last executing test programs:

21m44.556088932s ago: executing program 4 (id=5):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$nvme_fabrics(0xffffff9c, 0x0, 0x202000, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0)
dup(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

21m42.472985483s ago: executing program 4 (id=15):
socket(0xa, 0x3, 0xff)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$netlink(0x10, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
fcntl$setlease(r0, 0x400, 0x1)
gettid()
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x400, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 0x9}, 0xa)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x400}, 0x0, 0x0, 0x0)
syz_ublk_setup_io_uring(0x7a16, &(0x7f0000002140)={0x0, 0x4671, 0x800, 0x3, 0x2b5, 0x0, r3}, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e001c0012e2440102800200121f", 0x2e}], 0x1}, 0x0)

21m38.104138945s ago: executing program 4 (id=20):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x8000)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2001}, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xd9}}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r1, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @tick=0x9, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x70)

21m35.968989121s ago: executing program 4 (id=24):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000040)='GPL\x00', 0x40, 0xe8, &(0x7f0000000080)=""/232, 0x40f00, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x1], &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0xc}, {0x5, 0x2, 0x9, 0x6}, {0x3, 0x2, 0x5, 0xc}, {0x0, 0x2, 0x2, 0x5}, {0x1, 0x4, 0x7, 0x9}], 0x10, 0x1}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185042, 0x1ef)
fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xfffffffb)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c5a00, 0x0)
sendfile(r1, r2, 0x0, 0x20fffe82)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x70bd2b, 0x25dfdbdb, {0x2, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x1, 0x10008}}, 0x1c}}, 0x8810)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x46, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900010000000000000000001c"], 0x1c}}, 0x18040)
r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x1000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x2b, 0x1, 0x1)
socket$inet6(0xa, 0x2, 0x0)
unshare(0x8040480)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5)
r8 = accept$alg(r7, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000002440)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000801}], 0x1, 0x40)
recvmmsg(r8, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x4}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000009c0)=""/20, 0x14}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f00000001c0)=""/63, 0x3f}], 0x3}, 0x9}], 0x2, 0x10122, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x4000)
socket$nl_route(0x10, 0x3, 0x0)

21m34.416481468s ago: executing program 4 (id=28):
socket$inet(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x28, 0x0)

21m32.15277913s ago: executing program 4 (id=30):
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/ohci-platform/bind\x00', 0x1, 0x0)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000004100)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000128000bfd2b3570f1253d48958cef0d13666de3854dbe2106bec156c9cd20ff3d628564cd7ca1a14e7ad63776da03e11cb4b22213b33ce86ed6b4ee553cd6d045f8229d465a4b9edeb611b2ffdde28079fe79b50211e98c9597c13346a8badc9c8e68cf04546f0368a1bccfd8bce9d68108eba6fe1200243e687d300", 0xa4}, {0x0}, {0x0}], 0x3}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0)

21m16.784937037s ago: executing program 32 (id=30):
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/ohci-platform/bind\x00', 0x1, 0x0)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000004100)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000128000bfd2b3570f1253d48958cef0d13666de3854dbe2106bec156c9cd20ff3d628564cd7ca1a14e7ad63776da03e11cb4b22213b33ce86ed6b4ee553cd6d045f8229d465a4b9edeb611b2ffdde28079fe79b50211e98c9597c13346a8badc9c8e68cf04546f0368a1bccfd8bce9d68108eba6fe1200243e687d300", 0xa4}, {0x0}, {0x0}], 0x3}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0)

13m44.555571496s ago: executing program 5 (id=1496):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2100, 0x0)
lsetxattr$trusted_overlay_origin(0x0, 0x0, &(0x7f0000000180), 0x2, 0x1)
r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, 0x0, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)

13m40.979570029s ago: executing program 5 (id=1504):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="afcd82f1a317120e27ed05c265ec11e86fc5a4d5d17db3b9c8181ca4eefd0b70169320ef13726913b0b4274bb8afa37134d3911f21d4a658bc9a671f93f77cc4936b1478c1c966277863a176c7935ba891ec1494f64814f910a0d444175cc59de52557d2748976bdb7a8929b37d901be7b43f0b79e00885b98d3ed2efd6de229613d40f1d065da1294646d81a79e5199f74a054f222371ade27d8ab2ef3380edd6d6cc887d32cb58b527e820c0b6de0240e87a3ccc52efd1fa4579044efcc7737bf0201f474103355aebf660fb19445fabd9d20fc18927641f886da5fc", @ANYRES16=r6, @ANYBLOB="110500004000000000000900000030000380050008000700000008000300000000001400020076657468305f746f5f626f6e640000000800010002000000"], 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000340))
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f00000005c0)=@ethtool_gstrings={0x1b, 0x2, 0xd3, "34189790054fbea6c989707b65eeb3b1eeadb1cd1eca1ebda5e10c6f4f7526b4dca1e14f0767ec437e2b08774cd99e9cc059f283e10d8650c7c595ee25baca9f027e4f9c918c5bb9e547fde368d203f99dd4f9ecc1e589102ee5f872ea8deda5defbadcaff148f242375a4af4959f7747413269d0ed62dc2f56293c6310d73f0a47f58ba14395a9d83eac8754ca43b5602afcd68f885fd69f7c44e0d55703441303a0d687a3de78930979ab2773e09c49f55cbfbbc8de6e2d4967a6f41998601b3aa5039f29a13d8d404ddad31da0f2c8f8f15"}})

13m37.114347616s ago: executing program 5 (id=1511):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0)
fallocate(r1, 0x0, 0xbf9, 0x1000f)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

13m36.792175219s ago: executing program 5 (id=1513):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e)
mkdirat(0xffffffffffffff9c, 0x0, 0x181)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80)
symlink(0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x202000, 0x13b)
socket$nl_netfilter(0x10, 0x3, 0xc)

13m35.760378838s ago: executing program 5 (id=1516):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc4}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000000228bd700000000000e00000020000f5ff000000000000000000000000000000000000000000170000000068b2680006000001000a00107e00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000b56b6e000000030200000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r5)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40000)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="141f00003b00010324bd7022ffdbdf2501000000e8a5f84305d3c74e8f84a440ffadfdcacc32e73259196ae27a70c525f932db1954d8a477447cfae4fc"], 0x14}}, 0x4000840)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="4400508008006500", @ANYRES32=r1, @ANYBLOB="34001380a4a7f6218722ca003cfd2957e794220800d900214f00ff97430cb7a16324378830e150e31197fca9d6ba025d63d93939897bc378ea808f0bfef6202b17f43ae5c1c7d9872b1f7a175af67f9b2f72445be270125a5268ff47e15b166376baab5193f027daebadf163444c2baa3c9bd5860620804887691c200ba2667ba6b8e51178fb2f9d5f1e3bf62ca2bc04d362cf5c3d0c64fad4a14025", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x1440}, 0x1, 0x0, 0x0, 0x20000000}, 0x42001)
clock_adjtime(0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002040)=@newtaction={0xbe0, 0x30, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x1, 0x7, 0x4, 0x206}, {0x28, 0x98, 0x81, 0xfffffff9}, {0xc, 0x90, 0xa, 0x5}, {0xe54, 0x6a, 0x1, 0x3}, {0xff01, 0x3, 0x83, 0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x1d4, 0x1, [@m_mpls={0xf4, 0x9, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xee957}, @TCA_MPLS_TTL={0x5, 0x7, 0x90}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x800, 0x2, 0x1, 0xfffffffc}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffffd, 0xc, 0x9, 0x55, 0xc}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x90a5, 0x7, 0x8, 0x80, 0x80000000}, 0x2}}]}, {0x51, 0x6, "dfba5747dcc7b9ab0676da528d7e59ab91066db2b89b5496c70fc4f4369f03681c5b65fe8951f53c780f3a8e04c41b37790ea1098ed962e1bcfd3c1ce5d1e951faa281367f688ea659bcef0890"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xdc, 0x20, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0x8, 0x7, 0x1, 0x8}, {0x9, 0x10, 0x15, 0x8}, {0x9, 0x7, 0x9, 0x8001}, {0x5, 0x95, 0xb5, 0x1000}, {0x5, 0x7, 0x9, 0x2}, {0x7, 0x6, 0x2a, 0x2}, {0x200, 0xfe, 0xb4, 0x6}, {0xa9, 0xc, 0x7, 0x10}, {0x7, 0xf7, 0x84, 0x1}, {0x7, 0x3, 0x7, 0x1}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7ff, 0x4, 0x2, 0x9}}]}, {0x3f, 0x6, "fc512ac8a33193ffd9d4d947a43ef4b2d8db90db5c91e800b5eee21f9a0bbc7252bfd331fff3f6cc4d700f04e06931f45166562ff0e0e71aed2f3e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x97c, 0x1, [@m_sample={0xe0, 0x11, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3ff}]}, {0xab, 0x6, "ccaa8aac34c97a4ef31b609c2c75859b10c6767cfc1f87f0221515ba2ef1ad5b5d9bd7c6e98cf3528c4f1554d5393cc6a36a9210268740d63c20d6e4e9f8c5663ee280593b32df7d8bd804022b5ccf9d990ed62b52c1a80f54ba00b833c409ea92d5bc2aa728481fee4fcaf2bf167a3204e3db3717cf1febe043a61273727cbab86ffdee83086a7b4692c120bf6cf26f039441388b1f209fe5d3f6a9db9e24def46cbe1dfdc7c0"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_police={0x5f0, 0x1b, 0x0, 0x0, {{0xb}, {0x4dc, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x7, 0x7fffffff, 0x8, 0xfffffff0, {0x3, 0x2, 0x1, 0x3, 0x782, 0x3}, {0x8, 0x0, 0xb278, 0x101, 0x2, 0x6}, 0x4, 0x790}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x40, 0xf, 0x9, 0x2, 0x716, 0xbb6, 0xd, 0x0, 0x1, 0x7fffffff, 0x9, 0x8, 0x6, 0x5c, 0x7f, 0x3, 0x2, 0x7fffffff, 0x5, 0x7, 0x4, 0x6, 0xffff, 0x400, 0x583, 0x6, 0x5, 0x9, 0x1000, 0x73c, 0x4, 0x3, 0x1, 0x3ff, 0x1000, 0x6, 0x7fffffff, 0x401, 0x7c0, 0x101, 0x100, 0x35, 0x9, 0x5e5c4b94, 0x481, 0x1ffe00, 0x7fe, 0x2be, 0x0, 0xffff, 0x4, 0x4, 0x3, 0xfffffffd, 0x8, 0x3, 0x3, 0xea3, 0x8, 0xc007, 0x400, 0x261, 0xb, 0xd, 0x3, 0x7fff, 0xfffffff7, 0x47fd, 0x80000000, 0x400, 0x2, 0x7, 0x18, 0x5, 0xa2cb, 0x9, 0x3, 0x2, 0x8, 0x1, 0x101, 0x5, 0xfffffff1, 0x10, 0x10000, 0x8, 0x8, 0xfff, 0x7ffffff9, 0x0, 0x731, 0x7, 0x4, 0x7, 0xfffffffb, 0xd, 0x1, 0x1, 0x2, 0x7, 0x3, 0x1, 0x6, 0x0, 0x4, 0x0, 0xae50, 0x6c79e5ff, 0x3, 0x6, 0x8000, 0xe78, 0x1, 0x1, 0x5, 0xc, 0xee76, 0xcc, 0xa93, 0x0, 0xb9b, 0xfff, 0x3, 0x7, 0x2, 0xfffff000, 0x8000, 0x40, 0x1, 0x1, 0x8, 0xffffff01, 0x800, 0x4, 0x9, 0x8000000, 0x80, 0xfffffff3, 0x0, 0x0, 0x8, 0x7, 0x8, 0x401, 0x800, 0x9, 0x808, 0x1, 0x8, 0x8, 0x1, 0xffffffff, 0x8, 0x5, 0x200, 0x7, 0xfffffffb, 0x5, 0x1, 0x1a2a62bd, 0x4, 0x2, 0x5, 0x9, 0x7, 0x2, 0x0, 0x2ac, 0xffffffff, 0x101, 0x3, 0x10, 0x8, 0x4, 0x1, 0x200, 0x9, 0x9, 0x37, 0xc54b, 0x68, 0xffff1d17, 0x8, 0x4, 0x6, 0xf36, 0x6, 0xa, 0x5, 0x6, 0x4, 0xd9, 0x5, 0xff, 0x0, 0x3, 0x10, 0x9, 0x423, 0x401, 0x4, 0x3, 0x9, 0x353, 0x2, 0x6e93, 0x5ccb, 0x9, 0x40, 0x10, 0x2, 0xf, 0x1, 0x8, 0x1, 0x0, 0x7ff, 0x4, 0xc24, 0x5, 0xff, 0xb7e, 0xa, 0x1, 0x4058, 0xfb79, 0x200, 0x7, 0xffffff84, 0x5d3, 0x7, 0x0, 0x100, 0xe34ae38, 0x4, 0x8, 0x6, 0x1, 0x7, 0x6, 0x2, 0x7, 0x2, 0x101, 0x3ff, 0x100, 0x3, 0x5, 0x3, 0x3, 0x1, 0x8, 0x7, 0x7fff, 0x7fff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3f5}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x20000000, 0x6, 0x6, 0x53, {0x1, 0x0, 0x0, 0x0, 0x57, 0x5}, {0x3, 0x0, 0x8, 0x0, 0x6}, 0x3, 0x1, 0x7fffffff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffff1d, 0xffffffffffffffff, 0x6, 0xb114, 0xe82, {0x61, 0x1, 0x9, 0x7, 0x6, 0x401}, {0x5, 0x1, 0x40, 0xb, 0x3, 0x277}, 0x7f, 0x40, 0xffff}}]]}, {0xea, 0x6, "25fbed3557ebe18c8c4eda49f78f0b39c1908f6027e8567e0462fffe3f6464d0b6f924115cb02823e651aa2a736bef3d26baf41d97fe945930c0fac57f9d8c76ef8d7a048953dbe36bc841703e133d9fb32022b0921b8235a0f85f58e937859c77f1cf224ab06841bd718418b637acbfc6466ef6b0756cd8c1f6b93778d97fc572de20156c94038226c7fc3de22811b5acf753bbf4c92cebc783bd32504cd6323bebcfcab1c630667e8c1f4f1b9873ed7d408e1575c4306825504380a2d7874ddc949f05a9d27b9cdb7ce35bdbb5654d1cfcc59421c53ab7062a0177a08c6f3ef2077e199471"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x15c, 0xa, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0x6, 0x20000001, 0x8, 0x167178bb}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xca0c, 0x3, 0x8001, 0x3}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x85d, 0x1, 0x3a, 0x4}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x20000000, 0x1}, 0x1}}]}, {0xba, 0x6, "301928cd5b6bb1aa7020c6886d789d0ee28754a0ff56bb7cfe604ab0b47a48d34592d88dd56dc7115773b57df1cd0ab9195f27d28eaee966ea27816ef1c8ccc4aa8298c8aa9e8f999ae6db7f99548c9f8b00461ea907807dce499ba6ea63936d06d053ab841daa31d5ef6cc13cbacd14ac4984e673cf0482b3489e039d6cc68f9801ed68087b35510d9a5c1cd18618379f398dafde15651920cf8296d2ebb5cc428e69ffed8f5023a6afd27e9a016c8d434ee4e12879"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x14c, 0x9, 0x0, 0x0, {{0x9}, {0x9c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1000, 0x8, 0x20000000, 0xfffffbff, 0x1e77}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x258}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x10001, 0x10000000, 0xcf07, 0x100004}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8c, 0x0, 0x289b9fcea42267dc, 0x4, 0x9}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x10000, 0x10000000, 0x1, 0x101}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x86, 0x6, "97e69d4351a44270ea15b1c97a5665b2b8d491f82a3de57c367cf2acde95e21a5942a04c8eefc0c92c7ed2ff0d96c8df3a82ff98719b668e276a98b601b9a09f310e65cb2390dd9b03e2bf433eb001b37b8d5cd3b449d8e80c4046a254e643c361fe62508eeac89d709190af3147e82c5c3a83ec37c10a21906fe3a8dce7686b2e61"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xbe0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
getpid()
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='pim6reg1\x00', 0x10)
bind$inet6(r0, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0180c200000002aaaaaaaaaa86dd6000000000103aff00000000000000000000000000000000ff0200000000000000000000000000018600907800"/70], 0x0)

13m33.562717225s ago: executing program 5 (id=1521):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xa, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x1}, 0xffffffffffffffb5)
write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r3, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4)
write(r3, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r3, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
setreuid(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020400090a0000000000000000000000030006000000000000000002000100000000000000000200000000030059123a58840655ec4e23e0000001db48e40000000000"], 0x50}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x180c00)
getpeername$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)

13m18.403969406s ago: executing program 33 (id=1521):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xa, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x1}, 0xffffffffffffffb5)
write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r3, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4)
write(r3, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r3, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
setreuid(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020400090a0000000000000000000000030006000000000000000002000100000000000000000200000000030059123a58840655ec4e23e0000001db48e40000000000"], 0x50}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x180c00)
getpeername$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)

4m51.855825955s ago: executing program 2 (id=3180):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000000a082, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x80000)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)

4m50.071392534s ago: executing program 2 (id=3184):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f00000005c0)="411a211887569f887e5dd032f8d5952f03c76f49e46e127047a352e4f68c2417f0c0879ace1299145a6ba0574b61251f4631207c2e8e542d9fa7b69400096964ae6ed074e8105274d0d9c83bc3fcbbaf0a05c646a9fd0ec09dca33f336224cefcd7241277f8650184ae0805fa6dcb4e8639373082f2cfbb1696caa17b1bed06d5d672b7e1c7a599d", 0x88)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xf8, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xbc, 0x1, [@m_tunnel_key={0xb8, 0xf, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}]}, {0x57, 0x6, "49faabd009eada9d7be60c407dafa92f49e8cd3a8f4fa8421129f6125120e80ad1f39b81fe547f4b02f63246313a813a99ecef91e6d9ef24aa123d4ec0ae96adae785c4e501ba800b202cd14d8c0016fc9c4f3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket(0x28, 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f00000001c0)={0x3c, 0xffffffff, 0xa, 0xc, 0x43, 0x81})
sendto(r1, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

4m45.972861293s ago: executing program 2 (id=3190):
socket(0xa, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000080000000216ced5e0000000000000000000000004000"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000010000000000000", @ANYRES32=r0, @ANYBLOB="8013811b4b000000000000010000000000e73d04", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
socket$inet_tcp(0x2, 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0xff)
socket$netlink(0x10, 0x3, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4)
r5 = fsmount(r4, 0x0, 0x88)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5], 0x20)
r6 = dup(r3)
syz_ublk_setup_queues(r6, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x0, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe705, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x9edcf7cb72c73783, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

4m45.349655688s ago: executing program 2 (id=3195):
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc957, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0xc, 0x7, 0x3c5b, 0xeff, 0x24, 0x8006, 0x1, 0x5, 0x0, 0x5, 0x4, 0x6, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xffff0001, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x9, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x7fffffff, 0x0, 0x84, 0x7f, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x6e, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0x2, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x2000c, 0x8, 0x9, 0xb, 0x47, 0x60f6, 0xffffffff, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x3, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x30000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x7, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0xfffffffe, 0x1000, 0x7ff, 0x125, 0x4, 0x400007, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x6, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x7, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0x0, 0x80000003, 0x6, 0x4, 0xc8, 0xb, 0x1000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x80000004, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$netlink(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040002000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b0008000100020000000800040001000000", 0x58)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x3, 0x6)
fcntl$dupfd(r2, 0x0, r2)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f00000000c0)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c)
r4 = io_uring_setup(0x208b, &(0x7f0000000000)={0x0, 0xeec2, 0x800, 0x0, 0x65})
close_range(r4, r4, 0x0)
recvmmsg(r3, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}, 0x28f7}], 0x1, 0x100, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0)

4m43.73876679s ago: executing program 2 (id=3199):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee", 0x71}], 0x1}}], 0x2, 0x2090)
recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000002c0)=""/224, 0xe0}], 0x1}, 0x9}], 0x1, 0x102, 0x0)

4m41.471176651s ago: executing program 2 (id=3203):
unshare(0x42000000)

4m26.237668723s ago: executing program 34 (id=3203):
unshare(0x42000000)

3m37.233081052s ago: executing program 0 (id=3317):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, r1, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x40}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x4c}}, 0x40080)

3m33.796603191s ago: executing program 0 (id=3321):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x2, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x40}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6)
mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r4, 0x0, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x40, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "49e5c49b5540099d1faf5917c22038a4"}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @generic={0x22, 0xe, "c06efca02ff365069a24bb98"}]}}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})

3m31.489289089s ago: executing program 0 (id=3322):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000000a082, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x80000)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
fanotify_init(0x4, 0x800)
socket(0x2, 0x3, 0xff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'none\x00', 0x0, 0x10002, 0x6f}, 0x2c)

3m29.943133283s ago: executing program 0 (id=3325):
open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0)
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x50)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x50, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0x4}, {0xb, 0x8}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x85c7}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0xd}]}}]}, 0x50}}, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={0xffffffffffffffff, 0x1}, 0x16)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, &(0x7f0000000200)="82", 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'vlan1\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r7}, 0x40)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)

3m24.140113148s ago: executing program 0 (id=3336):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000000a082, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fanotify_init(0x4, 0x800)
getpid()
socket(0x2, 0x3, 0xff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'none\x00', 0x0, 0x10002, 0x6f}, 0x2c)

3m21.598061372s ago: executing program 0 (id=3340):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt(r0, 0x1, 0x5, &(0x7f0000000140)=""/7, &(0x7f0000000000)=0x7)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x40000, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000440)={'8255\x00', [0x400000, 0x2f00, 0x2a1a, 0x4, 0x6, 0x800afa3, 0x0, 0x4, 0x5855, 0x2, 0x7, 0x9, 0x0, 0x9, 0x6, 0x2, 0x6f48, 0x4, 0x2, 0xa, 0x5, 0xcaa2, 0x1003, 0x7fff, 0x2000003, 0xe69, 0x2, 0x4, 0x4086, 0x0, 0x6f5]})
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r3, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r4=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x5c8)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f00000002c0)={0x3, 0x10000, 0x1, 0x8, 0x5})
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}])
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r7, 0x3b87, &(0x7f0000000280)={0x18, 0x1, 0x1})
r8 = socket$kcm(0x2, 0xa, 0x2)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
write$char_usb(r9, &(0x7f0000002a80)="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", 0x1000)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000300)=ANY=[], 0x54)
setxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000000000040004000000000008000b00", @ANYRES32=0x0, @ANYBLOB="10000700000300002000000000000000"], 0x3a, 0x0)
r10 = creat(&(0x7f0000000100)='./file0\x00', 0x80)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r10, 0x1e, &(0x7f0000000200)={r8, 0x1, 0x2, 0x401, 0x8}, 0x1)
ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
write$ppp(r1, &(0x7f0000002440)='\nr', 0x2)

3m5.970515497s ago: executing program 35 (id=3340):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt(r0, 0x1, 0x5, &(0x7f0000000140)=""/7, &(0x7f0000000000)=0x7)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x40000, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000440)={'8255\x00', [0x400000, 0x2f00, 0x2a1a, 0x4, 0x6, 0x800afa3, 0x0, 0x4, 0x5855, 0x2, 0x7, 0x9, 0x0, 0x9, 0x6, 0x2, 0x6f48, 0x4, 0x2, 0xa, 0x5, 0xcaa2, 0x1003, 0x7fff, 0x2000003, 0xe69, 0x2, 0x4, 0x4086, 0x0, 0x6f5]})
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r3, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r4=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x5c8)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f00000002c0)={0x3, 0x10000, 0x1, 0x8, 0x5})
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}])
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r7, 0x3b87, &(0x7f0000000280)={0x18, 0x1, 0x1})
r8 = socket$kcm(0x2, 0xa, 0x2)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
write$char_usb(r9, &(0x7f0000002a80)="c6485b5f634423b60763d6e44b7d62945fb13da44767c97176e59423f12427be17337ce6124262504a60146b8394c27c6229170fb27ad39c29bd52ec05d4e4714049d3e102e13901b8316d209d49cfa7444296899d4228ee0a7debf505145ae03c07f68633dddf926484b1cf54739369c38e3ad0d26b7a1d2877843b2612b9d9dd5fe8998323f0ac2c997dd7e5bc92d1d44467c2e4bb304ccda657ef953ffc1100db53564b8a1b085c30e0025b5ec16c2f6b80bf68ca09c39aac5f308426962748306fb67a64f9162eb10e2d69077d2c709cf6eb6a60f480edaa62d9bec9c9931a5c0aee86a74f7e2be77f7cda6bbafda0f51465186dbb04f92071c02ae1978e82460a3a4e609577d0b17ba3e9d759a912c8924ea19e300524279ce0bbba66e93b1750d64dc9306fe55dda1ba9391772193a78c997cea94bea91739b4d470d287eea29f65b2765883a5da8a20a422f729bcc1b8c5665545df0f22c5211665fc6da7c09cb2885d26e6389f91156f4a97968dcf46beadac926b18abace508c6a754b9f55475136d693a1a0dd2d4989dda7d39b7d55f96e9d4bc637b53a323a6a621fbfba09ab720a7dffefdab1babd1b2f453a188a45ed746e85923b1f72d54f6152adc48f13f704b51483da32aefab97b58cace7db00b0550ef2292b4b3a0eccd308b5969429a6dbf5b216685bb86186936cf7c3bd3c40d108bd940581b6ed791324c5ce1d716fd90f5c8f1f32d251784b82da857c85a049740217b30d8c96be0f8d2fc089e24171dd0c56a0a7cdd3fa3f28e6c9e305db089f333222208da6cfa7ecd818c94e01275f82e433c5ad62788a80f268618460ca778117ffe0d17caf6baf62c7fd17a1b5cc0c6d777d074fabe7718215033f2f64854f8aceb367db3c0ace5c307ae4c2b1386c5f63e621209cd9e62ae08c224d30050f38de2022dfb1df0a67c80363270567c3357538402e2aea5b549584cd36115fbeae5e0c6149e57363bc14c682480d9f237618f92053f12f08d7e97fb8e142d2c98be004468d396db416352a1a1b732e96dfa78704671c011974d3e2572e73b66b211fcc5b79819458926c7c5efcd69406bdc9cb6ddda06fcb30cc4ace0d9973c55f8761ac44c5fb528e422bbc27133494f4fe53755f5dc7deebe666892a504c8339e28d345715a00fc7cf34680dcdc7073b0fc8ec2d70cf092339afa4fe50c9669ef6d1df165aaceb24975e7aebddc58f4b469d667c1ddbe4c44cd1e017f40835ca79332375d35d6c8ee6f1a6361dca62e1356244df0cdfa24ae5bd5589715a5f96143856f3a87b8c8580a2f28ac0d5ef9969724319f96ea0c33d3e58a906048a98569b9e4c8bc2baf8172de1e42c49ff4fc3bd56f8d07342ba7ab26314a3163ac05b11cfd7a8ab246d5cfced221b6ce09c6088a220fa63158965cc13fec7d699fa82db2dba89180cca1f8b130f0e62a4064cbb9e0e6de545e146bb53a5d53fb7b8b4e72063f2db4c14220bcb195ee1a1787a770d33fa52984a6942ec1126155dc03028623232567d7580001d65201262eb85aafecafa72a7c3850b8539067b5b1cbcb6b655409594d740ab0f7e0dbd4875d1d9234761dd7760a11cfeb46fefed4248d324148b9b0bb55e3f1351f5005ed66237072da4fc343661fcdcbec550fc9511c3090486e9b7cb1433ce8cd9044e836bc19adf8e296de4f71503bcf251edef8a4afef275a8d168b044d01e65027202156ddb4a240d44dffb464d56796bc4cdf32b988303aecf83355f75244d0f759ea68c325ca19ed604e98f3a1d272a95bebc835853fff4daed9cc8f319569b0c1f22c2f948a4e46c924edcc1245ebd10f212adf57381d1915aa7c8f36144f8a5c0b1d53b1182fba32593eaed0dec287d918cc0f43691ae78cd74736e5f3fcce50547448f8e434bdb5157d73e911b8b3372b7d114805f4315044fe3f86bcd1d3914e82a9456b50bc661121eb898e1d30cdfd77e1df932c46bb99c6d3401e8f4e4dba5be2281ec6a76f22bd769739e783a4163a69e1ccda4c4036ac9fa9a75dc8bfc6dfdf089d3801ce16ab9321f463f9335654ae7e57c795df53361f0e182819d347ce0b71cce6a6d2e3a905cd4169adceb3538d3aea7908c3bc1a18c6b10dc4d0a2047fa9562b5f9a5308ae8f68eaca589d70d8feac82e2456a7dc0a0ae316c3ff310f9d51c290b8081bf571f92dd12362aac11f851b6fdc83c020c0ed6e5dfcd4bf69a6d5e6d49c1c0d1adda6777fc900d271ace3ccb758f022710cf86accb4de1a2ee1eea9b737ee9988623635c9c777d074ff18965015fadc7ad63cf3cf91803e45ef826595345bbfa399dd9b74d5edfc088e8732012ff86ced28077a934b7746d4b2085bcb1ec50c887e6a1746b514f407f054e859dff6f2393c89860153cfec6261888f7568491ee0030115c0f948b31443312f68576d8c7a374fcc9eb5651e888249c2f3d9ff02321650d17fc3d607a10542b7ca1fbb5d5de241d475713f223c56889aebc6fe289e5041bc0d715ecd394c718f1a711de8ff07b1facd20014b61dd0e1426031b7bbb98fc5cd0f64e3a3ff212faa409784cfc03e70b9fe338d0761b3392503fd7ca0d773a59331bfff057fcaa84b657c16b823f2aa5ed1e6f9d14de5e8292bc427f6c8e3423008b71516282d1e374a4d4a79ca1b8c141d8ea4ad9bd93fd02f254c7ad9f34fa04c1a42e23c9616406efdc24b304ded6414597c3372a1182e536b3e349fb043fe824c8483b1b53b6c49893387ad7ae270c4bfc59839643a0c3ab37de30ca5804c9741ba100e2b0dba479b83d174bc01e5ee5d163577b084cf5d9797c35031912d96e9ce32c81c51e2ebd766c46440f55b64b79942a22e1ad2ebc3b92b6d180ba1ec6d4d5b059242d6eef31b82338c62e4809df5cbdc310019bfbebd72b1e5df19e02854c23575977622b467d7cad2b8dfa05732ef14cc07d57c24408a9c02a71d88b1861a414b2d41e9bf17946788816963d4c37faed5f508e6b984c5478cdc75b76e56d1d0f967ca6f9641e8967715ae70fbc70fec45572ab8cb0ca2985cf99e4b483bb5a5ed8f3d986b285889b0d82f6e9710dd509b045f012fcf702598c4e9f522819702af6d8ebe55924e04265d0e4b63ef72a29c50afea3321b9aa11d77ee842c61589c2c93b6be87a2a47dce279649b261809358560000395bc6e4e744f44ce1e9f1eebd096cfe3656a44c8dac6e40a5719534ed903ce3b9fedaa06b460adb4f81848f0b4b7d25be74df3057821ddea3374748e89995a80e11cb244e971780cce39feee288690978560e6aeaeca703111dde7d1a4d51612d8893dd7e9b51c00d142433f48a9d132f91fafb949ff317ad54c82cbf9e9b0cc49fd998249587f50a85847c7c69d19c44875406738af75cc2574a2b13cc8fb2652fb785c442412549ec7311bef98c13d9bcde00916f7d2d84f9c69de12923b150cffcc2e440aee6e9c8fa7f9e669dc18e7f363d0f696cfeef4ce7cead89852e64b5b32465665c5617a17a0c0d39afc35acebd53626f50d8cef62eec993f861b763541d967d2e94a77e62af2075f35ec24fc5095bb389a8c0019141361923020d17051a87c65d13688e08ce8fba228c02c24d678d777920734c317c82fcef6b4f3ff3f27452106397fb429f8248d134dd5156d8b42ad8ce8f4246ea82bd851d285bd69178db44b43e63daf939b48fad7dd63cca32334e6cb54373715d12336c8a5e6738bb5a356d7ed6dadec5a1e8ddcc4e7c8afb66caf5741b848a47e1855cd636fa5a208018d7ca8e5aea39285e7c63fd1ccd303be47b4543b39339f16cbc02c737cf88269ea858f391e79620fc5253aa73884d98a7dfb2ed4b649d01cc2261dd2e7f3f45ae0526bfc4c7e3b5482f93cee2d247f5c7618d71665df8ea8c6609d74548ced5713d4941954f7e062b638910ed05f5c5ebc6a485cefeb37f76222d33745dcd44a8ab29570440aec4d779955b1b2b789612c102db31a41f3ea555aebb6d5f3f0b5fbbe788d6f345be67d8e57986d0d4eeb7ab89b0057724e348d4ca9abfa54d036ea6ec2e6031ba198c6983929f9e6c3ec04f0b58b628d33d83cb4d6a81437f93e00264ce8b642515e48f54d7526cb0dd3820a1f24b69675ffc68bfe800c1736cded7c4ae1a73b3cd711de2371da809ebf049e8a8762c8e0f3f7055ed3bf4b6e558e54d8887f2dce2c29fb62176f1188757197ea4765ce180d1c89b5044f5d2a517f7880b34122a3a1b916bd61d95b7eebb7a2a9b617603abb06e828e463e176b071b0055a2824d90acc901d6b84e5ec6a74a8ce5ab73621042417089dc1b4900b45963342cc7e51d5c8e09219644546414969ff7d3ee194716bdc4f08d6281dd5c733b1a7bf178ba3bdb019a91a3853419ebab4a769f863e1f1f3b39971d4d03825f29eb6025ec18410b248fa31b58d6ab2ea87e70964ade1b998188ad2765ca5129de142745e3f5c9858e9bd20ebaf8b3534f964a0e61148034ce48cac6bfc140d01ce392cdb13994dab916c1b4eb4b3b6e190a989d3139eb9978b8c995844e9f2fadc2a2b0e01ebdbc4791b76d2704520d28c0f9e504104f4dfd1d59324c4ef4d6f058833cfec95d9e1618da3f5c9d9b8c130c967cf4b096f2c866313e16d0c6860985859b9f6128146c9f5c767afce74c5fb3e9db73ba4dae9139a54074fc6f003d1dcd41945e6395ebe3122ab4f0df6747ae98c9c9b240bd6c38a0d68a02693b5664bfb7a36177aa8ca6c3d457483fe9e5a27774dc042044b346e26079f671622d4099f4a6b2a2a930283e8de338c927e4f8ea14a5633a6f3f98ed715f0081d586acbe1f5b2257b0f59cb325bd778b53040fb94684884b7841fbfa111a19b49bdb258990cdc9ec66ae55189fb4766cc980215ab6b0fa0d5e7479bb0eb859f2289d793b53b7bea26f2b185735d3449eaa8864eb75ed64ea0b27c9d437000707b7dcb4251ffbe99fa3244f8a0a0f846e96c93bc1eb9bfb311c8617d94eac3b745f3b2e80494a65ce7829e50e3a29071aae2e7fb213abded27e02a793125cd2e134d5e6a6c5bd365903cf082abec8cc16eda5b47aaec26527fee52fd9e5d0cbe867737bc1c304e444ac938ace58c4457c94d6b8dac26354cff939d2e5db405f643f3f8725c50488ce221b6b9541262041fe48d8b3fc05e8f312320c44878d98922c5b10bfd03201f24490d5dd41d5749721cc599bd76672df1ca183ff350319ebc76e80013100bf644d12d29f804533055fe552c510cfede928a0457265a237d595b5e14747cff20631ee179414e563889aa60d108631d25723f7d840bcff256e7cbeafaace6bb7e978a6f9d78f30b45b564d26c387347c1e6debef1649cb4f548b795b09732430d5eb3248cbc599e8a98e6ad3ccb18335fe4731f27a9289c836c771d0309332689b1a0fba15bb17afe009f5ceccabd50d835721293a760cbda2064628f078771f033d17c06f35826b58fc7409f8b5749bd60c12c5c8e4288bcc851a5b5379248c693c9995495fd728acc3f22862987f52365f5bc0ac093e95207e1c151a485b687edff54437f8786cffd9dbf4da888272be5e7d31ab68443fafee858b113f38dd1d6cc36558577e4203d069e6f4dd3621041794f5321877b796339f7f466bc371961951dfd2569e6c5eb98e9ff5ecaa0a6245cadc89f41567390e46652c6ca889834dc0abfdfd338b79738c77f52e57b72f2a74a10af1a9e54f367cd7b7915121e2ccc2038ecbbf3718d5acd412ba6d328f4a64ee57831f8b104608a627836f25a4", 0x1000)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000300)=ANY=[], 0x54)
setxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000000000040004000000000008000b00", @ANYRES32=0x0, @ANYBLOB="10000700000300002000000000000000"], 0x3a, 0x0)
r10 = creat(&(0x7f0000000100)='./file0\x00', 0x80)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r10, 0x1e, &(0x7f0000000200)={r8, 0x1, 0x2, 0x401, 0x8}, 0x1)
ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
write$ppp(r1, &(0x7f0000002440)='\nr', 0x2)

12.532662645s ago: executing program 6 (id=3651):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0)

12.280384785s ago: executing program 6 (id=3655):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@newtfilter={0x480, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0xffff, 0xfffa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x450, 0x2, [@TCA_CGROUP_POLICE={0x44c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7, 0x9, 0x1000, 0x7, 0x10, 0xffffffff, 0x4, 0x10001, 0x1, 0xd200, 0x2d, 0x4, 0x3, 0x4, 0xda, 0x0, 0x5, 0xa, 0x9, 0x7f, 0x4, 0x4, 0x1, 0x5, 0xa040, 0x7, 0x7, 0xb0ab, 0xff, 0x81, 0xa, 0x3, 0x3fff, 0x1, 0x2, 0x6, 0xa2c, 0x6, 0x5, 0x5, 0x3, 0x4, 0x5, 0x9, 0x7, 0x1, 0x6, 0x5, 0xfffffff8, 0x4, 0x6, 0xf36, 0x5, 0x7, 0x6, 0x2, 0xe09, 0x2, 0x9, 0x2, 0x7474, 0xcf2, 0x6, 0xffffff00, 0x572, 0x6, 0x3, 0x7, 0x5, 0x9, 0x6, 0x0, 0x2, 0x6d, 0xe, 0x9, 0x80, 0xc8b, 0x4, 0x8, 0x81, 0x6, 0x3, 0xfff, 0x8, 0x81, 0x80000000, 0x3, 0x81, 0x5, 0x5, 0xffff, 0x10, 0x1, 0x8, 0x8, 0x2, 0x81, 0x6, 0x10001, 0x2a9, 0x0, 0xdb, 0xffffff7c, 0x6, 0x74, 0xa9d5, 0xffffffff, 0x1, 0x0, 0x7fffffff, 0x0, 0x7, 0x7, 0xfffffffa, 0x1d, 0x1, 0x7, 0x9, 0x8001, 0x0, 0x10, 0x560, 0x8, 0x81, 0xff, 0x29, 0x4, 0x2, 0x2, 0x9, 0x8, 0x0, 0x3, 0x9, 0xffffffb2, 0x40, 0x3, 0xfa7d, 0x2, 0x6, 0x45, 0x6000, 0x3, 0x59f, 0x3, 0x100, 0x0, 0x8, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x8, 0x7f, 0x0, 0x9, 0x9, 0x3, 0x0, 0x7bb1, 0x9, 0x9, 0x9, 0x1, 0x7d4, 0x0, 0x80000000, 0x4d, 0x545, 0xdd, 0x4, 0x6, 0x3000000, 0xffffff7f, 0x401, 0x2, 0x80000001, 0x9, 0x7, 0x9, 0x2000000, 0x6, 0x9, 0x7, 0x6, 0x5, 0x3, 0x201ed7e3, 0x10000, 0x6, 0xfa, 0x1, 0x6, 0x6, 0x0, 0x8, 0x2b1f, 0x400, 0x8001, 0x4, 0x7fdd825, 0x0, 0x7fff, 0x8, 0x9, 0x5, 0xffff, 0x39f, 0x9, 0x3, 0x7, 0x2, 0x10, 0x2, 0x1, 0x7fff, 0x2, 0x6, 0x7, 0xcf24, 0x0, 0x6, 0x0, 0x1, 0x5, 0x1, 0x7, 0x5, 0x800, 0x2, 0x9, 0x1, 0x2, 0x6, 0x0, 0x9, 0xfffffffb, 0x1, 0xf2, 0xffff, 0xfffffffa, 0x6, 0x6, 0x8, 0x3, 0x3ff, 0x1, 0x3, 0xff, 0x1, 0x6, 0x15, 0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x2000000d, 0xfffffffc, 0x3, 0x0, {0x5, 0x1, 0xfff, 0x6, 0x8, 0x4}, {0xe, 0x0, 0x2, 0x52, 0x9, 0x3}, 0x5, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)

9.46462612s ago: executing program 1 (id=3660):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ftruncate(0xffffffffffffffff, 0xffff)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000})

8.42191759s ago: executing program 1 (id=3661):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
epoll_create1(0x80000)
openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

8.332116664s ago: executing program 1 (id=3662):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2100, 0x14)

7.824927852s ago: executing program 3 (id=3663):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

7.688459062s ago: executing program 6 (id=3664):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200), 0x0)
close(r0)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0)
write(r2, &(0x7f0000000b00)='0\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0)
write(r3, &(0x7f0000000d00)='0\n', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r4, &(0x7f0000000f00), 0x0)
close(r4)
write(0xffffffffffffffff, &(0x7f0000001100)='0\n', 0x2)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000001600)='usbip-vudc.0\n', 0xd)
close(r5)
nanosleep(&(0x7f0000001700)={0x0, 0x5f5e100}, 0x0)

7.619391472s ago: executing program 3 (id=3665):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="0402"], 0x6)
r1 = socket$kcm(0x10, 0x2, 0x0)
mq_open(0x0, 0x800, 0x40, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r2, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x18, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b60300000000000085007b27fca9cbb2e89b00000085000000a00000209500000000000000000000000000010000000884bda25591b228268961d682a3f79e505f590d3beb18d423917ef3dc8140"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x3)

7.446798104s ago: executing program 1 (id=3666):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, &(0x7f0000000140)="450fc77703450f08420f3543f6b600180000b9800000c00f3235001000000f3066baf80cb814100188ef66bafc0c66edf30fc7fe66b858008ee8f22e652e400f01df66baf80cb8de770c8bef66bafc0c66b825f566ef", 0x56}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005740)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x1}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdir(0x0, 0x1ff)
mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
symlink(&(0x7f0000001400)='./config\x00', &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/file0\x00')

6.144543001s ago: executing program 6 (id=3667):
socket$unix(0x1, 0x5, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81)
keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1000000000000082)
modify_ldt$write(0x1, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r2})
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, 0x0)

5.636516334s ago: executing program 1 (id=3668):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)

5.147392551s ago: executing program 3 (id=3669):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ftruncate(0xffffffffffffffff, 0xffff)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000})

4.096929497s ago: executing program 6 (id=3670):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setitimer(0x1, 0x0, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
close(r3)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r3, 0x1, 0xd, 0x0, 0x0)
close(r3)
syz_usbip_server_init(0x2)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888)
timer_gettime(0x0, 0x0)

3.90473303s ago: executing program 3 (id=3671):
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x2c, 0x20000000000001, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94)

3.465113936s ago: executing program 1 (id=3672):
ioctl$COMEDI_CHANINFO(0xffffffffffffffff, 0x80306403, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x3f, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, 0x0, 0x0)

502.105382ms ago: executing program 6 (id=3673):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0})
mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272)

372.870808ms ago: executing program 3 (id=3674):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 3 (id=3675):
add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlockall(0x2)
r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r2, r2, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
syz_emit_ethernet(0x0, 0x0, 0x0)
shmctl$SHM_UNLOCK(r1, 0xc)

kernel console output (not intermixed with test programs):

97]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1103.384615][ T5717] cdc_ncm 2-1:1.0: bind() failure
[ 1103.527219][ T5717] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 1103.527275][ T5717] cdc_ncm 2-1:1.1: bind() failure
[ 1103.614309][ T5717] usb 2-1: USB disconnect, device number 56
[ 1103.891024][ T6692] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1104.043142][ T6692] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice= a.60
[ 1104.066648][ T6692] usb 7-1: config 5 has an invalid interface number: 180 but max is 0
[ 1104.066683][ T6692] usb 7-1: config 5 has no interface number 0
[ 1104.066737][ T6692] usb 7-1: config 5 interface 180 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1104.066772][ T6692] usb 7-1: config 5 interface 180 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64
[ 1104.066824][ T6692] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1104.069535][ T5717] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1104.161867][ T6692] imon_raw 7-1:5.180: IR endpoint missing
[ 1104.174641][T16290] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in;
[ 1104.174641][T16290]    program syz.0.3119 not setting count and/or reply_len properly
[ 1104.232247][ T5717] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1104.232315][ T5717] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[ 1104.233910][ T5717] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1104.233940][ T5717] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1104.238104][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.238135][ T5717] usb 2-1: Product: syz
[ 1104.238153][ T5717] usb 2-1: Manufacturer: syz
[ 1104.238172][ T5717] usb 2-1: SerialNumber: syz
[ 1104.540497][ T6692] usb 7-1: USB disconnect, device number 13
[ 1104.792956][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3118'.
[ 1104.884656][ T5717] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1105.037013][ T5717] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22
[ 1105.059151][ T5717] usb 2-1: USB disconnect, device number 57
[ 1105.181031][T15607] udevd[15607]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1107.802333][T16317] FAULT_INJECTION: forcing a failure.
[ 1107.802333][T16317] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1107.802376][T16317] CPU: 1 UID: 0 PID: 16317 Comm: syz.6.3127 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1107.802409][T16317] Tainted: [L]=SOFTLOCKUP
[ 1107.802419][T16317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1107.802435][T16317] Call Trace:
[ 1107.802444][T16317]  <TASK>
[ 1107.802456][T16317]  dump_stack_lvl+0xe8/0x150
[ 1107.802496][T16317]  should_fail_ex+0x46b/0x600
[ 1107.802538][T16317]  _copy_from_user+0x2d/0xb0
[ 1107.802566][T16317]  __sys_sendto+0x2b5/0x5d0
[ 1107.802616][T16317]  ? __pfx___sys_sendto+0x10/0x10
[ 1107.802683][T16317]  ? __pfx_ksys_write+0x10/0x10
[ 1107.802720][T16317]  __x64_sys_sendto+0xde/0x100
[ 1107.802756][T16317]  do_syscall_64+0x166/0x520
[ 1107.802782][T16317]  ? trace_irq_disable+0x3b/0x140
[ 1107.802808][T16317]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1107.802833][T16317]  ? clear_bhb_loop+0x70/0xc0
[ 1107.802863][T16317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1107.802888][T16317] RIP: 0033:0x7fd5c16fe0d9
[ 1107.802909][T16317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1107.802930][T16317] RSP: 002b:00007fd5bf956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1107.802956][T16317] RAX: ffffffffffffffda RBX: 00007fd5c1985fa0 RCX: 00007fd5c16fe0d9
[ 1107.802973][T16317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1107.802987][T16317] RBP: 00007fd5bf956090 R08: 0000200000000180 R09: 000000000000001c
[ 1107.803002][T16317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1107.803016][T16317] R13: 00007fd5c1986038 R14: 00007fd5c1985fa0 R15: 00007ffdfbe9f9d8
[ 1107.803051][T16317]  </TASK>
[ 1108.090787][T16318] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3128'.
[ 1108.090820][T16318] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3128'.
[ 1108.897325][T16329] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3131'.
[ 1108.897497][T16329] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3131'.
[ 1111.038934][   T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1111.288478][   T10] usb 3-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00
[ 1111.301936][   T10] usb 3-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 10
[ 1111.327028][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1111.327062][   T10] usb 3-1: Product: syz
[ 1111.327079][   T10] usb 3-1: Manufacturer: syz
[ 1111.327097][   T10] usb 3-1: SerialNumber: syz
[ 1111.417452][   T10] whiteheat 3-1:1.0: required endpoints missing
[ 1111.764522][   T10] usb 3-1: USB disconnect, device number 82
[ 1112.248955][ T6692] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1112.400150][ T6692] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[ 1112.401149][ T6692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1112.401173][ T6692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1112.401205][ T6692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1112.405209][ T6692] usb 1-1: config 0 descriptor??
[ 1112.406109][T16347] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1112.813607][ T6692] hid (null): report_id 0 is invalid
[ 1112.813653][ T6692] hid (null): unknown global tag 0xc
[ 1112.813716][ T6692] hid (null): report_id 0 is invalid
[ 1112.813734][ T6692] hid (null): unknown global tag 0xe
[ 1112.813775][ T6692] hid (null): unknown global tag 0xd
[ 1112.856066][ T6692] hid_parser_main: 108 callbacks suppressed
[ 1112.856088][ T6692] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0
[ 1112.856112][ T6692] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0
[ 1112.856132][ T6692] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0
[ 1112.856152][ T6692] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0
[ 1112.856175][ T6692] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0
[ 1112.856194][ T6692] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0
[ 1112.856213][ T6692] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0
[ 1112.856233][ T6692] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0
[ 1112.856253][ T6692] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0
[ 1112.856272][ T6692] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0
[ 1112.940626][ T6692] asus 0003:0B05:1ABE.0015: report_id 0 is invalid
[ 1112.940647][ T6692] asus 0003:0B05:1ABE.0015: item 0 0 1 8 parsing failed
[ 1112.941212][ T6692] asus 0003:0B05:1ABE.0015: Asus hid parse failed: -22
[ 1112.941297][ T6692] asus 0003:0B05:1ABE.0015: probe with driver asus failed with error -22
[ 1114.907518][    T9] usb 1-1: USB disconnect, device number 29
[ 1115.131043][ T6692] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1115.370130][ T6692] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1115.375081][ T6692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1115.375117][ T6692] usb 4-1: Product: syz
[ 1115.375138][ T6692] usb 4-1: Manufacturer: syz
[ 1115.375157][ T6692] usb 4-1: SerialNumber: syz
[ 1115.466587][ T5717] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:4: No space for directory leaf checksum. Please run e2fsck -D.
[ 1115.466629][ T5717] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:4: checksumming directory block 0
[ 1115.466900][ T5717] usb 4-1: loading /lib/firmware/updates/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74
[ 1115.467049][ T5717] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:4: No space for directory leaf checksum. Please run e2fsck -D.
[ 1115.467080][ T5717] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:4: checksumming directory block 0
[ 1115.467287][ T5717] usb 4-1: loading /lib/firmware/updates/ath9k_htc/htc_9271-1.4.0.fw failed with error -74
[ 1115.467465][ T5717] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:4: No space for directory leaf checksum. Please run e2fsck -D.
[ 1115.467496][ T5717] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:4: checksumming directory block 0
[ 1115.467708][ T5717] usb 4-1: loading /lib/firmware/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74
[ 1115.467847][ T5717] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:4: No space for directory leaf checksum. Please run e2fsck -D.
[ 1115.467876][ T5717] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:4: checksumming directory block 0
[ 1115.468070][ T5717] usb 4-1: loading /lib/firmware/ath9k_htc/htc_9271-1.4.0.fw failed with error -74
[ 1115.468105][ T5717] usb 4-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -74
[ 1115.468128][ T5717] usb 4-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw
[ 1115.693067][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.693144][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.073526][ T6692] usb 4-1: USB disconnect, device number 42
[ 1116.308892][T16373] 9pnet: p9_errstr2errno: server reported unknown error 
[ 1116.717712][T16383] ip6tnl1: entered allmulticast mode
[ 1116.775459][ T6476] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1116.776055][ T6476] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1116.779310][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1117.111438][T16388] Invalid ELF header magic: != ELF
[ 1118.197660][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1118.219306][T12590] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1118.340500][T16396] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3151'.
[ 1118.340545][T16396] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3151'.
[ 1119.240923][T16394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3152'.
[ 1121.148991][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1121.615114][T16426] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3144'.
[ 1121.615261][T16426] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3144'.
[ 1123.311320][T16433] binder: 16432:16433 ioctl c0385869 200000000800 returned -22
[ 1123.328643][T16433] binder: 16432:16433 ioctl 7002 0 returned -22
[ 1124.846216][T16457] Invalid ELF header magic: != ELF
[ 1124.877348][T16457] overlayfs: overlapping lowerdir path
[ 1127.284642][T16471] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3168'.
[ 1129.629318][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1129.970995][T16476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3169'.
[ 1129.971034][T16476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3169'.
[ 1130.227269][T16485] netlink: 'syz.3.3171': attribute type 2 has an invalid length.
[ 1130.227297][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3171'.
[ 1130.925718][T16500] FAULT_INJECTION: forcing a failure.
[ 1130.925718][T16500] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1130.925759][T16500] CPU: 0 UID: 0 PID: 16500 Comm: syz.2.3175 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1130.925789][T16500] Tainted: [L]=SOFTLOCKUP
[ 1130.925797][T16500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1130.925811][T16500] Call Trace:
[ 1130.925821][T16500]  <TASK>
[ 1130.925832][T16500]  dump_stack_lvl+0xe8/0x150
[ 1130.925873][T16500]  should_fail_ex+0x46b/0x600
[ 1130.925916][T16500]  _copy_from_user+0x2d/0xb0
[ 1130.925941][T16500]  ___sys_sendmsg+0x1c6/0x360
[ 1130.925983][T16500]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1130.926024][T16500]  ? up_read+0x34/0x180
[ 1130.926070][T16500]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1130.926132][T16500]  __sys_sendmmsg+0x279/0x4d0
[ 1130.926172][T16500]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1130.926216][T16500]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1130.926265][T16500]  ? ksys_write+0x248/0x270
[ 1130.926296][T16500]  ? __pfx_ksys_write+0x10/0x10
[ 1130.926335][T16500]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1130.926371][T16500]  do_syscall_64+0x166/0x520
[ 1130.926395][T16500]  ? trace_irq_disable+0x3b/0x140
[ 1130.926420][T16500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1130.926445][T16500]  ? clear_bhb_loop+0x70/0xc0
[ 1130.926476][T16500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1130.926500][T16500] RIP: 0033:0x7f916d41e0d9
[ 1130.926521][T16500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1130.926541][T16500] RSP: 002b:00007f916b676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1130.926566][T16500] RAX: ffffffffffffffda RBX: 00007f916d6a5fa0 RCX: 00007f916d41e0d9
[ 1130.926583][T16500] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003
[ 1130.926599][T16500] RBP: 00007f916b676090 R08: 0000000000000000 R09: 0000000000000000
[ 1130.926614][T16500] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001
[ 1130.926628][T16500] R13: 00007f916d6a6038 R14: 00007f916d6a5fa0 R15: 00007ffd1268bf88
[ 1130.926664][T16500]  </TASK>
[ 1133.209462][T16520] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3182'.
[ 1133.209651][T16520] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3182'.
[ 1137.116431][T16538] Invalid ELF header magic: != ELF
[ 1137.668044][T16553] Invalid ELF header magic: != ELF
[ 1137.759048][  T208] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1137.950663][  T208] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice= a.60
[ 1137.954693][  T208] usb 7-1: config 5 has an invalid interface number: 180 but max is 0
[ 1137.954726][  T208] usb 7-1: config 5 has no interface number 0
[ 1137.954777][  T208] usb 7-1: config 5 interface 180 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1137.954810][  T208] usb 7-1: config 5 interface 180 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64
[ 1137.954859][  T208] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1138.097128][  T208] imon_raw 7-1:5.180: IR endpoint missing
[ 1138.261381][T16566] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3196'.
[ 1138.261530][T16566] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3196'.
[ 1139.166843][ T5850] usb 7-1: USB disconnect, device number 14
[ 1139.376286][T16560] vivid-000: kernel_thread() failed
[ 1142.128993][ T5861] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1142.541452][T16483] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 1143.149032][ T5861] usb 7-1: Using ep0 maxpacket: 32
[ 1143.202890][ T5861] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[ 1143.478099][T16483] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[ 1143.491526][ T5861] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[ 1143.491757][T16483] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1143.491914][T16483] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1143.491962][T16483] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1143.561763][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1143.561797][ T5861] usb 7-1: Product: syz
[ 1143.561814][ T5861] usb 7-1: Manufacturer: syz
[ 1143.561832][ T5861] usb 7-1: SerialNumber: syz
[ 1143.578901][T16483] usb 1-1: config 0 descriptor??
[ 1143.580172][T16594] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1143.620719][ T5861] usb 7-1: config 0 descriptor??
[ 1143.622519][T16592] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1143.659254][ T5861] hub 7-1:0.0: bad descriptor, ignoring hub
[ 1143.659914][ T5861] hub 7-1:0.0: probe with driver hub failed with error -5
[ 1143.808461][ T5861] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input12
[ 1143.892432][T16605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3208'.
[ 1143.893791][T16605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3208'.
[ 1145.061022][T16483] hid (null): report_id 0 is invalid
[ 1145.061073][T16483] hid (null): unknown global tag 0xc
[ 1145.061149][T16483] hid (null): report_id 0 is invalid
[ 1145.061172][T16483] hid (null): unknown global tag 0xe
[ 1145.061223][T16483] hid (null): unknown global tag 0xd
[ 1145.234543][T16483] hid_parser_main: 108 callbacks suppressed
[ 1145.234580][T16483] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[ 1145.234614][T16483] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[ 1145.236539][T16483] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[ 1145.236585][T16483] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[ 1145.236613][T16483] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[ 1145.236641][T16483] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[ 1145.236671][T16483] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[ 1145.236701][T16483] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[ 1145.236738][T16483] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[ 1145.236768][T16483] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[ 1145.313426][T16483] asus 0003:0B05:1ABE.0016: report_id 0 is invalid
[ 1145.313453][T16483] asus 0003:0B05:1ABE.0016: item 0 0 1 8 parsing failed
[ 1145.314251][T16483] asus 0003:0B05:1ABE.0016: Asus hid parse failed: -22
[ 1145.314367][T16483] asus 0003:0B05:1ABE.0016: probe with driver asus failed with error -22
[ 1145.446018][T16483] usb 1-1: USB disconnect, device number 30
[ 1145.483879][ T5861] usb 7-1: USB disconnect, device number 15
[ 1145.483961][    C1] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[ 1146.285551][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1147.821126][T16631] netlink: 'syz.0.3218': attribute type 11 has an invalid length.
[ 1149.059985][T16628] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1149.174043][T16643] Invalid ELF header magic: != ELF
[ 1153.939484][T16483] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1154.104032][T16483] usb 1-1: Using ep0 maxpacket: 8
[ 1154.107375][T16483] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1154.194347][T16483] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[ 1154.194419][T16483] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1154.194475][T16483] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1154.194547][T16483] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1154.194637][T16483] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1154.194667][T16483] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1154.194800][T16483] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1156.708419][T16686] ieee802154 phy0 wpan0: encryption failed: -22
[ 1156.807527][T16483] usb 1-1: usb_control_msg returned -71
[ 1156.807581][T16483] usbtmc 1-1:16.0: can't read capabilities
[ 1156.842510][T16686] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1156.944840][T16483] usb 1-1: USB disconnect, device number 31
[ 1157.471462][T16695] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3236'.
[ 1158.172790][ T5590] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1158.221709][ T5590] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1158.243699][ T5590] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1158.251815][ T5590] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1158.269949][ T5590] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1159.130782][T16711] Invalid ELF header magic: != ELF
[ 1160.509626][ T5590] Bluetooth: hci4: command tx timeout
[ 1160.805273][T16719] loop5: detected capacity change from 0 to 7
[ 1161.001950][T16719] Dev loop5: unable to read RDB block 7
[ 1161.002007][T16719]  loop5: unable to read partition table
[ 1161.002162][T16719] loop5: partition table beyond EOD, truncated
[ 1161.002220][T16719] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1162.601376][ T5590] Bluetooth: hci4: command tx timeout
[ 1163.213019][T16731] Invalid option length (64949) for dns_resolver key
[ 1164.594069][T16746] netlink: 'syz.0.3250': attribute type 8 has an invalid length.
[ 1164.671101][ T5590] Bluetooth: hci4: command tx timeout
[ 1166.138566][T16756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3254'.
[ 1166.749961][ T5590] Bluetooth: hci4: command tx timeout
[ 1169.470831][ T6258] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1169.620024][T16770] Invalid ELF header magic: != ELF
[ 1173.906364][T16790] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1174.442451][ T6258] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.960472][T16807] Invalid ELF header magic: != ELF
[ 1176.028622][ T6258] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.409628][T16698] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1176.410653][T16698] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1176.410901][T16698] bridge_slave_0: entered allmulticast mode
[ 1176.419686][T16698] bridge_slave_0: entered promiscuous mode
[ 1176.425426][T16698] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1176.427411][T16698] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1176.427660][T16698] bridge_slave_1: entered allmulticast mode
[ 1176.434561][T16698] bridge_slave_1: entered promiscuous mode
[ 1176.716932][T16817] Invalid ELF header magic: != ELF
[ 1177.675459][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.675545][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.720945][T16820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3265'.
[ 1177.853205][ T5850] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:6: No space for directory leaf checksum. Please run e2fsck -D.
[ 1177.853247][ T5850] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:6: checksumming directory block 0
[ 1177.853500][ T5850] usb 4-1: loading /lib/firmware/updates/syzkaller/htc_9271.fw failed with error -74
[ 1177.853653][ T5850] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:6: No space for directory leaf checksum. Please run e2fsck -D.
[ 1177.853694][ T5850] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:6: checksumming directory block 0
[ 1177.853927][ T5850] usb 4-1: loading /lib/firmware/updates/htc_9271.fw failed with error -74
[ 1177.854081][ T5850] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:6: No space for directory leaf checksum. Please run e2fsck -D.
[ 1177.854112][ T5850] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:6: checksumming directory block 0
[ 1177.854324][ T5850] usb 4-1: loading /lib/firmware/syzkaller/htc_9271.fw failed with error -74
[ 1177.983667][ T5850] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:6: No space for directory leaf checksum. Please run e2fsck -D.
[ 1177.983702][ T5850] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:6: checksumming directory block 0
[ 1177.985533][ T5850] usb 4-1: loading /lib/firmware/htc_9271.fw failed with error -74
[ 1177.985573][ T5850] usb 4-1: Direct firmware load for htc_9271.fw failed with error -74
[ 1177.985595][ T5850] usb 4-1: Falling back to sysfs fallback for: htc_9271.fw
[ 1178.279063][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1180.624265][ T6258] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1181.227645][T16698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1181.304786][T16698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1181.513660][T16837] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3272'.
[ 1181.513695][T16837] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3272'.
[ 1182.577620][T16698] team0: Port device team_slave_0 added
[ 1182.704748][T16698] team0: Port device team_slave_1 added
[ 1183.874475][T16698] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1183.874497][T16698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1183.874532][T16698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1184.440815][T16698] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1184.440836][T16698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1184.440867][T16698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1185.383325][T16698] hsr_slave_0: entered promiscuous mode
[ 1185.385480][T16698] hsr_slave_1: entered promiscuous mode
[ 1185.387156][T16698] debugfs: 'hsr0' already exists in 'hsr'
[ 1185.387185][T16698] Cannot create hsr debugfs directory
[ 1188.282526][T16886] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3285'.
[ 1188.282575][T16886] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3285'.
[ 1192.479658][T16884] bond0: (slave bond_slave_1): Releasing backup interface
[ 1192.540922][T16900] FAULT_INJECTION: forcing a failure.
[ 1192.540922][T16900] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1192.540964][T16900] CPU: 0 UID: 0 PID: 16900 Comm: syz.3.3290 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1192.540996][T16900] Tainted: [L]=SOFTLOCKUP
[ 1192.541005][T16900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1192.541021][T16900] Call Trace:
[ 1192.541031][T16900]  <TASK>
[ 1192.541042][T16900]  dump_stack_lvl+0xe8/0x150
[ 1192.541086][T16900]  should_fail_ex+0x46b/0x600
[ 1192.541129][T16900]  _copy_from_user+0x2d/0xb0
[ 1192.541154][T16900]  copy_from_sockptr_offset+0x66/0xa0
[ 1192.541273][T16900]  do_tcp_getsockopt+0xd9d/0x2980
[ 1192.541324][T16900]  ? __pfx_do_tcp_getsockopt+0x10/0x10
[ 1192.541352][T16900]  ? sock_recv_errqueue+0x5b0/0x5e0
[ 1192.541381][T16900]  ? is_bpf_text_address+0x26/0x2b0
[ 1192.541417][T16900]  ? kernel_text_address+0xa5/0xe0
[ 1192.541443][T16900]  ? __kernel_text_address+0xd/0x30
[ 1192.541466][T16900]  ? unwind_get_return_address+0x4d/0x90
[ 1192.541490][T16900]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1192.541523][T16900]  ? __lock_acquire+0x683/0x2ce0
[ 1192.541554][T16900]  ? _parse_integer_limit+0x192/0x1e0
[ 1192.541593][T16900]  ? __lock_acquire+0x683/0x2ce0
[ 1192.541620][T16900]  ? kstrtouint+0x6e/0xe0
[ 1192.541652][T16900]  ? get_pid_task+0x20/0x1f0
[ 1192.541686][T16900]  ? get_pid_task+0x20/0x1f0
[ 1192.541748][T16900]  ? __pfx_sock_common_getsockopt+0x10/0x10
[ 1192.541776][T16900]  tcp_getsockopt+0x83/0x130
[ 1192.541803][T16900]  ? sock_recv_errqueue+0x5b0/0x5e0
[ 1192.541832][T16900]  ? sock_recv_errqueue+0x5b0/0x5e0
[ 1192.541858][T16900]  ? __pfx_sock_common_getsockopt+0x10/0x10
[ 1192.541886][T16900]  do_sock_getsockopt+0x51d/0x7e0
[ 1192.541924][T16900]  ? __pfx_vfs_write+0x10/0x10
[ 1192.541954][T16900]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 1192.541985][T16900]  ? do_sys_openat2+0x14e/0x200
[ 1192.542005][T16900]  ? kmem_cache_free+0x187/0x6c0
[ 1192.542048][T16900]  ? ksys_write+0x202/0x270
[ 1192.542082][T16900]  __x64_sys_getsockopt+0x1aa/0x250
[ 1192.542125][T16900]  do_syscall_64+0x166/0x520
[ 1192.542151][T16900]  ? trace_irq_disable+0x3b/0x140
[ 1192.542174][T16900]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1192.542199][T16900]  ? clear_bhb_loop+0x70/0xc0
[ 1192.542230][T16900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1192.542253][T16900] RIP: 0033:0x7f45cb63e0d9
[ 1192.542275][T16900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1192.542295][T16900] RSP: 002b:00007f45c9896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 1192.542327][T16900] RAX: ffffffffffffffda RBX: 00007f45cb8c5fa0 RCX: 00007f45cb63e0d9
[ 1192.542344][T16900] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003
[ 1192.542358][T16900] RBP: 00007f45c9896090 R08: 0000200000000040 R09: 0000000000000000
[ 1192.542374][T16900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1192.542387][T16900] R13: 00007f45cb8c6038 R14: 00007f45cb8c5fa0 R15: 00007fffabe22128
[ 1192.542423][T16900]  </TASK>
[ 1194.658890][ T5697] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1194.836544][ T6258] bridge_slave_1: left allmulticast mode
[ 1194.836578][ T6258] bridge_slave_1: left promiscuous mode
[ 1194.836821][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1194.846446][ T5697] usb 7-1: Using ep0 maxpacket: 8
[ 1194.855083][ T5697] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1194.882514][ T5697] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[ 1194.882589][ T5697] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1194.882616][ T5697] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1194.882640][ T5697] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1194.882664][ T5697] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1194.882685][ T5697] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1194.882723][ T5697] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1197.228445][ T6258] bridge_slave_0: left allmulticast mode
[ 1197.228493][ T6258] bridge_slave_0: left promiscuous mode
[ 1197.240743][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1197.332682][ T5697] usb 7-1: usb_control_msg returned -71
[ 1197.332736][ T5697] usbtmc 7-1:16.0: can't read capabilities
[ 1197.623433][ T5697] usb 7-1: USB disconnect, device number 16
[ 1200.641343][ T6258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1200.690807][ T6258] bond0 (unregistering): Released all slaves
[ 1200.875450][T16947] ip6tnl1: entered allmulticast mode
[ 1200.909155][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1200.909415][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1200.931762][ T5717] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1201.329059][T16795] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1201.950723][T16795] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1205.187122][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1205.574737][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3313'.
[ 1206.682087][T17002] Invalid ELF header magic: != ELF
[ 1206.716057][T17002] overlayfs: overlapping lowerdir path
[ 1208.793580][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1208.947306][T17010] FAULT_INJECTION: forcing a failure.
[ 1208.947306][T17010] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1208.947346][T17010] CPU: 0 UID: 0 PID: 17010 Comm: syz.3.3318 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1208.947396][T17010] Tainted: [L]=SOFTLOCKUP
[ 1208.947404][T17010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1208.947418][T17010] Call Trace:
[ 1208.947427][T17010]  <TASK>
[ 1208.947438][T17010]  dump_stack_lvl+0xe8/0x150
[ 1208.947478][T17010]  should_fail_ex+0x46b/0x600
[ 1208.947519][T17010]  _copy_from_user+0x2d/0xb0
[ 1208.947544][T17010]  ucma_write+0x166/0x2f0
[ 1208.947725][T17010]  ? __pfx_ucma_write+0x10/0x10
[ 1208.947761][T17010]  ? security_file_permission+0x75/0x260
[ 1208.947794][T17010]  ? rw_verify_area+0x209/0x4d0
[ 1208.947825][T17010]  ? __pfx_ucma_write+0x10/0x10
[ 1208.947860][T17010]  vfs_write+0x29f/0xbb0
[ 1208.947897][T17010]  ? __pfx_vfs_write+0x10/0x10
[ 1208.947927][T17010]  ? __fget_files+0x2a/0x420
[ 1208.947955][T17010]  ? __fget_files+0x2a/0x420
[ 1208.947979][T17010]  ? __fget_files+0x3a8/0x420
[ 1208.948003][T17010]  ? __fget_files+0x2a/0x420
[ 1208.948038][T17010]  ksys_write+0x156/0x270
[ 1208.948069][T17010]  ? __pfx_ksys_write+0x10/0x10
[ 1208.948110][T17010]  do_syscall_64+0x166/0x520
[ 1208.948136][T17010]  ? trace_irq_disable+0x3b/0x140
[ 1208.948161][T17010]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1208.948186][T17010]  ? clear_bhb_loop+0x70/0xc0
[ 1208.948216][T17010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1208.948240][T17010] RIP: 0033:0x7f45cb63e0d9
[ 1208.948262][T17010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1208.948283][T17010] RSP: 002b:00007f45c9896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1208.948308][T17010] RAX: ffffffffffffffda RBX: 00007f45cb8c5fa0 RCX: 00007f45cb63e0d9
[ 1208.948325][T17010] RDX: 0000000000000018 RSI: 0000200000000240 RDI: 0000000000000003
[ 1208.948340][T17010] RBP: 00007f45c9896090 R08: 0000000000000000 R09: 0000000000000000
[ 1208.948355][T17010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1208.948376][T17010] R13: 00007f45cb8c6038 R14: 00007f45cb8c5fa0 R15: 00007fffabe22128
[ 1208.948413][T17010]  </TASK>
[ 1209.709131][ T5717] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1209.863163][ T5717] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1209.882038][ T5717] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1209.882193][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1209.908913][T11477] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 1209.910825][ T5717] usb 2-1: config 0 descriptor??
[ 1210.058985][T11477] usb 1-1: Using ep0 maxpacket: 8
[ 1210.059946][T11477] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1210.062585][T11477] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[ 1210.062658][T11477] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1210.062760][T11477] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1210.062791][T11477] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1210.062830][T11477] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1210.062922][T11477] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1210.062972][T11477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1210.404125][ T5717] ath6kl: Unsupported hardware version: 0x0
[ 1210.406247][ T5717] ath6kl: Failed to init ath6kl core: -22
[ 1210.531017][ T5717] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22
[ 1210.553209][ T5717] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1210.768578][T11477] usb 1-1: GET_CAPABILITIES returned 0
[ 1210.768630][T11477] usbtmc 1-1:16.0: can't read capabilities
[ 1210.923298][ T5245] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1210.985508][T16698] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1211.109863][T16698] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1211.114925][ T5717] usb 1-1: USB disconnect, device number 32
[ 1211.130732][T16698] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1211.165589][   T10] usb 2-1: USB disconnect, device number 58
[ 1211.282041][T16698] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1211.296756][T16698] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1211.343583][T16698] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1211.530745][ T6258] hsr_slave_0: left promiscuous mode
[ 1211.569652][ T6258] hsr_slave_1: left promiscuous mode
[ 1211.604474][ T6258] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1211.604507][ T6258] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1211.631135][ T6258] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1211.631164][ T6258] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1212.441737][ T6258] veth1_macvtap: left promiscuous mode
[ 1212.441817][ T6258] veth0_macvtap: left promiscuous mode
[ 1212.441996][ T6258] veth1_vlan: left promiscuous mode
[ 1212.516576][ T6258] veth0_vlan: left promiscuous mode
[ 1214.109029][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1217.369353][ T6258] team0 (unregistering): Port device team_slave_1 removed
[ 1217.491828][ T6258] team0 (unregistering): Port device team_slave_0 removed
[ 1217.674357][ T5587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1217.790441][ T5587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1217.794799][ T5587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1217.911024][T17070] dns_resolver: Unsupported server list version (0)
[ 1217.953997][ T5587] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1217.956402][ T5587] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1218.445000][T16698] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1218.498962][T16698] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1218.551372][T17047] ip6tnl1: entered allmulticast mode
[ 1219.010401][T17082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3333'.
[ 1219.031685][ T3315] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1219.031970][ T3315] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1219.069232][ T5697] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1219.205629][T17087] ieee802154 phy0 wpan0: encryption failed: -22
[ 1219.217541][T17089] FAULT_INJECTION: forcing a failure.
[ 1219.217541][T17089] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1219.217580][T17089] CPU: 0 UID: 0 PID: 17089 Comm: syz.6.3335 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1219.217611][T17089] Tainted: [L]=SOFTLOCKUP
[ 1219.217619][T17089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1219.217633][T17089] Call Trace:
[ 1219.217642][T17089]  <TASK>
[ 1219.217652][T17089]  dump_stack_lvl+0xe8/0x150
[ 1219.217691][T17089]  should_fail_ex+0x46b/0x600
[ 1219.217732][T17089]  _copy_from_iter+0x1d3/0x1660
[ 1219.217769][T17089]  ? rcu_is_watching+0x16/0xb0
[ 1219.217799][T17089]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1219.217848][T17089]  ? __pfx__copy_from_iter+0x10/0x10
[ 1219.217881][T17089]  ? __alloc_skb+0x27a/0x7a0
[ 1219.217910][T17089]  ? __alloc_skb+0x27a/0x7a0
[ 1219.217946][T17089]  ? netlink_sendmsg+0x650/0xb40
[ 1219.217982][T17089]  ? skb_put+0x112/0x210
[ 1219.218016][T17089]  netlink_sendmsg+0x6c0/0xb40
[ 1219.218062][T17089]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1219.218100][T17089]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1219.218139][T17089]  ? __kernel_text_address+0xd/0x30
[ 1219.218162][T17089]  ? unwind_get_return_address+0x4d/0x90
[ 1219.218196][T17089]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1219.218231][T17089]  sock_sendmsg_nosec+0x13a/0x180
[ 1219.218261][T17089]  ____sys_sendmsg+0x565/0x870
[ 1219.218294][T17089]  ? __might_fault+0xaf/0x130
[ 1219.218324][T17089]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1219.218368][T17089]  ? import_iovec+0x73/0xa0
[ 1219.218396][T17089]  ___sys_sendmsg+0x2a5/0x360
[ 1219.218428][T17089]  ? __lock_acquire+0x683/0x2ce0
[ 1219.218459][T17089]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1219.218533][T17089]  ? __fget_files+0x2a/0x420
[ 1219.218558][T17089]  ? __fget_files+0x3a8/0x420
[ 1219.218594][T17089]  __x64_sys_sendmsg+0x1b7/0x290
[ 1219.218632][T17089]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1219.218689][T17089]  do_syscall_64+0x166/0x520
[ 1219.218715][T17089]  ? trace_irq_disable+0x3b/0x140
[ 1219.218739][T17089]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1219.218763][T17089]  ? clear_bhb_loop+0x70/0xc0
[ 1219.218791][T17089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1219.218813][T17089] RIP: 0033:0x7fd5c16fe0d9
[ 1219.218843][T17089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1219.218863][T17089] RSP: 002b:00007fd5bf956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1219.218888][T17089] RAX: ffffffffffffffda RBX: 00007fd5c1985fa0 RCX: 00007fd5c16fe0d9
[ 1219.218905][T17089] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 1219.218921][T17089] RBP: 00007fd5bf956090 R08: 0000000000000000 R09: 0000000000000000
[ 1219.218935][T17089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1219.218949][T17089] R13: 00007fd5c1986038 R14: 00007fd5c1985fa0 R15: 00007ffdfbe9f9d8
[ 1219.218985][T17089]  </TASK>
[ 1219.410939][ T5697] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1219.967215][  T208] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1220.203890][ T5590] Bluetooth: hci1: command tx timeout
[ 1222.268891][ T5590] Bluetooth: hci1: command tx timeout
[ 1222.748959][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1222.828998][T17111] ceph: No mds server is up or the cluster is laggy
[ 1224.170621][   T31] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[ 1224.252511][T17118] comedi comedi0: 8255: I/O port conflict (0x400000,4)
[ 1224.351108][ T5590] Bluetooth: hci1: command tx timeout
[ 1228.750641][ T5590] Bluetooth: hci1: command tx timeout
[ 1230.118912][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1231.389049][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1232.398548][ T5245] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1233.719328][ T6258] IPVS: stop unused estimator thread 0...
[ 1238.679880][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.679964][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.172345][ T5850] usb 4-1: no suitable firmware found!
[ 1239.172369][ T5850] usb 4-1: ath9k_htc: Failed to get firmware htc_9271.fw
[ 1239.172451][ T6692] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1239.305057][ T5587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1239.411732][ T5587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1239.437561][ T5587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1239.457269][ T5587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1239.458150][ T5587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1239.660877][T17198] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3348'.
[ 1239.660912][T17198] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3348'.
[ 1239.848828][T16102] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1240.072680][ T5245] 8021q: adding VLAN 0 to HW filter on device eth12
[ 1240.214921][T16102] usb 2-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00
[ 1240.217153][T16102] usb 2-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 10
[ 1240.259935][T16102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1240.259969][T16102] usb 2-1: Product: syz
[ 1240.259988][T16102] usb 2-1: Manufacturer: syz
[ 1240.260006][T16102] usb 2-1: SerialNumber: syz
[ 1241.096031][T16102] whiteheat 2-1:1.0: required endpoints missing
[ 1241.194882][T17203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3356'.
[ 1241.532278][ T5850] usb 2-1: USB disconnect, device number 59
[ 1241.629179][ T5590] Bluetooth: hci0: command tx timeout
[ 1243.557865][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1243.709030][ T5590] Bluetooth: hci0: command tx timeout
[ 1244.839061][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1245.788815][ T5590] Bluetooth: hci0: command tx timeout
[ 1245.872089][T17249] ieee802154 phy0 wpan0: encryption failed: -22
[ 1245.936524][T17249] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1247.466012][T17065] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1247.466294][T17065] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1247.466498][T17065] bridge_slave_0: entered allmulticast mode
[ 1247.491210][T17065] bridge_slave_0: entered promiscuous mode
[ 1247.508814][  T208] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1247.545050][T17065] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1247.547331][T17065] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1247.547545][T17065] bridge_slave_1: entered allmulticast mode
[ 1247.577836][T17065] bridge_slave_1: entered promiscuous mode
[ 1247.678821][  T208] usb 7-1: Using ep0 maxpacket: 8
[ 1247.700534][  T208] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1247.700596][  T208] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[ 1247.708480][  T208] usb 7-1: config 0 has an invalid interface number: 88 but max is 0
[ 1247.708510][  T208] usb 7-1: config 0 has no interface number 0
[ 1247.708558][  T208] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1247.708586][  T208] usb 7-1: config 0 interface 88 has no altsetting 0
[ 1247.772237][  T208] usb 7-1: string descriptor 0 read error: -22
[ 1247.772403][  T208] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[ 1247.813515][  T208] usb 7-1: config 0 descriptor??
[ 1247.961511][ T5590] Bluetooth: hci0: command tx timeout
[ 1247.973820][T17065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1248.005432][T17065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1248.598870][  T208] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1248.751424][  T208] usb 2-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00
[ 1248.779155][  T208] usb 2-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 10
[ 1248.805082][  T208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1248.805112][  T208] usb 2-1: Product: syz
[ 1248.805129][  T208] usb 2-1: Manufacturer: syz
[ 1248.805146][  T208] usb 2-1: SerialNumber: syz
[ 1248.861042][  T208] whiteheat 2-1:1.0: required endpoints missing
[ 1249.073233][T17276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3368'.
[ 1250.262396][T17065] team0: Port device team_slave_0 added
[ 1250.293632][  T208] usb 2-1: USB disconnect, device number 60
[ 1250.617737][T17065] team0: Port device team_slave_1 added
[ 1250.704197][T16102] usb 7-1: USB disconnect, device number 17
[ 1250.774870][T17065] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1250.774889][T17065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1250.774919][T17065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1250.848253][T17065] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1250.848273][T17065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1250.848305][T17065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1253.290264][T17300] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1253.446615][T17306] FAULT_INJECTION: forcing a failure.
[ 1253.446615][T17306] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1253.446643][T17306] CPU: 1 UID: 0 PID: 17306 Comm: syz.3.3374 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1253.446666][T17306] Tainted: [L]=SOFTLOCKUP
[ 1253.446672][T17306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1253.446683][T17306] Call Trace:
[ 1253.446689][T17306]  <TASK>
[ 1253.446696][T17306]  dump_stack_lvl+0xe8/0x150
[ 1253.446726][T17306]  should_fail_ex+0x46b/0x600
[ 1253.446757][T17306]  _copy_to_user+0x31/0xb0
[ 1253.446778][T17306]  simple_read_from_buffer+0xe1/0x170
[ 1253.446801][T17306]  proc_fail_nth_read+0x1be/0x230
[ 1253.446826][T17306]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1253.446850][T17306]  ? rw_verify_area+0x250/0x4d0
[ 1253.446871][T17306]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1253.446891][T17306]  vfs_read+0x219/0xa90
[ 1253.446916][T17306]  ? __pfx_vfs_read+0x10/0x10
[ 1253.446940][T17306]  ? get_timespec64+0x119/0x1b0
[ 1253.446960][T17306]  ? __pfx_get_timespec64+0x10/0x10
[ 1253.446988][T17306]  ksys_read+0x156/0x270
[ 1253.447009][T17306]  ? __pfx_ksys_read+0x10/0x10
[ 1253.447037][T17306]  do_syscall_64+0x166/0x520
[ 1253.447055][T17306]  ? trace_irq_disable+0x3b/0x140
[ 1253.447072][T17306]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.447089][T17306]  ? clear_bhb_loop+0x70/0xc0
[ 1253.447110][T17306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.447126][T17306] RIP: 0033:0x7f45cb5fe90e
[ 1253.447141][T17306] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1253.447155][T17306] RSP: 002b:00007f45c9895fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1253.447173][T17306] RAX: ffffffffffffffda RBX: 00007f45c98966c0 RCX: 00007f45cb5fe90e
[ 1253.447185][T17306] RDX: 000000000000000f RSI: 00007f45c98960a0 RDI: 0000000000000004
[ 1253.447195][T17306] RBP: 00007f45c9896090 R08: 0000000000000000 R09: 0000000000000000
[ 1253.447206][T17306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1253.447216][T17306] R13: 00007f45cb8c6038 R14: 00007f45cb8c5fa0 R15: 00007fffabe22128
[ 1253.447241][T17306]  </TASK>
[ 1256.304399][T17065] hsr_slave_0: entered promiscuous mode
[ 1256.308526][T17065] hsr_slave_1: entered promiscuous mode
[ 1256.342028][T17065] debugfs: 'hsr0' already exists in 'hsr'
[ 1256.367325][T17065] Cannot create hsr debugfs directory
[ 1256.589752][  T208] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1256.999847][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1259.825162][T17326] IPVS: set_ctl: invalid protocol: 33 10.1.33.2:20001
[ 1260.001708][T17326] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3382'.
[ 1260.058854][T16483] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1260.216120][T16483] usb 7-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00
[ 1260.217675][T16483] usb 7-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 10
[ 1260.241338][T16483] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1260.241411][T16483] usb 7-1: Product: syz
[ 1260.241453][T16483] usb 7-1: Manufacturer: syz
[ 1260.241499][T16483] usb 7-1: SerialNumber: syz
[ 1260.304166][T16483] whiteheat 7-1:1.0: required endpoints missing
[ 1260.330127][ T5850] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1260.449010][ T5849] bridge_slave_1: left allmulticast mode
[ 1260.449051][ T5849] bridge_slave_1: left promiscuous mode
[ 1260.449365][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1260.481250][ T5850] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1260.482446][ T5850] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1260.482471][ T5850] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1260.482523][ T5850] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1260.484934][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1260.484966][ T5850] usb 4-1: Product: syz
[ 1260.484977][ T5850] usb 4-1: Manufacturer: syz
[ 1260.484989][ T5850] usb 4-1: SerialNumber: syz
[ 1260.573136][ T5850] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[ 1260.573188][ T5850] cdc_ncm 4-1:1.0: bind() failure
[ 1260.616822][T17327] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3381'.
[ 1260.680989][ T5849] bridge_slave_0: left allmulticast mode
[ 1260.681036][ T5849] bridge_slave_0: left promiscuous mode
[ 1260.681330][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1260.777902][ T5850] usb 4-1: USB disconnect, device number 43
[ 1261.200972][ T5849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1261.281658][ T5849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1261.343019][ T5849] bond0 (unregistering): Released all slaves
[ 1261.463093][T16102] usb 7-1: USB disconnect, device number 18
[ 1261.665121][T17338] ieee802154 phy0 wpan0: encryption failed: -22
[ 1261.715072][T17338] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1262.118832][ T6692] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1262.365460][ T6692] usb 2-1: New USB device found, idVendor=0499, idProduct=101d, bcdDevice= 0.40
[ 1262.395805][ T6692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1262.395833][ T6692] usb 2-1: Product: syz
[ 1262.395849][ T6692] usb 2-1: Manufacturer: syz
[ 1262.395864][ T6692] usb 2-1: SerialNumber: syz
[ 1262.532486][T16102] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1262.652905][ T6692] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1262.683055][T16102] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1262.683118][T16102] usb 7-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[ 1262.713620][T16102] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1262.716348][T16102] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1262.716375][T16102] usb 7-1: Product: syz
[ 1262.716391][T16102] usb 7-1: Manufacturer: syz
[ 1262.929517][T16102] uvcvideo 7-1:1.0: Found UVC 1.00 device syz (8086:0ad2)
[ 1262.980717][ T6692] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[ 1262.985847][ T6692] usb 2-1: USB disconnect, device number 61
[ 1263.256146][T17290] udevd[17290]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1263.362080][T16102] uvcvideo 7-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[ 1263.362491][T16102] uvcvideo 7-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[ 1263.362568][T16102] uvcvideo 7-1:1.1: Failed to initialize the device (-71).
[ 1263.363123][T16102] uvcvideo 7-1:1.0: probe with driver uvcvideo failed with error -71
[ 1263.570330][T16102] usb 7-1: USB disconnect, device number 19
[ 1265.349878][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1265.789193][ T5849] hsr_slave_0: left promiscuous mode
[ 1265.830376][ T5849] hsr_slave_1: left promiscuous mode
[ 1265.831721][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1265.897138][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1266.640799][T17378] ieee802154 phy0 wpan0: encryption failed: -22
[ 1266.714755][T17378] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1267.892693][ T5849] team0 (unregistering): Port device team_slave_1 removed
[ 1268.004183][ T5849] team0 (unregistering): Port device team_slave_0 removed
[ 1269.880480][T17389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3390'.
[ 1270.273049][ T5245] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1270.465031][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1272.051001][T17196] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1272.051138][T17196] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1272.051354][T17196] bridge_slave_0: entered allmulticast mode
[ 1272.054898][T17196] bridge_slave_0: entered promiscuous mode
[ 1272.086147][T17196] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1272.086280][T17196] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1272.086496][T17196] bridge_slave_1: entered allmulticast mode
[ 1272.394091][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1272.409387][T17196] bridge_slave_1: entered promiscuous mode
[ 1272.638349][T17196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1272.656703][T17196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1272.950547][T17196] team0: Port device team_slave_0 added
[ 1273.587207][T17196] team0: Port device team_slave_1 added
[ 1274.054956][T17411] ieee802154 phy0 wpan0: encryption failed: -22
[ 1274.096989][T17411] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1274.955014][T17428] Invalid ELF header magic: != ELF
[ 1274.972491][T17428] overlayfs: overlapping lowerdir path
[ 1275.853811][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1275.886145][T17196] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1275.886164][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1275.886197][T17196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1275.964615][T17196] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1275.964637][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1275.964670][T17196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1276.352968][T17196] hsr_slave_0: entered promiscuous mode
[ 1276.359612][T17196] hsr_slave_1: entered promiscuous mode
[ 1276.361441][T17196] debugfs: 'hsr0' already exists in 'hsr'
[ 1276.361468][T17196] Cannot create hsr debugfs directory
[ 1279.236142][ T5587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1279.281970][T17438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1279.312056][ T5587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1279.331197][ T5587] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1279.340796][ T5587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1279.352259][ T5587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1282.808025][ T5590] Bluetooth: hci4: command tx timeout
[ 1282.866207][T17474] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1282.979750][ T5849] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1283.912133][T17478] ieee802154 phy0 wpan0: encryption failed: -22
[ 1283.925423][T17478] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1284.875199][ T5590] Bluetooth: hci4: command tx timeout
[ 1284.889771][T17492] ieee802154 phy0 wpan0: encryption failed: -22
[ 1285.045356][ T5849] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1285.075830][T17492] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1286.908878][ T5590] Bluetooth: hci4: command tx timeout
[ 1287.884946][ T5849] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1288.757633][ T5849] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1288.885625][   T37] audit: type=1804 audit(1787293049.463:768): pid=17548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.3423" name="/newroot/623/file0" dev="tmpfs" ino=3398 res=1 errno=0
[ 1289.247576][ T5590] Bluetooth: hci4: command tx timeout
[ 1290.438901][T16483] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1290.588923][T16483] usb 4-1: Using ep0 maxpacket: 16
[ 1290.591762][T16483] usb 4-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7a
[ 1290.593284][T16483] usb 4-1: config 64 has an invalid interface number: 238 but max is 0
[ 1290.593311][T16483] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config
[ 1290.593334][T16483] usb 4-1: config 64 has no interface number 0
[ 1290.593368][T16483] usb 4-1: config 64 interface 238 has no altsetting 0
[ 1290.662969][T16483] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1290.663017][T16483] usb 4-1: Product: syz
[ 1290.663035][T16483] usb 4-1: Manufacturer: syz
[ 1290.663052][T16483] usb 4-1: SerialNumber: syz
[ 1291.067526][T16483] uvcvideo 4-1:64.238: Found Unit with invalid ID 0
[ 1291.067595][T16483] uvcvideo 4-1:64.238: Found UVC 0.00 device syz (046d:087c)
[ 1291.067628][T16483] uvcvideo 4-1:64.238: No valid video chain found.
[ 1291.094514][T16483] usb 4-1: USB disconnect, device number 44
[ 1292.546551][T16102] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1293.048262][T17597] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3430'.
[ 1293.083751][T17597] 9p: Bad value for 'wfdno'
[ 1293.167447][T17599] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3431'.
[ 1293.242218][T16102] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1295.218837][ T5850] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1295.400473][ T5850] usb 2-1: Using ep0 maxpacket: 16
[ 1295.814800][ T5850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1295.827968][ T5850] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1295.828055][ T5850] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 96
[ 1295.835176][ T5850] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1295.835212][ T5850] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1295.865123][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1295.865203][ T5850] usb 2-1: Product: syz
[ 1295.865247][ T5850] usb 2-1: Manufacturer: syz
[ 1295.865288][ T5850] usb 2-1: SerialNumber: syz
[ 1295.925545][T17610] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1295.925679][T17610] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1296.191715][ T5850] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[ 1296.227072][ T5850] usb 2-1: USB disconnect, device number 62
[ 1296.955439][   T37] audit: type=1326 audit(1787293057.543:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.1.3440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3a18e0d9 code=0x7ffc0000
[ 1296.986357][   T37] audit: type=1326 audit(1787293057.543:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.1.3440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f6e3a18e0d9 code=0x7ffc0000
[ 1296.986756][   T37] audit: type=1326 audit(1787293057.573:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.1.3440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3a18e0d9 code=0x7ffc0000
[ 1296.987942][   T37] audit: type=1326 audit(1787293057.573:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.1.3440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e3a18e0d9 code=0x7ffc0000
[ 1297.519048][T17196] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1297.597266][   T37] audit: type=1326 audit(1787293058.163:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.1.3440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3a18e0d9 code=0x7ffc0000
[ 1297.597339][   T37] audit: type=1326 audit(1787293058.183:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.1.3440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3a18e0d9 code=0x7ffc0000
[ 1297.785577][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1298.625439][ T5590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1298.664363][ T5590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1298.666087][ T5590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1298.732822][ T5590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1298.737353][ T5590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1299.073489][T17461] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1299.073621][T17461] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1299.073829][T17461] bridge_slave_0: entered allmulticast mode
[ 1299.106247][T17653] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3443'.
[ 1299.121673][T17461] bridge_slave_0: entered promiscuous mode
[ 1299.876252][ T5849] bridge_slave_1: left allmulticast mode
[ 1299.876286][ T5849] bridge_slave_1: left promiscuous mode
[ 1299.876526][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1299.896605][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[ 1299.896770][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.298093][ T5587] Bluetooth: hci1: command tx timeout
[ 1301.438587][ T5849] bridge_slave_0: left allmulticast mode
[ 1301.438616][ T5849] bridge_slave_0: left promiscuous mode
[ 1301.443233][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1302.929512][T11477] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1303.098960][T11477] usb 2-1: Using ep0 maxpacket: 8
[ 1303.099849][T11477] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1303.101764][T11477] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1303.101790][T11477] usb 2-1: config 0 has no interfaces?
[ 1303.105257][T11477] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[ 1303.105285][T11477] usb 2-1: Product: syz
[ 1303.105303][T11477] usb 2-1: Manufacturer: syz
[ 1303.105320][T11477] usb 2-1: SerialNumber: syz
[ 1303.170859][T11477] usb 2-1: config 0 descriptor??
[ 1303.308916][ T5587] Bluetooth: hci1: command tx timeout
[ 1304.544336][   T10] usb 2-1: USB disconnect, device number 63
[ 1304.971450][ T5849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1305.839779][ T5590] Bluetooth: hci1: command tx timeout
[ 1306.010916][ T5849] bond0 (unregistering): Released all slaves
[ 1306.052312][T17461] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1306.052454][T17461] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1306.052662][T17461] bridge_slave_1: entered allmulticast mode
[ 1306.063896][T17461] bridge_slave_1: entered promiscuous mode
[ 1306.268904][   T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1306.468834][   T10] usb 2-1: Using ep0 maxpacket: 16
[ 1306.470775][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1306.472031][   T10] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1306.472064][   T10] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 96
[ 1306.472092][   T10] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1306.472122][   T10] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1306.474541][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1306.474567][   T10] usb 2-1: Product: syz
[ 1306.474584][   T10] usb 2-1: Manufacturer: syz
[ 1306.474601][   T10] usb 2-1: SerialNumber: syz
[ 1306.489564][T17698] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1306.489697][T17698] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1306.806765][   T10] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[ 1306.833011][   T10] usb 2-1: USB disconnect, device number 64
[ 1307.876607][T17666] team0: Port device veth3 added
[ 1307.876717][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3455'.
[ 1307.948884][ T5590] Bluetooth: hci1: command tx timeout
[ 1308.748820][T17721] Invalid option length (64949) for dns_resolver key
[ 1309.326947][T17461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1309.523259][T17461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1309.539032][T16102] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1310.868613][ T5719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1311.085891][T17727] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3462'.
[ 1311.085924][T17727] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3462'.
[ 1311.998143][T17461] team0: Port device team_slave_0 added
[ 1312.070913][T17461] team0: Port device team_slave_1 added
[ 1312.197875][T17461] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1312.197895][T17461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1312.197925][T17461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1312.265720][T17461] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1312.265750][T17461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1312.265782][T17461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1312.441198][T17751] Invalid ELF header magic: != ELF
[ 1312.469440][T17751] overlayfs: overlapping lowerdir path
[ 1315.102453][   T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1315.248822][   T10] usb 4-1: Using ep0 maxpacket: 16
[ 1315.251340][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1315.252901][   T10] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1315.252936][   T10] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 96
[ 1315.252964][   T10] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1315.252995][   T10] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1315.256039][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1315.256066][   T10] usb 4-1: Product: syz
[ 1315.256084][   T10] usb 4-1: Manufacturer: syz
[ 1315.256100][   T10] usb 4-1: SerialNumber: syz
[ 1315.379782][T17769] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1315.379925][T17769] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1315.532774][T17461] hsr_slave_0: entered promiscuous mode
[ 1315.534366][T17461] hsr_slave_1: entered promiscuous mode
[ 1315.535347][T17461] debugfs: 'hsr0' already exists in 'hsr'
[ 1315.535375][T17461] Cannot create hsr debugfs directory
[ 1316.235699][   T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[ 1316.266302][   T10] usb 4-1: USB disconnect, device number 45
[ 1316.287729][T17785] Invalid option length (64949) for dns_resolver key
[ 1316.419280][ T5849] hsr_slave_0: left promiscuous mode
[ 1316.462289][ T5849] hsr_slave_1: left promiscuous mode
[ 1316.463977][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1316.464010][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1316.521684][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1316.521716][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1316.614341][ T5849] veth1_macvtap: left promiscuous mode
[ 1316.614459][ T5849] veth0_macvtap: left promiscuous mode
[ 1316.614722][ T5849] veth1_vlan: left promiscuous mode
[ 1316.644910][ T5849] veth0_vlan: left promiscuous mode
[ 1318.144852][T17809] Invalid ELF header magic: != ELF
[ 1318.169915][T17809] overlayfs: overlapping lowerdir path
[ 1319.550025][ T5849] team0 (unregistering): Port device team_slave_1 removed
[ 1319.586311][ T5849] team0 (unregistering): Port device team_slave_0 removed
[ 1320.011883][T17824] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1320.030785][ T5245] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1320.158066][T17822] Invalid option length (64949) for dns_resolver key
[ 1323.656656][T17857] Invalid ELF header magic: != ELF
[ 1323.681257][T17857] overlayfs: overlapping lowerdir path
[ 1326.809659][   T37] audit: type=1804 audit(1787293087.403:775): pid=17885 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.3488" name="/newroot/213/file0" dev="tmpfs" ino=1155 res=1 errno=0
[ 1326.908981][T17889] ieee802154 phy0 wpan0: encryption failed: -22
[ 1326.938099][T17889] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1327.042149][ T5245] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1327.172776][   T37] audit: type=1326 audit(1787293087.763:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17892 comm="syz.3.3492" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1327.172927][   T37] audit: type=1326 audit(1787293087.763:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17892 comm="syz.3.3492" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1327.173442][   T37] audit: type=1326 audit(1787293087.763:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17892 comm="syz.3.3492" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1327.173610][   T37] audit: type=1326 audit(1787293087.763:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17892 comm="syz.3.3492" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1327.173783][   T37] audit: type=1326 audit(1787293087.763:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17892 comm="syz.3.3492" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1327.173964][   T37] audit: type=1326 audit(1787293087.763:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17892 comm="syz.3.3492" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1327.174132][   T37] audit: type=1326 audit(1787293087.763:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17892 comm="syz.3.3492" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1327.174863][   T37] audit: type=1326 audit(1787293087.763:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17892 comm="syz.3.3492" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1327.175012][   T37] audit: type=1326 audit(1787293087.763:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17892 comm="syz.3.3492" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1327.447732][T17646] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1327.447867][T17646] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1327.448082][T17646] bridge_slave_0: entered allmulticast mode
[ 1327.520136][T17646] bridge_slave_0: entered promiscuous mode
[ 1327.590145][T17646] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1327.590318][T17646] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1327.590567][T17646] bridge_slave_1: entered allmulticast mode
[ 1327.593941][T17646] bridge_slave_1: entered promiscuous mode
[ 1327.729574][T17896] gfs2: not a GFS2 filesystem
[ 1328.182376][T17904] FAULT_INJECTION: forcing a failure.
[ 1328.182376][T17904] name failslab, interval 1, probability 0, space 0, times 0
[ 1328.182417][T17904] CPU: 1 UID: 0 PID: 17904 Comm: syz.3.3496 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1328.182449][T17904] Tainted: [L]=SOFTLOCKUP
[ 1328.182457][T17904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1328.182471][T17904] Call Trace:
[ 1328.182481][T17904]  <TASK>
[ 1328.182491][T17904]  dump_stack_lvl+0xe8/0x150
[ 1328.182534][T17904]  should_fail_ex+0x46b/0x600
[ 1328.182578][T17904]  should_failslab+0xa8/0x100
[ 1328.182607][T17904]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1328.182646][T17904]  ? __alloc_skb+0x1db/0x7a0
[ 1328.182676][T17904]  ? __alloc_skb+0x1db/0x7a0
[ 1328.182713][T17904]  __alloc_skb+0x1db/0x7a0
[ 1328.182749][T17904]  netlink_sendmsg+0x5d4/0xb40
[ 1328.182798][T17904]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1328.182838][T17904]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1328.182878][T17904]  ? __kernel_text_address+0xd/0x30
[ 1328.182902][T17904]  ? unwind_get_return_address+0x4d/0x90
[ 1328.182930][T17904]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1328.182974][T17904]  sock_sendmsg_nosec+0x13a/0x180
[ 1328.183005][T17904]  ____sys_sendmsg+0x565/0x870
[ 1328.183039][T17904]  ? __might_fault+0xaf/0x130
[ 1328.183070][T17904]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1328.183114][T17904]  ? import_iovec+0x73/0xa0
[ 1328.183142][T17904]  ___sys_sendmsg+0x2a5/0x360
[ 1328.183175][T17904]  ? __lock_acquire+0x683/0x2ce0
[ 1328.183207][T17904]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1328.183278][T17904]  ? __fget_files+0x2a/0x420
[ 1328.183305][T17904]  ? __fget_files+0x3a8/0x420
[ 1328.183342][T17904]  __x64_sys_sendmsg+0x1b7/0x290
[ 1328.183379][T17904]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1328.183435][T17904]  do_syscall_64+0x166/0x520
[ 1328.183463][T17904]  ? trace_irq_disable+0x3b/0x140
[ 1328.183488][T17904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1328.183513][T17904]  ? clear_bhb_loop+0x70/0xc0
[ 1328.183543][T17904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1328.183565][T17904] RIP: 0033:0x7f45cb63e0d9
[ 1328.183587][T17904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1328.183607][T17904] RSP: 002b:00007f45c9896028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1328.183633][T17904] RAX: ffffffffffffffda RBX: 00007f45cb8c5fa0 RCX: 00007f45cb63e0d9
[ 1328.183650][T17904] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1328.183665][T17904] RBP: 00007f45c9896090 R08: 0000000000000000 R09: 0000000000000000
[ 1328.183680][T17904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1328.183694][T17904] R13: 00007f45cb8c6038 R14: 00007f45cb8c5fa0 R15: 00007fffabe22128
[ 1328.183730][T17904]  </TASK>
[ 1328.865319][ T5849] IPVS: stop unused estimator thread 0...
[ 1328.952500][T17908] Invalid ELF header magic: != ELF
[ 1328.978451][T17908] overlayfs: overlapping lowerdir path
[ 1329.853310][T17646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1329.859082][T16102] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1329.903018][T17646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1329.960518][T16102] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1334.518160][T17646] team0: Port device team_slave_0 added
[ 1334.533866][T17646] team0: Port device team_slave_1 added
[ 1335.708969][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1336.347877][ T5245] 8021q: adding VLAN 0 to HW filter on device eth15
[ 1336.368523][T17646] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1336.368541][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1336.368577][T17646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1336.416559][T17646] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1336.416577][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1336.416601][T17646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1336.539470][   T37] kauditd_printk_skb: 102 callbacks suppressed
[ 1336.539489][   T37] audit: type=1804 audit(1787293097.133:887): pid=17940 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.3503" name="/newroot/194/file0" dev="tmpfs" ino=1055 res=1 errno=0
[ 1337.026681][T17646] hsr_slave_0: entered promiscuous mode
[ 1337.036592][T17646] hsr_slave_1: entered promiscuous mode
[ 1340.371010][ T5587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1340.407045][ T5587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1340.417996][ T5587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1340.434270][ T5587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1340.437107][ T5587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1340.831395][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1341.230934][T17980] Invalid ELF header magic: != ELF
[ 1341.254900][T17980] overlayfs: overlapping lowerdir path
[ 1342.588793][ T5590] Bluetooth: hci0: command tx timeout
[ 1342.731664][T17994] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3510'.
[ 1342.731696][T17994] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3510'.
[ 1343.065295][  T208] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1343.459025][ T5719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1344.085809][ T5245] 8021q: adding VLAN 0 to HW filter on device eth16
[ 1344.669124][ T5590] Bluetooth: hci0: command tx timeout
[ 1346.748790][ T5587] Bluetooth: hci0: command tx timeout
[ 1348.038785][ T5719] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1348.212437][ T5719] usb 2-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00
[ 1348.218539][ T5719] usb 2-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 10
[ 1348.253857][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1348.253888][ T5719] usb 2-1: Product: syz
[ 1348.253905][ T5719] usb 2-1: Manufacturer: syz
[ 1348.253923][ T5719] usb 2-1: SerialNumber: syz
[ 1348.345840][ T5719] whiteheat 2-1:1.0: required endpoints missing
[ 1348.828953][ T5587] Bluetooth: hci0: command tx timeout
[ 1350.303495][  T208] usb 2-1: USB disconnect, device number 65
[ 1350.494337][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1351.309349][ T5719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1351.446832][ T5849] bridge_slave_1: left allmulticast mode
[ 1351.446872][ T5849] bridge_slave_1: left promiscuous mode
[ 1351.463669][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1352.862288][ T5849] bridge_slave_0: left allmulticast mode
[ 1352.862327][ T5849] bridge_slave_0: left promiscuous mode
[ 1352.862621][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1353.006901][T18084] FAULT_INJECTION: forcing a failure.
[ 1353.006901][T18084] name failslab, interval 1, probability 0, space 0, times 0
[ 1353.006942][T18084] CPU: 1 UID: 0 PID: 18084 Comm: syz.6.3528 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1353.006974][T18084] Tainted: [L]=SOFTLOCKUP
[ 1353.006983][T18084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1353.006998][T18084] Call Trace:
[ 1353.007008][T18084]  <TASK>
[ 1353.007019][T18084]  dump_stack_lvl+0xe8/0x150
[ 1353.007060][T18084]  should_fail_ex+0x46b/0x600
[ 1353.007103][T18084]  should_failslab+0xa8/0x100
[ 1353.007132][T18084]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1353.007170][T18084]  ? __alloc_skb+0x1db/0x7a0
[ 1353.007200][T18084]  ? __alloc_skb+0x1db/0x7a0
[ 1353.007237][T18084]  __alloc_skb+0x1db/0x7a0
[ 1353.007272][T18084]  netlink_sendmsg+0x5d4/0xb40
[ 1353.007321][T18084]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1353.007359][T18084]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1353.007399][T18084]  ? __kernel_text_address+0xd/0x30
[ 1353.007423][T18084]  ? unwind_get_return_address+0x4d/0x90
[ 1353.007452][T18084]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1353.007488][T18084]  sock_sendmsg_nosec+0x13a/0x180
[ 1353.007518][T18084]  ____sys_sendmsg+0x565/0x870
[ 1353.007559][T18084]  ? __might_fault+0xaf/0x130
[ 1353.007590][T18084]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1353.007634][T18084]  ? import_iovec+0x73/0xa0
[ 1353.007665][T18084]  ___sys_sendmsg+0x2a5/0x360
[ 1353.007698][T18084]  ? __lock_acquire+0x683/0x2ce0
[ 1353.007729][T18084]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1353.007802][T18084]  ? __fget_files+0x2a/0x420
[ 1353.007827][T18084]  ? __fget_files+0x3a8/0x420
[ 1353.007863][T18084]  __x64_sys_sendmsg+0x1b7/0x290
[ 1353.007900][T18084]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1353.007957][T18084]  do_syscall_64+0x166/0x520
[ 1353.007983][T18084]  ? trace_irq_disable+0x3b/0x140
[ 1353.008007][T18084]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1353.008031][T18084]  ? clear_bhb_loop+0x70/0xc0
[ 1353.008061][T18084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1353.008085][T18084] RIP: 0033:0x7fd5c16fe0d9
[ 1353.008106][T18084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1353.008126][T18084] RSP: 002b:00007fd5bf956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1353.008151][T18084] RAX: ffffffffffffffda RBX: 00007fd5c1985fa0 RCX: 00007fd5c16fe0d9
[ 1353.008169][T18084] RDX: 0000000020008888 RSI: 0000200000000040 RDI: 0000000000000003
[ 1353.008184][T18084] RBP: 00007fd5bf956090 R08: 0000000000000000 R09: 0000000000000000
[ 1353.008199][T18084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1353.008213][T18084] R13: 00007fd5c1986038 R14: 00007fd5c1985fa0 R15: 00007ffdfbe9f9d8
[ 1353.008249][T18084]  </TASK>
[ 1353.464574][ T5849] bridge_slave_1: left allmulticast mode
[ 1353.464614][ T5849] bridge_slave_1: left promiscuous mode
[ 1353.464871][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1353.618300][ T5849] bridge_slave_0: left allmulticast mode
[ 1353.618338][ T5849] bridge_slave_0: left promiscuous mode
[ 1353.618569][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1355.075402][ T5849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1355.139963][T18097] FAULT_INJECTION: forcing a failure.
[ 1355.139963][T18097] name failslab, interval 1, probability 0, space 0, times 0
[ 1355.139992][T18097] CPU: 1 UID: 0 PID: 18097 Comm: syz.6.3532 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1355.140046][T18097] Tainted: [L]=SOFTLOCKUP
[ 1355.140058][T18097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1355.140072][T18097] Call Trace:
[ 1355.140082][T18097]  <TASK>
[ 1355.140092][T18097]  dump_stack_lvl+0xe8/0x150
[ 1355.140134][T18097]  should_fail_ex+0x46b/0x600
[ 1355.140174][T18097]  should_failslab+0xa8/0x100
[ 1355.140207][T18097]  kmem_cache_alloc_noprof+0xa4/0x660
[ 1355.140233][T18097]  ? skb_clone+0x212/0x3a0
[ 1355.140257][T18097]  ? skb_clone+0x212/0x3a0
[ 1355.140286][T18097]  skb_clone+0x212/0x3a0
[ 1355.140309][T18097]  ? nfnetlink_rcv+0x4b0/0x28d0
[ 1355.140410][T18097]  nfnetlink_rcv+0x4e2/0x28d0
[ 1355.140431][T18097]  ? __local_bh_enable+0x1e3/0x2f0
[ 1355.140458][T18097]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1355.140477][T18097]  ? __dev_queue_xmit+0x294/0x3880
[ 1355.140540][T18097]  ? __dev_queue_xmit+0x1ee9/0x3880
[ 1355.140573][T18097]  ? __dev_queue_xmit+0x294/0x3880
[ 1355.140601][T18097]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1355.140637][T18097]  ? ref_tracker_free+0x668/0x820
[ 1355.140655][T18097]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1355.140671][T18097]  ? __asan_memcpy+0x40/0x70
[ 1355.140694][T18097]  ? __skb_clone+0x5c/0x6c0
[ 1355.140721][T18097]  ? __skb_clone+0x449/0x6c0
[ 1355.140750][T18097]  ? skb_clone+0x246/0x3a0
[ 1355.140777][T18097]  ? __netlink_deliver_tap+0x811/0x860
[ 1355.140802][T18097]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1355.140832][T18097]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1355.140857][T18097]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1355.140889][T18097]  netlink_unicast+0x7f5/0x990
[ 1355.140920][T18097]  netlink_sendmsg+0x813/0xb40
[ 1355.140953][T18097]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1355.140981][T18097]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1355.141011][T18097]  ? __kernel_text_address+0xd/0x30
[ 1355.141027][T18097]  ? unwind_get_return_address+0x4d/0x90
[ 1355.141048][T18097]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1355.141073][T18097]  sock_sendmsg_nosec+0x13a/0x180
[ 1355.141094][T18097]  ____sys_sendmsg+0x565/0x870
[ 1355.141119][T18097]  ? __might_fault+0xaf/0x130
[ 1355.141139][T18097]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1355.141194][T18097]  ? import_iovec+0x73/0xa0
[ 1355.141222][T18097]  ___sys_sendmsg+0x2a5/0x360
[ 1355.141255][T18097]  ? __lock_acquire+0x683/0x2ce0
[ 1355.141285][T18097]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1355.141356][T18097]  ? __fget_files+0x2a/0x420
[ 1355.141375][T18097]  ? __fget_files+0x3a8/0x420
[ 1355.141405][T18097]  __x64_sys_sendmsg+0x1b7/0x290
[ 1355.141432][T18097]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1355.141472][T18097]  do_syscall_64+0x166/0x520
[ 1355.141489][T18097]  ? trace_irq_disable+0x3b/0x140
[ 1355.141506][T18097]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1355.141523][T18097]  ? clear_bhb_loop+0x70/0xc0
[ 1355.141543][T18097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1355.141560][T18097] RIP: 0033:0x7fd5c16fe0d9
[ 1355.141576][T18097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1355.141590][T18097] RSP: 002b:00007fd5bf956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1355.141608][T18097] RAX: ffffffffffffffda RBX: 00007fd5c1985fa0 RCX: 00007fd5c16fe0d9
[ 1355.141621][T18097] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[ 1355.141632][T18097] RBP: 00007fd5bf956090 R08: 0000000000000000 R09: 0000000000000000
[ 1355.141642][T18097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1355.141652][T18097] R13: 00007fd5c1986038 R14: 00007fd5c1985fa0 R15: 00007ffdfbe9f9d8
[ 1355.141677][T18097]  </TASK>
[ 1355.504913][ T5849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1355.604472][ T5849] bond0 (unregistering): Released all slaves
[ 1356.220761][ T5849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1356.319714][ T5849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1356.388898][ T5849] bond0 (unregistering): Released all slaves
[ 1356.604759][ T5245] 8021q: adding VLAN 0 to HW filter on device eth17
[ 1357.190156][   T31] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1357.626030][T18116] gfs2: not a GFS2 filesystem
[ 1360.075333][ T6692] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1360.808286][ T5590] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1360.885486][ T5590] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1360.927355][ T5590] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1360.952175][ T5590] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1360.987225][ T5590] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1361.314098][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.314173][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.879986][ T5849] hsr_slave_0: left promiscuous mode
[ 1361.919304][ T5849] hsr_slave_1: left promiscuous mode
[ 1361.920656][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1361.971146][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1362.210148][ T5849] hsr_slave_0: left promiscuous mode
[ 1362.253338][ T5849] hsr_slave_1: left promiscuous mode
[ 1362.255675][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1362.301252][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1362.871087][ T5849] team0 (unregistering): Port device team_slave_1 removed
[ 1362.930063][ T5849] team0 (unregistering): Port device team_slave_0 removed
[ 1363.230031][ T5590] Bluetooth: hci4: command tx timeout
[ 1363.248738][ T5850] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1363.403373][ T5850] usb 4-1: New USB device found, idVendor=0471, idProduct=0325, bcdDevice=e4.df
[ 1363.404997][ T5850] usb 4-1: config 0 has an invalid interface number: 104 but max is 0
[ 1363.405032][ T5850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1363.405055][ T5850] usb 4-1: config 0 has no interface number 0
[ 1363.405089][ T5850] usb 4-1: too many endpoints for config 0 interface 104 altsetting 223: 143, using maximum allowed: 30
[ 1363.405132][ T5850] usb 4-1: config 0 interface 104 altsetting 223 has 0 endpoint descriptors, different from the interface descriptor's value: 143
[ 1363.405163][ T5850] usb 4-1: config 0 interface 104 has no altsetting 0
[ 1363.405199][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1363.496161][ T5850] usb 4-1: config 0 descriptor??
[ 1363.713017][T18143] netlink: 872 bytes leftover after parsing attributes in process `syz.3.3541'.
[ 1363.713046][T18143] netlink: 872 bytes leftover after parsing attributes in process `syz.3.3541'.
[ 1363.766445][ T5850] usb 4-1: string descriptor 0 read error: -32
[ 1363.781002][ T5850] gspca_main: gspca_zc3xx-2.14.0 probing 0471:0325
[ 1364.019669][ T5849] team0 (unregistering): Port device team_slave_1 removed
[ 1364.080222][ T5849] team0 (unregistering): Port device team_slave_0 removed
[ 1364.831651][ T5850] gspca_zc3xx: reg_w_i err -71
[ 1365.323543][ T5590] Bluetooth: hci4: command tx timeout
[ 1365.625179][T18158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3544'.
[ 1365.840728][ T5850] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 1365.842180][ T5850] gspca_zc3xx 4-1:0.104: probe with driver gspca_zc3xx failed with error -71
[ 1366.448558][ T5850] usb 4-1: USB disconnect, device number 46
[ 1367.214446][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1367.388747][ T5590] Bluetooth: hci4: command tx timeout
[ 1367.467825][T17966] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1367.467955][T17966] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1367.468262][T17966] bridge_slave_0: entered allmulticast mode
[ 1367.481148][T17966] bridge_slave_0: entered promiscuous mode
[ 1367.549019][ T5319] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1367.595161][T17966] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1367.595322][T17966] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1367.595517][T17966] bridge_slave_1: entered allmulticast mode
[ 1367.620891][T17966] bridge_slave_1: entered promiscuous mode
[ 1368.129456][T17966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1368.177718][T17966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1369.276705][T17966] team0: Port device team_slave_0 added
[ 1369.283516][T18181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3551'.
[ 1369.297843][T17966] team0: Port device team_slave_1 added
[ 1369.474735][T17966] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1369.474755][T17966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1369.474785][T17966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1369.558358][T17966] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1369.558378][T17966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1369.558409][T17966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1370.048833][ T5590] Bluetooth: hci4: command tx timeout
[ 1370.212694][T17966] hsr_slave_0: entered promiscuous mode
[ 1370.216055][T17966] hsr_slave_1: entered promiscuous mode
[ 1370.217073][T17966] debugfs: 'hsr0' already exists in 'hsr'
[ 1370.217100][T17966] Cannot create hsr debugfs directory
[ 1370.848763][    T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1371.041669][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00
[ 1371.043623][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1371.046632][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1371.046658][    T9] usb 4-1: Product: syz
[ 1371.046675][    T9] usb 4-1: Manufacturer: syz
[ 1371.188844][T16483] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1371.343819][T16483] usb 7-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00
[ 1371.346741][T16483] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1371.364192][T16483] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1371.364224][T16483] usb 7-1: Product: syz
[ 1371.364244][T16483] usb 7-1: Manufacturer: syz
[ 1371.813037][ T5717] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1371.899053][   T31] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1371.967220][    T9] usbhid 4-1:1.0: can't add hid device: -71
[ 1371.967350][    T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[ 1371.976298][T16483] usbhid 7-1:1.0: can't add hid device: -71
[ 1371.976642][T16483] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[ 1372.135963][T16483] usb 7-1: USB disconnect, device number 20
[ 1372.158037][    T9] usb 4-1: USB disconnect, device number 47
[ 1373.944050][T18125] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1373.945144][T18125] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1373.945335][T18125] bridge_slave_0: entered allmulticast mode
[ 1373.979833][T18125] bridge_slave_0: entered promiscuous mode
[ 1374.023599][T18251] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3567'.
[ 1374.091624][T18252] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3567'.
[ 1374.212654][T18125] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1374.213073][T18125] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1374.213300][T18125] bridge_slave_1: entered allmulticast mode
[ 1374.249488][T18125] bridge_slave_1: entered promiscuous mode
[ 1374.940900][T18125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1375.160147][    T9] hid_parser_main: 108 callbacks suppressed
[ 1375.160176][    T9] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[ 1375.397974][T18125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1375.401172][T18274] udevd[18274]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error
[ 1375.524627][    T9] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1376.141055][T18125] team0: Port device team_slave_0 added
[ 1376.145309][T18125] team0: Port device team_slave_1 added
[ 1376.363880][T18125] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1376.363895][T18125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1376.363920][T18125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1376.422403][T18125] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1376.422422][T18125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1376.422453][T18125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1376.570838][T18125] hsr_slave_0: entered promiscuous mode
[ 1376.572193][T18125] hsr_slave_1: entered promiscuous mode
[ 1376.573136][T18125] debugfs: 'hsr0' already exists in 'hsr'
[ 1376.573162][T18125] Cannot create hsr debugfs directory
[ 1376.669865][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1380.134631][   T37] audit: type=1326 audit(1787293140.723:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18333 comm="syz.3.3581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1380.184890][   T37] audit: type=1326 audit(1787293140.723:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18333 comm="syz.3.3581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1380.223435][   T37] audit: type=1326 audit(1787293140.813:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18333 comm="syz.3.3581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1380.223779][   T37] audit: type=1326 audit(1787293140.813:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18333 comm="syz.3.3581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1380.224287][   T37] audit: type=1326 audit(1787293140.813:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18333 comm="syz.3.3581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1380.224562][   T37] audit: type=1326 audit(1787293140.813:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18333 comm="syz.3.3581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1380.224858][   T37] audit: type=1326 audit(1787293140.813:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18333 comm="syz.3.3581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1380.225514][   T37] audit: type=1326 audit(1787293140.813:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18333 comm="syz.3.3581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1380.225821][   T37] audit: type=1326 audit(1787293140.813:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18333 comm="syz.3.3581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1380.226130][   T37] audit: type=1326 audit(1787293140.813:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18333 comm="syz.3.3581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1380.911737][T18341] binder_alloc: 18340: binder_alloc_buf, no vma
[ 1381.232707][ T5849] bridge_slave_1: left allmulticast mode
[ 1381.232764][ T5849] bridge_slave_1: left promiscuous mode
[ 1381.233034][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1381.450600][T18350] netlink: 'syz.3.3586': attribute type 10 has an invalid length.
[ 1381.473566][ T5849] bridge_slave_0: left allmulticast mode
[ 1381.473605][ T5849] bridge_slave_0: left promiscuous mode
[ 1381.473886][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1381.769420][ T5849] bridge_slave_1: left allmulticast mode
[ 1381.769460][ T5849] bridge_slave_1: left promiscuous mode
[ 1381.769822][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1382.077538][ T5849] bridge_slave_0: left allmulticast mode
[ 1382.077577][ T5849] bridge_slave_0: left promiscuous mode
[ 1382.077859][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1382.691388][ T5849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1382.809437][ T5849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1382.881689][ T5849] bond0 (unregistering): Released all slaves
[ 1383.210462][ T5849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1383.291832][ T5849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1383.350693][ T5849] bond0 (unregistering): Released all slaves
[ 1385.010358][    T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1385.178873][    T9] usb 7-1: Using ep0 maxpacket: 32
[ 1385.202791][    T9] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1385.223827][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1385.223852][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1385.223882][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1385.227510][    T9] usb 7-1: config 0 descriptor??
[ 1385.570001][ T5849] hsr_slave_0: left promiscuous mode
[ 1385.608809][ T5849] hsr_slave_1: left promiscuous mode
[ 1385.614178][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1385.670779][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1385.777075][    T9] ft260 0003:0403:6030.0018: unknown main item tag 0x0
[ 1385.777118][    T9] ft260 0003:0403:6030.0018: unknown main item tag 0x0
[ 1385.890602][ T5849] hsr_slave_0: left promiscuous mode
[ 1385.920422][ T5849] hsr_slave_1: left promiscuous mode
[ 1385.922347][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1385.950479][    T9] ft260 0003:0403:6030.0018: chip code: 0000 0000
[ 1385.970405][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1386.150891][    T9] ft260 0003:0403:6030.0018: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0
[ 1386.354463][    T9] ft260 0003:0403:6030.0018: failed to retrieve status: -32, no wakeup
[ 1386.356902][    T9] ft260 0003:0403:6030.0018: failed to retrieve status: -32
[ 1386.391007][    T9] ft260 0003:0403:6030.0018: failed to reset I2C controller: -71
[ 1386.627468][    T9] usb 7-1: USB disconnect, device number 21
[ 1387.369520][ T5849] team0 (unregistering): Port device team_slave_1 removed
[ 1387.450941][ T5849] team0 (unregistering): Port device team_slave_0 removed
[ 1388.289514][ T5849] team0 (unregistering): Port device team_slave_1 removed
[ 1388.340512][ T5849] team0 (unregistering): Port device team_slave_0 removed
[ 1391.059269][T18457] coredump: 2208(syz.1.3611): Core dump to core aborted: cannot preserve file permissions
[ 1391.149577][T18449] bridge_slave_0: left allmulticast mode
[ 1391.149612][T18449] bridge_slave_0: left promiscuous mode
[ 1391.421989][T18449] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1391.518796][ T5717] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1391.615220][T18449] bridge_slave_1: left allmulticast mode
[ 1391.615256][T18449] bridge_slave_1: left promiscuous mode
[ 1391.615521][T18449] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1391.678754][ T5717] usb 7-1: Using ep0 maxpacket: 8
[ 1391.679655][ T5717] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1391.681270][ T5717] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1391.681520][ T5717] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1391.681551][ T5717] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1391.681580][ T5717] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1391.681607][ T5717] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1391.681654][ T5717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1391.764120][T18464] Bluetooth: MGMT ver 1.23
[ 1391.870376][T18449] bond0: (slave bond_slave_0): Releasing backup interface
[ 1392.097562][ T5717] usb 7-1: GET_CAPABILITIES returned 0
[ 1392.097616][ T5717] usbtmc 7-1:16.0: can't read capabilities
[ 1392.220191][T18449] bond0: (slave bond_slave_1): Releasing backup interface
[ 1392.627839][   T31] usb 7-1: USB disconnect, device number 22
[ 1393.060644][T18449] team0: Port device team_slave_0 removed
[ 1393.097498][T18449] team0: Port device team_slave_1 removed
[ 1393.098055][T18449] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1393.098074][T18449] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1393.141924][T18449] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1393.141955][T18449] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1393.186293][T18449] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1395.357654][T18125] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1397.383482][T18125] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1397.425738][T18125] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1399.114529][T18500] program syz.6.3620 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1399.114959][T18500] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1399.914070][T18125] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1400.030730][T18125] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1400.248187][T18125] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1400.367529][T18125] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1400.421038][T18125] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1400.970646][T18518] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1400.973308][T18518] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1400.973550][T18518] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1400.974051][T18518] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1400.974117][T18518] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1401.220533][T18518] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1401.328429][T18518] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1401.328576][T18518] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1401.484134][T18518] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1401.562139][T18125] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1401.772489][ T5590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1401.816791][T18125] 8021q: adding VLAN 0 to HW filter on device team0
[ 1401.839215][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1401.839443][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1401.849716][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1401.849894][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1401.910144][ T5590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1401.917566][ T5590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1401.920325][ T5590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1401.921987][ T5590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1402.256269][   T37] kauditd_printk_skb: 4 callbacks suppressed
[ 1402.256289][   T37] audit: type=1326 audit(1787293162.843:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18533 comm="syz.3.3625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1402.259872][   T37] audit: type=1326 audit(1787293162.843:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18533 comm="syz.3.3625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1402.336440][   T37] audit: type=1326 audit(1787293162.923:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18533 comm="syz.3.3625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1402.336840][   T37] audit: type=1326 audit(1787293162.923:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18533 comm="syz.3.3625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1402.396790][   T37] audit: type=1326 audit(1787293162.923:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18533 comm="syz.3.3625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1402.414658][   T37] audit: type=1326 audit(1787293162.993:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18533 comm="syz.3.3625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1402.428838][ T5587] Bluetooth: hci2: command 0x0406 tx timeout
[ 1402.470949][   T37] audit: type=1326 audit(1787293163.063:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18533 comm="syz.3.3625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1402.471012][   T37] audit: type=1326 audit(1787293163.063:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18533 comm="syz.3.3625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1402.556549][   T37] audit: type=1326 audit(1787293163.143:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18533 comm="syz.3.3625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1402.556613][   T37] audit: type=1326 audit(1787293163.143:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18533 comm="syz.3.3625" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cb63e0d9 code=0x7ffc0000
[ 1402.989687][ T5587] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1402.993983][T17071] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1402.994053][ T5590] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1403.388917][ T5587] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1404.191916][ T5587] Bluetooth: hci1: command tx timeout
[ 1405.330299][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1405.469633][ T5587] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1405.567304][T18125] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1406.112164][ T3334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1406.113153][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1406.158854][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1406.268726][ T5590] Bluetooth: hci1: command tx timeout
[ 1406.837329][   T43] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1406.837833][   T43] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1406.837916][   T43] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1406.837996][   T43] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1406.838076][   T43] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1406.838197][   T43] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1407.149297][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1407.239834][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1407.558729][ T5587] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1407.769620][T18125] veth0_vlan: entered promiscuous mode
[ 1407.956774][T18125] veth1_vlan: entered promiscuous mode
[ 1408.070570][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1408.071671][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1408.135597][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1408.594786][ T5587] Bluetooth: hci1: command tx timeout
[ 1409.046865][T17071] Bluetooth: hci0: command 0x1003 tx timeout
[ 1409.072662][ T5590] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1409.111757][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1409.379960][T18527] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1409.380069][T18527] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1409.380270][T18527] bridge_slave_0: entered allmulticast mode
[ 1409.393149][T18527] bridge_slave_0: entered promiscuous mode
[ 1409.498062][T18527] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1409.498252][T18527] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1409.498465][T18527] bridge_slave_1: entered allmulticast mode
[ 1409.538675][T18527] bridge_slave_1: entered promiscuous mode
[ 1409.895641][T18527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1409.931532][T18527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1410.154787][T18527] team0: Port device team_slave_0 added
[ 1410.174650][T18527] team0: Port device team_slave_1 added
[ 1410.394100][T18125] veth0_macvtap: entered promiscuous mode
[ 1410.585051][T18527] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1410.585071][T18527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1410.585103][T18527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1410.844448][  T126] bridge_slave_1: left allmulticast mode
[ 1410.844486][  T126] bridge_slave_1: left promiscuous mode
[ 1410.844758][  T126] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1410.985609][  T126] bridge_slave_0: left allmulticast mode
[ 1410.985673][  T126] bridge_slave_0: left promiscuous mode
[ 1410.985960][  T126] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1411.268949][T18606] Bluetooth: hci1: command tx timeout
[ 1411.276946][ T6692] net_ratelimit: 2 callbacks suppressed
[ 1411.277060][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1413.034540][T18673] Invalid ELF header magic: != ELF
[ 1413.301794][T16483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1413.640908][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1413.871040][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1413.873136][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1413.897199][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1414.721995][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1414.849551][  T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1414.979631][  T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1415.061474][  T126] bond0 (unregistering): Released all slaves
[ 1415.102980][T18527] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1415.102994][T18527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1415.103016][T18527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1415.104396][T18125] veth1_macvtap: entered promiscuous mode
[ 1415.239878][ T5245] 8021q: adding VLAN 0 to HW filter on device eth17
[ 1415.566626][T18125] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1415.594011][T18527] hsr_slave_0: entered promiscuous mode
[ 1415.594977][T18527] hsr_slave_1: entered promiscuous mode
[ 1416.720032][T16483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1416.777801][T18691] Config c/1 of g_uac2 needs at least one function.
[ 1416.778508][T18691] udc usbip-vudc.0: failed to start g_uac2: -22
[ 1416.778537][T18691] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22
[ 1416.859359][T18691] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 1417.389625][T16483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1417.393313][  T208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1417.509196][  T126] hsr_slave_0: left promiscuous mode
[ 1417.552999][  T126] hsr_slave_1: left promiscuous mode
[ 1417.554257][  T126] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1417.613920][  T126] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1419.252469][T16483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1419.299504][  T126] team0 (unregistering): Port device team_slave_1 removed
[ 1419.659553][  T126] team0 (unregistering): Port device team_slave_0 removed
[ 1421.610749][T18714] syz.6.3670 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1421.648251][T18714] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[ 1421.648323][T18714] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1421.654693][T18714] vhci_hcd vhci_hcd.0: Device attached
[ 1421.682229][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1422.184202][T18716] vhci_hcd: connection closed
[ 1422.334445][  T208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1422.421760][T15493] vhci_hcd vhci_hcd.6: stop threads
[ 1422.450775][T15493] vhci_hcd vhci_hcd.6: release socket
[ 1422.450937][T15493] vhci_hcd vhci_hcd.6: disconnect device
[ 1422.755012][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1422.773950][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[ 1422.774018][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.005334][ T5319] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1423.084658][T16701] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1423.154853][T16701] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1423.156981][T16701] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1423.158361][T16701] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1423.184650][T16701] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1423.225494][ T5319] usb 2-1: Using ep0 maxpacket: 8
[ 1423.226321][ T5319] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1423.254289][ T5319] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[ 1423.254346][ T5319] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1423.254377][ T5319] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1423.254404][ T5319] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1423.254433][ T5319] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1423.254459][ T5319] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1423.254514][ T5319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1423.412401][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1423.595306][ T5319] usb 2-1: usb_control_msg returned -32
[ 1423.595355][ T5319] usbtmc 2-1:16.0: can't read capabilities
[ 1423.761788][T18723] ------------[ cut here ]------------
[ 1423.761803][T18723] softleaf_cached_writable(entry)
[ 1423.761819][T18723] WARNING: mm/page_table_check.c:206 at __page_table_check_ptes_set+0x186/0x340, CPU#0: syz.6.3673/18723
[ 1423.761869][T18723] Modules linked in:
[ 1423.761893][T18723] CPU: 0 UID: 0 PID: 18723 Comm: syz.6.3673 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1423.761926][T18723] Tainted: [L]=SOFTLOCKUP
[ 1423.761934][T18723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1423.761949][T18723] RIP: 0010:__page_table_check_ptes_set+0x186/0x340
[ 1423.761975][T18723] Code: 89 fe e8 ed af 8d ff 48 b8 00 00 00 00 00 00 00 94 4c 01 f8 48 c1 e8 3b 0f 94 c0 4d 39 e5 76 0f 84 c0 74 0b e8 fb a9 8d ff 90 <0f> 0b 90 eb 05 e8 f0 a9 8d ff 31 ff 89 ee e8 f7 ae 8d ff 89 e8 85
[ 1423.761996][T18723] RSP: 0018:ffffc900046f7050 EFLAGS: 00010287
[ 1423.762016][T18723] RAX: ffffffff82385515 RBX: dfffe7fff0c80001 RCX: 0000000000080000
[ 1423.762034][T18723] RDX: ffffc90011352000 RSI: 000000000001cb38 RDI: 000000000001cb39
[ 1423.762050][T18723] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 1423.762065][T18723] R10: dffffc0000000000 R11: fffff940003cdff9 R12: c7fffffffffffffe
[ 1423.762083][T18723] R13: dfffe7fff0c80006 R14: ffff88803eabf000 R15: 6c00000000000000
[ 1423.762102][T18723] FS:  00007fd5bf9356c0(0000) GS:ffff888125c07000(0000) knlGS:0000000000000000
[ 1423.762122][T18723] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1423.762139][T18723] CR2: 00007fa266994140 CR3: 000000005c708000 CR4: 00000000003526f0
[ 1423.762160][T18723] Call Trace:
[ 1423.762169][T18723]  <TASK>
[ 1423.762180][T18723]  ? folio_try_share_anon_rmap_pte+0x6c7/0xb60
[ 1423.762218][T18723]  try_to_migrate_one+0x1d0f/0x2690
[ 1423.762260][T18723]  ? try_to_migrate_one+0x5c4/0x2690
[ 1423.762300][T18723]  ? __pfx_try_to_migrate_one+0x10/0x10
[ 1423.762336][T18723]  ? get_page_from_freelist+0x2630/0x26a0
[ 1423.762370][T18723]  ? reacquire_held_locks+0x104/0x190
[ 1423.762401][T18723]  ? folio_lock_anon_vma_read+0x322/0xa50
[ 1423.762462][T18723]  ? anon_vma_interval_tree_iter_first+0x273/0x280
[ 1423.762522][T18723]  ? __pfx_try_to_migrate_one+0x10/0x10
[ 1423.762555][T18723]  rmap_walk_anon+0x5e3/0x7d0
[ 1423.762602][T18723]  try_to_migrate+0x33d/0x400
[ 1423.762630][T18723]  ? __pfx_try_to_migrate+0x10/0x10
[ 1423.762658][T18723]  ? __pfx_try_to_migrate_one+0x10/0x10
[ 1423.762683][T18723]  ? __pfx_folio_not_mapped+0x10/0x10
[ 1423.762707][T18723]  ? __pfx_folio_lock_anon_vma_read+0x10/0x10
[ 1423.762730][T18723]  ? __pfx_invalid_migration_vma+0x10/0x10
[ 1423.762757][T18723]  ? folio_get_anon_vma+0xa8/0x680
[ 1423.762778][T18723]  ? folio_get_anon_vma+0xa8/0x680
[ 1423.762802][T18723]  ? folio_get_anon_vma+0x464/0x680
[ 1423.762823][T18723]  ? folio_get_anon_vma+0xa8/0x680
[ 1423.762850][T18723]  migrate_pages_batch+0x13ab/0x4340
[ 1423.762898][T18723]  ? __pfx_alloc_migration_target+0x10/0x10
[ 1423.762934][T18723]  ? queue_folios_pte_range+0xafd/0xc00
[ 1423.762965][T18723]  ? __pfx_migrate_pages_batch+0x10/0x10
[ 1423.763012][T18723]  ? __pfx_queue_folios_pte_range+0x10/0x10
[ 1423.763042][T18723]  ? schedule+0x90/0x2b0
[ 1423.763089][T18723]  ? __lock_acquire+0x683/0x2ce0
[ 1423.763147][T18723]  migrate_pages+0x1b96/0x2900
[ 1423.763196][T18723]  ? __pfx_alloc_migration_target+0x10/0x10
[ 1423.763236][T18723]  ? __pfx_migrate_pages+0x10/0x10
[ 1423.763269][T18723]  ? _raw_spin_unlock_irq_enable+0x4f/0xa0
[ 1423.763300][T18723]  ? try_to_wake_up+0x843/0x1430
[ 1423.763361][T18723]  ? do_migrate_pages+0x61a/0x8b0
[ 1423.763394][T18723]  do_migrate_pages+0x656/0x8b0
[ 1423.763434][T18723]  ? __pfx_do_migrate_pages+0x10/0x10
[ 1423.763456][T18723]  ? rt_mutex_slowunlock+0x4ee/0xa30
[ 1423.763510][T18723]  ? rcu_is_watching+0x16/0xb0
[ 1423.763549][T18723]  ? security_capable+0xb9/0x2c0
[ 1423.763595][T18723]  __se_sys_migrate_pages+0xaa2/0xc90
[ 1423.763622][T18723]  ? __se_sys_futex+0x3a8/0x450
[ 1423.763683][T18723]  ? __pfx___se_sys_migrate_pages+0x10/0x10
[ 1423.763713][T18723]  ? rcu_is_watching+0x16/0xb0
[ 1423.763758][T18723]  do_syscall_64+0x166/0x520
[ 1423.763782][T18723]  ? trace_irq_disable+0x3b/0x140
[ 1423.763807][T18723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1423.763832][T18723]  ? clear_bhb_loop+0x70/0xc0
[ 1423.763862][T18723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1423.763885][T18723] RIP: 0033:0x7fd5c16fe0d9
[ 1423.763907][T18723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1423.763926][T18723] RSP: 002b:00007fd5bf935028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100
[ 1423.763949][T18723] RAX: ffffffffffffffda RBX: 00007fd5c1986090 RCX: 00007fd5c16fe0d9
[ 1423.763967][T18723] RDX: 0000200000000040 RSI: 0000000000000005 RDI: 0000000000000000
[ 1423.763983][T18723] RBP: 00007fd5c1795024 R08: 0000000000000000 R09: 0000000000000000
[ 1423.763998][T18723] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[ 1423.764013][T18723] R13: 00007fd5c1986128 R14: 00007fd5c1986090 R15: 00007ffdfbe9f9d8
[ 1423.764051][T18723]  </TASK>
[ 1423.764069][T18723] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1423.764089][T18723] CPU: 0 UID: 0 PID: 18723 Comm: syz.6.3673 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1423.764122][T18723] Tainted: [L]=SOFTLOCKUP
[ 1423.764130][T18723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1423.764144][T18723] Call Trace:
[ 1423.764154][T18723]  <TASK>
[ 1423.764165][T18723]  vpanic+0x56d/0xa60
[ 1423.764203][T18723]  ? __pfx__printk+0x10/0x10
[ 1423.764230][T18723]  ? __pfx_vpanic+0x10/0x10
[ 1423.764263][T18723]  ? is_bpf_text_address+0x292/0x2b0
[ 1423.764294][T18723]  ? is_bpf_text_address+0x26/0x2b0
[ 1423.764335][T18723]  panic+0xc5/0xd0
[ 1423.764370][T18723]  ? __pfx_panic+0x10/0x10
[ 1423.764444][T18723]  __warn+0x315/0x4c0
[ 1423.764465][T18723]  ? __page_table_check_ptes_set+0x186/0x340
[ 1423.764501][T18723]  ? __page_table_check_ptes_set+0x186/0x340
[ 1423.764527][T18723]  __report_bug+0x276/0x570
[ 1423.764634][T18723]  ? __page_table_check_ptes_set+0x186/0x340
[ 1423.764664][T18723]  ? __pfx___report_bug+0x10/0x10
[ 1423.764690][T18723]  ? __lock_acquire+0x683/0x2ce0
[ 1423.764725][T18723]  ? __mmu_notifier_arch_invalidate_secondary_tlbs+0x52/0x1b0
[ 1423.764774][T18723]  ? __page_table_check_ptes_set+0x186/0x340
[ 1423.764800][T18723]  report_bug+0x16b/0x220
[ 1423.764827][T18723]  ? __page_table_check_ptes_set+0x186/0x340
[ 1423.764850][T18723]  ? __page_table_check_ptes_set+0x188/0x340
[ 1423.764875][T18723]  handle_bug+0x9c/0x200
[ 1423.764907][T18723]  exc_invalid_op+0x1a/0x50
[ 1423.764937][T18723]  asm_exc_invalid_op+0x1a/0x20
[ 1423.764961][T18723] RIP: 0010:__page_table_check_ptes_set+0x186/0x340
[ 1423.764987][T18723] Code: 89 fe e8 ed af 8d ff 48 b8 00 00 00 00 00 00 00 94 4c 01 f8 48 c1 e8 3b 0f 94 c0 4d 39 e5 76 0f 84 c0 74 0b e8 fb a9 8d ff 90 <0f> 0b 90 eb 05 e8 f0 a9 8d ff 31 ff 89 ee e8 f7 ae 8d ff 89 e8 85
[ 1423.765008][T18723] RSP: 0018:ffffc900046f7050 EFLAGS: 00010287
[ 1423.765028][T18723] RAX: ffffffff82385515 RBX: dfffe7fff0c80001 RCX: 0000000000080000
[ 1423.765047][T18723] RDX: ffffc90011352000 RSI: 000000000001cb38 RDI: 000000000001cb39
[ 1423.765064][T18723] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 1423.765079][T18723] R10: dffffc0000000000 R11: fffff940003cdff9 R12: c7fffffffffffffe
[ 1423.765097][T18723] R13: dfffe7fff0c80006 R14: ffff88803eabf000 R15: 6c00000000000000
[ 1423.765126][T18723]  ? __page_table_check_ptes_set+0x185/0x340
[ 1423.765160][T18723]  ? folio_try_share_anon_rmap_pte+0x6c7/0xb60
[ 1423.765197][T18723]  try_to_migrate_one+0x1d0f/0x2690
[ 1423.765240][T18723]  ? try_to_migrate_one+0x5c4/0x2690
[ 1423.765282][T18723]  ? __pfx_try_to_migrate_one+0x10/0x10
[ 1423.765318][T18723]  ? get_page_from_freelist+0x2630/0x26a0
[ 1423.765353][T18723]  ? reacquire_held_locks+0x104/0x190
[ 1423.765385][T18723]  ? folio_lock_anon_vma_read+0x322/0xa50
[ 1423.765430][T18723]  ? anon_vma_interval_tree_iter_first+0x273/0x280
[ 1423.765461][T18723]  ? __pfx_try_to_migrate_one+0x10/0x10
[ 1423.765499][T18723]  rmap_walk_anon+0x5e3/0x7d0
[ 1423.765549][T18723]  try_to_migrate+0x33d/0x400
[ 1423.765577][T18723]  ? __pfx_try_to_migrate+0x10/0x10
[ 1423.765607][T18723]  ? __pfx_try_to_migrate_one+0x10/0x10
[ 1423.765633][T18723]  ? __pfx_folio_not_mapped+0x10/0x10
[ 1423.765659][T18723]  ? __pfx_folio_lock_anon_vma_read+0x10/0x10
[ 1423.765695][T18723]  ? __pfx_invalid_migration_vma+0x10/0x10
[ 1423.765723][T18723]  ? folio_get_anon_vma+0xa8/0x680
[ 1423.765745][T18723]  ? folio_get_anon_vma+0xa8/0x680
[ 1423.765770][T18723]  ? folio_get_anon_vma+0x464/0x680
[ 1423.765791][T18723]  ? folio_get_anon_vma+0xa8/0x680
[ 1423.765819][T18723]  migrate_pages_batch+0x13ab/0x4340
[ 1423.765866][T18723]  ? __pfx_alloc_migration_target+0x10/0x10
[ 1423.765903][T18723]  ? queue_folios_pte_range+0xafd/0xc00
[ 1423.765934][T18723]  ? __pfx_migrate_pages_batch+0x10/0x10
[ 1423.765982][T18723]  ? __pfx_queue_folios_pte_range+0x10/0x10
[ 1423.766013][T18723]  ? schedule+0x90/0x2b0
[ 1423.766058][T18723]  ? __lock_acquire+0x683/0x2ce0
[ 1423.766117][T18723]  migrate_pages+0x1b96/0x2900
[ 1423.766165][T18723]  ? __pfx_alloc_migration_target+0x10/0x10
[ 1423.766205][T18723]  ? __pfx_migrate_pages+0x10/0x10
[ 1423.766238][T18723]  ? _raw_spin_unlock_irq_enable+0x4f/0xa0
[ 1423.766269][T18723]  ? try_to_wake_up+0x843/0x1430
[ 1423.766328][T18723]  ? do_migrate_pages+0x61a/0x8b0
[ 1423.766361][T18723]  do_migrate_pages+0x656/0x8b0
[ 1423.766400][T18723]  ? __pfx_do_migrate_pages+0x10/0x10
[ 1423.766423][T18723]  ? rt_mutex_slowunlock+0x4ee/0xa30
[ 1423.766470][T18723]  ? rcu_is_watching+0x16/0xb0
[ 1423.766516][T18723]  ? security_capable+0xb9/0x2c0
[ 1423.766559][T18723]  __se_sys_migrate_pages+0xaa2/0xc90
[ 1423.766586][T18723]  ? __se_sys_futex+0x3a8/0x450
[ 1423.766622][T18723]  ? __pfx___se_sys_migrate_pages+0x10/0x10
[ 1423.766653][T18723]  ? rcu_is_watching+0x16/0xb0
[ 1423.766699][T18723]  do_syscall_64+0x166/0x520
[ 1423.766723][T18723]  ? trace_irq_disable+0x3b/0x140
[ 1423.766748][T18723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1423.766771][T18723]  ? clear_bhb_loop+0x70/0xc0
[ 1423.766802][T18723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1423.766845][T18723] RIP: 0033:0x7fd5c16fe0d9
[ 1423.766866][T18723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1423.766886][T18723] RSP: 002b:00007fd5bf935028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100
[ 1423.766911][T18723] RAX: ffffffffffffffda RBX: 00007fd5c1986090 RCX: 00007fd5c16fe0d9
[ 1423.766929][T18723] RDX: 0000200000000040 RSI: 0000000000000005 RDI: 0000000000000000
[ 1423.766944][T18723] RBP: 00007fd5c1795024 R08: 0000000000000000 R09: 0000000000000000
[ 1423.766960][T18723] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[ 1423.766976][T18723] R13: 00007fd5c1986128 R14: 00007fd5c1986090 R15: 00007ffdfbe9f9d8
[ 1423.767016][T18723]  </TASK>
[ 1423.767630][T18723] Kernel Offset: disabled