last executing test programs:

23m58.295342842s ago: executing program 1 (id=2252):
r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}})

23m58.292326774s ago: executing program 1 (id=2253):
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100100000040435522050000000000010902240001000010090904001001030003000921faff050122290009058103"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io$hid(r0, &(0x7f0000000a00)={0x24, &(0x7f0000000900)={0x40, 0x23, 0xc, {0xc, 0xa, "6114b54da34887ed9084"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f0000000980)={0x0, 0x22, 0xb, {[@main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xc, "6f8584af"}, @global=@item_4={0x3, 0x1, 0x2, "2e07d871"}]}}, &(0x7f00000009c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1e, 0x7, 0x1, {0x22, 0xc07}}}}, &(0x7f0000000c40)={0x2c, &(0x7f0000000a40)={0x20, 0xe, 0x4b, "e110c3d06ebc98c091f721948f6b5ed33f3c72a30eeb1651893d7b58e2bb20a36476d615f3f1cf48225280045a439686f4fc61a3b4598d3b718a24381dbf1ba5c7d6ad532799a19c6f0020"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x70}, &(0x7f0000000b40)={0x20, 0x1, 0xad, "0b32d4fcd88f6192c01cb1f93602e8544cd235a02a3a88db77ce7a84b3501ed249c57cb3399a4fdc15f6addae7c0e41b751bef81e5fc591b227c529b7f2a6d9a3bce775f675d9deb005cfca19e9a9dffd5cfaa14619627493914c8044883988e69bfcfde7d38f2d8cbaa22b94e0e15b16a59a33d585f6e12ddb09702921cbd0c1c042f7755e0bf216cbc6566b6fecd8d662109598b8173277ff43e73607c028238e013df4721520e5b7c7c5227"}, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0x9}})
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)={0x2c, 0x41, 0x1, 0x5fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str='{\x00'}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x6, {[@local=@item_012={0x0, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x400)
ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000000c0))
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00116d"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = getegid()
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [], {}, [{0x8, 0x3}, {0x8, 0x3, r3}, {0x8, 0x1, r3}], {0x10, 0x2}}, 0xfec5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0)
r4 = syz_usb_connect$cdc_ncm(0x2, 0x91, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0xfd, 0x90, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '@'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1b1d, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x80}, @dmm={0x7, 0x24, 0x14, 0x4, 0xd}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}, @obex={0x5, 0x24, 0x15, 0x3ff}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0xd, 0xa, 0x4}, @obex={0x5, 0x24, 0x15, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x6, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x3, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x20, 0x6, 0x2c}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x200, 0x8, 0x3, 0xa, 0xff}, 0x4f, &(0x7f0000000380)={0x5, 0xf, 0x4f, 0x3, [@generic={0x1f, 0x10, 0x4, "d4fa653f5c9edd3ed23e3641b1de5741a7b4260c62da6a5004a36d4d"}, @ssp_cap={0x20, 0x10, 0xa, 0xa1, 0x5, 0x8, 0xf00f, 0x0, [0xff3f00, 0x88aa3e6151b19f43, 0xffc0c0, 0x0, 0x1e]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0xf7, 0x0, 0x5, 0x2}]}, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42c}}, {0x31, &(0x7f0000000440)=@string={0x31, 0x3, "3a8ec23677a16fa0b4df919a4d2b801de2dddebd7f47698c07ef3145b673587364ec70d8f13ea91257f9f52f2f5d16"}}]})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x4)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x285}]})
syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000600)={0x14, &(0x7f00000004c0)={0x40, 0x23, 0xd8, {0xd8, 0x4, "5c5ad520fc30bf034c322c138dcb434b08a4e6db6e156a04816086450b8774aca493e625be1ae4813d03b6ea552fbcdb179d3694e7ad11ae5f934241f220e64e46b7ef61c45c6e0c2dac3e5d9b030812e188d4942d5c53552fabb613ce8c4ab48a7f0b0bb7980329f99084bfee8e97d32bd79e268bd711bfcb792c08cfb5afda39d19a027dce6a72d2c4d94e1773964e3c48c7f73462872c7e9b0cc48f62ec5143cc934fba3c23abb98d37058c95909ed9f0ac555e90ae6ab4f42b98d20bcea522cce8c7f9c0580819d3cede4d27b2830dd77c36a4c4"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x40, 0x17, 0x59, "47da8cf7e3cfc03e32b9326274a5c9aad12960fdc0fd5c34f1ef1b08cf5c100e517cf38b87ef9f3d381930e8dc1eadff3bad9ea1c6c78acc8565aa0ed305882c35634f232d812d18677fcd34901a488cf37b256ca9fbb7fda0"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x4, 0xe704, 0x4, 0xc0e9, 0x6, 0x54d2, 0x2, 0x1ff, 0x4, 0x7, 0xbd0, 0x5}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x7f67}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x60}, &(0x7f0000000840)={0x20, 0x89, 0x2}})

23m56.303737095s ago: executing program 1 (id=2264):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

23m53.256469535s ago: executing program 1 (id=2274):
r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bc22, 0x25dfdbfd, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r2, 0x109)
accept4(r2, 0x0, 0x0, 0x0)
shutdown(r2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1)
move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}})

23m53.094851639s ago: executing program 1 (id=2275):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @loopback, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
syz_emit_vhci(&(0x7f000000b740)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x3, 0x0, 0x401}}}, 0x7)
sync_file_range(0xffffffffffffffff, 0x8, 0x6, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d382e23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb0", 0x3}], 0x1)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000000c0)=0xffff1884, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x18, &(0x7f0000000000)=0xf3f, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c001f4002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040)

23m50.744048045s ago: executing program 1 (id=2282):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f2601"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

23m50.355038639s ago: executing program 32 (id=2282):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f2601"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

3m32.246999172s ago: executing program 4 (id=8739):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3)
read(r0, 0x0, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmmsg(r1, 0x0, 0x0, 0x10000041)
r2 = socket(0x10, 0x3, 0x0)
r3 = gettid()
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000004c0)={'rti800\x00', [0x6, 0xf, 0xd0, 0x2, 0x4, 0x100, 0x7, 0x20000000, 0x8, 0xb, 0x0, 0x4, 0x1, 0x401, 0x10001, 0x1, 0x9, 0x8, 0xfe9, 0x401, 0xfffffffe, 0x5, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x4, 0x20009, 0x8]})
timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\x10\xf8l\x01\xb1\\x00#\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0/file0'}, 0x4d)
write(r2, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24)

3m32.192796559s ago: executing program 4 (id=8740):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r1, 0x9)
socket$inet_sctp(0x2, 0x5, 0x84)
readv(r0, &(0x7f0000000b40)=[{&(0x7f00000033c0)=""/4089, 0xff9}, {&(0x7f00000043c0)=""/4098, 0x1002}], 0x2)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40)

3m31.953481907s ago: executing program 4 (id=8747):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000003580)={0x10, 0x10, 0x0, 0x0, 0xfffffffc}, 0x10}], 0x1}, 0x20040000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={'ip_vti0\x00', <r3=>0x0, 0x1, 0x40, 0x10, 0x2, {{0x29, 0x4, 0x3, 0x9, 0xa4, 0x68, 0x0, 0x6, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0x17, 0x3, 0xa, [{@private=0xa010100, 0x8001}, {@rand_addr=0x64010102, 0x3}, {@private=0xa010102, 0x3}, {@broadcast, 0x3}, {@loopback, 0x9}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x1}]}, @generic={0x94, 0x7, "db19daf87d"}, @end, @cipso={0x86, 0x4a, 0x0, [{0x2, 0x2}, {0x6, 0xd, "27b65af1cb54424909cb17"}, {0x0, 0x6, "658f73d8"}, {0x1, 0x5, "0ed284"}, {0x1, 0xc, "2c5f58a65419832fb0fb"}, {0x0, 0x9, "2e3006938f027b"}, {0x7, 0x2}, {0x5, 0x2}, {0x6, 0x11, "c4491bf3b44996f2b73e7f55ffabfb"}]}]}}}}})
statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x6000, 0x80, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@updsa={0x10c, 0x1a, 0x100, 0x70bd29, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4e22, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x33, r3, r4}, {@in=@rand_addr=0x64010102, 0x4d5}, @in=@private=0xa010100, {0x7, 0x5, 0x1f, 0x3, 0x8, 0x1, 0x3, 0x3}, {0x5a8, 0xfbc0, 0x9, 0x81}, {0x7, 0x8e7, 0x5d}, 0x70bd2c, 0x3503, 0xa, 0x1, 0x6, 0x80}, [@encap={0x1c, 0x4, {0x2, 0x4e21, 0x4e22, @in6=@loopback}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8004}, 0x1)
socket$tipc(0x1e, 0x5, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300030c000000000700000000000002000900400000000000000000000017030006000000000002000000e2000002000000000000000002000100000000000000050200000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x10)

3m31.818569864s ago: executing program 4 (id=8748):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3)
read(r0, 0x0, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmmsg(r1, 0x0, 0x0, 0x10000041)
r2 = socket(0x10, 0x3, 0x0)
r3 = gettid()
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000004c0)={'rti800\x00', [0x6, 0xf, 0xd0, 0x2, 0x4, 0x100, 0x7, 0x20000000, 0x8, 0xb, 0x0, 0x4, 0x1, 0x401, 0x10001, 0x1, 0x9, 0x8, 0xfe9, 0x401, 0xfffffffe, 0x5, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x4, 0x20009, 0x8]})
timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\x10\xf8l\x01\xb1\\x00#\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0/file0'}, 0x4d)
write(r2, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24)

3m31.643872503s ago: executing program 4 (id=8751):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x80)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

3m31.308630529s ago: executing program 4 (id=8753):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
syz_usb_connect$cdc_ecm(0x0, 0x5a, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @mcast2, 0x8}, 0x1c)
listen(r2, 0xfffffffc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x8, &(0x7f00000001c0)=[{0x8, 0x2, 0xd5, 0x9}, {0x800, 0x1, 0x0, 0x3}, {0x7, 0x9a, 0x5, 0x4}, {0x4c77, 0xa, 0x4, 0x101}, {0x7, 0x4, 0x4, 0xfffff4ae}, {0x2, 0x4, 0x5, 0x84b}, {0x9, 0x2, 0x1, 0x4}, {0xc, 0x9, 0xe, 0x7}]})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
syz_usb_connect(0x4, 0x9d9, &(0x7f0000000c80)={{0x12, 0x1, 0xc125d7d15763a14, 0x6f, 0x22, 0x36, 0x40, 0x681, 0x3c06, 0x9605, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c7, 0x3, 0xff, 0x8f, 0x30, 0x8, "", [{{0x9, 0x4, 0x88, 0x7, 0xf, 0x7b, 0x2d, 0x20, 0x3, [], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x5, 0x9, 0x0, [@generic={0x9d, 0x22, "f7e365fd1da4b11f7c884bf98e5acdc6417daf7cef13eefb1c524ddf8e78ee254392fea7163d79447558eab73158f4d572003737f345210afae0cbcaf1294c774b26d4c8d72838607c24f13a4130a629173c3c4128768cc445fe6d0eb465f4e3074cf0eaf1c1a1192aa21c6878d1e2fca3cdf8bd3101303bcac63ce04031ce44520f1f58f64a3e864266504bcd2e441d52a5ba2d915efa65799521"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0x8, 0x8, 0x7f, [@generic={0xa2, 0x3, "62826263dd2c8467ad5c4fd8f4cd8b6c0ea791b12dbd42308aec5c519156604ec00d5a67940ffe9364492d04544e28c7ee9c5bb27b8b5a62752890dcf8134fbd9b071098a8c9dc2157ba2223d184f4c531aedd97903bc4eaad87902cbbb387a47cdc7270f5bb7ce43da72e8509ef74e5b94f3cacf4390fc98f67cf6ffb89a2dc577b5c06d6309f1cfb6966ed0d53c03d4240eb150d4ebd73c123236f8c9dcf52"}, @generic={0xac, 0xb, "ee08f5b4abab964c058eab95a3738b4e0a7c3ba96157cfa105f850e549cdc6f9ef03cd3c71769311ec8d650f7036e13284a2234d9c83edf50dde3bc2ffc92d9365dc31bc156f35f646683829e807738457e56beabbd76da1a3d5dfca18761fd255b74394b124cd928f6afdf0671e0c61e44414998ab127b2ea513a84c03094188db06d3ef50b0e3c782eb5645bf7640bc9865f3033ce8d9384b619f2d75d78246b21590121e21da095e3"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x9, 0xa, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x9}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xd, 0x7, 0xc6, [@generic={0xe0, 0x22, "60689e59484ccd8eea65ed3c1abe65840022f435f9b7b9dc2d3947aa53ac8a7fd220ee8d2abca6ff51aea9988ec3e726034bc61497b7223b7a1962463e6b3924eee234627023622bcb3a8ad9c5166c99a281c16dd8e1f959c03808055a26b7e88262cc0570eb5639e10eb8b4949ea3d411aa9154565f0424fc96a4d17dc4dccef13f57b86ad98f2861673f44deb811e5b6b31ae20de4d403fbd1627fbe988626845443e1a27d9eed97bd03696b1665b4d449b0ec75b0b8d23e98d277bf7f23f847f00da05cc0030d19b038bf8d7e44132f3fb405f17bb3a29525c1ab582e"}, @generic={0x35, 0xa, "7e702bf1d799710c5202f2590624268ca2bc664d04b6c9448352e394bf463a762a9fa48be2c538838bbf8bf1a36244f6d35ebb"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x4, 0x8, 0xcd}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x8e, 0x9, 0xf, [@generic={0x26, 0xd, "5b1a713b8b9beaadc7eaef0e6ce49e5160b5627e26d558547b6791e2436587569997f4b9"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x1, 0x81, 0x23, [@generic={0xbd, 0xc, "bf104197760501be4f6d5cb665f9630ad75295710a0eec457fecc0d0becb68fb66efbc9f0a4fea21e8ae0e1901400518a7a461607278cf7e98ef70481e7e2b20e18b31cfe8d15cf991409486a3637cdda05ec0652cf6c36cf5c9b67f4891aefcbd873022565f289632ff8ad2eef9b7e60bd8ac5262ba029db64eb293298a3a67c906ae86aab214a3e98ffb6ea55d5dfb71d3e24672384cd841f58a727883437a67d558e0c8b7302b3996f29ad6ad13dbe7f9fbbeff66740c8dd855"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc9, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xfd, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x3}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x88, 0xe1, 0xd, [@generic={0xe2, 0x5, "bc33451890072a10aee2feef10411730c2f064910ac03964e71edc603f6679f390696680e7e93f18845d8632b2d27e2df38127f2430af0676ef7e14ed42236034250139ba4c72b7c92ab97b6a6b62c2f0063ec948ffff0a27a576f86409fe693f207d096449739d1a7ce31dd6b54a30fdc2dd08d8ab207b4eedffa400b27956424ce88ed486c5453c53a3e314819b0fe1a3fa9c76c8c22244c0913c0f8dd2d10004db766c9bf34428b25fffe303b996f12017cd605fc758ab269d51171a0dbcc014f07505012a74346a20b4ede6a0bbb3a70ea0576d851da8a81ed74bbe6a0a2"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0xf7, 0x80, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x6}]}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x1, 0x2, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb5}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x1, 0x6, 0x4f, [@generic={0xa7, 0xe, "1e9559a027980aaf74f7a40ab1a12666214eb473213bfd0e5bbf599ad811e8713ad491caf8e0016fe7adad994b17323008e8c76242ac16fd31f88ee3824de23c124acacb27c7e6588f121c22ef4428dc4eb0c46424aa7aca83858ba7289e5653640ddf463829fdc0da329784df901fe300d850e28effb4d8c05e57a1090bb5bb846656bc4eb50be1a46216e59e405bcfa191cf433cdad4bf3d34b87395ec78acf085fef738"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x53, 0x2, 0x7, [@generic={0xa8, 0x31, "1387e9e5bf32f54e0e01bdd59d81b630e23c1b56c9b1e99f6f600423b7be7138094dd09aafe3ec4e63c2782c4462ac64b86d5b25801c66c73ac58da837e7fc8ed49d8a93f05d69fc7f840e4d3191ff8a965d37bc8e0f285818f3cce166a362f05166afc109cff236455d0b950d49f39d14afd8292bf6afe8d6be14f763a599ab8d30e8305ddabd697cb2305ebe2e987d9c274cedcabd760647a253d341517a0854368c409608"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0x2}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x5, 0x4, 0xc2}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x40, 0x4}}]}}, {{0x9, 0x4, 0x27, 0x80, 0x6, 0xff, 0x1, 0x4c, 0x0, [], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x7, 0x80, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x2}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0xa, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xb, 0x7}, @generic={0xd1, 0x22, "6c5f156508123bbed160e499242ce7a529371641e1d0e53afd597259ce298212920321335e4e320c8e5f6f75fbbd3a27bdf81adbfed65357f6c8dd0c744131fe8ef0239754fb16750e3e5fd6c7aed064527e79d46bf1569b246c779a98b6e0d2027c4bd639f37dcbfb14cbda74d22f02c9d04f31bf7d2dbb2ea3f4fc85c786869c99a08e09c4414fe9d008da2f50e2d2e17c532797fdd699f4f648a3ae6ec88e2e17c8e8224425f7b2780a6e265b1cbf57a2d8f71df4bfb6cfb2da2f39edde5ef590d09bc37455d6b14c2f758aaeb0"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x4, 0x6, 0x7, [@generic={0x16, 0x24, "05d587a61954c9ad4b4c5515fcff603f6967a790"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xa710}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x1, 0x5, 0x6}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0x0, 0x0, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x3a, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x5}]}}]}}, {{0x9, 0x4, 0xe2, 0x5c, 0x9, 0x3, 0x0, 0x0, 0xff, [@uac_control={{0xa, 0x24, 0x1, 0xfff9, 0xa}}, @hid_hid={0x9, 0x21, 0x80, 0x9, 0x1, {0x22, 0xc9b}}], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x8, 0x3, 0xb, [@generic={0x5b, 0x22, "258593d0454f2235ead078eeb4ab1408f6f3af34f1d7d3d7b7acf296d2b3f2abde750f155418da90534a6b5cf1277e32c122964fa0208317c6a2d8efc0c04d5385224515cb31005b700d7a426745e22fc99b91df3ab62d8505"}]}}, {{0x9, 0x5, 0x4, 0x18, 0x420, 0x6, 0x6, 0xa}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x9, 0x60, 0x40}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x0, 0xbb, 0x4}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x81, 0x1, 0x7, [@generic={0x97, 0x1, "39a00ae11fe3f6544f7ea40ad466ac19417907cb075c8ff3d2a2e880778f3790366921eaaaa0d922a7d709866d89204639ab4c1a56e2e8c3c4f395b93e9d7b1ce325439107d35326ff4faac830c6aa3a4e8de4d7a3832fa378758f9053a39f89a0e87db20ff8c35b0ee39798a68f732782bf0f2474c1c1d1f73382d019189211a4534a42b34fe3bbe73a10046112d0a7e10aaa7e91"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x47, 0x7ff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x4, 0xe5, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xd5, 0x4a, 0x3f}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x5, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x7f}, @generic={0x2c, 0x11, "f7e841c62477872613ee8bc7e572575040d75d7d016b9af588abf5512d3ce0015479f4e1d509e14e67d9"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x57, 0xd, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x8}]}}]}}]}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000001680)={0xa, 0x6, 0x110, 0x32, 0x1, 0x4, 0x8, 0x81}, 0x2a, &(0x7f00000016c0)={0x5, 0xf, 0x2a, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0xd, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xb, 0x2, 0x4}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0xc, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xe, 0xf}]}, 0x8, [{0x8a, &(0x7f0000001700)=@string={0x8a, 0x3, "d600b800369ee67dbe5d52b5ebb0059204ca9b7a40523a80fb99b2eca935fef94639f5950416b4f0ee027b353e0643f930e6385c5abb9f372861d4f64a04ae49e68f106dad26ea12a100a9628e0c3c00c8c382c60f74a609fc509e7ce072d8797ad58e14d617d4642cd7f04b197623b3e239bc4b24687e3f91d1d7389c4e6f85818ce4b91f8e0037"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x411}}, {0x72, &(0x7f00000018c0)=@string={0x72, 0x3, "5465755cd22677e6f20e78d9c20eda672f2a99859f41f956381bad7a6071fa53abf83b76b94f6017d4158c3556d9c36461353232d6f5dda7922a915d271ec6c3ffd467ec5e9852cff04cf564f954cc7710498f577f3f802f5a621778c92c4038a3d6904f020feded93b10cfe9253dfab"}}, {0xa1, &(0x7f0000001940)=@string={0xa1, 0x3, "17d16c903bef7add9aa96e55b92a545b83d7e39277c41dbdc01ba8f2a27cd5615acc751664c1fa9b802de405b0f1656441d54bc3f88f1ef0715fd486da73feabd217ef1945fe3fb30f025ea7efc82cb1689e11b7cd68ce36b7fdf0bc7f695741cfbde4c58db30955d0b3f7c7d7a1760cfef7c1a2a2f8c19b130b558767d11aae8e5d718843be145d8a73893eeaf968a9457ce0cf5f4aa6fd3e463aeee896d5"}}, {0xf4, &(0x7f0000001b00)=@string={0xf4, 0x3, "b0d37463157f2524f0e2582c29eb159178f34251c419c07a9dd1c8687ec0f4821da197aeeb571fc8784b3df5d15ae9c310f5df7c1cb6eb984403ee84c412b01771bbed66b13d81b8354156fe35c9a281b58d66b3fe2e571494d584bea4f91130244c40115ff18ceceeb682575927c1faea945dd4c5549e26dbe774a1fc4e069690ff0f02ba3fa4f383658b8d8979f04cbf170e404881cd6094ee153a6223104047ce90d6f0a8fdba0398d05161bdc7f4ac4ac9da2d4f559828ea61de9d12d30fb113a2c3ccbb14a4ad6e6cd2760ec328bfbd9a41b22b6e97ff00024a0348fb6feb8987d108c132409a09d1c3111c69ad890b"}}]})
openat$cgroup_int(r1, &(0x7f0000000580)='cgroup.max.descendants\x00', 0x2, 0x0)
r7 = openat(r1, &(0x7f0000000000)='./nfsd/portlist\x00', 0x80181, 0x1aa)
write(r7, &(0x7f0000000300)='tcp 2', 0x5)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0)
write(r8, &(0x7f0000000380)='1', 0x1)

3m16.138377811s ago: executing program 33 (id=8753):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
syz_usb_connect$cdc_ecm(0x0, 0x5a, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @mcast2, 0x8}, 0x1c)
listen(r2, 0xfffffffc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x8, &(0x7f00000001c0)=[{0x8, 0x2, 0xd5, 0x9}, {0x800, 0x1, 0x0, 0x3}, {0x7, 0x9a, 0x5, 0x4}, {0x4c77, 0xa, 0x4, 0x101}, {0x7, 0x4, 0x4, 0xfffff4ae}, {0x2, 0x4, 0x5, 0x84b}, {0x9, 0x2, 0x1, 0x4}, {0xc, 0x9, 0xe, 0x7}]})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
syz_usb_connect(0x4, 0x9d9, &(0x7f0000000c80)={{0x12, 0x1, 0xc125d7d15763a14, 0x6f, 0x22, 0x36, 0x40, 0x681, 0x3c06, 0x9605, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c7, 0x3, 0xff, 0x8f, 0x30, 0x8, "", [{{0x9, 0x4, 0x88, 0x7, 0xf, 0x7b, 0x2d, 0x20, 0x3, [], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x5, 0x9, 0x0, [@generic={0x9d, 0x22, "f7e365fd1da4b11f7c884bf98e5acdc6417daf7cef13eefb1c524ddf8e78ee254392fea7163d79447558eab73158f4d572003737f345210afae0cbcaf1294c774b26d4c8d72838607c24f13a4130a629173c3c4128768cc445fe6d0eb465f4e3074cf0eaf1c1a1192aa21c6878d1e2fca3cdf8bd3101303bcac63ce04031ce44520f1f58f64a3e864266504bcd2e441d52a5ba2d915efa65799521"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0x8, 0x8, 0x7f, [@generic={0xa2, 0x3, "62826263dd2c8467ad5c4fd8f4cd8b6c0ea791b12dbd42308aec5c519156604ec00d5a67940ffe9364492d04544e28c7ee9c5bb27b8b5a62752890dcf8134fbd9b071098a8c9dc2157ba2223d184f4c531aedd97903bc4eaad87902cbbb387a47cdc7270f5bb7ce43da72e8509ef74e5b94f3cacf4390fc98f67cf6ffb89a2dc577b5c06d6309f1cfb6966ed0d53c03d4240eb150d4ebd73c123236f8c9dcf52"}, @generic={0xac, 0xb, "ee08f5b4abab964c058eab95a3738b4e0a7c3ba96157cfa105f850e549cdc6f9ef03cd3c71769311ec8d650f7036e13284a2234d9c83edf50dde3bc2ffc92d9365dc31bc156f35f646683829e807738457e56beabbd76da1a3d5dfca18761fd255b74394b124cd928f6afdf0671e0c61e44414998ab127b2ea513a84c03094188db06d3ef50b0e3c782eb5645bf7640bc9865f3033ce8d9384b619f2d75d78246b21590121e21da095e3"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x9, 0xa, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x9}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xd, 0x7, 0xc6, [@generic={0xe0, 0x22, "60689e59484ccd8eea65ed3c1abe65840022f435f9b7b9dc2d3947aa53ac8a7fd220ee8d2abca6ff51aea9988ec3e726034bc61497b7223b7a1962463e6b3924eee234627023622bcb3a8ad9c5166c99a281c16dd8e1f959c03808055a26b7e88262cc0570eb5639e10eb8b4949ea3d411aa9154565f0424fc96a4d17dc4dccef13f57b86ad98f2861673f44deb811e5b6b31ae20de4d403fbd1627fbe988626845443e1a27d9eed97bd03696b1665b4d449b0ec75b0b8d23e98d277bf7f23f847f00da05cc0030d19b038bf8d7e44132f3fb405f17bb3a29525c1ab582e"}, @generic={0x35, 0xa, "7e702bf1d799710c5202f2590624268ca2bc664d04b6c9448352e394bf463a762a9fa48be2c538838bbf8bf1a36244f6d35ebb"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x4, 0x8, 0xcd}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x8e, 0x9, 0xf, [@generic={0x26, 0xd, "5b1a713b8b9beaadc7eaef0e6ce49e5160b5627e26d558547b6791e2436587569997f4b9"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x1, 0x81, 0x23, [@generic={0xbd, 0xc, "bf104197760501be4f6d5cb665f9630ad75295710a0eec457fecc0d0becb68fb66efbc9f0a4fea21e8ae0e1901400518a7a461607278cf7e98ef70481e7e2b20e18b31cfe8d15cf991409486a3637cdda05ec0652cf6c36cf5c9b67f4891aefcbd873022565f289632ff8ad2eef9b7e60bd8ac5262ba029db64eb293298a3a67c906ae86aab214a3e98ffb6ea55d5dfb71d3e24672384cd841f58a727883437a67d558e0c8b7302b3996f29ad6ad13dbe7f9fbbeff66740c8dd855"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc9, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xfd, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x3}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x88, 0xe1, 0xd, [@generic={0xe2, 0x5, "bc33451890072a10aee2feef10411730c2f064910ac03964e71edc603f6679f390696680e7e93f18845d8632b2d27e2df38127f2430af0676ef7e14ed42236034250139ba4c72b7c92ab97b6a6b62c2f0063ec948ffff0a27a576f86409fe693f207d096449739d1a7ce31dd6b54a30fdc2dd08d8ab207b4eedffa400b27956424ce88ed486c5453c53a3e314819b0fe1a3fa9c76c8c22244c0913c0f8dd2d10004db766c9bf34428b25fffe303b996f12017cd605fc758ab269d51171a0dbcc014f07505012a74346a20b4ede6a0bbb3a70ea0576d851da8a81ed74bbe6a0a2"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0xf7, 0x80, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x6}]}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x1, 0x2, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb5}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x1, 0x6, 0x4f, [@generic={0xa7, 0xe, "1e9559a027980aaf74f7a40ab1a12666214eb473213bfd0e5bbf599ad811e8713ad491caf8e0016fe7adad994b17323008e8c76242ac16fd31f88ee3824de23c124acacb27c7e6588f121c22ef4428dc4eb0c46424aa7aca83858ba7289e5653640ddf463829fdc0da329784df901fe300d850e28effb4d8c05e57a1090bb5bb846656bc4eb50be1a46216e59e405bcfa191cf433cdad4bf3d34b87395ec78acf085fef738"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x53, 0x2, 0x7, [@generic={0xa8, 0x31, "1387e9e5bf32f54e0e01bdd59d81b630e23c1b56c9b1e99f6f600423b7be7138094dd09aafe3ec4e63c2782c4462ac64b86d5b25801c66c73ac58da837e7fc8ed49d8a93f05d69fc7f840e4d3191ff8a965d37bc8e0f285818f3cce166a362f05166afc109cff236455d0b950d49f39d14afd8292bf6afe8d6be14f763a599ab8d30e8305ddabd697cb2305ebe2e987d9c274cedcabd760647a253d341517a0854368c409608"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0x2}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x5, 0x4, 0xc2}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x40, 0x4}}]}}, {{0x9, 0x4, 0x27, 0x80, 0x6, 0xff, 0x1, 0x4c, 0x0, [], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x7, 0x80, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x2}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0xa, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xb, 0x7}, @generic={0xd1, 0x22, "6c5f156508123bbed160e499242ce7a529371641e1d0e53afd597259ce298212920321335e4e320c8e5f6f75fbbd3a27bdf81adbfed65357f6c8dd0c744131fe8ef0239754fb16750e3e5fd6c7aed064527e79d46bf1569b246c779a98b6e0d2027c4bd639f37dcbfb14cbda74d22f02c9d04f31bf7d2dbb2ea3f4fc85c786869c99a08e09c4414fe9d008da2f50e2d2e17c532797fdd699f4f648a3ae6ec88e2e17c8e8224425f7b2780a6e265b1cbf57a2d8f71df4bfb6cfb2da2f39edde5ef590d09bc37455d6b14c2f758aaeb0"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x4, 0x6, 0x7, [@generic={0x16, 0x24, "05d587a61954c9ad4b4c5515fcff603f6967a790"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xa710}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x1, 0x5, 0x6}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0x0, 0x0, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x3a, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x5}]}}]}}, {{0x9, 0x4, 0xe2, 0x5c, 0x9, 0x3, 0x0, 0x0, 0xff, [@uac_control={{0xa, 0x24, 0x1, 0xfff9, 0xa}}, @hid_hid={0x9, 0x21, 0x80, 0x9, 0x1, {0x22, 0xc9b}}], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x8, 0x3, 0xb, [@generic={0x5b, 0x22, "258593d0454f2235ead078eeb4ab1408f6f3af34f1d7d3d7b7acf296d2b3f2abde750f155418da90534a6b5cf1277e32c122964fa0208317c6a2d8efc0c04d5385224515cb31005b700d7a426745e22fc99b91df3ab62d8505"}]}}, {{0x9, 0x5, 0x4, 0x18, 0x420, 0x6, 0x6, 0xa}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x9, 0x60, 0x40}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x0, 0xbb, 0x4}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x81, 0x1, 0x7, [@generic={0x97, 0x1, "39a00ae11fe3f6544f7ea40ad466ac19417907cb075c8ff3d2a2e880778f3790366921eaaaa0d922a7d709866d89204639ab4c1a56e2e8c3c4f395b93e9d7b1ce325439107d35326ff4faac830c6aa3a4e8de4d7a3832fa378758f9053a39f89a0e87db20ff8c35b0ee39798a68f732782bf0f2474c1c1d1f73382d019189211a4534a42b34fe3bbe73a10046112d0a7e10aaa7e91"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x47, 0x7ff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x4, 0xe5, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xd5, 0x4a, 0x3f}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x5, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x7f}, @generic={0x2c, 0x11, "f7e841c62477872613ee8bc7e572575040d75d7d016b9af588abf5512d3ce0015479f4e1d509e14e67d9"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x57, 0xd, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x8}]}}]}}]}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000001680)={0xa, 0x6, 0x110, 0x32, 0x1, 0x4, 0x8, 0x81}, 0x2a, &(0x7f00000016c0)={0x5, 0xf, 0x2a, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0xd, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xb, 0x2, 0x4}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0xc, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xe, 0xf}]}, 0x8, [{0x8a, &(0x7f0000001700)=@string={0x8a, 0x3, "d600b800369ee67dbe5d52b5ebb0059204ca9b7a40523a80fb99b2eca935fef94639f5950416b4f0ee027b353e0643f930e6385c5abb9f372861d4f64a04ae49e68f106dad26ea12a100a9628e0c3c00c8c382c60f74a609fc509e7ce072d8797ad58e14d617d4642cd7f04b197623b3e239bc4b24687e3f91d1d7389c4e6f85818ce4b91f8e0037"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x411}}, {0x72, &(0x7f00000018c0)=@string={0x72, 0x3, "5465755cd22677e6f20e78d9c20eda672f2a99859f41f956381bad7a6071fa53abf83b76b94f6017d4158c3556d9c36461353232d6f5dda7922a915d271ec6c3ffd467ec5e9852cff04cf564f954cc7710498f577f3f802f5a621778c92c4038a3d6904f020feded93b10cfe9253dfab"}}, {0xa1, &(0x7f0000001940)=@string={0xa1, 0x3, "17d16c903bef7add9aa96e55b92a545b83d7e39277c41dbdc01ba8f2a27cd5615acc751664c1fa9b802de405b0f1656441d54bc3f88f1ef0715fd486da73feabd217ef1945fe3fb30f025ea7efc82cb1689e11b7cd68ce36b7fdf0bc7f695741cfbde4c58db30955d0b3f7c7d7a1760cfef7c1a2a2f8c19b130b558767d11aae8e5d718843be145d8a73893eeaf968a9457ce0cf5f4aa6fd3e463aeee896d5"}}, {0xf4, &(0x7f0000001b00)=@string={0xf4, 0x3, "b0d37463157f2524f0e2582c29eb159178f34251c419c07a9dd1c8687ec0f4821da197aeeb571fc8784b3df5d15ae9c310f5df7c1cb6eb984403ee84c412b01771bbed66b13d81b8354156fe35c9a281b58d66b3fe2e571494d584bea4f91130244c40115ff18ceceeb682575927c1faea945dd4c5549e26dbe774a1fc4e069690ff0f02ba3fa4f383658b8d8979f04cbf170e404881cd6094ee153a6223104047ce90d6f0a8fdba0398d05161bdc7f4ac4ac9da2d4f559828ea61de9d12d30fb113a2c3ccbb14a4ad6e6cd2760ec328bfbd9a41b22b6e97ff00024a0348fb6feb8987d108c132409a09d1c3111c69ad890b"}}]})
openat$cgroup_int(r1, &(0x7f0000000580)='cgroup.max.descendants\x00', 0x2, 0x0)
r7 = openat(r1, &(0x7f0000000000)='./nfsd/portlist\x00', 0x80181, 0x1aa)
write(r7, &(0x7f0000000300)='tcp 2', 0x5)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0)
write(r8, &(0x7f0000000380)='1', 0x1)

2m16.490973597s ago: executing program 0 (id=9122):
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)

2m16.237600817s ago: executing program 0 (id=9124):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}, 0x80)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

2m15.493385361s ago: executing program 0 (id=9129):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000002080)={0xa, 0x4e1f, 0x2, @rand_addr=' \x01\x00', 0xd1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="d5", 0xfd}], 0x1}}], 0x1, 0x20002845)

2m15.228385348s ago: executing program 0 (id=9132):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f00000002c0)={0x407f, 0x5, 0x3, 0xb9fe, 0x9, "ffff5300"})
getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000080), &(0x7f0000000100)=0x4)
recvmmsg(r0, &(0x7f0000007840)=[{{&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000580)=""/98, 0x62}, {&(0x7f00000006c0)=""/18, 0x12}, {&(0x7f0000000700)=""/52, 0x34}, {&(0x7f0000000880)=""/201, 0xc9}], 0x4}, 0x6}, {{&(0x7f0000000a40)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000ac0)=""/217, 0xd9}, {&(0x7f0000000bc0)=""/84, 0x54}, {&(0x7f0000000c40)=""/21, 0x15}, {&(0x7f0000000c80)=""/227, 0xe3}, {&(0x7f0000000e00)=""/220, 0xdc}, {&(0x7f0000000f00)=""/62, 0x3e}, {&(0x7f0000000f40)=""/102, 0x66}], 0x7}, 0x9}, {{&(0x7f0000002040)=@nl=@unspec, 0x80, &(0x7f00000020c0), 0x0, &(0x7f0000002100)=""/138, 0x8a}, 0xcd}, {{&(0x7f00000021c0)=@phonet, 0x80, &(0x7f0000004800)=[{&(0x7f0000002240)=""/135, 0x87}, {&(0x7f0000002300)=""/75, 0x4b}, {&(0x7f0000002380)=""/18, 0x12}, {&(0x7f00000023c0)=""/193, 0xc1}, {&(0x7f00000024c0)=""/39, 0x27}, {&(0x7f0000002500)=""/190, 0xbe}, {&(0x7f00000025c0)=""/110, 0x6e}, {&(0x7f0000002640)=""/236, 0xec}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x9, &(0x7f00000048c0)=""/252, 0xfc}, 0x101}, {{&(0x7f00000049c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004a40)=""/139, 0x8b}, {&(0x7f0000004b00)=""/218, 0xda}, {&(0x7f0000004c00)=""/157, 0x9d}, {&(0x7f0000004cc0)=""/160, 0xa0}], 0x4, &(0x7f0000004dc0)=""/190, 0xbe}, 0x2}, {{&(0x7f0000004e80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000007380)=[{&(0x7f0000004f00)=""/236, 0xec}, {&(0x7f0000005000)}, {&(0x7f0000005040)=""/168, 0xa8}, {&(0x7f0000005100)=""/173, 0xad}, {&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/110, 0x6e}, {&(0x7f0000006240)=""/35, 0x23}, {&(0x7f0000006280)=""/4096, 0x1000}, {&(0x7f0000007280)=""/211, 0xd3}], 0x9}, 0x3}, {{&(0x7f0000007440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000007600)=[{&(0x7f00000074c0)=""/117, 0x75}, {&(0x7f0000007540)=""/62, 0x3e}, {&(0x7f0000007580)=""/70, 0x46}], 0x3, &(0x7f0000007640)=""/201, 0xc9}, 0xe34}, {{0x0, 0x0, &(0x7f00000077c0)=[{&(0x7f0000007740)=""/119, 0x77}], 0x1, &(0x7f0000007800)=""/29, 0x1d}, 0xf}], 0x8, 0x40000160, &(0x7f0000007a40)={0x0, 0x3938700})
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xbfb3)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x9})
r2 = syz_open_pts(r1, 0x101000)
r3 = dup3(r2, r1, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x30, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xea}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x60}]}, @IPSET_ATTR_PROTOCOL={0xfffffffffffffdd9}]}, 0x30}, 0x1, 0x0, 0x0, 0x408e0}, 0x20000080)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

2m13.890695514s ago: executing program 0 (id=9136):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080), 0x0)
r1 = syz_io_uring_setup(0x48a4, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x2000000, 0x1010, r1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="240000007b005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)

2m13.214713131s ago: executing program 0 (id=9139):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbf5, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x2000c880)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd27, 0x1000234, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x62}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x44)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x81}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x10)
setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000200), 0x4)
fgetxattr(r3, &(0x7f0000000040)=@random={'user.', '\\\x00'}, &(0x7f0000000100)=""/109, 0x6d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='1\n', 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbf5, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x2000c880) (async)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd27, 0x1000234, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x62}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x44) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) (async)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x81}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async)
setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000200), 0x4) (async)
fgetxattr(r3, &(0x7f0000000040)=@random={'user.', '\\\x00'}, &(0x7f0000000100)=""/109, 0x6d) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) (async)
write(r4, &(0x7f0000000240)='1\n', 0x2) (async)

1m57.269150607s ago: executing program 34 (id=9139):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbf5, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x2000c880)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd27, 0x1000234, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x62}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x44)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x81}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x10)
setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000200), 0x4)
fgetxattr(r3, &(0x7f0000000040)=@random={'user.', '\\\x00'}, &(0x7f0000000100)=""/109, 0x6d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='1\n', 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbf5, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x2000c880) (async)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd27, 0x1000234, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x62}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x44) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) (async)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x81}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async)
setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000200), 0x4) (async)
fgetxattr(r3, &(0x7f0000000040)=@random={'user.', '\\\x00'}, &(0x7f0000000100)=""/109, 0x6d) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) (async)
write(r4, &(0x7f0000000240)='1\n', 0x2) (async)

1m25.084951167s ago: executing program 6 (id=9300):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x2)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x48800, 0x0)
r2 = socket$inet(0x2, 0x2, 0x73)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d80, 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x109200)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0x40044102, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x8008af26, &(0x7f0000000000))

1m24.468889561s ago: executing program 6 (id=9304):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x200006000000, 0x0, 0x0, 0xfffffffc})
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1800000030000100000000000000000008005c00", @ANYRES32=0x0, @ANYBLOB="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"], 0x18}], 0x1, 0x0, 0x0, 0x20000080}, 0x24040044)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000140)={0x7, @capture={0x1000, 0x1, {0x0, 0x2}, 0x8, 0x2}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0)
sendfile(r5, r5, 0x0, 0xa)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e24, 0x1000, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="200000000000000029000000040000000000ffff"], 0x20}, 0x880)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r7, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf, 0x6c}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2200}]}, 0x28}}, 0x20000009)

1m24.075776471s ago: executing program 6 (id=9305):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
keyctl$join(0x1, &(0x7f0000000400)={'syz', 0x3})
r0 = socket$kcm(0x21, 0x2, 0x2) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00')
utimensat(r2, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) (async)
sendto$inet6(r1, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x8, 0x0, 0x1, 0x3, 0x6, 0x0, 0x0, 0x63, 0xfd, 0x8, 0x1, 0x0, 0x3}, 0xe)
shutdown(r1, 0x1) (async)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x401, 0x800)
ioctl$BLKPG(r3, 0x1269, &(0x7f00000003c0)={0x3, 0x0, 0x98, &(0x7f0000000300)={0x4000, 0x5, 0x10}}) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async)
recvfrom$inet6(r1, 0x0, 0x31, 0x40000142, 0x0, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)

1m23.769105575s ago: executing program 6 (id=9309):
socket$inet6(0xa, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x4)
socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x1, 0x3, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x22, {0x0, 0x0, 0x0, 0x4, 0x5}})
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000100)="ff7f0000002831b8869da80cbf00000027323b47259357fdd9eeb8e97eab560211b81600c0810003000000000000001e00ca0092cb25f50ec51be69264c5d713f093150d336f93bf5c9ccd9b344c4f3c705f1868ec667c6b6f78bf022f823b13a15e4dc79718343ba3a34db4697766c68f60f0680039ff40fb03520a0f97dc08efe8094c1dda1bf8fb4f833a88f441563e9781a3637379fe06ba4192ccc57cc0ea95ac175f7c53a1b274a8", 0xffffffffffffffd0}], 0x1)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8=r2], 0x30}], 0x1}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
syz_usb_control_io$hid(r10, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d704046"], 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x4008804)
syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

1m21.278431837s ago: executing program 6 (id=9317):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x14, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x20000080)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (fail_nth: 12)

1m20.727632688s ago: executing program 6 (id=9320):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x264b, 0x3475, 0x10ae50, 0x5, 0x1a, "9f940b3491d052d160d086ff229ac6de50806c"})
mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}})

1m5.324830669s ago: executing program 35 (id=9320):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x264b, 0x3475, 0x10ae50, 0x5, 0x1a, "9f940b3491d052d160d086ff229ac6de50806c"})
mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}})

47.297592466s ago: executing program 3 (id=9457):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

47.050745514s ago: executing program 3 (id=9458):
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x4)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x40090)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000140)={0x2, 'ipvlan1\x00', {0xfd}})
prctl$PR_MCE_KILL(0x21, 0x1, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'})
r3 = fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000000c0)={0x0, 0xf4240, 0x7, {0x0, 0x6}})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1000905"], 0x0)
syz_usb_connect$uac3(0x4, 0xfa, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x1ee, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe8, 0x3, 0x1, 0x5, 0x10, 0x1, {0x8, 0xb, 0x2, 0x1, 0x1, 0x24, 0x30, 0xe5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x5f, 0x8}, [@feature_unit={0x19, 0x24, 0x7, 0x4, 0x6, [0x0, 0x10, 0x10, 0x0, 0x6]}, @mixer_unit={0x8, 0x24, 0x5, 0x4, 0xf8, "e875ad"}, @extension_unit={0x19, 0x24, 0xa, 0x2, 0x2, [0x1, 0x0, 0x3, 0x0, 0x0]}, @mixer_unit={0x7, 0x24, 0x5, 0x3, 0x7, "d792"}, @input_terminal={0x14, 0x24, 0x2, 0x4, 0x405, 0x5, 0x4, 0x5, 0x1, 0x5, 0x1, 0x8000}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0xfff, 0xfff7, 0x77205e99cdfc17a1, 0x0, 0x9, 0x5, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x5, 0xda, {0xa, 0x25, 0x25, 0x1, 0x47, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0xff, "0a1167ea34fb"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x2, 0xf5, {0xa, 0x25, 0x25, 0x99, 0x3, 0x6}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x200, 0x9, 0x9b, 0x1, 0x20, 0x80}, 0x75, &(0x7f00000003c0)={0x5, 0xf, 0x75, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x27, "c9bcdea3e20ec1e27e255ac11e9a9a16"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0x5b, 0x5}, @generic={0x48, 0x10, 0xb, "624d2f0f7be6ad34e98e47da538cd11ebde38449a21df991f1620af25c3779910e3bc4f92e948f6eeb4c2dbfae3d5262c1b82ad1963bc8deea10ad0cf2c3565898256973d1"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x85, 0x3d, 0xf}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x80a}}, {0x9d, &(0x7f0000000480)=@string={0x9d, 0x3, "a5161277c29ddaf93ad68aff0c3b5cbc981d8491877720562fe4015f78b7fb8ff966c25961b389978971c2dc0f390ec6d1034dbd5db2e9d162b81c7e34081eb242bf959669300b2ce38f459924b9f5cba4762cfc555f6e8309814e671434d9a2f7c379c13a01ab588d9c3b56bef6216367c6a3048e16c6c621c976e34012158f23356d3fb4e92c1a1a1d42282c9215fb50114e207dbdd9546637a1"}}]})
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040604ff412d04"], 0x7)
r5 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000000c0)=ANY=[], 0x310)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000580)={0x1, [0x9, 0x7, 0xd8], [{0x7, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x6, 0xd, 0x1, 0x1}, {0x8, 0x37, 0x1, 0x0, 0x1}, {0x9, 0x5, 0x0, 0x1, 0x1, 0x1}, {0x1000, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1, 0x1}, {0x40, 0x5}, {0x4, 0x5, 0x1, 0x0, 0x1}, {0x5, 0x43ff, 0x0, 0x1, 0x0, 0x1}, {0x8001, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x5, 0x1, 0x1, 0x1, 0x1}], 0x1})

45.668172759s ago: executing program 3 (id=9467):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x6, 0x2000027, 0x20000000, 0x1}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1)
sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x408c0)

45.366802072s ago: executing program 3 (id=9471):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000b00), 0x802, 0x0)
pread64(r0, 0x0, 0x0, 0x100000001)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x1a1046, 0x0)
mount$bpf(0x200000000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x9890c6, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x880009, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @empty}, 0x10, 0x0}, 0x0)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x7}, 0x4)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000002020, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
keyctl$search(0x16, 0x0, &(0x7f0000002900)='trusted\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x2)

44.977602317s ago: executing program 3 (id=9476):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

43.422811916s ago: executing program 3 (id=9482):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='n', 0x1)
ioctl$SNDCTL_TMR_STOP(r0, 0x5403)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000040)=0x80020004, 0x4)
write(r2, &(0x7f0000000200)='base=0x20000000 size=0x20', 0x19)
listen(r1, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000300)='127.0.0.1:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=20000,proto=tcp,vers=4.1,noresvport\x00'])

42.874514801s ago: executing program 36 (id=9482):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='n', 0x1)
ioctl$SNDCTL_TMR_STOP(r0, 0x5403)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000040)=0x80020004, 0x4)
write(r2, &(0x7f0000000200)='base=0x20000000 size=0x20', 0x19)
listen(r1, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000300)='127.0.0.1:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=20000,proto=tcp,vers=4.1,noresvport\x00'])

39.554491789s ago: executing program 5 (id=9493):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00', 0x8000})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0xf)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = getpgid(0x0)
fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r5})
sendmmsg$unix(r3, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r6 = socket$inet6(0xa, 0x80003, 0x6)
setsockopt$inet6_buf(r6, 0x29, 0x32, &(0x7f0000001100)="3814da1ff9ba5b40fbd82f2348e4025c179d045a", 0x14)
connect$inet6(r6, &(0x7f00000011c0)={0xa, 0x4e20, 0x7, @private1}, 0x1c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0xa4}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a01000000000000000000020000000900010073797a30000000000900020073797a30000000000800034000000007"], 0x34}}, 0x0)
writev(r0, &(0x7f0000002300)=[{&(0x7f0000000440)="2e9b3d0007e03dd6510000000000000000", 0x11}, {&(0x7f0000000480)="1100f8aea2895e229a8a6959c6434bdcef73", 0x12}], 0x2)

38.330830825s ago: executing program 5 (id=9494):
file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x80011133, 0xfff, 0x0, 0x7ffe, 0x10010000}, 0x2a, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073", @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000006c0)={0x8, 0x120, 0xfa00, {0x4, {0x7, 0x3, "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", 0x3, 0x9, 0x2, 0x6, 0x9, 0x77, 0x1b, 0x1}}}, 0x128)

37.431403533s ago: executing program 5 (id=9496):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_open_dev$video4linux(&(0x7f0000000180), 0x0, 0x101080)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000000)={0x0, 0x4, 0x1008, 0x1})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000145de55dfaa6de952053c3c7de27846e1b76bc9aaecc63936bfa5bf2f3c2874d597dc16c5b11b3ef223de295741600ef38675f908b0867522d0e1ad15035656a3d5353360a966b7432fa2e4232bc05796bacd7f753dd37603ecd88c9d4d98274b23eabf5f6cbc248857fa7ceb183e48da2887120ba1154f3b060ba4086f09d3742"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000800)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824deae536004ef754508203beff8855c6b6a67fec6ffd01b476d7d678d7e527f0efab0e49cf13c7964c56030cecf0c61cc29f798322b17552af7522decefb792af413e773121ecb637bc99782734743cf5643f881cb0f866403cf6e90bd8985622eb346018adadeb1169a7a356f4e9fdddecaeff1889fb1fdb4075e6ed7ab7db2ca0a32f1da3a31bc59401857eedea36439b79359e420f8ee9fdf8f3953ee14cb69da21774b1052d881965df53cecdc05a4fd23fd858302f03394967282bd960cfb4d975"], 0x36)
nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0))
syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB="b00000000800001000000002008000"/30], 0x1e)
nanosleep(&(0x7f00000005c0), &(0x7f0000000640))
syz_80211_inject_frame(&(0x7f0000000680)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
mkdir(&(0x7f0000000100)='./dbg\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='nodev\x00', &(0x7f0000000300)='./dbg\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dbg/ieee80211/phy1/netdev:wlan1/beacon_loss\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='1', 0x1)

35.985750322s ago: executing program 5 (id=9501):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x40)
write(r0, &(0x7f0000000000)="4734c489d0358a0d3230303030303030303020302030985b77b7cc284f7eaec4993cce66a94a408d2457c668ef5fec3c2b63f58f684ce22ec6cd44eca1cbb20f0d9f579963ea5275cb8bd0b1", 0x4c)
r1 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x40045731, 0x0)
r2 = syz_clone(0x0, &(0x7f0000000100)="6cb467874e933bbad34ed4da0b905f0a2653d683e4", 0x15, &(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380)="f6312e51a6123ca6502e929f6972113e7c153fa007612e5c3d85d81b6c7aa9fd6f53bca7c253aad43bb85ecb13a6")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x12b0, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x14}, [@nested={0x129c, 0x96, 0x0, 0x1, [@generic="ea95b2c9c316e3dd8f9ca314759be17864684f775f3c2a799c701ab055534d63ea075e589b47987a38e2cb49518de3792d322a4d01bc0f5d6bcd8ca17ae0204843d8aa05b7acdd0fca5e31be126839febba4edeac4df3278", @generic="ddc53213c73ed0f7317d4df8aa2635493175ffeff243825fbc2f7324b060b83c161e55375a1efbedb0ed9a8283e18a47e671dc035970a3be6f62f436058e6704468600192a9a249b9c9b99c91b7b351126b11f3909a2ccbd2991d815b2bc539380221593147e505f60d2eeb7d04f823667766a41bab638c4cfa45b481971c0d0fafc7e8646775cf3176c014931fcf8e37d3ff412e5db37802d27fe7b27fa7ce2c29db80febd781974e61d55c4768a8311767a059ab7780f45e6e8e097f4e96ae3b6c6ba8a0a76af9a12409311368e948b91e93a11665ff6be990a4276ceaad213e4ba8b23148276f980a971b708f7d29e9c07fc1fd53ead787550a4d24db3e69c8009e53866d00863a6702bec14278fd35eb469a04d541f315be213ad7c824f987d9cc6bd58f06fcbed2be6d46bae28c2a32491c6ff50aa3e91f5e2c15fca3ffb962bec58be4e9446c0c8301a6d5b5bbb204ce4694b7c2f2fa4370f59264cd10257713fca761d0fdd5b6f4180e83f9924140", @generic="ab4b5cfd40d14c46067a30babcd38c870d050d15aa492fc7c0196b1b456d561ece5aa661b096d802bfa0b756863556cebd605b663f29dcea42935b60f3de50d659e3f8ac549800b9f33ce2d1b2ff984b8cac603216acb4cae84f68c4d7fa502a23be1a60c999a851e76a3462a302e922210c4f9df3c332bb8c3504a970f4a90141e171212d6537b4dfd850426277a770ce720f79917692cd0cc967d22d9a1998c6632827014335fed6af6998013cf605f17330b8b69ed3cae25200377580", @nested={0x8, 0xd0, 0x0, 0x1, [@nested={0x4, 0x15a}]}, @generic="3dbf10a1d6a7b7d5327e336ba3177e895dff790f4cc97e9944c19855629edea1fda92b2ff3740b642aae90a8e6b7a72e7e624e0474ecddfc41c3eb0383352ab0af9b6fd986906406afcb5519f6a94a17d74a7d260fca6af0f4c75574a9e7f17a6e78262b6c72f8467bc17d69c51fabe4ed6a9a53c8176872fb69ded2659d34d417ff85d03248a1be000781108a2a08044fe710c34a2769739065d544f21184c9a061a4c7a1886d775f65f3816d123f88a721c803d1d630029baabed45f826e61f3348e46ca16c31de24a6214f00db3543ca0e4b8ce5ea4158607f90a49774e73967f82507503a70f1740ed382c67c2a63e53f3844ebe6f33906b44004cec1bb69ccc39fe1a75b9c9c772982cfb83b8d2798d966975ce530c6e333827a886e93089f54b06bb6dfc9546f88c81a4cb62b59b4dd44eee0ed4d4fdd2ff77131a194b3068847011c389d1c073a1116c1e83f87dcd125b61e89f32d96233567a2acef072eaaa96b80d8ca8a7bfe20de06ee14036fbae2bd4dc66a148bca3ef8af284e398cd42ea962a8e10e3c9dbed4bf613c7a224c8eca360e2bb56c76aaa388c6e3d022597795c4c63607981d806fda8b0589483b4a5ff1609327642e49bd05ee83d21b2b8e373615459ec5b2a80d1b36c46e8493fdb6ba6552ce6e3e9b59b5d0e398ea4a3a37910d7a14a724e930e1eb8428954a1bc283e27a197f00d580dbb6dbf65101261cb08a0fc5ec3b4616f42f6bfa0bc2a66131719b88329315eb7e06cfc3f851097104a840fbf73027ebb5f49db2bcc654098203a0dbbbd0b8828069c608a5241ec5d720767163e7e343c438290b672229ec39a611f70aadbc9694ab9c0b78e6fe80218bed2b00cced66df8b42bf0ecf9f66036a7d06a401545abbf10dfea612ba1a0e040914fd86489a632200345e7d1b6d67327cfd3cecd5f2376a7c26312fd4f7d07669187abe1615383a44588804ca643c63c5728cff682edee231ed1bbae2017f75d84f4f4aba9ba7b42d5a7bc0680fbdcd34fc2ca2e8f1d068784466e1972240c64553467f374dfa3615d219e68edcae383670720b640a593e859a42d1c424595b587068a717a6b4d4414e02d14e337fc0b3ca61c9713e3dea3eaf32e02f57dd635fb03e53e216b6a34a99d233ddef6b4600a16b87d4bf50ad3df5bad1ddb44402f514da9f638efebacdbb37ed790aacca598d25b3fca2057f91e5cf0703d137d64289208d6d74c211c324e4ef8e4b756252d05e834775c56293d213bf2b5635dcbedc8f7c2ba110e74ac2cbfb019af74b53e634f4f77a4c07e516bc958e37a6045e74374e0397ea66e2590756d5f381c393ff4ba015b8c2273162f321604b4cf6fe4170adcd7f1ce2f59197fe783fc7e98a54097e4369c3e5fdba2e9a69cab8aecb7199eb77a8630cd29a80e5bbdd206c7bb1d9e112c014ee16482b918c43a2e44fde9df26b4e855eb7cdc58d21c594ec82cc9eb2541d8538a65c7991188448b55f797d19c68c64f258c33330a6d9cd2031bdeed9ad97e7aa4c34d41c7b6efcd56ab7c644c8c69ae4d5c34fc6945196be1c6415a0203f45daa12ebc5dfa2994bc9045b86bcaf0c171699da875684542c36e751c3668eb8b91d5cb85fe6092f3b65e4a00767efd6a5315409867c8bd59d6a87abd47feac0ad6efefe6eab0d8cb7dccc7de2838bba265035c38e681c7ddb80b5911f3d4984386726b3005e6f77f6eeea4cc3906e53404e63022929773b5b9fd9242c50889601ae1aba442187633d0fe87da5208a68bd42a4c274a07d10d35abf86e7fedbf02df3303ba65ed8c538984e66fe0065afa5936ae4cf5f5c8a76866cccdf6214a20b73bd388b79ea13b6d2bc217594dfbd1a283221cd1a0d6418db18c2c661ba6f4ed36bfb4da52e7a00273783d2627a7de0d7c662b52f929a72345dcc33a4f1205107f28a513eafdbcff3e851b3d56d5138728b3f00a9179ea4876f20f29a9f8db0010ac8dd7cd35b8a283acc90e4d2f8ec62bb7ff53ddcbd90467b9d1e525cfaa9858c022662c0cb05efb830a10c6fd66d88227cd5ff56da324fae27bcaca4e3b445ad2534cb7b99e20313be67f6896ba06ab674ace416c69d24f4d3803aedc57d7e6f9ff5de8cd4074968d0e7e662960aaddbd96b5ed0fc197c7237cd1cc54be60fae6e1a571ade55ba9d3366207c815f5284a6a90596f5fe788d0968598c8723bcc39cfbd3142bfa5a9d77a9b754e3d2658d3c1f0e7668ac5b135405ab311e1cf6cb1cc869c69750d0f5b77a40e7eb3c787c79560a773542bb45d694fe63c85e445a7f7a7969c0de701d3df2e78d460ccee34b5d6d97fda3fcbdd376f5adc0dc9d39245188eea2f49c1f41bd5b60eeb23d353dd34a19a55ea507276769624c9db0b0fc47ac2caa133bc3e0e9abbc0a4806b9896c6b7b2cadcc301332a500cc807f74e85c7898a2a336ab35e36bb9bbfa4e1f357bb820a8d0c955d624f5ae4289fc22155bb514522b81c5fc3a701193f7d287f61b81b42a3f8ef43c50d1a70f0509ab4a8578ea88d8e5fa55bb59d7eb9c1cd23cd637d5f55f0b4cbc71b0a4b5e985068404187d8de4e9c5519ad7adcdd586bfedc5720e70cbd37fcac7314e5591ed1fd15da672b37795d9b8759014ee60c1b840bc467999f10f56dcb5553114de6db422d82fcfb0ce912243d7f9ae095cc82829dfd704df474a3dfd9f078a99bac9066fc447814ed0601e326856b3c8e90ebf063f5eec077e0d5fe5a377caaec21e3883e201c51acd9628d98ae1e742246312652bd9469fde7007f785dacb0e113a900ac71b474b1f951de4e89ff6393f0cbe759173173d2913569dcf82f969bd0516fdb24e13aad10a95e5baf7ee9ba5447c18523772a498a71fe34f966bba1984d4ae58dc4db91af8bf9549c0a8149827868149dc531cd8870db7015f3c8b304a41060852d0b7f972c9b4b3fa1b451f9ffab2691bde1ab1d9bd468b879c2a4b4426b4cb524715ba34a466b129c859036cc68a302ea28c30eacca6d53adcfbfd0f30d398d625cf548f43bcfc32d7906763145d286e24ce295b9a8a9c6481d1c5206524fdf402fe3ae5c1e6b5f4ea5dfe4705257d3ab02daae3b424de9974d0beb42b887005f53cd773c4d9268a6207273e988e8e5a3707d6126dbdd8edaa45877ee38ddf949a2510fcadfade1321d7dcf585ed785f19eb48dc6993da9660d3d778310ffd80160bda495514f83071aca7f342e948cbf47250d832fc4f1d448c4c5541c4c57fe286e05c87088e0ba1b4c0d30d411ad408fa854a0bf13a4a8d28930d0fe2f9e27ff65283bcf022bb1b37d9507fbdbf28fba1804e48edaa623da44242b455677d6d0a9c77d5f7b79c1b93fdd33b4136807d86a4ae71f4385839cd63afb64c031bb77b712a3f8700ac257817d04b060a6ecc84daa04cb46ca1e7c0166de81876a5fc09b8eeac34624a315658840d2b960c64ced2baaf891804497b4a1e1963ccf0ee27c3839c29b4f387d59177f5e7cee99fe74c2d50792e579f4174db6170bd5e0a0598f85544b786f7070eb0a8c264e474e16f4dfa4d0269acdba0e3644a35f9ade94b660fd1e98d5e49e2967f706dea8894183a2ff88bc3df33cadf7625eb0de5c10879b1bcde366068f05ebb6c9d0c1fc1f6e8530de35a1ab2ee51ded55c61202890a22ff4913183cc355182a1561020a809a9218c731c25d93cf04d310cd2d3ccac163303e598fee2e8bf5b078dda2205b1bb5a248e22573418d181941d8339977e6344bab5e06cd2f4e930ff2956378f027fe141e73d3856c359d75459db26c5f7a35400af88e60760111f523455c0aee2753538bbfe757d9b7e39d97edd221e03762161b3e05d4de711a849926f7c1f128f2a716491ee85e4c14a8dbef3b9f37790ea4cac05e807a5883889dfe22d34603283f2a83957bc2774d4a5b667e2afc63134b041ecc6aa22a609e285e62757cd008aee6a5e5d1cfe0d1fef7663265f08dd135582edca0672626d04802214bbd4763689aa887ce7e7d3eb9a0138312fbda4e332200431f7a8743f5634764c6805f936098af2055a45666180226c1cfbf25ebd1abde4c9cccc7fda96fc004423a4df12822129254a38298320876f61036239c4e9302fd6170725139c68267dbfe28a557f044209ffdf04cc2ae2a84c8a13bf6f04fd037411a74216967c547da7144091fe63ed2c294a156787d0a15f5c25b76decd5d7927250d7bf6f59fb64c6cd746b5ab9edadc0fd9d5dac6449eaee4a52172a1e8a0a05552fc855fb8a789394c34557ee93c6ff748da1ae2edbebe5220d66e53dda8faf41359f6ab21b36b56a76bb4cb48b6711c83c0ad6d3730eeadb6a2a3fe1f233ef93f3f5edd9154b738d585742ad222f3fe1d4d22a628a27acb429baee10a1908a978f96507e7619a17db8f2e59bccdfd2da0dbe754fe25f98cf14ca2096e83ce7f1c4d7cf6aaa003535215749dd9c1893ab43a5c6a3e1c14d9d569cf1b9819215a9f396202ca73057ebb546a7434ae2c569e5fa70fe894e0d62127ee7b1880e3e5162a5233a02515634344be22122dcb102f4732269502129bd4743779761d014e8a51df562f2a6101880dcfb0e2c0caa44d26bddf29393e329122e203a26bfa2aa2e9d87029cd8ec6d2b93ff6756e0cd5f2c84213121506f37e8c4f4dfd59b271094dfd603ef8acd5b584522e4b2572b2d7a0f1e48d43a392b8bd76e2c12d94f2271859c454f93207905db8ed0cf7717b0de81b3e19209c20477a503489629d4c81a5db20d90bf88df371c6327675eb7fe6c354cb76125e0d2b16933d162770279e4f0435b76392d985902357ef4053af511b44d33910908124977d937a8a38bf6194825e8b89d95c3d3e0467a356979e9958d97585ed7eefccee866ac75418b3aa83c2fe64bf15307991b09d9b6e354a5b3e2c78f57fd43b5f24e08c7eaefa931dd8b6f22ae74c608d0ca64a0bdac083e6bc6a465c3f50949dd690c2be54413cf576ed4037053766d7f91336344259fa677587f2f4f27ebabdd309102dc68870f75c30076aec864b0c8e727e20bfee53c781cb077634caf85c8441af97624a802edea691aad9a07ad97e5915bdad3d6ed801eeae62f3edd729130fa18dad5cd4778337c3e5a269d8649cf93970f959e616ac88c8df875e295451d593db7179fed9ed7e767ee1690578dfe1ebf3973403e84bac3b769601497c398e328b2e3992eeaff8d637e049760698b24fc66e7855fc943abb0106551bf7ec2f0e80abf01097fe50c0e72ff54a7eeb483338c481c98f81d8b1146e3c068d2b9b2f2159ed5187c834c71908c32650c3b2ca5e07e9aedd6a32e51e4fb111ca4c183e633d255fbd58cf24b961be1bf8f85ad570dabadf9cac86d5d527eb688ec6642bb718377014c9a938280a65c20f7c052b3df8d6a7c82972c5197d786acf3407e89b220e68a596d7ea21e73642f61c353470620697a6dcaddfdad90c419dbb820b71a7d7d048b072187bf1bab0906919750f9a734facb9a649e8eca5d854a3eae683236a5324140cc7b18c6d03adb68010c95e2451afcbc1fbba127421b2efc2b30988896b2c421ff134a89da1a735169b39fc99377af9de0206c41090f056dd4ba263aaf9fbd7b513b6f984489dce2ea5847c2be6d3ecb9d6d3453d106102285e6aa8ec200893c78024b737c1a6b0737a6f74f93e6ccc9b6dd7b989e7cdce673d4496b74b335fc8ce7ee7abfe5fceb3bb94fadbcea896ce550228518afa7f631229999e55636f9aeb84ea5854fa4f53ff99ec5282be413", @typed={0x8, 0x113, 0x0, 0x0, @pid=r2}]}]}, 0x12b0}, 0x1, 0x0, 0x0, 0x24841}, 0x4840)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, r3, 0x1, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x800064}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9e97}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x50}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0)

35.003894926s ago: executing program 5 (id=9505):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="25790952e1d7e0a587", 0x9}], 0x1}, 0x4004)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/53, 0x35}, {0x0}], 0x2)

31.217206673s ago: executing program 5 (id=9512):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x6)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r0, 0x1261, 0x0)

30.5759999s ago: executing program 37 (id=9512):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x6)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r0, 0x1261, 0x0)

9.40236086s ago: executing program 2 (id=9557):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000080)='ocfs2_dlmfs\x00', 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x880)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a030000000000000000"], 0x34}}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140), 0x8)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r3, 0x0, 0x0)
fchdir(r5)
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r6, &(0x7f0000000340)='./file0\x00', 0x0)

7.926096591s ago: executing program 2 (id=9559):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1\x00', <r5=>0x0})
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, 0x0, 0x0)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)

6.60677305s ago: executing program 2 (id=9560):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c)
shutdown(r0, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x2, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x4, 0x7, 0x3c5b, 0xffffff7f, 0x24, 0xd, 0xe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x48, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x80008071, 0x7, 0x9, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x0, 0xffff, 0x3, 0x5, 0x2, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x4, 0xc8, 0xf9, 0xe, 0x2c0, 0x7, 0x209, 0xfffffffc, 0x3, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x1, 0x9, 0x6, 0x8000047, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x24f, 0x42, 0x3], [0x10b, 0x408, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3, 0x2, 0xe, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0x4b2760ed, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0xa2, 0x12b, 0x20, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x0, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x1, 0x93a, 0x5, 0x6, 0x1, 0x8, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x4, 0x101, 0x10000, 0x2000001, 0x7fff, 0x3f8, 0xa620, 0x2, 0x5, 0x201, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xfffffffd, 0x2, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x6b, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x9, 0x5, 0x80010005, 0x8, 0x9, 0x3, 0xf40, 0x400007, 0x1, 0x6c1b, 0x2, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff34c1, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

6.394500062s ago: executing program 2 (id=9561):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000400)={0x0, 0x10000}, &(0x7f0000000440)=0x8)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
r1 = userfaultfd(0x80001)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r2, r2, 0x0, 0x4)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x2)
signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r3 = gettid()
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x4, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

4.972796686s ago: executing program 2 (id=9562):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4048044)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=<r5=>0xffffffffffffffff)
ioctl$MEDIA_REQUEST_IOC_REINIT(r5, 0x7c81, 0x0)

4.422316625s ago: executing program 7 (id=9563):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0x7)

3.531922875s ago: executing program 7 (id=9564):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r0, r0, 0x0, 0x4)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x2)

3.52797693s ago: executing program 2 (id=9565):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x810, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7fff, 0x25, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x42, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0011280000"], 0x0, 0x0, 0x0, 0x0}, 0x0)

3.393688786s ago: executing program 7 (id=9566):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x10, 0x1, 0x2, 0x4, {{0xd, 0x4, 0x3, 0x4, 0x34, 0x65, 0x0, 0x1, 0x4, 0x0, @empty, @rand_addr=0x640100ff, {[@generic={0x83, 0x2}, @rr={0x7, 0x3, 0x84}, @ssrr={0x89, 0xb, 0xe6, [@remote, @local]}, @cipso={0x86, 0x8, 0x1, [{0x4, 0x2}]}, @rr={0x7, 0x7, 0x91, [@loopback]}, @end]}}}}})
r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x121c02, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x40, 0x1, 0x2, 0x9}]})
openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)

2.134702368s ago: executing program 7 (id=9567):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
close(r2)
listen(0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000680)='dummy_udc.0\n', 0xc)

901.204052ms ago: executing program 7 (id=9568):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x22a00, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x24, r3, 0x200, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0xa000)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff)
socket$inet6(0xa, 0x80002, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0)
write(r4, &(0x7f0000001500)='1\n', 0x2)

0s ago: executing program 7 (id=9569):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000040000100000000000000000001"], 0x28}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

9.184332][ T5727] usb 6-1: new low-speed USB device number 18 using dummy_hcd
[ 1949.205810][ T5727] usb 6-1: device descriptor read/8, error -71
[ 1949.424795][ T8845] team0 (unregistering): Port device team_slave_1 removed
[ 1949.464114][ T5727] usb 6-1: new low-speed USB device number 19 using dummy_hcd
[ 1949.490310][ T8845] team0 (unregistering): Port device team_slave_0 removed
[ 1949.492669][ T5727] usb 6-1: device descriptor read/8, error -71
[ 1949.594374][ T5727] usb usb6-port1: unable to enumerate USB device
[ 1950.255690][T31998] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1950.484326][T31998] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1950.503971][T31998] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1950.514708][T31108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1950.659781][T31108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1950.679611][T31108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1950.702837][T31108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1950.796077][T31108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1950.816179][T31998] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1950.865215][T31998] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1951.446410][T31998] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1951.469763][T31998] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1951.644905][T31998] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1952.385790][T31998] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1952.495061][T31998] 8021q: adding VLAN 0 to HW filter on device team0
[ 1952.702252][ T9989] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1952.702420][ T9989] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1952.705519][ T9989] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1952.705685][ T9989] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1952.864139][T32218] netlink: 168 bytes leftover after parsing attributes in process `syz.5.9186'.
[ 1952.880571][T32218] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9186'.
[ 1953.070483][ T8845] IPVS: stop unused estimator thread 0...
[ 1953.162111][T25853] Bluetooth: hci4: command tx timeout
[ 1953.203206][T32223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9187'.
[ 1954.423234][T32183] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1954.423697][T32183] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1954.425734][T32183] bridge_slave_0: entered allmulticast mode
[ 1954.443122][T32183] bridge_slave_0: entered promiscuous mode
[ 1954.465372][T32183] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1954.470350][T32183] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1954.470711][T32183] bridge_slave_1: entered allmulticast mode
[ 1954.507191][T32183] bridge_slave_1: entered promiscuous mode
[ 1954.763119][T32183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1954.786874][T32183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1954.795104][T31998] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1954.891438][T32265] FAULT_INJECTION: forcing a failure.
[ 1954.891438][T32265] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1954.891480][T32265] CPU: 0 UID: 0 PID: 32265 Comm: syz.3.9194 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1954.891511][T32265] Tainted: [L]=SOFTLOCKUP
[ 1954.891519][T32265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1954.891533][T32265] Call Trace:
[ 1954.891543][T32265]  <TASK>
[ 1954.891552][T32265]  dump_stack_lvl+0xe8/0x150
[ 1954.891586][T32265]  should_fail_ex+0x467/0x600
[ 1954.891621][T32265]  _copy_from_user+0x2d/0xb0
[ 1954.891645][T32265]  get_user_ifreq+0x6b/0x180
[ 1954.891671][T32265]  inet_ioctl+0x3ec/0x560
[ 1954.891704][T32265]  ? __pfx_inet_ioctl+0x10/0x10
[ 1954.891732][T32265]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1954.891798][T32265]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1954.891844][T32265]  sock_do_ioctl+0x101/0x320
[ 1954.891869][T32265]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1954.891894][T32265]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1954.891925][T32265]  sock_ioctl+0x57d/0x7f0
[ 1954.891949][T32265]  ? __pfx_sock_ioctl+0x10/0x10
[ 1954.891974][T32265]  ? __fget_files+0x3a8/0x420
[ 1954.891994][T32265]  ? __fget_files+0x2a/0x420
[ 1954.892036][T32265]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1954.892072][T32265]  ? __pfx_sock_ioctl+0x10/0x10
[ 1954.892094][T32265]  __se_sys_ioctl+0xff/0x170
[ 1954.892125][T32265]  do_syscall_64+0x17b/0x530
[ 1954.892148][T32265]  ? irqentry_exit+0x10f/0x8f0
[ 1954.892168][T32265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1954.892191][T32265]  ? clear_bhb_loop+0x40/0x90
[ 1954.892228][T32265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1954.892249][T32265] RIP: 0033:0x7f53d1edde99
[ 1954.892268][T32265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1954.892286][T32265] RSP: 002b:00007f53d0136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1954.892307][T32265] RAX: ffffffffffffffda RBX: 00007f53d2165fa0 RCX: 00007f53d1edde99
[ 1954.892323][T32265] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000003
[ 1954.892350][T32265] RBP: 00007f53d0136090 R08: 0000000000000000 R09: 0000000000000000
[ 1954.892363][T32265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1954.892376][T32265] R13: 00007f53d2166038 R14: 00007f53d2165fa0 R15: 00007fffecb3a538
[ 1954.892408][T32265]  </TASK>
[ 1955.241528][T25853] Bluetooth: hci4: command tx timeout
[ 1955.292621][T32183] team0: Port device team_slave_0 added
[ 1955.321498][T32183] team0: Port device team_slave_1 added
[ 1955.437234][T32183] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1955.437248][T32183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1955.437271][T32183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1955.492695][T32183] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1955.492712][T32183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1955.492740][T32183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1955.929373][T32183] hsr_slave_0: entered promiscuous mode
[ 1955.938838][T32183] hsr_slave_1: entered promiscuous mode
[ 1955.945131][T32183] debugfs: 'hsr0' already exists in 'hsr'
[ 1955.945187][T32183] Cannot create hsr debugfs directory
[ 1956.229119][T31998] veth0_vlan: entered promiscuous mode
[ 1956.229983][T26208] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1956.390416][T31998] veth1_vlan: entered promiscuous mode
[ 1956.430007][T26208] usb 4-1: Using ep0 maxpacket: 32
[ 1956.432901][T27412] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1956.436175][T26208] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[ 1956.436199][T26208] usb 4-1: config 0 has no interface number 0
[ 1956.436239][T26208] usb 4-1: config 0 interface 184 has no altsetting 0
[ 1956.497251][T26208] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1956.497285][T26208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1956.497306][T26208] usb 4-1: Product: syz
[ 1956.497322][T26208] usb 4-1: Manufacturer: syz
[ 1956.497337][T26208] usb 4-1: SerialNumber: syz
[ 1956.563625][T26208] usb 4-1: config 0 descriptor??
[ 1956.624817][T27412] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[ 1956.624851][T27412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1956.652286][T27412] usb 6-1: config 0 descriptor??
[ 1956.676023][T27412] gspca_main: sunplus-2.14.0 probing 055f:c420
[ 1956.897313][T27412] gspca_sunplus: reg_w_riv err -71
[ 1956.897406][T27412] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[ 1956.939017][T27412] usb 6-1: USB disconnect, device number 20
[ 1956.988956][T31998] veth0_macvtap: entered promiscuous mode
[ 1957.042491][T31998] veth1_macvtap: entered promiscuous mode
[ 1957.113451][T31998] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1957.144204][T31998] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1957.199792][T11512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1957.205183][T11512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1957.262345][T11512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1957.267916][T11512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1957.334167][T25853] Bluetooth: hci4: command tx timeout
[ 1957.679056][T26208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61
[ 1957.679086][T26208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1957.888538][T26208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1957.888571][T26208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[ 1957.888592][T26208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1957.888612][T26208] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[ 1957.898439][T26208] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61
[ 1959.398149][T31108] Bluetooth: hci4: command tx timeout
[ 1959.723101][ T5704] usb 4-1: USB disconnect, device number 11
[ 1960.124481][T26251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1960.124505][T26251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1960.124623][T32183] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1960.211873][T32183] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1960.233738][T32183] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1960.293144][T32183] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1960.321948][T32183] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1960.410320][T32183] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1960.426742][T32183] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1960.451280][ T5768] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1960.564638][T32183] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1960.594097][T25829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1960.594119][T25829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1960.600094][ T5768] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1960.600125][ T5768] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1960.600154][ T5768] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1960.600183][ T5768] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[ 1960.600199][ T5768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1960.675734][ T5768] usb 4-1: config 0 descriptor??
[ 1960.697117][ T5768] em28xx 4-1:0.0: New device   @ 480 Mbps (2040:1605, interface 0, class 0)
[ 1960.697149][ T5768] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[ 1960.990660][T32290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1960.995119][T32290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1961.486268][T25699] kernel write not supported for file task/250/net/psched (pid: 25699 comm: kworker/1:1)
[ 1961.630486][T32183] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1961.722298][T32183] 8021q: adding VLAN 0 to HW filter on device team0
[ 1961.758026][ T5768] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 1961.758495][ T5768] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[ 1961.759024][ T5768] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[ 1961.759057][ T5768] em28xx 4-1:0.0: No AC97 audio processor
[ 1961.838300][ T5768] usb 4-1: USB disconnect, device number 12
[ 1961.843842][T20604] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1961.844032][T20604] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1961.877477][ T5768] em28xx 4-1:0.0: Disconnecting em28xx
[ 1961.902992][ T5768] em28xx: Freeing device
[ 1961.962971][T25825] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1961.963406][T25825] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1961.990094][T32311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9208'.
[ 1962.316184][T17025] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1962.542877][T17025] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1962.544673][T17025] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 72, changing to 7
[ 1962.547923][T17025] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[ 1962.547953][T17025] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1962.547976][T17025] usb 4-1: Product: syz
[ 1962.547992][T17025] usb 4-1: Manufacturer: syz
[ 1962.548008][T17025] usb 4-1: SerialNumber: syz
[ 1962.863903][T32314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1962.864600][T32314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1962.914987][T17025] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1962.927977][T17025] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1963.051326][T17025] usb 4-1: USB disconnect, device number 13
[ 1963.232190][ T5678] udevd[5678]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1963.698171][T32337] fuse: Unknown parameter '§|0x0000000000000004'
[ 1963.895120][ T5704] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1963.997172][T32183] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1964.059352][ T5704] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1964.060941][ T5704] usb 6-1: config 12 has an invalid interface number: 99 but max is 0
[ 1964.060969][ T5704] usb 6-1: config 12 has no interface number 0
[ 1964.061035][ T5704] usb 6-1: config 12 interface 99 altsetting 14 endpoint 0x4 has an invalid bInterval 72, changing to 7
[ 1964.061064][ T5704] usb 6-1: config 12 interface 99 has no altsetting 0
[ 1964.064775][ T5704] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6
[ 1964.064981][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1964.065004][ T5704] usb 6-1: Product: syz
[ 1964.065021][ T5704] usb 6-1: Manufacturer: syz
[ 1964.065037][ T5704] usb 6-1: SerialNumber: syz
[ 1964.204417][T32350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9220'.
[ 1964.218197][T25733] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1964.238711][T32350] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9220'.
[ 1964.415635][T25733] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67
[ 1964.415668][T25733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1964.415692][T25733] usb 3-1: Product: syz
[ 1964.415707][T25733] usb 3-1: Manufacturer: syz
[ 1964.415781][T25733] usb 3-1: SerialNumber: syz
[ 1964.522947][ T5704] usb 6-1: no audio or video endpoints found
[ 1964.583799][ T5704] usb 6-1: USB disconnect, device number 21
[ 1964.689334][T32345] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9219'.
[ 1964.724103][T25733] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware
[ 1964.724134][T25733] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1964.758411][T25733] usb 3-1: USB disconnect, device number 74
[ 1964.946797][T32183] veth0_vlan: entered promiscuous mode
[ 1964.968430][T32183] veth1_vlan: entered promiscuous mode
[ 1965.120634][T32183] veth0_macvtap: entered promiscuous mode
[ 1965.183599][T32183] veth1_macvtap: entered promiscuous mode
[ 1965.281826][T32183] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1965.357135][T32183] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1965.400671][T25829] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1965.400979][T25829] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1965.401022][T25829] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1965.401061][T25829] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1966.826437][T32367] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32
[ 1967.300188][T32375] ./bus: Can't lookup blockdev
[ 1968.095384][T11512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1968.095416][T11512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1968.471920][T20611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1968.471942][T20611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1968.610571][T32395] FAULT_INJECTION: forcing a failure.
[ 1968.610571][T32395] name fail_page_alloc, interval 1, probability 0, space 0, times 4
[ 1968.610613][T32395] CPU: 0 UID: 0 PID: 32395 Comm: syz.3.9231 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1968.610644][T32395] Tainted: [L]=SOFTLOCKUP
[ 1968.610667][T32395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1968.610681][T32395] Call Trace:
[ 1968.610690][T32395]  <TASK>
[ 1968.610700][T32395]  dump_stack_lvl+0xe8/0x150
[ 1968.610736][T32395]  should_fail_ex+0x467/0x600
[ 1968.610771][T32395]  prepare_alloc_pages+0x223/0x650
[ 1968.610810][T32395]  __alloc_frozen_pages_noprof+0x193/0x5b0
[ 1968.610855][T32395]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1968.610883][T32395]  ? __pfx_policy_nodemask+0x10/0x10
[ 1968.610907][T32395]  alloc_pages_mpol+0xd4/0x280
[ 1968.610924][T32395]  alloc_pages_noprof+0xd2/0x2f0
[ 1968.610942][T32395]  __pud_alloc+0x3a/0x460
[ 1968.610966][T32395]  handle_mm_fault+0x2158/0x28d0
[ 1968.610986][T32395]  ? unwind_get_return_address+0x4d/0x90
[ 1968.611013][T32395]  ? mt_find+0x186/0x630
[ 1968.611033][T32395]  ? handle_mm_fault+0xeb/0x28d0
[ 1968.611060][T32395]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1968.611089][T32395]  ? __lock_acquire+0x6df/0x2e40
[ 1968.611107][T32395]  ? lock_mm_and_find_vma+0xa7/0x340
[ 1968.611133][T32395]  do_user_addr_fault+0x744/0x1340
[ 1968.611171][T32395]  exc_page_fault+0x6a/0xc0
[ 1968.611187][T32395]  asm_exc_page_fault+0x26/0x30
[ 1968.611202][T32395] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[ 1968.611255][T32395] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 bf 33 05 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 1968.611275][T32395] RSP: 0018:ffffc90008cd7b78 EFLAGS: 00050202
[ 1968.611295][T32395] RAX: 00007ffffffff001 RBX: 0000000000000050 RCX: 0000000000000050
[ 1968.611310][T32395] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc90008cd7bc0
[ 1968.611325][T32395] RBP: ffffc90008cd7c90 R08: ffffc90008cd7c0f R09: 1ffff9200119af81
[ 1968.611341][T32395] R10: dffffc0000000000 R11: fffff5200119af82 R12: ffffc90008cd7bc0
[ 1968.611357][T32395] R13: 1ffff9200119af74 R14: ffffc90008cd7bc0 R15: 0000200000000040
[ 1968.611391][T32395]  _copy_from_user+0x7a/0xb0
[ 1968.611417][T32395]  inet6_ioctl+0x1ac/0x2e0
[ 1968.611444][T32395]  ? __pfx_inet6_ioctl+0x10/0x10
[ 1968.611471][T32395]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1968.611497][T32395]  sock_do_ioctl+0x101/0x320
[ 1968.611517][T32395]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1968.611536][T32395]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1968.611559][T32395]  sock_ioctl+0x57d/0x7f0
[ 1968.611579][T32395]  ? __pfx_sock_ioctl+0x10/0x10
[ 1968.611598][T32395]  ? __fget_files+0x3a8/0x420
[ 1968.611615][T32395]  ? __fget_files+0x2a/0x420
[ 1968.611659][T32395]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1968.611694][T32395]  ? __pfx_sock_ioctl+0x10/0x10
[ 1968.611718][T32395]  __se_sys_ioctl+0xff/0x170
[ 1968.611750][T32395]  do_syscall_64+0x17b/0x530
[ 1968.611766][T32395]  ? irqentry_exit+0x10f/0x8f0
[ 1968.611780][T32395]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1968.611797][T32395]  ? clear_bhb_loop+0x40/0x90
[ 1968.611816][T32395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1968.611832][T32395] RIP: 0033:0x7f53d1edde99
[ 1968.611846][T32395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1968.611859][T32395] RSP: 002b:00007f53d0136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1968.611874][T32395] RAX: ffffffffffffffda RBX: 00007f53d2165fa0 RCX: 00007f53d1edde99
[ 1968.611886][T32395] RDX: 0000200000000040 RSI: 000000000000890c RDI: 0000000000000003
[ 1968.611896][T32395] RBP: 00007f53d0136090 R08: 0000000000000000 R09: 0000000000000000
[ 1968.611906][T32395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1968.611915][T32395] R13: 00007f53d2166038 R14: 00007f53d2165fa0 R15: 00007fffecb3a538
[ 1968.611939][T32395]  </TASK>
[ 1969.089159][T32397] tls_set_device_offload: netdev not found
[ 1970.629627][T32427] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.9242'.
[ 1970.859938][T32433] sg_write: data in/out 431068/146 bytes for SCSI command 0x0-- guessing data in;
[ 1970.859938][T32433]    program syz.6.9244 not setting count and/or reply_len properly
[ 1972.414596][T32461] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9251'.
[ 1972.454182][T32462] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9251'.
[ 1973.008576][T32468] FAULT_INJECTION: forcing a failure.
[ 1973.008576][T32468] name fail_page_alloc, interval 1, probability 0, space 0, times 3
[ 1973.008618][T32468] CPU: 1 UID: 0 PID: 32468 Comm: syz.2.9253 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1973.008649][T32468] Tainted: [L]=SOFTLOCKUP
[ 1973.008657][T32468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1973.008671][T32468] Call Trace:
[ 1973.008680][T32468]  <TASK>
[ 1973.008690][T32468]  dump_stack_lvl+0xe8/0x150
[ 1973.008726][T32468]  should_fail_ex+0x467/0x600
[ 1973.008760][T32468]  prepare_alloc_pages+0x223/0x650
[ 1973.008803][T32468]  __alloc_frozen_pages_noprof+0x193/0x5b0
[ 1973.008845][T32468]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1973.008899][T32468]  __alloc_pages_noprof+0x10/0x100
[ 1973.008936][T32468]  alloc_pages_bulk_noprof+0x681/0x890
[ 1973.008980][T32468]  ? copy_splice_read+0x16f/0xab0
[ 1973.009003][T32468]  ? copy_splice_read+0x16f/0xab0
[ 1973.009055][T32468]  copy_splice_read+0x19f/0xab0
[ 1973.009094][T32468]  ? __pfx_copy_splice_read+0x10/0x10
[ 1973.009117][T32468]  ? trace_kmalloc+0x2a/0xf0
[ 1973.009151][T32468]  ? look_up_lock_class+0x57/0x110
[ 1973.009176][T32468]  ? register_lock_class+0x31/0x2e0
[ 1973.009214][T32468]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[ 1973.009251][T32468]  ? alloc_pipe_info+0x35d/0x4c0
[ 1973.009291][T32468]  ? __pfx_copy_splice_read+0x10/0x10
[ 1973.009316][T32468]  splice_direct_to_actor+0x496/0xcc0
[ 1973.009348][T32468]  ? kstrtouint+0x6e/0xe0
[ 1973.009386][T32468]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1973.009412][T32468]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1973.009449][T32468]  do_splice_direct+0x19b/0x2a0
[ 1973.009478][T32468]  ? __pfx_do_splice_direct+0x10/0x10
[ 1973.009505][T32468]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1973.009539][T32468]  ? rw_verify_area+0x209/0x4d0
[ 1973.009571][T32468]  do_sendfile+0x540/0x7e0
[ 1973.009603][T32468]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1973.009634][T32468]  ? __pfx_do_sendfile+0x10/0x10
[ 1973.009683][T32468]  __se_sys_sendfile64+0x144/0x1a0
[ 1973.009718][T32468]  ? __pfx___se_sys_sendfile64+0x10/0x10
[ 1973.009761][T32468]  do_syscall_64+0x17b/0x530
[ 1973.009786][T32468]  ? irqentry_exit+0x10f/0x8f0
[ 1973.009808][T32468]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1973.009833][T32468]  ? clear_bhb_loop+0x40/0x90
[ 1973.009862][T32468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1973.009886][T32468] RIP: 0033:0x7f0c6993de99
[ 1973.009907][T32468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1973.009929][T32468] RSP: 002b:00007f0c67b96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1973.009953][T32468] RAX: ffffffffffffffda RBX: 00007f0c69bc5fa0 RCX: 00007f0c6993de99
[ 1973.009972][T32468] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[ 1973.009986][T32468] RBP: 00007f0c67b96090 R08: 0000000000000000 R09: 0000000000000000
[ 1973.010001][T32468] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001
[ 1973.010015][T32468] R13: 00007f0c69bc6038 R14: 00007f0c69bc5fa0 R15: 00007ffd0dee7538
[ 1973.010050][T32468]  </TASK>
[ 1973.704083][T32474] netlink: 'syz.5.9254': attribute type 10 has an invalid length.
[ 1974.368576][T26208] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1974.524197][T26208] usb 3-1: config 0 has an invalid interface number: 11 but max is 0
[ 1974.524230][T26208] usb 3-1: config 0 has no interface number 0
[ 1974.524277][T26208] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 129, changing to 11
[ 1974.524307][T26208] usb 3-1: config 0 interface 11 altsetting 253 has an endpoint descriptor with address 0x61, changing to 0x1
[ 1974.524335][T26208] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x1 has an invalid bInterval 97, changing to 7
[ 1974.524363][T26208] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x1 has invalid maxpacket 24929, setting to 1024
[ 1974.524393][T26208] usb 3-1: config 0 interface 11 has no altsetting 0
[ 1974.524428][T26208] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[ 1974.524452][T26208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1974.624895][T26208] usb 3-1: config 0 descriptor??
[ 1974.701660][T26208] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected
[ 1974.702000][T26208] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 87
[ 1974.729574][T26208] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81
[ 1974.729662][T26208] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82
[ 1974.731285][T26208] keyspan 3-1:0.11: unsupported endpoint type 1
[ 1974.731388][T26208] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2
[ 1974.731469][T26208] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85
[ 1974.731550][T26208] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5
[ 1974.736851][T26208] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1974.804720][T26208] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83
[ 1974.804818][T26208] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84
[ 1974.804899][T26208] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3
[ 1974.805002][T26208] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4
[ 1974.805088][T26208] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86
[ 1974.805177][T26208] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6
[ 1974.874976][T26208] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1974.954060][T26208] usb 3-1: USB disconnect, device number 75
[ 1974.979614][T26208] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1974.999824][T26208] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1975.000982][T26208] keyspan 3-1:0.11: device disconnected
[ 1975.728283][T32493] batadv_slave_0: entered promiscuous mode
[ 1975.728989][T32493] team0: entered promiscuous mode
[ 1975.729011][T32493] team_slave_0: entered promiscuous mode
[ 1975.729230][T32493] team_slave_1: entered promiscuous mode
[ 1975.842592][T32492] team0: left promiscuous mode
[ 1975.842615][T32492] team_slave_0: left promiscuous mode
[ 1975.914750][T32492] team_slave_1: left promiscuous mode
[ 1976.051910][T32492] batadv_slave_0: left promiscuous mode
[ 1976.517427][ T1344] ieee802154 phy1 wpan1: encryption failed: -22
[ 1977.057840][ T5768] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1977.312120][T26208] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1977.374765][T32526] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 1977.401777][T32526] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 1977.548374][T26208] usb 7-1: Using ep0 maxpacket: 32
[ 1977.563876][T26208] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1977.563902][T26208] usb 7-1: config 0 has no interface number 0
[ 1977.566386][T26208] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1977.566411][T26208] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1977.566535][T26208] usb 7-1: Product: syz
[ 1977.566549][T26208] usb 7-1: Manufacturer: syz
[ 1977.566563][T26208] usb 7-1: SerialNumber: syz
[ 1977.641032][T26208] usb 7-1: config 0 descriptor??
[ 1977.660862][T26208] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1977.660888][T26208] usb 7-1: selecting invalid altsetting 1
[ 1977.660915][T26208] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1977.720216][T26208] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1977.720564][T26208] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1977.720620][T26208] usb 7-1: media controller created
[ 1977.759517][T26208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1977.937206][T26208] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1977.937255][T26208] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1977.937684][T26208] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1978.054026][T26208] usb 7-1: USB disconnect, device number 2
[ 1979.055732][T25733] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[ 1979.209223][T25733] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1979.209254][T25733] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1979.209275][T25733] usb 7-1: config 1 has no interface number 0
[ 1979.209320][T25733] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1979.209340][T25733] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1979.209361][T25733] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1979.209384][T25733] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1979.211646][T25733] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1979.211676][T25733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1979.211698][T25733] usb 7-1: Product: syz
[ 1979.211714][T25733] usb 7-1: Manufacturer: syz
[ 1979.211729][T25733] usb 7-1: SerialNumber: syz
[ 1979.333610][T32556] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1979.455456][T31256] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1979.615393][T31256] usb 3-1: Using ep0 maxpacket: 32
[ 1979.644865][T31256] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1979.644892][T31256] usb 3-1: config 0 has no interface number 0
[ 1979.687046][T31256] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1979.687070][T31256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1979.687084][T31256] usb 3-1: Product: syz
[ 1979.687095][T31256] usb 3-1: Manufacturer: syz
[ 1979.687157][T31256] usb 3-1: SerialNumber: syz
[ 1979.694678][T31256] usb 3-1: config 0 descriptor??
[ 1979.794817][T31256] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1979.794847][T31256] usb 3-1: selecting invalid altsetting 1
[ 1979.794863][T31256] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1979.834132][T32567] FAULT_INJECTION: forcing a failure.
[ 1979.834132][T32567] name fail_page_alloc, interval 1, probability 0, space 0, times 2
[ 1979.834169][T32567] CPU: 0 UID: 0 PID: 32567 Comm: syz.5.9288 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1979.834198][T32567] Tainted: [L]=SOFTLOCKUP
[ 1979.834224][T32567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1979.834246][T32567] Call Trace:
[ 1979.834255][T32567]  <TASK>
[ 1979.834265][T32567]  dump_stack_lvl+0xe8/0x150
[ 1979.834303][T32567]  should_fail_ex+0x467/0x600
[ 1979.834358][T32567]  prepare_alloc_pages+0x223/0x650
[ 1979.834430][T32567]  __alloc_frozen_pages_noprof+0x193/0x5b0
[ 1979.834472][T32567]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1979.834513][T32567]  ? __pfx_policy_nodemask+0x10/0x10
[ 1979.834537][T32567]  ? __kvm_mmu_topup_memory_cache+0x461/0x600
[ 1979.834575][T32567]  ? rcu_is_watching+0x15/0xb0
[ 1979.834602][T32567]  ? __kvm_mmu_topup_memory_cache+0x461/0x600
[ 1979.834632][T32567]  ? trace_kmalloc+0x2a/0xf0
[ 1979.834667][T32567]  alloc_pages_mpol+0xd4/0x280
[ 1979.834697][T32567]  alloc_pages_noprof+0xd2/0x2f0
[ 1979.834726][T32567]  get_free_pages_noprof+0xf/0x80
[ 1979.834748][T32567]  __kvm_mmu_topup_memory_cache+0x252/0x600
[ 1979.834794][T32567]  mmu_topup_memory_caches+0xd6/0x170
[ 1979.834831][T32567]  kvm_mmu_load+0x9d/0x22b0
[ 1979.834853][T32567]  ? kvm_msr_allowed+0x9a/0x490
[ 1979.834889][T32567]  ? kvm_msr_allowed+0x9a/0x490
[ 1979.834923][T32567]  ? kvm_msr_allowed+0x9a/0x490
[ 1979.834956][T32567]  ? kvm_msr_allowed+0x3f4/0x490
[ 1979.835008][T32567]  ? kvm_msr_allowed+0x9a/0x490
[ 1979.835043][T32567]  ? kvm_apic_has_interrupt+0x740/0x770
[ 1979.835085][T32567]  vcpu_run+0x4d91/0x7780
[ 1979.835126][T32567]  ? trace_sched_exit_tp+0x3a/0x130
[ 1979.835222][T32567]  ? __pfx_vcpu_run+0x10/0x10
[ 1979.835262][T32567]  ? lock_acquire+0x115/0x350
[ 1979.835317][T32567]  kvm_arch_vcpu_ioctl_run+0xe23/0x1920
[ 1979.835354][T32567]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1920
[ 1979.835401][T32567]  kvm_vcpu_ioctl+0xa64/0xfe0
[ 1979.835443][T32567]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1979.835478][T32567]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1979.835504][T32567]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1979.835546][T32567]  ? __fget_files+0x2a/0x420
[ 1979.835576][T32567]  ? __fget_files+0x3a8/0x420
[ 1979.835597][T32567]  ? __fget_files+0x2a/0x420
[ 1979.835624][T32567]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1979.835661][T32567]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1979.835698][T32567]  __se_sys_ioctl+0xff/0x170
[ 1979.835732][T32567]  do_syscall_64+0x17b/0x530
[ 1979.835756][T32567]  ? irqentry_exit+0x10f/0x8f0
[ 1979.835777][T32567]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1979.835801][T32567]  ? clear_bhb_loop+0x40/0x90
[ 1979.835829][T32567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1979.835853][T32567] RIP: 0033:0x7f838506de99
[ 1979.835875][T32567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1979.835895][T32567] RSP: 002b:00007f83832c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1979.835905][T31256] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1979.835920][T32567] RAX: ffffffffffffffda RBX: 00007f83852f5fa0 RCX: 00007f838506de99
[ 1979.835937][T32567] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 1979.835951][T32567] RBP: 00007f83832c6090 R08: 0000000000000000 R09: 0000000000000000
[ 1979.835965][T32567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1979.835978][T32567] R13: 00007f83852f6038 R14: 00007f83852f5fa0 R15: 00007ffd91b690f8
[ 1979.836014][T32567]  </TASK>
[ 1979.979823][T31256] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1979.988732][T32571] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1980.026644][T31256] usb 3-1: media controller created
[ 1980.279484][T32571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1980.280050][T32571] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1980.314809][T31256] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1980.401092][T32379] libceph: connect (1)[c::]:6789 error -101
[ 1980.401286][T32379] libceph: mon0 (1)[c::]:6789 connect error
[ 1980.403472][T32379] libceph: connect (1)[c::]:6789 error -101
[ 1980.403643][T32379] libceph: mon0 (1)[c::]:6789 connect error
[ 1980.658352][ T5768] libceph: connect (1)[c::]:6789 error -101
[ 1980.748345][ T5768] libceph: mon0 (1)[c::]:6789 connect error
[ 1980.795801][T25733] cdc_ncm 7-1:1.1: failed GET_NTB_PARAMETERS
[ 1980.795851][T25733] cdc_ncm 7-1:1.1: bind() failure
[ 1980.841311][T25733] usb 7-1: USB disconnect, device number 3
[ 1980.997279][T32582] CUSE: info not properly terminated
[ 1980.999808][T32582] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9291'.
[ 1981.266029][ T5768] libceph: connect (1)[c::]:6789 error -101
[ 1981.282653][ T5768] libceph: mon0 (1)[c::]:6789 connect error
[ 1981.384635][T31256] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1981.384685][T31256] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1981.499738][T32596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9296'.
[ 1981.708957][T32600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9295'.
[ 1981.728879][ T5758] usb 1-1: Failed to load image "edgeport/down.fw" err -110
[ 1981.736764][ T5758] usb 1-1: Direct firmware load for edgeport/boot.fw failed with error -2
[ 1981.736789][ T5758] usb 1-1: Falling back to sysfs fallback for: edgeport/boot.fw
[ 1981.852213][T32604] netlink: 140 bytes leftover after parsing attributes in process `syz.5.9298'.
[ 1981.896216][   T38] audit: type=1326 audit(2237.067:54): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32602 comm="syz.5.9298" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f838506de99 code=0x0
[ 1982.120972][T32558] ceph: No mds server is up or the cluster is laggy
[ 1982.417538][ T5768] libceph: connect (1)[c::]:6789 error -101
[ 1982.417746][ T5768] libceph: mon0 (1)[c::]:6789 connect error
[ 1982.651531][T32379] usb 3-1: USB disconnect, device number 76
[ 1982.771426][T32613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9304'.
[ 1983.813056][T32378] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1983.832818][ T5604] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1983.851255][T32654] FAULT_INJECTION: forcing a failure.
[ 1983.851255][T32654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1983.851291][T32654] CPU: 1 UID: 0 PID: 32654 Comm: syz.3.9313 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1983.851319][T32654] Tainted: [L]=SOFTLOCKUP
[ 1983.851327][T32654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1983.851339][T32654] Call Trace:
[ 1983.851348][T32654]  <TASK>
[ 1983.851357][T32654]  dump_stack_lvl+0xe8/0x150
[ 1983.851408][T32654]  should_fail_ex+0x467/0x600
[ 1983.851455][T32654]  _copy_to_user+0x31/0xb0
[ 1983.851478][T32654]  simple_read_from_buffer+0xe1/0x170
[ 1983.851505][T32654]  proc_fail_nth_read+0x1be/0x230
[ 1983.851530][T32654]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1983.851557][T32654]  ? rw_verify_area+0x250/0x4d0
[ 1983.851584][T32654]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1983.851606][T32654]  vfs_read+0x219/0xa90
[ 1983.851638][T32654]  ? __pfx_vfs_read+0x10/0x10
[ 1983.851664][T32654]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1983.851687][T32654]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1983.851711][T32654]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1983.851733][T32654]  ? mutex_lock_nested+0x152/0x1d0
[ 1983.851759][T32654]  ? fdget_pos+0x252/0x320
[ 1983.851789][T32654]  ksys_read+0x156/0x270
[ 1983.851815][T32654]  ? __pfx_ksys_read+0x10/0x10
[ 1983.851849][T32654]  do_syscall_64+0x17b/0x530
[ 1983.851870][T32654]  ? irqentry_exit+0x10f/0x8f0
[ 1983.851890][T32654]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1983.851912][T32654]  ? clear_bhb_loop+0x40/0x90
[ 1983.851937][T32654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1983.851959][T32654] RIP: 0033:0x7f53d1e9e6ce
[ 1983.851977][T32654] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1983.851996][T32654] RSP: 002b:00007f53d0135fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1983.852028][T32654] RAX: ffffffffffffffda RBX: 00007f53d01366c0 RCX: 00007f53d1e9e6ce
[ 1983.852042][T32654] RDX: 000000000000000f RSI: 00007f53d01360a0 RDI: 0000000000000003
[ 1983.852054][T32654] RBP: 00007f53d0136090 R08: 0000000000000000 R09: 0000000000000000
[ 1983.852066][T32654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1983.852078][T32654] R13: 00007f53d2166038 R14: 00007f53d2165fa0 R15: 00007fffecb3a538
[ 1983.852108][T32654]  </TASK>
[ 1984.032934][ T5604] usb 7-1: Using ep0 maxpacket: 32
[ 1984.047082][T32378] usb 6-1: Using ep0 maxpacket: 16
[ 1984.084562][ T5604] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[ 1984.084591][ T5604] usb 7-1: config 0 has no interface number 0
[ 1984.156950][T32378] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1984.157042][T32378] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1984.157070][T32378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024
[ 1984.157097][T32378] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[ 1984.157121][T32378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1984.157196][T32378] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1984.157219][T32378] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1984.246856][T32378] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3
[ 1984.246885][T32378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1984.246904][T32378] usb 6-1: Product: syz
[ 1984.246968][T32378] usb 6-1: Manufacturer: syz
[ 1984.246982][T32378] usb 6-1: SerialNumber: syz
[ 1984.301537][ T5604] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1984.301562][ T5604] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1984.301577][ T5604] usb 7-1: Product: syz
[ 1984.301587][ T5604] usb 7-1: Manufacturer: syz
[ 1984.301599][ T5604] usb 7-1: SerialNumber: syz
[ 1984.354728][T32378] usb 6-1: config 0 descriptor??
[ 1984.368326][T32644] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1984.375929][ T5604] usb 7-1: config 0 descriptor??
[ 1984.465877][T32378] iuu_phoenix 6-1:0.0: iuu_phoenix converter detected
[ 1984.470489][ T5604] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1984.662611][ T5604] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1984.698381][T32378] usb 6-1: iuu_phoenix converter now attached to ttyUSB0
[ 1984.747299][T32378] usb 6-1: USB disconnect, device number 22
[ 1984.749405][ T5604] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2
[ 1984.921154][T32635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1984.923496][T32635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1984.957480][T32378] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[ 1984.993772][T32378] iuu_phoenix 6-1:0.0: device disconnected
[ 1985.062068][T25733] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1985.173113][T32635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1985.187172][T32635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1985.190350][    C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1985.193420][T32379] usb 7-1: USB disconnect, device number 4
[ 1985.211895][T25733] usb 4-1: Using ep0 maxpacket: 8
[ 1985.215527][T25733] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1985.215553][T25733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1985.255987][T32379] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1985.300834][T25733] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1985.300850][T25733] pvrusb2: **********
[ 1985.300857][T25733] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1985.300868][T25733] pvrusb2: Important functionality might not be entirely working.
[ 1985.300877][T25733] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1985.300888][T25733] pvrusb2: **********
[ 1985.440952][T32379] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2
[ 1985.451748][T32379] quatech2 7-1:0.51: device disconnected
[ 1985.491390][T32663] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1985.570249][ T2398] pvrusb2: Invalid write control endpoint
[ 1985.592823][T25733] usb 4-1: USB disconnect, device number 15
[ 1985.947170][T32668] FAULT_INJECTION: forcing a failure.
[ 1985.947170][T32668] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1985.947201][T32668] CPU: 0 UID: 0 PID: 32668 Comm: syz.6.9317 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1985.947224][T32668] Tainted: [L]=SOFTLOCKUP
[ 1985.947230][T32668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1985.947239][T32668] Call Trace:
[ 1985.947246][T32668]  <TASK>
[ 1985.947253][T32668]  dump_stack_lvl+0xe8/0x150
[ 1985.947278][T32668]  should_fail_ex+0x467/0x600
[ 1985.947302][T32668]  _copy_from_user+0x2d/0xb0
[ 1985.947319][T32668]  ___sys_recvmsg+0x173/0x5a0
[ 1985.947344][T32668]  ? lock_acquire+0x115/0x350
[ 1985.947373][T32668]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1985.947403][T32668]  ? ktime_get_ts64+0xa9/0x410
[ 1985.947451][T32668]  do_recvmmsg+0x320/0x7f0
[ 1985.947485][T32668]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1985.947524][T32668]  ? get_timespec64+0x119/0x1b0
[ 1985.947543][T32668]  ? __pfx_get_timespec64+0x10/0x10
[ 1985.947567][T32668]  __x64_sys_recvmmsg+0x1b7/0x250
[ 1985.947593][T32668]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1985.947624][T32668]  do_syscall_64+0x17b/0x530
[ 1985.947662][T32668]  ? irqentry_exit+0x10f/0x8f0
[ 1985.947681][T32668]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1985.947699][T32668]  ? clear_bhb_loop+0x40/0x90
[ 1985.947746][T32668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1985.947765][T32668] RIP: 0033:0x7f8f7217de99
[ 1985.947783][T32668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1985.947801][T32668] RSP: 002b:00007f8f703d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1985.947822][T32668] RAX: ffffffffffffffda RBX: 00007f8f72405fa0 RCX: 00007f8f7217de99
[ 1985.947837][T32668] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[ 1985.947850][T32668] RBP: 00007f8f703d6090 R08: 0000200000003700 R09: 0000000000000000
[ 1985.947862][T32668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1985.947873][T32668] R13: 00007f8f72406038 R14: 00007f8f72405fa0 R15: 00007ffd47a35708
[ 1985.947901][T32668]  </TASK>
[ 1986.618807][ T2398] pvrusb2: Invalid write control endpoint
[ 1986.618827][ T2398] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1986.618924][ T2398] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1986.618933][ T2398] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1986.618945][ T2398] pvrusb2: Device being rendered inoperable
[ 1986.700976][ T2398] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1986.701041][ T2398] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1987.044476][ T2398] pvrusb2: Attached sub-driver cx25840
[ 1987.044493][ T2398] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1987.044504][ T2398] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1987.205746][T32688] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9324'.
[ 1987.419915][T32691] FAULT_INJECTION: forcing a failure.
[ 1987.419915][T32691] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1987.419944][T32691] CPU: 1 UID: 0 PID: 32691 Comm: syz.2.9325 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1987.419966][T32691] Tainted: [L]=SOFTLOCKUP
[ 1987.419972][T32691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1987.419982][T32691] Call Trace:
[ 1987.419988][T32691]  <TASK>
[ 1987.419994][T32691]  dump_stack_lvl+0xe8/0x150
[ 1987.420018][T32691]  should_fail_ex+0x467/0x600
[ 1987.420042][T32691]  _copy_from_user+0x2d/0xb0
[ 1987.420058][T32691]  ___sys_recvmsg+0x173/0x5a0
[ 1987.420082][T32691]  ? lock_acquire+0x115/0x350
[ 1987.420116][T32691]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1987.420145][T32691]  ? ktime_get_ts64+0xa9/0x410
[ 1987.420190][T32691]  do_recvmmsg+0x320/0x7f0
[ 1987.420220][T32691]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1987.420254][T32691]  ? get_timespec64+0x119/0x1b0
[ 1987.420271][T32691]  ? __pfx_get_timespec64+0x10/0x10
[ 1987.420294][T32691]  __x64_sys_recvmmsg+0x1b7/0x250
[ 1987.420346][T32691]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1987.420390][T32691]  do_syscall_64+0x17b/0x530
[ 1987.420414][T32691]  ? irqentry_exit+0x10f/0x8f0
[ 1987.420433][T32691]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1987.420455][T32691]  ? clear_bhb_loop+0x40/0x90
[ 1987.420481][T32691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1987.420503][T32691] RIP: 0033:0x7f0c6993de99
[ 1987.420522][T32691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1987.420541][T32691] RSP: 002b:00007f0c67b96028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1987.420564][T32691] RAX: ffffffffffffffda RBX: 00007f0c69bc5fa0 RCX: 00007f0c6993de99
[ 1987.420581][T32691] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[ 1987.420596][T32691] RBP: 00007f0c67b96090 R08: 0000200000003700 R09: 0000000000000000
[ 1987.420611][T32691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1987.420625][T32691] R13: 00007f0c69bc6038 R14: 00007f0c69bc5fa0 R15: 00007ffd0dee7538
[ 1987.420656][T32691]  </TASK>
[ 1987.802880][T32697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9328'.
[ 1987.897775][T31108] Bluetooth: Wrong link type (-71)
[ 1988.309997][ T5604] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1988.462682][ T5604] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1988.462711][ T5604] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1988.462731][ T5604] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1988.462800][ T5604] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1988.513635][ T5604] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1988.513667][ T5604] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1988.513688][ T5604] usb 6-1: Product: syz
[ 1988.513702][ T5604] usb 6-1: Manufacturer: syz
[ 1988.552434][ T5604] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1988.663736][T25733] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1988.790716][T31256] usb 6-1: USB disconnect, device number 23
[ 1988.809805][T25733] usb 4-1: Using ep0 maxpacket: 16
[ 1988.811544][T25733] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1988.811569][T25733] usb 4-1: config 0 has no interface number 0
[ 1988.811613][T25733] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1988.811649][T25733] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 1988.811673][T25733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1988.889550][T25733] usb 4-1: config 0 descriptor??
[ 1988.932720][T25733] usbhid 4-1:0.1: couldn't find an input interrupt endpoint
[ 1989.581177][T32730] netlink: 'syz.3.9323': attribute type 21 has an invalid length.
[ 1989.889350][T32730] netlink: 160 bytes leftover after parsing attributes in process `syz.3.9323'.
[ 1989.995469][T32735] The dccp option matching is deprecated and scheduled to be removed in 2027.
[ 1989.995469][T32735] Please contact the netfilter-devel mailing list or update your nftables rules.
[ 1990.048223][T32737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9340'.
[ 1991.034114][T25733] usb 4-1: USB disconnect, device number 16
[ 1991.353065][  T305] FAULT_INJECTION: forcing a failure.
[ 1991.353065][  T305] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1991.353100][  T305] CPU: 0 UID: 0 PID: 305 Comm: syz.5.9349 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1991.353126][  T305] Tainted: [L]=SOFTLOCKUP
[ 1991.353133][  T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1991.353144][  T305] Call Trace:
[ 1991.353153][  T305]  <TASK>
[ 1991.353161][  T305]  dump_stack_lvl+0xe8/0x150
[ 1991.353190][  T305]  should_fail_ex+0x467/0x600
[ 1991.353220][  T305]  _copy_to_user+0x31/0xb0
[ 1991.353243][  T305]  simple_read_from_buffer+0xe1/0x170
[ 1991.353268][  T305]  proc_fail_nth_read+0x1be/0x230
[ 1991.353293][  T305]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1991.353316][  T305]  ? rw_verify_area+0x250/0x4d0
[ 1991.353340][  T305]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1991.353360][  T305]  vfs_read+0x219/0xa90
[ 1991.353390][  T305]  ? __pfx_vfs_read+0x10/0x10
[ 1991.353414][  T305]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1991.353435][  T305]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1991.353454][  T305]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1991.353474][  T305]  ? mutex_lock_nested+0x152/0x1d0
[ 1991.353498][  T305]  ? fdget_pos+0x252/0x320
[ 1991.353526][  T305]  ksys_read+0x156/0x270
[ 1991.353551][  T305]  ? __pfx_ksys_read+0x10/0x10
[ 1991.353582][  T305]  do_syscall_64+0x17b/0x530
[ 1991.353602][  T305]  ? irqentry_exit+0x10f/0x8f0
[ 1991.353620][  T305]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1991.353640][  T305]  ? clear_bhb_loop+0x40/0x90
[ 1991.353665][  T305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1991.353683][  T305] RIP: 0033:0x7f838502e6ce
[ 1991.353701][  T305] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1991.353717][  T305] RSP: 002b:00007f83832c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1991.353737][  T305] RAX: ffffffffffffffda RBX: 00007f83832c66c0 RCX: 00007f838502e6ce
[ 1991.353750][  T305] RDX: 000000000000000f RSI: 00007f83832c60a0 RDI: 0000000000000004
[ 1991.353762][  T305] RBP: 00007f83832c6090 R08: 0000000000000000 R09: 0000000000000000
[ 1991.353774][  T305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1991.353797][  T305] R13: 00007f83852f6038 R14: 00007f83852f5fa0 R15: 00007ffd91b690f8
[ 1991.353828][  T305]  </TASK>
[ 1992.430393][  T327] IPVS: Error connecting to the multicast addr
[ 1992.619408][  T336] openvswitch: netlink: Missing valid actions attribute.
[ 1992.619440][  T336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1992.877243][T26208] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1993.087027][T26208] usb 6-1: Using ep0 maxpacket: 16
[ 1993.094588][T26208] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[ 1993.094607][T26208] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1993.094620][T26208] usb 6-1: config 0 has no interface number 0
[ 1993.134398][T26208] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1993.134420][T26208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1993.134434][T26208] usb 6-1: Product: syz
[ 1993.134444][T26208] usb 6-1: Manufacturer: syz
[ 1993.134472][T26208] usb 6-1: SerialNumber: syz
[ 1993.170603][T26208] usb 6-1: config 0 descriptor??
[ 1993.203832][T26208] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[ 1993.203857][T26208] uvcvideo 6-1:0.105: No valid video chain found.
[ 1993.388323][T31256] usb 6-1: USB disconnect, device number 24
[ 1993.546921][ T5604] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[ 1993.719428][ T5604] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[ 1993.719463][ T5604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1993.719476][ T5604] usb 4-1: config 0 has no interface number 0
[ 1993.721998][ T5604] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1993.722027][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1993.722042][ T5604] usb 4-1: Product: syz
[ 1993.722053][ T5604] usb 4-1: Manufacturer: syz
[ 1993.722063][ T5604] usb 4-1: SerialNumber: syz
[ 1993.769926][ T5604] usb 4-1: config 0 descriptor??
[ 1993.815811][ T5604] hub 4-1:0.31: bad descriptor, ignoring hub
[ 1993.815837][ T5604] hub 4-1:0.31: probe with driver hub failed with error -5
[ 1993.836957][ T5604] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1993.837007][ T5604] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized!
[ 1993.837051][ T5604] uvcvideo 4-1:0.31: Failed to create links for entity 32774
[ 1993.837062][ T5604] uvcvideo 4-1:0.31: Failed to register entities (-22).
[ 1993.851905][T31256] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1993.991596][  T350] FAULT_INJECTION: forcing a failure.
[ 1993.991596][  T350] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1993.991623][  T350] CPU: 0 UID: 0 PID: 350 Comm: syz.5.9364 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1993.991643][  T350] Tainted: [L]=SOFTLOCKUP
[ 1993.991649][  T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1993.991658][  T350] Call Trace:
[ 1993.991664][  T350]  <TASK>
[ 1993.991671][  T350]  dump_stack_lvl+0xe8/0x150
[ 1993.991695][  T350]  should_fail_ex+0x467/0x600
[ 1993.991718][  T350]  _copy_from_user+0x2d/0xb0
[ 1993.991733][  T350]  kstrtouint_from_user+0xd6/0x180
[ 1993.991755][  T350]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1993.991774][  T350]  ? __lock_acquire+0x6df/0x2e40
[ 1993.991789][  T350]  ? trace_raw_output_btrfs_log_inode_enter+0x500/0x500
[ 1993.991818][  T350]  ? lock_acquire+0x115/0x350
[ 1993.991843][  T350]  proc_fail_nth_write+0x8e/0x210
[ 1993.991858][  T350]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1993.991879][  T350]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1993.991894][  T350]  vfs_write+0x29f/0xbb0
[ 1993.991917][  T350]  ? __pfx_vfs_write+0x10/0x10
[ 1993.991935][  T350]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1993.991950][  T350]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1993.991963][  T350]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1993.991977][  T350]  ? mutex_lock_nested+0x152/0x1d0
[ 1993.991995][  T350]  ? fdget_pos+0x252/0x320
[ 1993.992027][  T350]  ksys_write+0x156/0x270
[ 1993.992045][  T350]  ? __pfx_ksys_write+0x10/0x10
[ 1993.992065][  T350]  ? __pfx_tty_ioctl+0x10/0x10
[ 1993.992087][  T350]  do_syscall_64+0x17b/0x530
[ 1993.992101][  T350]  ? irqentry_exit+0x10f/0x8f0
[ 1993.992113][  T350]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1993.992128][  T350]  ? clear_bhb_loop+0x40/0x90
[ 1993.992145][  T350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1993.992159][  T350] RIP: 0033:0x7f838502e6ce
[ 1993.992172][  T350] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1993.992184][  T350] RSP: 002b:00007f83832c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1993.992199][  T350] RAX: ffffffffffffffda RBX: 00007f83832c66c0 RCX: 00007f838502e6ce
[ 1993.992210][  T350] RDX: 0000000000000001 RSI: 00007f83832c60a0 RDI: 0000000000000006
[ 1993.992218][  T350] RBP: 00007f83832c6090 R08: 0000000000000000 R09: 0000000000000000
[ 1993.992227][  T350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1993.992235][  T350] R13: 00007f83852f6038 R14: 00007f83852f5fa0 R15: 00007ffd91b690f8
[ 1993.992256][  T350]  </TASK>
[ 1994.012249][T31256] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1994.012282][T31256] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1994.012306][T31256] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1994.012338][T31256] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[ 1994.012362][T31256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1994.017017][T31108] Bluetooth: hci3: command 0x0406 tx timeout
[ 1994.347158][T31256] usb 3-1: config 0 descriptor??
[ 1994.360687][  T346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1994.405195][  T346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1994.940869][ T5768] usb 4-1: USB disconnect, device number 17
[ 1995.776269][T25733] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[ 1995.830888][T31256] usbhid 3-1:0.0: can't add hid device: -71
[ 1995.831033][T31256] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1995.859285][T31256] usb 3-1: USB disconnect, device number 77
[ 1995.916412][T25733] usb 4-1: device descriptor read/64, error -71
[ 1996.165046][T25733] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[ 1996.316634][T25733] usb 4-1: device descriptor read/64, error -71
[ 1996.457306][T25733] usb usb4-port1: attempt power cycle
[ 1996.823066][T25733] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[ 1996.864098][T25733] usb 4-1: device descriptor read/8, error -71
[ 1996.947373][ T9831] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1997.220274][ T9831] usb 6-1: device descriptor read/64, error -71
[ 1997.224501][T25733] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[ 1997.284836][T25733] usb 4-1: device descriptor read/8, error -71
[ 1997.557585][T25733] usb usb4-port1: unable to enumerate USB device
[ 1997.586286][ T9831] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1997.824295][ T9831] usb 6-1: device descriptor read/64, error -71
[ 1997.939336][ T9831] usb usb6-port1: attempt power cycle
[ 1998.313866][ T9831] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1998.334881][ T9831] usb 6-1: device descriptor read/8, error -71
[ 1998.411533][  T392] FAULT_INJECTION: forcing a failure.
[ 1998.411533][  T392] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 1998.411566][  T392] CPU: 0 UID: 0 PID: 392 Comm: syz.3.9379 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1998.411595][  T392] Tainted: [L]=SOFTLOCKUP
[ 1998.411601][  T392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1998.411611][  T392] Call Trace:
[ 1998.411619][  T392]  <TASK>
[ 1998.411626][  T392]  dump_stack_lvl+0xe8/0x150
[ 1998.411655][  T392]  should_fail_ex+0x467/0x600
[ 1998.411684][  T392]  prepare_alloc_pages+0x223/0x650
[ 1998.411716][  T392]  __alloc_frozen_pages_noprof+0x193/0x5b0
[ 1998.411746][  T392]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1998.411771][  T392]  ? __alloc_frozen_pages_noprof+0x2a9/0x5b0
[ 1998.411800][  T392]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1998.411839][  T392]  ? __pfx_policy_nodemask+0x10/0x10
[ 1998.411856][  T392]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1998.411875][  T392]  __alloc_pages_noprof+0x10/0x100
[ 1998.411903][  T392]  alloc_pages_bulk_noprof+0x681/0x890
[ 1998.411934][  T392]  ? alloc_pages_mpol+0x11b/0x280
[ 1998.411952][  T392]  ? alloc_pages_noprof+0x161/0x2f0
[ 1998.411971][  T392]  __kasan_populate_vmalloc+0xb7/0x1c0
[ 1998.411993][  T392]  ? rt_spin_unlock+0x163/0x200
[ 1998.412016][  T392]  alloc_vmap_area+0xd1a/0x1420
[ 1998.412047][  T392]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1998.412067][  T392]  ? __kmalloc_cache_node_noprof+0x459/0x670
[ 1998.412092][  T392]  ? __get_vm_area_node+0x136/0x300
[ 1998.412110][  T392]  ? __get_vm_area_node+0x136/0x300
[ 1998.412134][  T392]  __get_vm_area_node+0x1f2/0x300
[ 1998.412159][  T392]  __vmalloc_node_range_noprof+0x34e/0x1560
[ 1998.412182][  T392]  ? copy_process+0x820/0x43f0
[ 1998.412204][  T392]  ? percpu_ref_get_many+0x19/0x140
[ 1998.412225][  T392]  ? __memcg_slab_post_alloc_hook+0x4d6/0xf60
[ 1998.412258][  T392]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1998.412282][  T392]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1998.412305][  T392]  ? memcpy_and_pad+0x48/0x80
[ 1998.412329][  T392]  __vmalloc_node_noprof+0xc2/0x100
[ 1998.412354][  T392]  ? copy_process+0x820/0x43f0
[ 1998.412371][  T392]  ? copy_process+0x820/0x43f0
[ 1998.412391][  T392]  dup_task_struct+0x2a0/0x8e0
[ 1998.412410][  T392]  ? rt_spin_unlock+0x163/0x200
[ 1998.412435][  T392]  copy_process+0x820/0x43f0
[ 1998.412472][  T392]  ? __pfx_copy_process+0x10/0x10
[ 1998.412497][  T392]  vhost_task_create+0x1f9/0x380
[ 1998.412519][  T392]  ? look_up_lock_class+0x57/0x110
[ 1998.412535][  T392]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[ 1998.412552][  T392]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[ 1998.412571][  T392]  ? __pfx_vhost_task_create+0x10/0x10
[ 1998.412599][  T392]  ? __pfx_vhost_task_fn+0x10/0x10
[ 1998.412624][  T392]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1998.412641][  T392]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1998.412656][  T392]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1998.412672][  T392]  ? mutex_lock_nested+0x152/0x1d0
[ 1998.412692][  T392]  ? kvm_mmu_post_init_vm+0x8f/0x2b0
[ 1998.412714][  T392]  kvm_mmu_post_init_vm+0x147/0x2b0
[ 1998.412734][  T392]  kvm_arch_vcpu_ioctl_run+0x7c/0x1920
[ 1998.412762][  T392]  ? rt_write_unlock+0x19c/0x360
[ 1998.412792][  T392]  kvm_vcpu_ioctl+0xa64/0xfe0
[ 1998.412830][  T392]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1998.412856][  T392]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1998.412873][  T392]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1998.412902][  T392]  ? __fget_files+0x2a/0x420
[ 1998.412923][  T392]  ? __fget_files+0x3a8/0x420
[ 1998.412939][  T392]  ? __fget_files+0x2a/0x420
[ 1998.412959][  T392]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1998.412987][  T392]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1998.413013][  T392]  __se_sys_ioctl+0xff/0x170
[ 1998.413037][  T392]  do_syscall_64+0x17b/0x530
[ 1998.413055][  T392]  ? irqentry_exit+0x10f/0x8f0
[ 1998.413070][  T392]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1998.413088][  T392]  ? clear_bhb_loop+0x40/0x90
[ 1998.413108][  T392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1998.413124][  T392] RIP: 0033:0x7f53d1edde99
[ 1998.413140][  T392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1998.413156][  T392] RSP: 002b:00007f53d0136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1998.413174][  T392] RAX: ffffffffffffffda RBX: 00007f53d2165fa0 RCX: 00007f53d1edde99
[ 1998.413186][  T392] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 1998.413197][  T392] RBP: 00007f53d0136090 R08: 0000000000000000 R09: 0000000000000000
[ 1998.413208][  T392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1998.413219][  T392] R13: 00007f53d2166038 R14: 00007f53d2165fa0 R15: 00007fffecb3a538
[ 1998.413250][  T392]  </TASK>
[ 1998.413405][  T392] syz.3.9379: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1998.413458][  T392] CPU: 0 UID: 0 PID: 392 Comm: syz.3.9379 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1998.413479][  T392] Tainted: [L]=SOFTLOCKUP
[ 1998.413484][  T392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1998.413494][  T392] Call Trace:
[ 1998.413500][  T392]  <TASK>
[ 1998.413506][  T392]  dump_stack_lvl+0xe8/0x150
[ 1998.413533][  T392]  warn_alloc+0x24c/0x270
[ 1998.413557][  T392]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1998.413581][  T392]  ? __pfx_warn_alloc+0x10/0x10
[ 1998.413606][  T392]  ? __get_vm_area_node+0x20b/0x300
[ 1998.413630][  T392]  ? __get_vm_area_node+0x20b/0x300
[ 1998.413655][  T392]  __vmalloc_node_range_noprof+0x376/0x1560
[ 1998.413682][  T392]  ? percpu_ref_get_many+0x19/0x140
[ 1998.413703][  T392]  ? __memcg_slab_post_alloc_hook+0x4d6/0xf60
[ 1998.413735][  T392]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1998.413758][  T392]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1998.413780][  T392]  ? memcpy_and_pad+0x48/0x80
[ 1998.413803][  T392]  __vmalloc_node_noprof+0xc2/0x100
[ 1998.413837][  T392]  ? copy_process+0x820/0x43f0
[ 1998.413854][  T392]  ? copy_process+0x820/0x43f0
[ 1998.413874][  T392]  dup_task_struct+0x2a0/0x8e0
[ 1998.413892][  T392]  ? rt_spin_unlock+0x163/0x200
[ 1998.413917][  T392]  copy_process+0x820/0x43f0
[ 1998.413956][  T392]  ? __pfx_copy_process+0x10/0x10
[ 1998.413982][  T392]  vhost_task_create+0x1f9/0x380
[ 1998.414004][  T392]  ? look_up_lock_class+0x57/0x110
[ 1998.414019][  T392]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[ 1998.414038][  T392]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[ 1998.414056][  T392]  ? __pfx_vhost_task_create+0x10/0x10
[ 1998.414084][  T392]  ? __pfx_vhost_task_fn+0x10/0x10
[ 1998.414109][  T392]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1998.414124][  T392]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1998.414140][  T392]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1998.414156][  T392]  ? mutex_lock_nested+0x152/0x1d0
[ 1998.414177][  T392]  ? kvm_mmu_post_init_vm+0x8f/0x2b0
[ 1998.414199][  T392]  kvm_mmu_post_init_vm+0x147/0x2b0
[ 1998.414220][  T392]  kvm_arch_vcpu_ioctl_run+0x7c/0x1920
[ 1998.414247][  T392]  ? rt_write_unlock+0x19c/0x360
[ 1998.414277][  T392]  kvm_vcpu_ioctl+0xa64/0xfe0
[ 1998.414308][  T392]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1998.414337][  T392]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1998.414354][  T392]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1998.414384][  T392]  ? __fget_files+0x2a/0x420
[ 1998.414405][  T392]  ? __fget_files+0x3a8/0x420
[ 1998.414421][  T392]  ? __fget_files+0x2a/0x420
[ 1998.414439][  T392]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1998.414463][  T392]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1998.414487][  T392]  __se_sys_ioctl+0xff/0x170
[ 1998.414510][  T392]  do_syscall_64+0x17b/0x530
[ 1998.414527][  T392]  ? irqentry_exit+0x10f/0x8f0
[ 1998.414541][  T392]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1998.414557][  T392]  ? clear_bhb_loop+0x40/0x90
[ 1998.414577][  T392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1998.414593][  T392] RIP: 0033:0x7f53d1edde99
[ 1998.414608][  T392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1998.414622][  T392] RSP: 002b:00007f53d0136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1998.414639][  T392] RAX: ffffffffffffffda RBX: 00007f53d2165fa0 RCX: 00007f53d1edde99
[ 1998.414651][  T392] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 1998.414661][  T392] RBP: 00007f53d0136090 R08: 0000000000000000 R09: 0000000000000000
[ 1998.414671][  T392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1998.414681][  T392] R13: 00007f53d2166038 R14: 00007f53d2165fa0 R15: 00007fffecb3a538
[ 1998.414706][  T392]  </TASK>
[ 1998.415092][T25733] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1998.488882][  T392] Mem-Info:
[ 1998.488923][  T392] active_anon:23530 inactive_anon:2 isolated_anon:0
[ 1998.488923][  T392]  active_file:2465 inactive_file:59571 isolated_file:0
[ 1998.488923][  T392]  unevictable:770 dirty:50 writeback:3
[ 1998.488923][  T392]  slab_reclaimable:14260 slab_unreclaimable:135980
[ 1998.488923][  T392]  mapped:36706 shmem:16773 pagetables:1542
[ 1998.488923][  T392]  sec_pagetables:0 bounce:0
[ 1998.488923][  T392]  kernel_misc_reclaimable:0
[ 1998.488923][  T392]  free:1218312 free_pcp:3057 free_cma:0
[ 1998.489104][  T392] Node 0 active_anon:94120kB inactive_anon:8kB active_file:9860kB inactive_file:238068kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:146824kB dirty:200kB writeback:12kB shmem:65556kB kernel_stack:18140kB pagetables:6020kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1998.489237][  T392] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1998.489350][  T392] Node 0 DMA free:15344kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1998.489494][  T392] lowmem_reserve[]: 0 2490 2490 2490 2490
[ 1998.489744][  T392] Node 0 DMA32 free:920432kB boost:0kB min:3908kB low:6428kB high:8948kB reserved_highatomic:0KB free_highatomic:0KB active_anon:94120kB inactive_anon:8kB active_file:9860kB inactive_file:238068kB unevictable:1544kB writepending:212kB zspages:0kB present:3129332kB managed:2550076kB mlocked:0kB bounce:0kB free_pcp:12228kB local_pcp:5372kB free_cma:0kB
[ 1998.489915][  T392] lowmem_reserve[]: 0 0 0 0 0
[ 1998.489989][  T392] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:552kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1998.490124][  T392] lowmem_reserve[]: 0 0 0 0 0
[ 1998.490218][  T392] Node 1 Normal free:3937472kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1998.490369][  T392] lowmem_reserve[]: 0 0 0 0 0
[ 1998.490447][  T392] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB
[ 1998.497839][  T392] Node 0 DMA32: 2973*4kB (UME) 3081*8kB (UME) 1400*16kB (UME) 562*32kB (UME) 525*64kB (ME) 553*128kB (UME) 379*256kB (UME) 162*512kB (UME) 42*1024kB (ME) 6*2048kB (UME) 123*4096kB (M) = 920380kB
[ 1998.498284][  T392] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1998.498377][  T392] Node 1 Normal: 2*4kB (UM) 7*8kB (UM) 12*16kB (UM) 6*32kB (UM) 12*64kB (UM) 6*128kB (UM) 3*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 958*4096kB (M) = 3937472kB
[ 1998.499045][  T392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1998.499060][  T392] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1998.499073][  T392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1998.499086][  T392] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1998.499099][  T392] 78807 total pagecache pages
[ 1998.499106][  T392] 2 pages in swap cache
[ 1998.499112][  T392] Free swap  = 118096kB
[ 1998.499118][  T392] Total swap = 124996kB
[ 1998.499125][  T392] 2097051 pages RAM
[ 1998.499131][  T392] 0 pages HighMem/MovableOnly
[ 1998.499137][  T392] 427780 pages reserved
[ 1998.499143][  T392] 0 pages cma reserved
[ 1998.863404][ T9831] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1998.956003][ T9831] usb 6-1: device descriptor read/8, error -71
[ 1999.067351][ T9831] usb usb6-port1: unable to enumerate USB device
[ 1999.225302][T25733] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1999.225335][T25733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1999.225355][T25733] usb 3-1: Product: syz
[ 1999.225370][T25733] usb 3-1: Manufacturer: syz
[ 1999.225385][T25733] usb 3-1: SerialNumber: syz
[ 1999.774543][T25733] usb 3-1: config 0 descriptor??
[ 1999.872120][T25733] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 078
[ 2001.294631][  T393] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[ 2001.521727][T25733]  (null): failure reading functionality
[ 2001.781236][T25853] Bluetooth: hci3: unexpected event for opcode 0x0004
[ 2001.855522][T25733] i2c i2c-2: failure reading functionality
[ 2001.886070][T25733] i2c i2c-2: connected i2c-tiny-usb device
[ 2001.933277][T25733] usb 3-1: USB disconnect, device number 78
[ 2002.042958][T26208] usb 6-1: new low-speed USB device number 29 using dummy_hcd
[ 2002.169527][  T409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9385'.
[ 2002.191767][T26208] usb 6-1: device descriptor read/64, error -71
[ 2002.452676][T26208] usb 6-1: new low-speed USB device number 30 using dummy_hcd
[ 2002.608165][T26208] usb 6-1: device descriptor read/64, error -71
[ 2002.644705][  T417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9387'.
[ 2002.695706][T31108] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2002.737183][T26208] usb usb6-port1: attempt power cycle
[ 2002.851874][T31108] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2002.910601][T31108] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2002.951068][ T9831] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 2002.959738][T31108] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2003.000068][T31108] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2003.100891][ T9831] usb 3-1: Using ep0 maxpacket: 16
[ 2003.119569][ T9831] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10
[ 2003.119606][ T9831] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2003.119641][ T9831] usb 3-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[ 2003.119666][ T9831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2003.222083][ T9831] usb 3-1: config 0 descriptor??
[ 2003.465721][T26208] usb 6-1: new low-speed USB device number 31 using dummy_hcd
[ 2003.491335][T26208] usb 6-1: device descriptor read/8, error -71
[ 2003.527218][ T9831] holtek_mouse 0003:04D9:A0C2.0041: reserved main item tag 0xe
[ 2003.527246][ T9831] hid_parser_main: 30 callbacks suppressed
[ 2003.527259][ T9831] holtek_mouse 0003:04D9:A0C2.0041: unknown main item tag 0x4
[ 2003.527278][ T9831] holtek_mouse 0003:04D9:A0C2.0041: report_id 0 is invalid
[ 2003.527290][ T9831] holtek_mouse 0003:04D9:A0C2.0041: item 0 0 1 8 parsing failed
[ 2003.527891][ T9831] holtek_mouse 0003:04D9:A0C2.0041: hid parse failed: -22
[ 2003.527948][ T9831] holtek_mouse 0003:04D9:A0C2.0041: probe with driver holtek_mouse failed with error -22
[ 2003.699996][ T5604] usb 3-1: USB disconnect, device number 79
[ 2003.750631][T26208] usb 6-1: new low-speed USB device number 32 using dummy_hcd
[ 2003.786963][T26208] usb 6-1: device descriptor read/8, error -71
[ 2003.890892][T26208] usb usb6-port1: unable to enumerate USB device
[ 2004.563865][  T449] o2cb: This node has not been configured.
[ 2004.563883][  T449] o2cb: Cluster check failed. Fix errors before retrying.
[ 2004.563913][  T449] (syz.3.9392,449,1):user_dlm_register:674 ERROR: status = -22
[ 2004.563942][  T449] (syz.3.9392,449,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0"
[ 2005.261510][  T469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2005.502900][  T415] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2005.503691][  T415] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2005.503992][  T415] bridge_slave_0: entered allmulticast mode
[ 2005.519479][  T415] bridge_slave_0: entered promiscuous mode
[ 2005.530396][T25853] Bluetooth: hci6: command tx timeout
[ 2005.598424][  T415] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2005.598894][  T415] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2005.600385][  T415] bridge_slave_1: entered allmulticast mode
[ 2005.603001][  T475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9400'.
[ 2005.622534][  T415] bridge_slave_1: entered promiscuous mode
[ 2005.800522][  T415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2005.830067][  T415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2005.858432][T25853] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 2005.942114][T25853] Bluetooth: hci3: Injecting HCI hardware error event
[ 2005.959334][T25853] Bluetooth: hci3: hardware error 0x00
[ 2006.356544][  T415] team0: Port device team_slave_0 added
[ 2006.388260][  T415] team0: Port device team_slave_1 added
[ 2006.679441][T31256] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 2006.719137][  T415] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2006.719157][  T415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2006.719189][  T415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2006.725582][  T415] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2006.725599][  T415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2006.725637][  T415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2006.866254][T31256] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2006.866311][T31256] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2006.866335][T31256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 2006.866362][T31256] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 2006.940259][T31256] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2006.940290][T31256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2006.940310][T31256] usb 3-1: Product: syz
[ 2006.940326][T31256] usb 3-1: Manufacturer: syz
[ 2006.940340][T31256] usb 3-1: SerialNumber: syz
[ 2006.986049][T31256] usb 3-1: config 0 descriptor??
[ 2006.997116][T31256] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected
[ 2007.040493][T31256] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[ 2007.077481][T31256] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[ 2007.246500][  T415] hsr_slave_0: entered promiscuous mode
[ 2007.255086][  T415] hsr_slave_1: entered promiscuous mode
[ 2007.257672][  T415] debugfs: 'hsr0' already exists in 'hsr'
[ 2007.257714][  T415] Cannot create hsr debugfs directory
[ 2007.423999][T31256] usb 3-1: USB disconnect, device number 80
[ 2007.430795][T31256] garmin_gps 3-1:0.0: device disconnected
[ 2007.608187][T31108] Bluetooth: hci6: command tx timeout
[ 2008.274589][  T505] sg_write: data in/out 417756/136 bytes for SCSI command 0x0-- guessing data in;
[ 2008.274589][  T505]    program syz.5.9410 not setting count and/or reply_len properly
[ 2008.321615][ T5604] libceph: connect (1)[c::]:6789 error -101
[ 2008.321857][ T5604] libceph: mon0 (1)[c::]:6789 connect error
[ 2008.323964][ T5604] libceph: connect (1)[c::]:6789 error -101
[ 2008.344596][ T5604] libceph: mon0 (1)[c::]:6789 connect error
[ 2008.355004][  T505] ceph: No mds server is up or the cluster is laggy
[ 2008.412140][T25853] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 2008.707299][ T5704] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 2008.929954][ T5704] usb 3-1: config 2 interface 0 altsetting 178 has an endpoint descriptor with address 0x1F, changing to 0xF
[ 2008.929988][ T5704] usb 3-1: config 2 interface 0 altsetting 178 endpoint 0xF has invalid wMaxPacketSize 0
[ 2008.930012][ T5704] usb 3-1: config 2 interface 0 has no altsetting 0
[ 2009.118143][ T5704] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[ 2009.118175][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2009.118197][ T5704] usb 3-1: Product: syz
[ 2009.118213][ T5704] usb 3-1: Manufacturer: syz
[ 2009.118229][ T5704] usb 3-1: SerialNumber: syz
[ 2009.387452][  T511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2009.388048][  T511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2009.389530][  T511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2009.390123][  T511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2009.394103][  T511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2009.394608][  T511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2009.401455][  T511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2009.405008][  T511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2009.406359][  T511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2009.413525][  T511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2009.536961][ T5768] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 2009.622034][ T5704] ims_pcu 3-1:2.0: Control endpoint is not INTERRUPT IN
[ 2009.622084][ T5704] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22
[ 2009.674933][  T415] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2009.686929][ T5768] usb 4-1: Using ep0 maxpacket: 8
[ 2009.687064][T25853] Bluetooth: hci6: command tx timeout
[ 2009.689125][ T5768] usb 4-1: config 127 has an invalid interface number: 171 but max is 1
[ 2009.689148][ T5768] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[ 2009.689166][ T5768] usb 4-1: config 127 has no interface number 1
[ 2009.689200][ T5768] usb 4-1: config 127 interface 171 has no altsetting 0
[ 2009.693707][ T5768] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[ 2009.693733][ T5768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2009.693751][ T5768] usb 4-1: Product: syz
[ 2009.693765][ T5768] usb 4-1: Manufacturer: syz
[ 2009.693778][ T5768] usb 4-1: SerialNumber: syz
[ 2009.867019][ T5704] usb 3-1: USB disconnect, device number 81
[ 2009.868725][  T415] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2010.131494][  T522] netlink: 'syz.3.9414': attribute type 62 has an invalid length.
[ 2010.199161][  T518] kAFS: unable to lookup cell 'ÿ'
[ 2010.243703][ T5768] xr_serial 4-1:127.171: xr_serial converter detected
[ 2010.261860][ T5768] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[ 2010.261907][ T5768] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[ 2010.296893][ T5768] usb 4-1: USB disconnect, device number 22
[ 2010.328310][ T5768] xr_serial 4-1:127.171: device disconnected
[ 2010.443516][  T415] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2010.482358][  T415] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2010.483694][  T415] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2010.532458][  T415] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2010.569962][  T415] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2010.615738][  T415] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2011.038522][  T415] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2011.450150][  T415] 8021q: adding VLAN 0 to HW filter on device team0
[ 2011.492888][T20605] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2011.507683][T20605] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2011.618729][T20607] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2011.618900][T20607] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2011.766437][T25853] Bluetooth: hci6: command tx timeout
[ 2012.150460][T25733] kernel read not supported for file /dsp (pid: 25733 comm: kworker/1:2)
[ 2012.153411][  T544] FAULT_INJECTION: forcing a failure.
[ 2012.153411][  T544] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2012.153458][  T544] CPU: 1 UID: 0 PID: 544 Comm: syz.3.9419 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2012.153486][  T544] Tainted: [L]=SOFTLOCKUP
[ 2012.153494][  T544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2012.153507][  T544] Call Trace:
[ 2012.153515][  T544]  <TASK>
[ 2012.153530][  T544]  dump_stack_lvl+0xe8/0x150
[ 2012.153561][  T544]  should_fail_ex+0x467/0x600
[ 2012.153593][  T544]  _copy_from_user+0x2d/0xb0
[ 2012.153614][  T544]  kstrtouint_from_user+0xd6/0x180
[ 2012.153644][  T544]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 2012.153688][  T544]  ? __lock_acquire+0x6df/0x2e40
[ 2012.153710][  T544]  ? trace_raw_output_btrfs_log_inode_enter+0x500/0x500
[ 2012.153752][  T544]  ? lock_acquire+0x115/0x350
[ 2012.153791][  T544]  proc_fail_nth_write+0x8e/0x210
[ 2012.153816][  T544]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2012.153849][  T544]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2012.153885][  T544]  vfs_write+0x29f/0xbb0
[ 2012.153917][  T544]  ? __pfx_vfs_write+0x10/0x10
[ 2012.153944][  T544]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2012.153967][  T544]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2012.153987][  T544]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2012.154008][  T544]  ? mutex_lock_nested+0x152/0x1d0
[ 2012.154034][  T544]  ? fdget_pos+0x252/0x320
[ 2012.154063][  T544]  ksys_write+0x156/0x270
[ 2012.154090][  T544]  ? __pfx_ksys_write+0x10/0x10
[ 2012.154124][  T544]  do_syscall_64+0x17b/0x530
[ 2012.154145][  T544]  ? irqentry_exit+0x10f/0x8f0
[ 2012.154164][  T544]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2012.154185][  T544]  ? clear_bhb_loop+0x40/0x90
[ 2012.154211][  T544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2012.154232][  T544] RIP: 0033:0x7f53d1e9e6ce
[ 2012.154251][  T544] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2012.154270][  T544] RSP: 002b:00007f53d0135fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2012.154292][  T544] RAX: ffffffffffffffda RBX: 00007f53d01366c0 RCX: 00007f53d1e9e6ce
[ 2012.154307][  T544] RDX: 0000000000000001 RSI: 00007f53d01360a0 RDI: 0000000000000006
[ 2012.154321][  T544] RBP: 00007f53d0136090 R08: 0000000000000000 R09: 0000000000000000
[ 2012.154334][  T544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2012.154347][  T544] R13: 00007f53d2166038 R14: 00007f53d2165fa0 R15: 00007fffecb3a538
[ 2012.154379][  T544]  </TASK>
[ 2012.808642][  T568] netlink: 264 bytes leftover after parsing attributes in process `syz.5.9424'.
[ 2013.421140][  T415] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2013.454572][ T9831] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 2013.627044][ T9831] usb 6-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config
[ 2013.629482][ T9831] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41
[ 2013.629511][ T9831] usb 6-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2
[ 2013.629532][ T9831] usb 6-1: Product: syz
[ 2013.629547][ T9831] usb 6-1: SerialNumber: syz
[ 2013.680475][ T9831] usb 6-1: config 0 descriptor??
[ 2013.697627][ T9831] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[ 2013.700036][ T9831] usb 6-1: Detected SIO
[ 2013.702748][ T9831] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 2013.921500][  T415] veth0_vlan: entered promiscuous mode
[ 2013.945552][  T415] veth1_vlan: entered promiscuous mode
[ 2014.037656][  T415] veth0_macvtap: entered promiscuous mode
[ 2014.056158][  T415] veth1_macvtap: entered promiscuous mode
[ 2014.118558][  T415] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2014.146509][  T415] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2014.197575][T20274] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2014.203117][T20611] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2014.203399][T20611] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2014.279477][ T9975] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2014.409954][T25733] kernel read not supported for file /dsp (pid: 25733 comm: kworker/1:2)
[ 2014.421100][T32379] usb 6-1: USB disconnect, device number 33
[ 2014.470327][T32379] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 2014.478583][T32379] ftdi_sio 6-1:0.0: device disconnected
[ 2014.549835][  T594] input: syz0 as /devices/virtual/input/input64
[ 2016.397439][  T609] input: syz1 as /devices/virtual/input/input65
[ 2016.445753][  T607] Invalid ELF header magic: != ELF
[ 2016.508547][T20271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2016.508569][T20271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2016.608043][T11433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2016.608066][T11433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2016.806175][T31256] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 2016.998905][T31256] usb 3-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2016.999052][T31256] usb 3-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2017.000754][T31256] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2017.000786][T31256] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2017.000805][T31256] usb 3-1: Manufacturer: syz
[ 2017.000819][T31256] usb 3-1: SerialNumber: syz
[ 2017.238464][  T621] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[ 2017.423594][  T626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2017.424147][  T626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2017.531626][T31256] usbhid 3-1:36.0: couldn't find an input interrupt endpoint
[ 2017.573734][T31256] usb 3-1: USB disconnect, device number 82
[ 2018.368533][  T634] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.9444'.
[ 2018.586612][  T648] FAULT_INJECTION: forcing a failure.
[ 2018.586612][  T648] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2018.586642][  T648] CPU: 1 UID: 0 PID: 648 Comm: syz.3.9446 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2018.586665][  T648] Tainted: [L]=SOFTLOCKUP
[ 2018.586671][  T648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2018.586681][  T648] Call Trace:
[ 2018.586688][  T648]  <TASK>
[ 2018.586695][  T648]  dump_stack_lvl+0xe8/0x150
[ 2018.586719][  T648]  should_fail_ex+0x467/0x600
[ 2018.586744][  T648]  _copy_from_iter+0x1d3/0x1660
[ 2018.586772][  T648]  ? __lock_acquire+0x6df/0x2e40
[ 2018.586790][  T648]  ? __pfx__copy_from_iter+0x10/0x10
[ 2018.586815][  T648]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2018.586843][  T648]  tun_get_user+0x259/0x4380
[ 2018.586859][  T648]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2018.586880][  T648]  ? __lock_acquire+0x690/0x2e40
[ 2018.586896][  T648]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2018.586922][  T648]  ? __pfx_tun_get_user+0x10/0x10
[ 2018.586937][  T648]  ? rt_spin_unlock+0x157/0x200
[ 2018.586981][  T648]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2018.586998][  T648]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2018.587024][  T648]  ? tun_get+0x1c/0x2f0
[ 2018.587044][  T648]  tun_chr_write_iter+0x119/0x210
[ 2018.587063][  T648]  vfs_write+0x61e/0xbb0
[ 2018.587087][  T648]  ? __pfx_vfs_write+0x10/0x10
[ 2018.587113][  T648]  ? __fget_files+0x2a/0x420
[ 2018.587136][  T648]  ksys_write+0x156/0x270
[ 2018.587156][  T648]  ? __pfx_ksys_write+0x10/0x10
[ 2018.587182][  T648]  do_syscall_64+0x17b/0x530
[ 2018.587198][  T648]  ? irqentry_exit+0x10f/0x8f0
[ 2018.587213][  T648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2018.587229][  T648]  ? clear_bhb_loop+0x40/0x90
[ 2018.587249][  T648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2018.587265][  T648] RIP: 0033:0x7f53d1edde99
[ 2018.587280][  T648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2018.587294][  T648] RSP: 002b:00007f53d0136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2018.587311][  T648] RAX: ffffffffffffffda RBX: 00007f53d2165fa0 RCX: 00007f53d1edde99
[ 2018.587323][  T648] RDX: 000000000000006a RSI: 0000200000000280 RDI: 0000000000000003
[ 2018.587333][  T648] RBP: 00007f53d0136090 R08: 0000000000000000 R09: 0000000000000000
[ 2018.587343][  T648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2018.587352][  T648] R13: 00007f53d2166038 R14: 00007f53d2165fa0 R15: 00007fffecb3a538
[ 2018.587376][  T648]  </TASK>
[ 2019.739390][  T670] tmpfs: Bad value for 'mpol'
[ 2020.395837][ T9831] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 2020.492132][  T692] 
: renamed from bridge_slave_0 (while UP)
[ 2020.551937][ T9831] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2020.551997][ T9831] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2020.573258][ T9831] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2020.573287][ T9831] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2020.573305][ T9831] usb 4-1: Manufacturer: syz
[ 2020.579433][ T9831] usb 4-1: config 0 descriptor??
[ 2020.616175][ T9831] igorplugusb 4-1:0.0: incorrect number of endpoints
[ 2020.832103][ T9831] usb 4-1: USB disconnect, device number 23
[ 2021.027214][  T702] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9463'.
[ 2021.142074][  T702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2021.250542][  T706] Flush: task=syz.7.9465[706] dev=loop8 state=2
[ 2021.429828][  T706] Teardown: task=syz.7.9465[706] dev=loop8 state=2
[ 2021.685903][  T713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9467'.
[ 2022.057348][  T730] netlink: 'syz.5.9474': attribute type 1 has an invalid length.
[ 2022.057368][  T730] netlink: 'syz.5.9474': attribute type 4 has an invalid length.
[ 2022.057392][  T730] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.9474'.
[ 2022.106199][  T732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2022.106723][  T732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2022.151917][T27095] do_umount: task=syz-executor[27095] propagate_mount_busy()!=0
[ 2022.177866][  T737] FAULT_INJECTION: forcing a failure.
[ 2022.177866][  T737] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2022.177907][  T737] CPU: 1 UID: 0 PID: 737 Comm: syz.2.9475 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2022.177937][  T737] Tainted: [L]=SOFTLOCKUP
[ 2022.177946][  T737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2022.177959][  T737] Call Trace:
[ 2022.177969][  T737]  <TASK>
[ 2022.177978][  T737]  dump_stack_lvl+0xe8/0x150
[ 2022.178017][  T737]  should_fail_ex+0x467/0x600
[ 2022.178053][  T737]  _copy_from_user+0x2d/0xb0
[ 2022.178076][  T737]  ___sys_sendmsg+0x1c6/0x360
[ 2022.178110][  T737]  ? __lock_acquire+0x6df/0x2e40
[ 2022.178138][  T737]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2022.178209][  T737]  ? __fget_files+0x2a/0x420
[ 2022.178233][  T737]  ? __fget_files+0x3a8/0x420
[ 2022.178267][  T737]  __x64_sys_sendmsg+0x1b7/0x290
[ 2022.178303][  T737]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2022.178358][  T737]  do_syscall_64+0x17b/0x530
[ 2022.178382][  T737]  ? irqentry_exit+0x10f/0x8f0
[ 2022.178405][  T737]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2022.178428][  T737]  ? clear_bhb_loop+0x40/0x90
[ 2022.178456][  T737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2022.178479][  T737] RIP: 0033:0x7f0c6993de99
[ 2022.178500][  T737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2022.178521][  T737] RSP: 002b:00007f0c67b96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2022.178545][  T737] RAX: ffffffffffffffda RBX: 00007f0c69bc5fa0 RCX: 00007f0c6993de99
[ 2022.178562][  T737] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003
[ 2022.178578][  T737] RBP: 00007f0c67b96090 R08: 0000000000000000 R09: 0000000000000000
[ 2022.178592][  T737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2022.178606][  T737] R13: 00007f0c69bc6038 R14: 00007f0c69bc5fa0 R15: 00007ffd0dee7538
[ 2022.178641][  T737]  </TASK>
[ 2022.572075][ T5604] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 2022.738811][ T5604] usb 6-1: device descriptor read/64, error -71
[ 2023.128047][ T5604] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 2023.178631][T32379] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 2023.258412][ T5604] usb 6-1: device descriptor read/64, error -71
[ 2023.356501][T32379] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2023.356549][T32379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2023.356570][T32379] usb 3-1: Product: syz
[ 2023.356602][T32379] usb 3-1: Manufacturer: syz
[ 2023.356617][T32379] usb 3-1: SerialNumber: syz
[ 2023.378436][ T5604] usb usb6-port1: attempt power cycle
[ 2023.537225][T32378] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2023.738303][ T5604] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 2023.762128][ T5604] usb 6-1: device descriptor read/8, error -71
[ 2024.005895][ T5604] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 2024.036007][ T5604] usb 6-1: device descriptor read/8, error -71
[ 2024.138598][ T5604] usb usb6-port1: unable to enumerate USB device
[ 2024.995951][T31108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2025.085621][T31108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2025.095814][T31108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2025.141522][T31108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2025.145263][T31108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2025.159952][T32378] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2026.268190][T27412] usb 3-1: USB disconnect, device number 83
[ 2026.425896][  T774] FAULT_INJECTION: forcing a failure.
[ 2026.425896][  T774] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2026.425932][  T774] CPU: 1 UID: 0 PID: 774 Comm: syz.5.9487 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2026.425960][  T774] Tainted: [L]=SOFTLOCKUP
[ 2026.425968][  T774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2026.425980][  T774] Call Trace:
[ 2026.425989][  T774]  <TASK>
[ 2026.425998][  T774]  dump_stack_lvl+0xe8/0x150
[ 2026.426030][  T774]  should_fail_ex+0x467/0x600
[ 2026.426062][  T774]  _copy_from_user+0x2d/0xb0
[ 2026.426089][  T774]  input_event_from_user+0xb1/0x290
[ 2026.426252][  T774]  ? __pfx_input_event_from_user+0x10/0x10
[ 2026.426278][  T774]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2026.426301][  T774]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2026.426323][  T774]  ? mutex_lock_interruptible_nested+0x152/0x1d0
[ 2026.426355][  T774]  ? evdev_write+0x1b1/0x4c0
[ 2026.426409][  T774]  evdev_write+0x2ca/0x4c0
[ 2026.426432][  T774]  ? __lock_acquire+0x6df/0x2e40
[ 2026.426459][  T774]  ? __pfx_evdev_write+0x10/0x10
[ 2026.426485][  T774]  ? bpf_lsm_file_permission+0x9/0x20
[ 2026.426517][  T774]  ? security_file_permission+0x68/0x220
[ 2026.426546][  T774]  ? rw_verify_area+0x209/0x4d0
[ 2026.426574][  T774]  ? __pfx_evdev_write+0x10/0x10
[ 2026.426597][  T774]  vfs_write+0x29f/0xbb0
[ 2026.426634][  T774]  ? __pfx_vfs_write+0x10/0x10
[ 2026.426663][  T774]  ? __fget_files+0x2a/0x420
[ 2026.426689][  T774]  ? __fget_files+0x2a/0x420
[ 2026.426712][  T774]  ? __fget_files+0x3a8/0x420
[ 2026.426734][  T774]  ? __fget_files+0x2a/0x420
[ 2026.426767][  T774]  ksys_write+0x156/0x270
[ 2026.426797][  T774]  ? __pfx_ksys_write+0x10/0x10
[ 2026.426843][  T774]  do_syscall_64+0x17b/0x530
[ 2026.426866][  T774]  ? irqentry_exit+0x10f/0x8f0
[ 2026.426888][  T774]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2026.426912][  T774]  ? clear_bhb_loop+0x40/0x90
[ 2026.426940][  T774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2026.426963][  T774] RIP: 0033:0x7f838506de99
[ 2026.426985][  T774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2026.427005][  T774] RSP: 002b:00007f83832c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2026.427029][  T774] RAX: ffffffffffffffda RBX: 00007f83852f5fa0 RCX: 00007f838506de99
[ 2026.427047][  T774] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003
[ 2026.427061][  T774] RBP: 00007f83832c6090 R08: 0000000000000000 R09: 0000000000000000
[ 2026.427075][  T774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2026.427089][  T774] R13: 00007f83852f6038 R14: 00007f83852f5fa0 R15: 00007ffd91b690f8
[ 2026.427125][  T774]  </TASK>
[ 2026.817878][T32378] ath9k_htc: Failed to initialize the device
[ 2026.820680][T27412] usb 3-1: ath9k_htc: USB layer deinitialized
[ 2027.436407][T31108] Bluetooth: hci1: command tx timeout
[ 2027.488999][ T1170] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2028.310820][ T1170] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2028.992476][  T809] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9494'.
[ 2029.043123][ T1170] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2029.222916][  T760] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2029.228547][  T760] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2029.233476][  T760] bridge_slave_0: entered allmulticast mode
[ 2029.267533][  T760] bridge_slave_0: entered promiscuous mode
[ 2029.273383][  T760] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2029.273820][  T760] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2029.274127][  T760] bridge_slave_1: entered allmulticast mode
[ 2029.305457][  T760] bridge_slave_1: entered promiscuous mode
[ 2029.411866][  T760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2029.564780][T31108] Bluetooth: hci1: command tx timeout
[ 2029.637119][ T1170] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2029.684866][ T5727] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 2029.757090][  T760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2029.836377][ T5727] usb 3-1: Using ep0 maxpacket: 32
[ 2029.838610][ T5727] usb 3-1: config 9 has an invalid interface number: 27 but max is 0
[ 2029.838638][ T5727] usb 3-1: config 9 has no interface number 0
[ 2029.838672][ T5727] usb 3-1: config 9 interface 27 has no altsetting 0
[ 2029.841584][ T5727] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=71.fa
[ 2029.841603][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2029.841616][ T5727] usb 3-1: Product: syz
[ 2029.841625][ T5727] usb 3-1: Manufacturer: syz
[ 2029.841635][ T5727] usb 3-1: SerialNumber: syz
[ 2029.926840][  T818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2029.993533][  T819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2030.020513][  T818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2030.066562][  T812] netlink: 'syz.2.9495': attribute type 2 has an invalid length.
[ 2030.294543][ T5727] qmi_wwan 3-1:9.27: bogus CDC Union: master=0, slave=1
[ 2030.294806][ T5727] qmi_wwan 3-1:9.27: probe with driver qmi_wwan failed with error -22
[ 2030.318256][ T5727] usb 3-1: USB disconnect, device number 84
[ 2030.562758][  T760] team0: Port device team_slave_0 added
[ 2030.581253][  T760] team0: Port device team_slave_1 added
[ 2030.693403][  T760] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2030.693417][  T760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2030.693436][  T760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2030.719339][  T760] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2030.719392][  T760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2030.719478][  T760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2031.076819][  T760] hsr_slave_0: entered promiscuous mode
[ 2031.102724][  T760] hsr_slave_1: entered promiscuous mode
[ 2031.112521][  T760] debugfs: 'hsr0' already exists in 'hsr'
[ 2031.112549][  T760] Cannot create hsr debugfs directory
[ 2031.594036][T31108] Bluetooth: hci1: command tx timeout
[ 2031.634681][  T833] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9501'.
[ 2032.189201][T31107] do_umount: task=syz-executor[31107] propagate_mount_busy()!=0
[ 2032.189466][T31107] do_umount: task=syz-executor[31107] propagate_mount_busy()!=0
[ 2032.668645][ T1170] bridge_slave_1: left allmulticast mode
[ 2032.668676][ T1170] bridge_slave_1: left promiscuous mode
[ 2032.668907][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2032.963629][ T1170] bridge_slave_0: left allmulticast mode
[ 2032.963658][ T1170] bridge_slave_0: left promiscuous mode
[ 2032.963964][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2033.671920][T31108] Bluetooth: hci1: command tx timeout
[ 2034.313925][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2034.372178][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2034.414012][ T1170] bond0 (unregistering): Released all slaves
[ 2034.945143][    C1] Unknown status report in ack skb
[ 2038.032900][ T1344] ieee802154 phy1 wpan1: encryption failed: -22
[ 2038.230890][T25853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2038.295621][T25853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2038.297749][T25853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2038.324854][T25853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2038.325793][T25853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2040.756771][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5
[ 2040.969199][T31108] Bluetooth: hci3: command tx timeout
[ 2042.369572][  T760] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 2042.426383][  T760] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2042.459684][  T760] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 2042.761988][  T760] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2043.120560][T31108] Bluetooth: hci3: command tx timeout
[ 2043.333822][  T760] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 2043.526408][ T5758] usb 1-1: Failed to load image "edgeport/boot.fw" err -110
[ 2043.643317][ T5758] usb 1-1: EPiC device converter now attached to ttyUSB0
[ 2043.694282][ T5758] usb 1-1: USB disconnect, device number 97
[ 2043.789514][ T5758] epic ttyUSB0: EPiC device converter now disconnected from ttyUSB0
[ 2043.791856][ T5758] io_edgeport 1-1:160.168: device disconnected
[ 2043.901214][  T760] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2044.761184][  T760] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 2044.870329][  T760] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2045.045297][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6
[ 2045.217587][T31108] Bluetooth: hci3: command tx timeout
[ 2046.217519][ T1170] hsr_slave_1: left promiscuous mode
[ 2046.218850][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2046.218877][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2046.262927][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2046.262974][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2046.359415][ T1170] veth1_macvtap: left promiscuous mode
[ 2046.359483][ T1170] veth0_macvtap: left promiscuous mode
[ 2046.359661][ T1170] veth1_vlan: left promiscuous mode
[ 2046.359823][ T1170] veth0_vlan: left promiscuous mode
[ 2047.267607][T31108] Bluetooth: hci3: command tx timeout
[ 2051.457891][ T1170] team0 (unregistering): Port device team_slave_1 removed
[ 2051.508033][ T1170] team0 (unregistering): Port device team_slave_0 removed
[ 2051.809885][ T5257] 8021q: adding VLAN 0 to HW filter on device eth7
[ 2052.111457][ T1025] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1802
[ 2052.660044][ T1037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9543'.
[ 2052.753222][  T760] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2052.998068][  T883] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2053.003254][  T883] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2053.003731][  T883] bridge_slave_0: entered allmulticast mode
[ 2053.031990][  T883] bridge_slave_0: entered promiscuous mode
[ 2053.177165][  T883] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2053.177603][  T883] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2053.177968][  T883] bridge_slave_1: entered allmulticast mode
[ 2053.181745][  T883] bridge_slave_1: entered promiscuous mode
[ 2053.244102][  T760] 8021q: adding VLAN 0 to HW filter on device team0
[ 2053.271196][ T1057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9548'.
[ 2053.411917][ T8457] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2053.412079][ T8457] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2053.557889][  T883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2053.730398][  T883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2053.845146][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2053.845309][ T8845] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2054.102858][  T883] team0: Port device team_slave_0 added
[ 2054.195186][  T883] team0: Port device team_slave_1 added
[ 2054.517880][  T883] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2054.517897][  T883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2054.517923][  T883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2054.602573][  T883] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2054.602592][  T883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2054.602635][  T883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2054.675079][ T1085] Config c/1 of g_uac2 needs at least one function.
[ 2054.675178][ T1085] udc usbip-vudc.0: failed to start g_uac2: -22
[ 2054.675194][ T1085] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22
[ 2054.675938][ T1085] UDC core: g_uac2: couldn't find an available UDC or it's busy
[ 2055.099713][ T5257] 8021q: adding VLAN 0 to HW filter on device eth8
[ 2055.129366][  T883] hsr_slave_0: entered promiscuous mode
[ 2055.141452][  T883] hsr_slave_1: entered promiscuous mode
[ 2055.151387][  T883] debugfs: 'hsr0' already exists in 'hsr'
[ 2055.151438][  T883] Cannot create hsr debugfs directory
[ 2055.872137][T31108] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[ 2055.872178][T31108] CPU: 1 UID: 0 PID: 31108 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2055.872201][T31108] Tainted: [L]=SOFTLOCKUP
[ 2055.872206][T31108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2055.872217][T31108] Workqueue: hci5 hci_rx_work
[ 2055.872327][T31108] Call Trace:
[ 2055.872351][T31108]  <TASK>
[ 2055.872363][T31108]  dump_stack_lvl+0xe8/0x150
[ 2055.872389][T31108]  sysfs_create_dir_ns+0x271/0x2a0
[ 2055.872408][T31108]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2055.872432][T31108]  ? rt_spin_unlock+0x163/0x200
[ 2055.872460][T31108]  kobject_add_internal+0x62c/0xce0
[ 2055.872487][T31108]  kobject_add+0x163/0x240
[ 2055.872504][T31108]  ? rt_spin_unlock+0x157/0x200
[ 2055.872537][T31108]  ? __pfx_kobject_add+0x10/0x10
[ 2055.872561][T31108]  ? get_device_parent+0x370/0x3a0
[ 2055.872584][T31108]  device_add+0x3fa/0xb80
[ 2055.872603][T31108]  hci_conn_add_sysfs+0xd5/0x210
[ 2055.872670][T31108]  le_conn_complete_evt+0xfef/0x1580
[ 2055.872726][T31108]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 2055.872746][T31108]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2055.872761][T31108]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2055.872781][T31108]  ? rt_mutex_slowunlock+0x219/0x460
[ 2055.872803][T31108]  ? skb_pull_data+0xf0/0x200
[ 2055.872823][T31108]  hci_le_conn_complete_evt+0x187/0x470
[ 2055.872847][T31108]  hci_event_packet+0x67a/0xf10
[ 2055.872886][T31108]  ? reacquire_held_locks+0x117/0x1a0
[ 2055.872909][T31108]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 2055.872925][T31108]  ? __pfx_hci_event_packet+0x10/0x10
[ 2055.872950][T31108]  ? rt_spin_unlock+0x157/0x200
[ 2055.872978][T31108]  ? hci_send_to_monitor+0xe2/0x590
[ 2055.873002][T31108]  hci_rx_work+0x3ee/0x1020
[ 2055.873032][T31108]  ? process_one_work+0x7fd/0x1480
[ 2055.873049][T31108]  process_one_work+0xaaf/0x1480
[ 2055.873081][T31108]  ? __pfx_process_one_work+0x10/0x10
[ 2055.873095][T31108]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2055.873123][T31108]  ? assign_work+0x3cf/0x5d0
[ 2055.873143][T31108]  worker_thread+0xb05/0x10d0
[ 2055.873168][T31108]  ? __kthread_parkme+0x71/0x1f0
[ 2055.873194][T31108]  kthread+0x388/0x470
[ 2055.873215][T31108]  ? __pfx_worker_thread+0x10/0x10
[ 2055.873231][T31108]  ? __pfx_kthread+0x10/0x10
[ 2055.873254][T31108]  ret_from_fork+0x514/0xb70
[ 2055.873279][T31108]  ? __pfx_ret_from_fork+0x10/0x10
[ 2055.873301][T31108]  ? __switch_to+0xc89/0x1420
[ 2055.873322][T31108]  ? __pfx_kthread+0x10/0x10
[ 2055.873345][T31108]  ret_from_fork_asm+0x1a/0x30
[ 2055.873379][T31108]  </TASK>
[ 2055.873511][T31108] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 2055.873565][T31108] Bluetooth: hci5: failed to register connection device
[ 2058.351628][ T1137] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9557'.
[ 2058.437971][ T1137] o2cb: This node has not been configured.
[ 2058.438013][ T1137] o2cb: Cluster check failed. Fix errors before retrying.
[ 2058.438284][ T1137] (syz.2.9557,1137,0):user_dlm_register:674 ERROR: status = -22
[ 2058.438344][ T1137] (syz.2.9557,1137,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0"
[ 2059.696154][  T760] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2060.860780][  T883] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2060.904834][  T883] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2060.917239][  T883] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2061.106726][T25853] Bluetooth: hci5: command 0x0406 tx timeout
[ 2061.189744][  T883] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2061.196345][  T883] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2061.540943][  T883] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2061.557419][  T883] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2061.822823][  T883] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2063.712609][  T760] veth0_vlan: entered promiscuous mode
[ 2064.060722][T26208] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 2064.279516][T26208] usb 3-1: Using ep0 maxpacket: 8
[ 2064.673042][  T760] veth1_vlan: entered promiscuous mode
[ 2064.829187][  T883] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2064.880559][  T760] veth0_macvtap: entered promiscuous mode
[ 2064.926456][  T883] 8021q: adding VLAN 0 to HW filter on device team0
[ 2064.932657][  T760] veth1_macvtap: entered promiscuous mode
[ 2065.002873][T26208] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2065.002911][T26208] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2065.002946][T26208] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[ 2065.002969][T26208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2065.011048][T26208] usb 3-1: config 0 descriptor??
[ 2065.118233][  T760] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2065.372794][ T1188] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[ 2065.372912][ T1188] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[ 2065.379186][ T1188] udc dummy_udc.0: failed to start g1: -22
[ 2065.379256][ T1188] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[ 2065.454537][ T1188] UDC core: g1: couldn't find an available UDC or it's busy
[ 2066.330786][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2066.331024][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2066.335962][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2066.340755][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2066.383204][  T760] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2066.469665][T26208] pantherlord 0003:0810:0001.0042: unknown main item tag 0x0
[ 2066.469703][T26208] pantherlord 0003:0810:0001.0042: unknown main item tag 0x0
[ 2066.469730][T26208] pantherlord 0003:0810:0001.0042: unknown main item tag 0x0
[ 2066.469756][T26208] pantherlord 0003:0810:0001.0042: unknown main item tag 0x0
[ 2066.469782][T26208] pantherlord 0003:0810:0001.0042: unknown main item tag 0x0
[ 2066.469807][T26208] pantherlord 0003:0810:0001.0042: unknown main item tag 0x0
[ 2066.469832][T26208] pantherlord 0003:0810:0001.0042: unknown main item tag 0x0
[ 2066.469857][T26208] pantherlord 0003:0810:0001.0042: unknown main item tag 0x0
[ 2066.469883][T26208] pantherlord 0003:0810:0001.0042: unknown main item tag 0x0
[ 2066.469908][T26208] pantherlord 0003:0810:0001.0042: unknown main item tag 0x0
[ 2066.562813][T26208] pantherlord 0003:0810:0001.0042: hidraw0: USB HID v7f.ff Device [HID 0810:0001] on usb-dummy_hcd.2-1/input0
[ 2066.562857][T26208] pantherlord 0003:0810:0001.0042: no output reports found
[ 2066.646545][T32378] usb 3-1: USB disconnect, device number 85
[ 2066.847144][T11500] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2066.879217][ T1190] fido_id[1190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 2066.882891][T11500] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2066.913891][T11500] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2067.004351][ T8856] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2067.513993][ T1199] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9569'.
[ 2072.315026][ T8845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2072.315046][ T8845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2072.531768][T20605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2072.531790][T20605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2072.765847][ T1244] ALSA: mixer_oss: invalid OSS volume 'syz_t'
[ 2073.493058][  T883] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2074.126637][  T883] veth0_vlan: entered promiscuous mode
[ 2074.164921][  T883] veth1_vlan: entered promiscuous mode
[ 2074.271107][  T883] veth0_macvtap: entered promiscuous mode
[ 2074.302586][  T883] veth1_macvtap: entered promiscuous mode
[ 2074.433124][  T883] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2074.480670][  T883] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2074.537240][ T8845] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2074.537698][ T8845] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2074.537747][ T8845] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2074.537805][ T8845] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2076.110593][ T8851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2076.110619][ T8851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2076.677428][T24293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2076.677447][T24293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2090.387384][   T39] INFO: task syz.0.9139:31973 blocked for more than 143 seconds.
[ 2090.387412][   T39]       Tainted: G             L      syzkaller #0
[ 2090.387425][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2090.387436][   T39] task:syz.0.9139      state:D stack:27336 pid:31973 tgid:31972 ppid:25299  task_flags:0x400140 flags:0x00080002
[ 2090.387506][   T39] Call Trace:
[ 2090.387514][   T39]  <TASK>
[ 2090.387528][   T39]  __schedule+0x1709/0x5530
[ 2090.387578][   T39]  ? __pfx_sched_clock_cpu+0x10/0x10
[ 2090.387618][   T39]  ? __pfx___schedule+0x10/0x10
[ 2090.387673][   T39]  rt_mutex_schedule+0x76/0xf0
[ 2090.387693][   T39]  rt_mutex_slowlock_block+0x55c/0x680
[ 2090.387738][   T39]  ? rt_mutex_slowlock_block+0x33a/0x680
[ 2090.387791][   T39]  rt_mutex_slowlock+0x2d4/0x780
[ 2090.387824][   T39]  ? rt_mutex_slowlock+0x1f2/0x780
[ 2090.387856][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 2090.387907][   T39]  ? write_threads+0x3b4/0x610
[ 2090.387947][   T39]  ? write_threads+0x3b4/0x610
[ 2090.387980][   T39]  mutex_lock_nested+0x168/0x1d0
[ 2090.388015][   T39]  write_threads+0x3b4/0x610
[ 2090.388054][   T39]  ? __pfx_write_threads+0x10/0x10
[ 2090.388107][   T39]  ? _copy_from_user+0x94/0xb0
[ 2090.388147][   T39]  ? simple_transaction_get+0x130/0x170
[ 2090.388178][   T39]  nfsctl_transaction_write+0x112/0x160
[ 2090.388215][   T39]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[ 2090.388251][   T39]  vfs_write+0x29f/0xbb0
[ 2090.388288][   T39]  ? __pfx_vfs_write+0x10/0x10
[ 2090.388319][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2090.388344][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2090.388367][   T39]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2090.388390][   T39]  ? mutex_lock_nested+0x152/0x1d0
[ 2090.388419][   T39]  ? fdget_pos+0x252/0x320
[ 2090.388452][   T39]  ksys_write+0x156/0x270
[ 2090.388484][   T39]  ? __pfx_ksys_write+0x10/0x10
[ 2090.388522][   T39]  do_syscall_64+0x17b/0x530
[ 2090.388545][   T39]  ? irqentry_exit+0x10f/0x8f0
[ 2090.388593][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2090.388619][   T39]  ? clear_bhb_loop+0x40/0x90
[ 2090.388655][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2090.388679][   T39] RIP: 0033:0x7ff475a0de99
[ 2090.388700][   T39] RSP: 002b:00007ff473c66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2090.388724][   T39] RAX: ffffffffffffffda RBX: 00007ff475c95fa0 RCX: 00007ff475a0de99
[ 2090.388742][   T39] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000005
[ 2090.388757][   T39] RBP: 00007ff475aa3eaf R08: 0000000000000000 R09: 0000000000000000
[ 2090.388773][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2090.388788][   T39] R13: 00007ff475c96038 R14: 00007ff475c95fa0 R15: 00007ffdb42ba6c8
[ 2090.388824][   T39]  </TASK>
[ 2090.388881][   T39] 
[ 2090.388881][   T39] Showing all locks held in the system:
[ 2090.388894][   T39] locks held by khungtaskd/39: 1, last CPU#1:
[ 2090.389056][   T39]  #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2090.389212][   T39] locks held by getty/5349: 2, on CPU#1:
[ 2090.389227][   T39]  #0: ffff8880371dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2090.389290][   T39]  #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[ 2090.389363][   T39] locks held by kworker/0:2/27412: 2, on CPU#0:
[ 2090.389390][   T39]  #0: ffff88813fe63938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 2090.389437][   T39]  #1: ffffc90004dcfc60 ((work_completion)(&dev->recv_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 2090.389503][   T39] locks held by syz.4.8753/30854: 3, on CPU#1:
[ 2090.389518][   T39]  #0: ffff888032be9128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[ 2090.389568][   T39]  #1: ffff888059cc8510 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2090.389624][   T39]  #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[ 2090.389689][   T39] locks held by syz.0.9139/31973: 3, on CPU#1:
[ 2090.389704][   T39]  #0: ffff888035c00928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[ 2090.389752][   T39]  #1: ffff88805ea5c510 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2090.389807][   T39]  #2: ffffffff8e6eeb78 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610
[ 2090.389866][   T39] locks held by kworker/0:8/32378: 3, last CPU#0:
[ 2090.389880][   T39]  #0: ffff88813fe62538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 2090.389929][   T39]  #1: ffffc90008e97c60 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 2090.389978][   T39]  #2: ffffffff8ef03ad8 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x470
[ 2090.390042][   T39] 
[ 2090.390047][   T39] =============================================
[ 2090.390047][   T39] 
[ 2090.390139][   T39] NMI backtrace for cpu 1
[ 2090.390157][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2090.390184][   T39] Tainted: [L]=SOFTLOCKUP
[ 2090.390191][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2090.390203][   T39] Call Trace:
[ 2090.390211][   T39]  <TASK>
[ 2090.390220][   T39]  dump_stack_lvl+0xe8/0x150
[ 2090.390250][   T39]  nmi_cpu_backtrace+0x274/0x2d0
[ 2090.390279][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2090.390311][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[ 2090.390342][   T39]  sys_info+0x135/0x170
[ 2090.390366][   T39]  watchdog+0xfd7/0x1030
[ 2090.390407][   T39]  ? watchdog+0x1c7/0x1030
[ 2090.390445][   T39]  kthread+0x388/0x470
[ 2090.390473][   T39]  ? __pfx_watchdog+0x10/0x10
[ 2090.390502][   T39]  ? __pfx_kthread+0x10/0x10
[ 2090.390530][   T39]  ret_from_fork+0x514/0xb70
[ 2090.390562][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[ 2090.390590][   T39]  ? __switch_to+0xc89/0x1420
[ 2090.390617][   T39]  ? __pfx_kthread+0x10/0x10
[ 2090.390651][   T39]  ret_from_fork_asm+0x1a/0x30
[ 2090.390694][   T39]  </TASK>
[ 2090.390702][   T39] Sending NMI from CPU 1 to CPUs 0:
[ 2090.390731][    C0] NMI backtrace for cpu 0
[ 2090.390751][    C0] CPU: 0 UID: 0 PID: 32378 Comm: kworker/0:8 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2090.390785][    C0] Tainted: [L]=SOFTLOCKUP
[ 2090.390792][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2090.390803][    C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries
[ 2090.390830][    C0] RIP: 0010:rt_spin_lock+0xd2/0x400
[ 2090.390853][    C0] Code: 02 00 00 41 8b 17 c1 e2 08 48 c7 c7 c0 3b 6d 8b be 30 00 00 00 e8 5e 0a 43 f6 48 c7 c0 e0 d7 d0 8f 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 78 02 00 00 4c 89 64 24 10 4c 8d 7c 24 40 83 3d 65 5d
[ 2090.390868][    C0] RSP: 0018:ffffc90008e97a40 EFLAGS: 00000a06
[ 2090.390881][    C0] RAX: 0000000000000000 RBX: 1ffff920011d2f4c RCX: 0000000000000046
[ 2090.390893][    C0] RDX: 0000000000000000 RSI: ffffffff8dbfaa0e RDI: ffffffff8bcbd080
[ 2090.390904][    C0] RBP: ffffc90008e97af8 R08: 1900000000000000 R09: 0000000000000000
[ 2090.390915][    C0] R10: 0000000000000000 R11: ffffffff8ef03ad8 R12: ffff888031613e80
[ 2090.390926][    C0] R13: dffffc0000000000 R14: ffffffff8ef03a80 R15: ffff888031614344
[ 2090.390939][    C0] FS:  0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000
[ 2090.390952][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2090.390964][    C0] CR2: 00007f77f2b9ee80 CR3: 000000000e1b0000 CR4: 00000000003526f0
[ 2090.390978][    C0] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951
[ 2090.390988][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 2090.390998][    C0] Call Trace:
[ 2090.391004][    C0]  <TASK>
[ 2090.391012][    C0]  ? __pfx_rt_spin_lock+0x10/0x10
[ 2090.391037][    C0]  ? rt_spin_unlock+0x163/0x200
[ 2090.391063][    C0]  wg_ratelimiter_gc_entries+0x5d/0x470
[ 2090.391089][    C0]  ? process_one_work+0x7fd/0x1480
[ 2090.391106][    C0]  process_one_work+0xaaf/0x1480
[ 2090.391138][    C0]  ? __pfx_process_one_work+0x10/0x10
[ 2090.391153][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2090.391179][    C0]  ? assign_work+0x3cf/0x5d0
[ 2090.391198][    C0]  worker_thread+0xb05/0x10d0
[ 2090.391220][    C0]  ? __kthread_parkme+0x71/0x1f0
[ 2090.391244][    C0]  kthread+0x388/0x470
[ 2090.391265][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 2090.391282][    C0]  ? __pfx_kthread+0x10/0x10
[ 2090.391304][    C0]  ret_from_fork+0x514/0xb70
[ 2090.391327][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 2090.391349][    C0]  ? __switch_to+0xc89/0x1420
[ 2090.391369][    C0]  ? __pfx_kthread+0x10/0x10
[ 2090.391391][    C0]  ret_from_fork_asm+0x1a/0x30
[ 2090.391422][    C0]  </TASK>
[ 2090.391734][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[ 2090.391752][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2090.391780][   T39] Tainted: [L]=SOFTLOCKUP
[ 2090.391788][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2090.391799][   T39] Call Trace:
[ 2090.391807][   T39]  <TASK>
[ 2090.391816][   T39]  vpanic+0x56c/0xa60
[ 2090.391841][   T39]  ? __pfx_vpanic+0x10/0x10
[ 2090.391871][   T39]  panic+0xc5/0xd0
[ 2090.391891][   T39]  ? __pfx_panic+0x10/0x10
[ 2090.391915][   T39]  ? wq_watchdog_touch+0xf9/0x160
[ 2090.391950][   T39]  ? nmi_trigger_cpumask_backtrace+0x247/0x380
[ 2090.391983][   T39]  watchdog+0x1030/0x1030
[ 2090.392022][   T39]  ? watchdog+0x1c7/0x1030
[ 2090.392060][   T39]  kthread+0x388/0x470
[ 2090.392088][   T39]  ? __pfx_watchdog+0x10/0x10
[ 2090.392118][   T39]  ? __pfx_kthread+0x10/0x10
[ 2090.392148][   T39]  ret_from_fork+0x514/0xb70
[ 2090.392179][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[ 2090.392208][   T39]  ? __switch_to+0xc89/0x1420
[ 2090.392235][   T39]  ? __pfx_kthread+0x10/0x10
[ 2090.392264][   T39]  ret_from_fork_asm+0x1a/0x30
[ 2090.392308][   T39]  </TASK>
[ 2090.392878][   T39] Kernel Offset: disabled