit: type=1326 audit(1799410479.689:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19735 comm="syz.9.4052" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe315eae159 code=0x7ffc0000
[ 1007.059422][   T37] audit: type=1326 audit(1799410479.809:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19735 comm="syz.9.4052" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe315eae159 code=0x7ffc0000
[ 1007.059485][   T37] audit: type=1326 audit(1799410479.809:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19735 comm="syz.9.4052" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe315eae159 code=0x7ffc0000
[ 1007.741670][T19759] bridge0: port 5(syz_tun) entered blocking state
[ 1007.741821][T19759] bridge0: port 5(syz_tun) entered disabled state
[ 1007.742037][T19759] syz_tun: entered allmulticast mode
[ 1007.769538][T19759] syz_tun: entered promiscuous mode
[ 1012.188960][   T37] kauditd_printk_skb: 3 callbacks suppressed
[ 1012.188980][   T37] audit: type=1326 audit(1799410484.929:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19818 comm="syz.5.4079" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ea675e159 code=0x0
[ 1016.397931][T19833] fuse: fd is not a fuse device
[ 1016.644096][T19839] fuse: fd is not a fuse device
[ 1020.529827][T19897] FAULT_INJECTION: forcing a failure.
[ 1020.529827][T19897] name failslab, interval 1, probability 0, space 0, times 0
[ 1020.529877][T19897] CPU: 1 UID: 0 PID: 19897 Comm: syz.9.4111 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1020.529945][T19897] Tainted: [L]=SOFTLOCKUP
[ 1020.529964][T19897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1020.529995][T19897] Call Trace:
[ 1020.530005][T19897]  <TASK>
[ 1020.530016][T19897]  dump_stack_lvl+0xe8/0x150
[ 1020.530061][T19897]  should_fail_ex+0x46b/0x600
[ 1020.530105][T19897]  should_failslab+0xa8/0x100
[ 1020.530139][T19897]  ? skb_clone+0x212/0x3a0
[ 1020.530258][T19897]  kmem_cache_alloc_noprof+0x9e/0x690
[ 1020.530293][T19897]  ? skb_clone+0x212/0x3a0
[ 1020.530337][T19897]  skb_clone+0x212/0x3a0
[ 1020.530364][T19897]  ? ip_mc_output+0x1d6/0x580
[ 1020.530453][T19897]  ip_mc_output+0x1e3/0x580
[ 1020.530491][T19897]  ip_send_skb+0x45/0xc0
[ 1020.530523][T19897]  udp_send_skb+0x7ed/0xf70
[ 1020.530626][T19897]  udp_sendmsg+0x1971/0x2140
[ 1020.530679][T19897]  ? __pfx_udp_sendmsg+0x10/0x10
[ 1020.530730][T19897]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[ 1020.530767][T19897]  ? current_check_autobind_udp_socket+0x271/0x5c0
[ 1020.530818][T19897]  ? sock_rps_record_flow+0x19/0x350
[ 1020.530851][T19897]  ? inet_sendmsg+0x23e/0x320
[ 1020.530878][T19897]  ? do_user_addr_fault+0xc4c/0x1340
[ 1020.530909][T19897]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1020.530937][T19897]  sock_sendmsg_nosec+0x10e/0x180
[ 1020.530976][T19897]  ____sys_sendmsg+0x565/0x870
[ 1020.531003][T19897]  ? irqentry_exit+0x218/0x910
[ 1020.531029][T19897]  ? trace_irq_disable+0x3b/0x140
[ 1020.531071][T19897]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1020.531109][T19897]  ? import_iovec+0x73/0xa0
[ 1020.531149][T19897]  ___sys_sendmsg+0x2a5/0x360
[ 1020.531177][T19897]  ? __lock_acquire+0x747/0x2de0
[ 1020.531214][T19897]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1020.531251][T19897]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1020.531317][T19897]  ? __fget_files+0x2a/0x420
[ 1020.531345][T19897]  ? __fget_files+0x3a8/0x420
[ 1020.531384][T19897]  __sys_sendmmsg+0x279/0x4d0
[ 1020.531419][T19897]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1020.531445][T19897]  ? do_futex+0x3e7/0x4e0
[ 1020.531479][T19897]  ? __sys_connect+0x3b7/0x470
[ 1020.531520][T19897]  ? rcu_is_watching+0x16/0xb0
[ 1020.531566][T19897]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1020.531597][T19897]  do_syscall_64+0x166/0x520
[ 1020.531622][T19897]  ? trace_irq_disable+0x3b/0x140
[ 1020.531653][T19897]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1020.531679][T19897]  ? clear_bhb_loop+0x70/0xc0
[ 1020.531708][T19897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1020.531732][T19897] RIP: 0033:0x7fe315eae159
[ 1020.531755][T19897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1020.531776][T19897] RSP: 002b:00007fe314106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1020.531803][T19897] RAX: ffffffffffffffda RBX: 00007fe316135fa0 RCX: 00007fe315eae159
[ 1020.531823][T19897] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004
[ 1020.531838][T19897] RBP: 00007fe315f4506b R08: 0000000000000000 R09: 0000000000000000
[ 1020.531855][T19897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1020.531870][T19897] R13: 00007fe316136038 R14: 00007fe316135fa0 R15: 00007ffd761eba98
[ 1020.531907][T19897]  </TASK>
[ 1023.867104][   T37] audit: type=1800 audit(1799410496.639:471): pid=19917 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.4119" name="nullb0" dev="tmpfs" ino=3154 res=0 errno=0
[ 1026.675158][ T5601] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 1026.761757][ T5601] Bluetooth: hci3: Injecting HCI hardware error event
[ 1026.816421][ T5601] Bluetooth: hci3: hardware error 0x00
[ 1030.873438][T19989] ------------[ cut here ]------------
[ 1030.873458][T19989] failed to allocate ring buffer on CPU 1
[ 1030.873479][T19989] WARNING: kernel/trace/ring_buffer.c:8110 at trace_rb_cpu_prepare+0x330/0x3c0, CPU#0: syz.9.4141/19989
[ 1030.898515][T19989] Modules linked in:
[ 1030.902477][T19989] CPU: 0 UID: 0 PID: 19989 Comm: syz.9.4141 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1030.914087][T19989] Tainted: [L]=SOFTLOCKUP
[ 1030.918502][T19989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1030.928681][T19989] RIP: 0010:trace_rb_cpu_prepare+0x332/0x3c0
[ 1030.934735][T19989] Code: 08 f0 48 0f ab 03 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7d 1e 92 09 cc e8 87 2c fc ff 48 8d 3d e0 2e eb 0d 89 ee <67> 48 0f b9 3a b8 f4 ff ff ff eb d2 e8 6d 2c fc ff e9 ef fe ff ff
[ 1030.954486][T19989] RSP: 0018:ffffc900077c77d0 EFLAGS: 00010283
[ 1030.960689][T19989] RAX: ffffffff81caaba9 RBX: dffffc0000000000 RCX: 0000000000080000
[ 1030.968782][T19989] RDX: ffffc900142f4000 RSI: 0000000000000001 RDI: ffffffff8fb5da90
[ 1030.976843][T19989] RBP: 0000000000000001 R08: ffffffff8fb22b7f R09: 1ffffffff1f6456f
[ 1030.984857][T19989] R10: dffffc0000000000 R11: fffffbfff1f64570 R12: 0000000000000000
[ 1030.992905][T19989] R13: ffff88803f8d1408 R14: ffff8880614bd8a0 R15: 0000000000000000
[ 1031.000961][T19989] FS:  00007fe3141066c0(0000) GS:ffff888125bc3000(0000) knlGS:0000000000000000
[ 1031.009977][T19989] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1031.016646][T19989] CR2: 00007fff61fc1088 CR3: 000000005dc52000 CR4: 00000000003526f0
[ 1031.024673][T19989] Call Trace:
[ 1031.028053][T19989]  <TASK>
[ 1031.031040][T19989]  ? __pfx_trace_rb_cpu_prepare+0x10/0x10
[ 1031.036872][T19989]  cpuhp_invoke_callback+0x498/0x810
[ 1031.042224][T19989]  ? __pfx_trace_rb_cpu_prepare+0x10/0x10
[ 1031.048050][T19989]  cpuhp_issue_call+0x3f0/0x750
[ 1031.053007][T19989]  ? mutex_lock_nested+0x152/0x1d0
[ 1031.058216][T19989]  ? __cpuhp_state_add_instance_cpuslocked+0x126/0x560
[ 1031.065128][T19989]  __cpuhp_state_add_instance_cpuslocked+0x225/0x560
[ 1031.071948][T19989]  __cpuhp_state_add_instance+0x25/0x40
[ 1031.077597][T19989]  alloc_buffer+0x188f/0x1d70
[ 1031.082369][T19989]  __ring_buffer_alloc+0x2c/0x40
[ 1031.087411][T19989]  allocate_trace_buffer+0x1d2/0x950
[ 1031.092757][T19989]  ? __kmalloc_node_track_caller_noprof+0x58c/0x7b0
[ 1031.099440][T19989]  ? trace_array_create_systems+0x75/0xe60
[ 1031.105316][T19989]  ? __pfx_allocate_trace_buffer+0x10/0x10
[ 1031.111219][T19989]  ? __raw_spin_lock_init+0x45/0x100
[ 1031.116599][T19989]  trace_array_create_systems+0x590/0xe60
[ 1031.122372][T19989]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1031.128273][T19989]  ? mutex_lock_nested+0x152/0x1d0
[ 1031.133473][T19989]  instance_mkdir+0xd5/0x140
[ 1031.138181][T19989]  tracefs_syscall_mkdir+0x11a/0x190
[ 1031.143589][T19989]  ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 1031.149517][T19989]  ? generic_permission+0x2bf/0x670
[ 1031.154777][T19989]  ? __pfx_tracefs_permission+0x10/0x10
[ 1031.160431][T19989]  ? bpf_lsm_inode_mkdir+0x9/0x20
[ 1031.165532][T19989]  vfs_mkdir+0x408/0x620
[ 1031.169867][T19989]  filename_mkdirat+0x289/0x520
[ 1031.174768][T19989]  ? __pfx_filename_mkdirat+0x10/0x10
[ 1031.180254][T19989]  ? do_getname+0x151/0x250
[ 1031.184817][T19989]  __se_sys_mkdirat+0x35/0x150
[ 1031.189721][T19989]  do_syscall_64+0x166/0x520
[ 1031.194362][T19989]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.200570][T19989]  ? clear_bhb_loop+0x70/0xc0
[ 1031.205299][T19989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.211287][T19989] RIP: 0033:0x7fe315eae159
[ 1031.215795][T19989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1031.235513][T19989] RSP: 002b:00007fe314106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1031.244045][T19989] RAX: ffffffffffffffda RBX: 00007fe316135fa0 RCX: 00007fe315eae159
[ 1031.252163][T19989] RDX: 00000000000001ff RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 1031.260230][T19989] RBP: 00007fe315f4506b R08: 0000000000000000 R09: 0000000000000000
[ 1031.268327][T19989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1031.276381][T19989] R13: 00007fe316136038 R14: 00007fe316135fa0 R15: 00007ffd761eba98
[ 1031.284423][T19989]  </TASK>
[ 1031.287543][T19989] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1031.294867][T19989] CPU: 0 UID: 0 PID: 19989 Comm: syz.9.4141 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1031.306388][T19989] Tainted: [L]=SOFTLOCKUP
[ 1031.310744][T19989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1031.320834][T19989] Call Trace:
[ 1031.324155][T19989]  <TASK>
[ 1031.327132][T19989]  vpanic+0x56d/0xa60
[ 1031.331233][T19989]  ? __pfx__printk+0x10/0x10
[ 1031.335876][T19989]  ? __pfx_vpanic+0x10/0x10
[ 1031.340410][T19989]  ? is_bpf_text_address+0x292/0x2b0
[ 1031.345738][T19989]  ? is_bpf_text_address+0x26/0x2b0
[ 1031.351011][T19989]  panic+0xc5/0xd0
[ 1031.354771][T19989]  ? __pfx_panic+0x10/0x10
[ 1031.359236][T19989]  __warn+0x315/0x4c0
[ 1031.363258][T19989]  ? trace_rb_cpu_prepare+0x330/0x3c0
[ 1031.368699][T19989]  ? trace_rb_cpu_prepare+0x330/0x3c0
[ 1031.374125][T19989]  __report_bug+0x276/0x570
[ 1031.378785][T19989]  ? trace_rb_cpu_prepare+0x330/0x3c0
[ 1031.384226][T19989]  ? __pfx___report_bug+0x10/0x10
[ 1031.389313][T19989]  ? rb_allocate_cpu_buffer+0x5cf/0x3070
[ 1031.395000][T19989]  report_bug_entry+0x19b/0x290
[ 1031.399894][T19989]  ? trace_rb_cpu_prepare+0x332/0x3c0
[ 1031.405310][T19989]  ? trace_rb_cpu_prepare+0x337/0x3c0
[ 1031.410734][T19989]  handle_bug+0xce/0x200
[ 1031.415024][T19989]  exc_invalid_op+0x1a/0x50
[ 1031.419570][T19989]  asm_exc_invalid_op+0x1a/0x20
[ 1031.424459][T19989] RIP: 0010:trace_rb_cpu_prepare+0x332/0x3c0
[ 1031.430496][T19989] Code: 08 f0 48 0f ab 03 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7d 1e 92 09 cc e8 87 2c fc ff 48 8d 3d e0 2e eb 0d 89 ee <67> 48 0f b9 3a b8 f4 ff ff ff eb d2 e8 6d 2c fc ff e9 ef fe ff ff
[ 1031.450135][T19989] RSP: 0018:ffffc900077c77d0 EFLAGS: 00010283
[ 1031.456243][T19989] RAX: ffffffff81caaba9 RBX: dffffc0000000000 RCX: 0000000000080000
[ 1031.464251][T19989] RDX: ffffc900142f4000 RSI: 0000000000000001 RDI: ffffffff8fb5da90
[ 1031.472260][T19989] RBP: 0000000000000001 R08: ffffffff8fb22b7f R09: 1ffffffff1f6456f
[ 1031.480267][T19989] R10: dffffc0000000000 R11: fffffbfff1f64570 R12: 0000000000000000
[ 1031.488278][T19989] R13: ffff88803f8d1408 R14: ffff8880614bd8a0 R15: 0000000000000000
[ 1031.496307][T19989]  ? trace_rb_cpu_prepare+0x329/0x3c0
[ 1031.501749][T19989]  ? __pfx_trace_rb_cpu_prepare+0x10/0x10
[ 1031.507514][T19989]  cpuhp_invoke_callback+0x498/0x810
[ 1031.512862][T19989]  ? __pfx_trace_rb_cpu_prepare+0x10/0x10
[ 1031.518639][T19989]  cpuhp_issue_call+0x3f0/0x750
[ 1031.523540][T19989]  ? mutex_lock_nested+0x152/0x1d0
[ 1031.528732][T19989]  ? __cpuhp_state_add_instance_cpuslocked+0x126/0x560
[ 1031.535651][T19989]  __cpuhp_state_add_instance_cpuslocked+0x225/0x560
[ 1031.542378][T19989]  __cpuhp_state_add_instance+0x25/0x40
[ 1031.547977][T19989]  alloc_buffer+0x188f/0x1d70
[ 1031.552749][T19989]  __ring_buffer_alloc+0x2c/0x40
[ 1031.557739][T19989]  allocate_trace_buffer+0x1d2/0x950
[ 1031.563074][T19989]  ? __kmalloc_node_track_caller_noprof+0x58c/0x7b0
[ 1031.569714][T19989]  ? trace_array_create_systems+0x75/0xe60
[ 1031.575584][T19989]  ? __pfx_allocate_trace_buffer+0x10/0x10
[ 1031.581453][T19989]  ? __raw_spin_lock_init+0x45/0x100
[ 1031.586784][T19989]  trace_array_create_systems+0x590/0xe60
[ 1031.592556][T19989]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1031.598413][T19989]  ? mutex_lock_nested+0x152/0x1d0
[ 1031.603575][T19989]  instance_mkdir+0xd5/0x140
[ 1031.608203][T19989]  tracefs_syscall_mkdir+0x11a/0x190
[ 1031.613532][T19989]  ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 1031.619396][T19989]  ? generic_permission+0x2bf/0x670
[ 1031.624652][T19989]  ? __pfx_tracefs_permission+0x10/0x10
[ 1031.630255][T19989]  ? bpf_lsm_inode_mkdir+0x9/0x20
[ 1031.635330][T19989]  vfs_mkdir+0x408/0x620
[ 1031.639632][T19989]  filename_mkdirat+0x289/0x520
[ 1031.644544][T19989]  ? __pfx_filename_mkdirat+0x10/0x10
[ 1031.650106][T19989]  ? do_getname+0x151/0x250
[ 1031.654656][T19989]  __se_sys_mkdirat+0x35/0x150
[ 1031.659472][T19989]  do_syscall_64+0x166/0x520
[ 1031.664100][T19989]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.670229][T19989]  ? clear_bhb_loop+0x70/0xc0
[ 1031.674957][T19989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.680888][T19989] RIP: 0033:0x7fe315eae159
[ 1031.685339][T19989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1031.704982][T19989] RSP: 002b:00007fe314106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1031.713440][T19989] RAX: ffffffffffffffda RBX: 00007fe316135fa0 RCX: 00007fe315eae159
[ 1031.721450][T19989] RDX: 00000000000001ff RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 1031.729458][T19989] RBP: 00007fe315f4506b R08: 0000000000000000 R09: 0000000000000000
[ 1031.737459][T19989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1031.745467][T19989] R13: 00007fe316136038 R14: 00007fe316135fa0 R15: 00007ffd761eba98
[ 1031.753494][T19989]  </TASK>
[ 1031.757152][T19989] Kernel Offset: disabled
[ 1031.761511][T19989] Rebooting in 86400 seconds..