last executing test programs:

16m47.535336449s ago: executing program 32 (id=6):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x4, 0x23ff, 0x0, 'queue0\x00', 0xfffffffc})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000001c0)={0x8000000, 0x3, {0x1, 0x3, 0xfe7, 0x1, 0x3}, 0xd36})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000240))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})

16m2.282671699s ago: executing program 33 (id=68):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x4, 0x23ff, 0x0, 'queue0\x00', 0xfffffffc})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000001c0)={0x8000000, 0x3, {0x1, 0x3, 0xfe7, 0x1, 0x3}, 0xd36})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000240))
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})

15m35.161024329s ago: executing program 34 (id=91):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x4, 0x23ff, 0x0, 'queue0\x00', 0xfffffffc})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000001c0)={0x8000000, 0x3, {0x1, 0x3, 0xfe7, 0x1, 0x3}, 0xd36})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000240))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e)

15m30.588823275s ago: executing program 1 (id=133):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc2401, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaae6e4f44e810008009b1a50101fc6249d7defd0b0a7e53f48781e54c9864deefa1ed6"], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x113845, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff})
openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'dummy0\x00'})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, &(0x7f0000000040)={0x0, 0x0, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
read$FUSE(r0, &(0x7f0000003280)={0x2020}, 0x2020)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
io_uring_setup(0x5822, &(0x7f0000000580)={0x0, 0x8270, 0x1000, 0x3, 0x846})

15m28.98895865s ago: executing program 1 (id=134):
r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x4, 0xffff85e5, 'syz1\x00'}, 0x0, [0x400, 0xf73, 0x7ffc, 0x800005, 0xd, 0x100000000, 0x0, 0x45, 0x3, 0x7, 0x3, 0x8007f, 0x1, 0xffffffff, 0x8000000, 0x0, 0x1, 0xfffffffffffffffd, 0x2000000000000001, 0x1, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x8001, 0x40, 0x2, 0xff, 0x4, 0x4, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x992, 0x1, 0x0, 0x3, 0x20, 0xee4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffffe, 0x0, 0x9, 0x2000008, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x7, 0x7ffffffe, 0x7, 0x0, 0x0, 0x80000001, 0x20000000000, 0x0, 0x3, 0x3, 0x5, 0x9, 0xb4f, 0xffffffff, 0x9, 0xfffffff8, 0x80000010, 0x0, 0xffffffd, 0xd87, 0x0, 0x0, 0x1, 0x80, 0x400002, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4b7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x20bb, 0x200000, 0x0, 0x7, 0x7, 0x7, 0x7ffffffd, 0x6, 0x0, 0x2, 0x1, 0x400003, 0x3, 0x0, 0xfffffffd, 0x7, 0x3, 0x6, 0x6, 0x0, 0x8, 0x4, 0x0, 0x88, 0xe1, 0x1, 0x8, 0xfffffffffffffffe, 0x0, 0x40000000, 0x10, 0x0, 0x0, 0x7ff]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
lseek(r1, 0x2dc, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x121002, 0x0)
r3 = dup2(r2, r2)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r3)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000)
ioctl$OCFS2_IOC_GROUP_ADD64(r5, 0x40186f03, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r8, @ANYBLOB="10005a800c000380050009"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000004800)={&(0x7f0000000040), 0xc, &(0x7f00000047c0)={&(0x7f0000001f00)={0x30, r7, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x91db, 0x38}}}}, [@NL80211_ATTR_CSA_IES={0x8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @beacon_params]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)

15m27.331628204s ago: executing program 1 (id=135):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000540)='.\x00', 0x850003d1)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x8e1c0c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r2, 0x0, 0x0)
add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x4, 0xfffffffffffffffe)
r3 = socket(0x2d, 0x2, 0x0)
connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc)

15m25.747151425s ago: executing program 1 (id=138):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24000010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x0, 0x4, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=@isofs={0x14, 0x1, {0x8, 0x7, 0x4, 0x8000, 0x8, 0x6}}, 0x2241c2)
ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x11})
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0xc0000000, 0xfffffff9, 0x6, 0x4, "000300"})
r3 = syz_open_pts(r2, 0x0)
r4 = fsopen(&(0x7f0000000340)='iso9660\x00', 0x1)
r5 = fcntl$dupfd(r4, 0x0, r4)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000002640)='mode\x00\xbf+\xb1O\x85I5_Qj\xebIw\x1d\x800\xfc\xed\xf2\xe7=\a\x80W\x17\xe9\x80\x00$S\xce\xf3\x9b\xee$\xa0\x12\xe34m\x17`\x80Z\x16\x9ba\f\xd1\xfaAm+sUh\xae\xf1}G\xb1E\x8e8\xf5\x19\\\xbb\xd9\x83*Ly\x99\xac\x95O\f\xff\xff\x00\x00\x00\x00\x00\x00v', &(0x7f0000000400)='7', 0x0)
setsockopt$MRT6_TABLE(r5, 0x29, 0xcf, &(0x7f0000000080)=0xfe, 0x4)
r6 = dup3(r3, r2, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0x17)

15m24.504624285s ago: executing program 1 (id=139):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000540)='.\x00', 0x850003d1)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x8e1c0c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x4, 0xfffffffffffffffe)
r2 = socket(0x2d, 0x2, 0x0)
connect$netlink(r2, &(0x7f0000000140)=@unspec={0x2d}, 0xc)

15m22.749191663s ago: executing program 1 (id=141):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x4, 0x23ff, 0x0, 'queue0\x00', 0xfffffffc})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000001c0)={0x8000000, 0x3, {0x1, 0x3, 0xfe7, 0x1, 0x3}, 0xd36})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000240))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})

15m21.019262935s ago: executing program 35 (id=127):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x4, 0x23ff, 0x0, 'queue0\x00', 0xfffffffc})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000001c0)={0x8000000, 0x3, {0x1, 0x3, 0xfe7, 0x1, 0x3}, 0xd36})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000240))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})

15m14.877808827s ago: executing program 36 (id=130):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x4, 0x23ff, 0x0, 'queue0\x00', 0xfffffffc})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000001c0)={0x8000000, 0x3, {0x1, 0x3, 0xfe7, 0x1, 0x3}, 0xd36})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000240))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e)

15m12.079322901s ago: executing program 4 (id=149):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000540)='.\x00', 0x850003d1)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x8e1c0c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r2, 0x0, 0x0)
add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x4, 0xfffffffffffffffe)
r3 = socket(0x2d, 0x2, 0x0)
connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc)

15m10.67883205s ago: executing program 4 (id=150):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10)
fsopen(&(0x7f0000000140)='autofs\x00', 0x1)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
futimesat(r0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000600)={{0x77359400}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1f, 0xb, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x11}, 0x94)
socket(0x15, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010026bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000700000014000100000000000000040000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x3ff, 0x8864000000000000)

15m10.522292244s ago: executing program 4 (id=151):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x4, 0x23ff, 0x0, 'queue0\x00', 0xfffffffc})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000001c0)={0x8000000, 0x3, {0x1, 0x3, 0xfe7, 0x1, 0x3}, 0xd36})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000240))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})

15m8.698308764s ago: executing program 4 (id=152):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
socket(0x40000000015, 0x5, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$video4linux(0x0, 0x2, 0x58603)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
mmap$snddsp_status(&(0x7f00007d4000/0x2000)=nil, 0x1000, 0x9, 0x10, r1, 0x82000000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, 0x0)

15m7.745657907s ago: executing program 37 (id=141):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x4, 0x23ff, 0x0, 'queue0\x00', 0xfffffffc})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000001c0)={0x8000000, 0x3, {0x1, 0x3, 0xfe7, 0x1, 0x3}, 0xd36})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000240))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})

15m6.626076163s ago: executing program 4 (id=154):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000540)='.\x00', 0x850003d1)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x8e1c0c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r2, 0x0, 0x0)
add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x4, 0xfffffffffffffffe)
r3 = socket(0x2d, 0x2, 0x0)
connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc)

15m4.675719271s ago: executing program 4 (id=155):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x4, 0x23ff, 0x0, 'queue0\x00', 0xfffffffc})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000001c0)={0x8000000, 0x3, {0x1, 0x3, 0xfe7, 0x1, 0x3}, 0xd36})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000240))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e)

14m54.903776061s ago: executing program 8 (id=146):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000540)='.\x00', 0x850003d1)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x8e1c0c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r2, 0x0, 0x0)
add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x4, 0xfffffffffffffffe)
r3 = socket(0x2d, 0x2, 0x0)
connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc)

14m53.715273938s ago: executing program 8 (id=161):
r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x4, 0xffff85e5, 'syz1\x00'}, 0x0, [0x400, 0xf73, 0x7ffc, 0x800005, 0xd, 0x100000000, 0x0, 0x45, 0x3, 0x7, 0x3, 0x8007f, 0x1, 0xffffffff, 0x8000000, 0x0, 0x1, 0xfffffffffffffffd, 0x2000000000000001, 0x1, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x8001, 0x40, 0x2, 0xff, 0x4, 0x4, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x992, 0x1, 0x0, 0x3, 0x20, 0xee4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffffe, 0x0, 0x9, 0x2000008, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x7, 0x7ffffffe, 0x7, 0x0, 0x0, 0x80000001, 0x20000000000, 0x0, 0x3, 0x3, 0x5, 0x9, 0xb4f, 0xffffffff, 0x9, 0xfffffff8, 0x80000010, 0x0, 0xffffffd, 0xd87, 0x0, 0x0, 0x1, 0x80, 0x400002, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4b7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x20bb, 0x200000, 0x0, 0x7, 0x7, 0x7, 0x7ffffffd, 0x6, 0x0, 0x2, 0x1, 0x400003, 0x3, 0x0, 0xfffffffd, 0x7, 0x3, 0x6, 0x6, 0x0, 0x8, 0x4, 0x0, 0x88, 0xe1, 0x1, 0x8, 0xfffffffffffffffe, 0x0, 0x40000000, 0x10, 0x0, 0x0, 0x7ff]})
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
lseek(r1, 0x2dc, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x121002, 0x0)
r3 = dup2(r2, r2)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r3)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0)
syz_usb_connect$midi(0x2, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x80, 0x1e, 0x67, 0xff, 0x80}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3c01}}]})
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000)
ioctl$OCFS2_IOC_GROUP_ADD64(r5, 0x40186f03, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r8, @ANYBLOB="10005a800c000380050009"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000004800)={&(0x7f0000000040), 0xc, &(0x7f00000047c0)={&(0x7f0000001f00)={0x30, r7, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x91db, 0x38}}}}, [@NL80211_ATTR_CSA_IES={0x8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @beacon_params]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)

14m51.711334905s ago: executing program 8 (id=164):
r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x4, 0xffff85e5, 'syz1\x00'}, 0x0, [0x400, 0xf73, 0x7ffc, 0x800005, 0xd, 0x100000000, 0x0, 0x45, 0x3, 0x7, 0x3, 0x8007f, 0x1, 0xffffffff, 0x8000000, 0x0, 0x1, 0xfffffffffffffffd, 0x2000000000000001, 0x1, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x8001, 0x40, 0x2, 0xff, 0x4, 0x4, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x992, 0x1, 0x0, 0x3, 0x20, 0xee4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffffe, 0x0, 0x9, 0x2000008, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x7, 0x7ffffffe, 0x7, 0x0, 0x0, 0x80000001, 0x20000000000, 0x0, 0x3, 0x3, 0x5, 0x9, 0xb4f, 0xffffffff, 0x9, 0xfffffff8, 0x80000010, 0x0, 0xffffffd, 0xd87, 0x0, 0x0, 0x1, 0x80, 0x400002, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4b7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x20bb, 0x200000, 0x0, 0x7, 0x7, 0x7, 0x7ffffffd, 0x6, 0x0, 0x2, 0x1, 0x400003, 0x3, 0x0, 0xfffffffd, 0x7, 0x3, 0x6, 0x6, 0x0, 0x8, 0x4, 0x0, 0x88, 0xe1, 0x1, 0x8, 0xfffffffffffffffe, 0x0, 0x40000000, 0x10, 0x0, 0x0, 0x7ff]})
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
lseek(r1, 0x2dc, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x121002, 0x0)
r3 = dup2(r2, r2)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r3)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0)
syz_usb_connect$midi(0x2, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x80, 0x1e, 0x67, 0xff, 0x80}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3c01}}]})
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000)
ioctl$OCFS2_IOC_GROUP_ADD64(r5, 0x40186f03, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r8, @ANYBLOB="10005a800c000380050009"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000004800)={&(0x7f0000000040), 0xc, &(0x7f00000047c0)={&(0x7f0000001f00)={0x30, r7, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x91db, 0x38}}}}, [@NL80211_ATTR_CSA_IES={0x8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @beacon_params]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)

14m49.946703611s ago: executing program 8 (id=167):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x4, 0x23ff, 0x0, 'queue0\x00', 0xfffffffc})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000001c0)={0x8000000, 0x3, {0x1, 0x3, 0xfe7, 0x1, 0x3}, 0xd36})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000240))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})

14m49.257737679s ago: executing program 38 (id=155):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x4, 0x23ff, 0x0, 'queue0\x00', 0xfffffffc})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000001c0)={0x8000000, 0x3, {0x1, 0x3, 0xfe7, 0x1, 0x3}, 0xd36})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000240))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e)

14m44.064252869s ago: executing program 7 (id=174):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10)
fsopen(&(0x7f0000000140)='autofs\x00', 0x1)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
futimesat(r0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000600)={{0x77359400}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1f, 0xb, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x11}, 0x94)
socket(0x15, 0x5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010026bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000700000014000100000000000000040000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
splice(r1, 0x0, r3, 0x0, 0x3ff, 0x8864000000000000)

14m43.053823278s ago: executing program 7 (id=175):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10)
fsopen(&(0x7f0000000140)='autofs\x00', 0x1)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
futimesat(r0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000600)={{0x77359400}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1f, 0xb, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x11}, 0x94)
socket(0x15, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
lsm_get_self_attr(0x69, &(0x7f0000000640)={0x0, 0x0, 0x7a, 0x5a, ""/90}, 0x0, 0x1)
socket(0x2a, 0x2, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010026bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000700000014000100000000000000040000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x3ff, 0x8864000000000000)

14m42.561799249s ago: executing program 7 (id=176):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc2401, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaae6e4f44e810008009b1a50101fc6249d7defd0b0a7e53f48781e54c9864deefa1ed6"], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x113845, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff})
openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'dummy0\x00'})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, &(0x7f0000000040)={0x0, 0x0, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
read$FUSE(r0, &(0x7f0000003280)={0x2020}, 0x2020)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
io_uring_setup(0x5822, &(0x7f0000000580)={0x0, 0x8270, 0x1000, 0x3, 0x846})

14m39.654948135s ago: executing program 7 (id=179):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000540)='.\x00', 0x850003d1)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x8e1c0c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r1, 0x0, 0x0)
add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x4, 0xfffffffffffffffe)
r2 = socket(0x2d, 0x2, 0x0)
connect$netlink(r2, &(0x7f0000000140)=@unspec={0x2d}, 0xc)

14m38.456085722s ago: executing program 7 (id=181):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"})
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14m35.542318649s ago: executing program 7 (id=183):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x4, 0x23ff, 0x0, 'queue0\x00', 0xfffffffc})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000001c0)={0x8000000, 0x3, {0x1, 0x3, 0xfe7, 0x1, 0x3}, 0xd36})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000240))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e)

14m34.895252904s ago: executing program 39 (id=167):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x4, 0x23ff, 0x0, 'queue0\x00', 0xfffffffc})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000001c0)={0x8000000, 0x3, {0x1, 0x3, 0xfe7, 0x1, 0x3}, 0xd36})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000240))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})

14m20.312517821s ago: executing program 40 (id=183):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x4, 0x23ff, 0x0, 'queue0\x00', 0xfffffffc})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000001c0)={0x8000000, 0x3, {0x1, 0x3, 0xfe7, 0x1, 0x3}, 0xd36})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000240))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e)

1m19.710163033s ago: executing program 2 (id=3823):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(0x0, &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000040000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000003f0920000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = open$dir(0x0, 0x40200, 0x1a)
r4 = openat(r3, 0x0, 0x301000, 0x30)
pread64(r2, 0x0, 0x0, 0xb)
ftruncate(r2, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007"], 0x40}, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, 0x0, 0x20000080)
read$FUSE(r4, 0x0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0)=[0x4], 0x0, 0x2, 0x1}}, 0x40)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, 0xffffffffffffffff, 0x0)

1m19.540548506s ago: executing program 2 (id=3826):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80, 0x0)
ioctl$TIOCMSET(r0, 0x5418, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
epoll_create(0x2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000ffff0a010101000000003c0000000200000000000000000000000000ffffac1e01010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008844}, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xffd8)

1m18.408631282s ago: executing program 2 (id=3832):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00')
preadv(r0, 0x0, 0x0, 0x6, 0x4)

1m18.320341224s ago: executing program 2 (id=3836):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
write(r0, &(0x7f0000000300)='r:test/event1 ./file0:0x0 ', 0x1a)

1m16.654471469s ago: executing program 2 (id=3843):
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb0000010000"], 0x80}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x108}}, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880)
socket$netlink(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000)

1m14.290153256s ago: executing program 2 (id=3853):
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x05\x00\xaaI\x00\x00\x00$\x19\xaa\x00\x00\x00\t<\xe8u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd2.\xeb\xb5\xc2\xff\x9bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x83T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ{\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\xcc\xa4\xbb\xb0\xa3S\n\xe8\xb1p\xb9\x90\xe9\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xab,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s\x00', 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/uts\x00')
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$video(&(0x7f0000000080), 0xe, 0x8800)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4000044)
socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1m14.255385031s ago: executing program 41 (id=3853):
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x05\x00\xaaI\x00\x00\x00$\x19\xaa\x00\x00\x00\t<\xe8u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd2.\xeb\xb5\xc2\xff\x9bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x83T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ{\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\xcc\xa4\xbb\xb0\xa3S\n\xe8\xb1p\xb9\x90\xe9\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xab,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s\x00', 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/uts\x00')
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$video(&(0x7f0000000080), 0xe, 0x8800)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4000044)
socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1m7.936471919s ago: executing program 3 (id=3861):
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb0000010000"], 0x80}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x108}}, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880)
socket$netlink(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000)

1m7.729322598s ago: executing program 3 (id=3886):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4)

1m4.5097116s ago: executing program 3 (id=3889):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

1m4.270667415s ago: executing program 3 (id=3891):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x202c, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x17, 0xfffffffffffffff5, 0xffffffff, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
umount2(&(0x7f0000000380)='./file0\x00', 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m2.50789341s ago: executing program 3 (id=3899):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/47], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x48, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4389}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)

1m1.861090357s ago: executing program 3 (id=3903):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
write(0xffffffffffffffff, &(0x7f0000000180), 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0)
write(r0, &(0x7f0000000280)='0', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

1m1.416090475s ago: executing program 42 (id=3903):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
write(0xffffffffffffffff, &(0x7f0000000180), 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0)
write(r0, &(0x7f0000000280)='0', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r1 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

6.439749006s ago: executing program 5 (id=4291):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)

4.996348146s ago: executing program 6 (id=4298):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x840, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), 0x0}, 0x20)

4.94025914s ago: executing program 9 (id=4299):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0)

4.750244177s ago: executing program 9 (id=4300):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x0)

4.090203287s ago: executing program 0 (id=4303):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0xa, 0x2000, 0x300e, 0x0, 0xa, 0x4, 0x1, 0x1993012db91ab52e}})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd9d7, 0x5)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0xc002e38, 0x7ff, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0xffffffed)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80)

3.888799127s ago: executing program 0 (id=4304):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)

3.788062665s ago: executing program 5 (id=4305):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mprotect(&(0x7f00000f8000/0x3000)=nil, 0x3000, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0)
r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x4000, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
set_mempolicy(0x3, 0x0, 0x3)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00'})
setsockopt$packet_int(r8, 0x107, 0x14, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.561870515s ago: executing program 0 (id=4306):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r0)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/size\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='64', 0x2)

3.369513063s ago: executing program 0 (id=4307):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600)
capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4})
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

3.198825548s ago: executing program 0 (id=4308):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x13, 0x20, 0xbc}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000007f000000070000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000002eef560400001300"/28], 0x50)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8010, 0x3b, 0x500, 0x5, 0x18c0012})
r4 = socket$key(0xf, 0x3, 0x2)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0)
sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x2, 0x18, 0x5, 0x6, 0x2, 0x0, 0x60bd27, 0x25dfdbfc}, 0x10}}, 0x24008880)

2.629577465s ago: executing program 6 (id=4309):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0)

2.052715271s ago: executing program 0 (id=4310):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
close(0xffffffffffffffff)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)

1.909868534s ago: executing program 9 (id=4311):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)

1.507334579s ago: executing program 9 (id=4312):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0xfffffffffffffec3, 0x0}, 0x4000000)

1.319745069s ago: executing program 6 (id=4313):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/bus/pci/drivers/8250_pericom\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000700)='new_id\x00', 0x1, 0x0)
write(r1, &(0x7f0000000800)='8086 2', 0x6)

1.241896269s ago: executing program 6 (id=4314):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)

1.233887521s ago: executing program 9 (id=4315):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r2 = syz_open_dev$usbmon(0x0, 0x80000001, 0x28100)
ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r3, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0')

1.13035996s ago: executing program 6 (id=4316):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x13, 0x20, 0xbc}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000002eef56"], 0x50)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8010, 0x3b, 0x500, 0x5, 0x18c0012})
r5 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0)
sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x2, 0x18, 0x5, 0x6, 0x2, 0x0, 0x60bd27, 0x25dfdbfc}, 0x10}}, 0x24008880)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x30}}, 0x0)
bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x0, 0x20}, 0x38)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000e, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0)
readv(r6, &(0x7f0000000240)=[{0x0, 0x7002}, {&(0x7f0000000140)=""/222, 0xde}], 0x2)

923.365898ms ago: executing program 9 (id=4317):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_type(r0, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)

923.143166ms ago: executing program 5 (id=4318):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000880)={[0x800, 0x4, 0x81, 0x4, 0x8, 0x0, 0x200000007, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x7, 0x5, 0x4, 0x100000000001], 0x1000, 0x4fb40})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

588.818886ms ago: executing program 5 (id=4319):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="02000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x4800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000)

317.192848ms ago: executing program 5 (id=4320):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)

167.056393ms ago: executing program 6 (id=4321):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0)

0s ago: executing program 5 (id=4322):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x9c960000, 0x1, 0x3, 0xa, 0x1, 0xfffe}, 0x20)
setitimer(0x0, 0x0, &(0x7f0000000240))
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ed)
rmdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac1.usb0\x00')

kernel console output (not intermixed with test programs):

 4 bytes leftover after parsing attributes in process `syz.0.3452'.
[ 1016.448589][T22612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3452'.
[ 1016.602245][ T1527] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1016.603095][ T1527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1016.603113][ T1527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1016.604675][ T1527] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1016.604689][ T1527] usb 10-1: Product: syz
[ 1016.604697][ T1527] usb 10-1: Manufacturer: syz
[ 1016.604705][ T1527] usb 10-1: SerialNumber: syz
[ 1016.606362][ T1527] usb 10-1: config 0 descriptor??
[ 1016.608370][ T1527] hub 10-1:0.0: bad descriptor, ignoring hub
[ 1016.608383][ T1527] hub 10-1:0.0: probe with driver hub failed with error -5
[ 1016.611485][ T1527] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input21
[ 1016.677760][ T5810] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1016.748344][ T5810] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1016.804107][ T5810] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1017.034035][ T5810] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1017.146343][T22606] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1017.146424][T22606] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1017.146730][T22606] bridge_slave_0: entered allmulticast mode
[ 1017.148119][T22606] bridge_slave_0: entered promiscuous mode
[ 1017.150674][T22606] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1017.150750][T22606] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1017.150874][T22606] bridge_slave_1: entered allmulticast mode
[ 1017.153563][T22606] bridge_slave_1: entered promiscuous mode
[ 1017.156157][T17856] usb 10-1: USB disconnect, device number 10
[ 1017.208296][T22606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1017.210970][T22606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1017.249816][T22606] team0: Port device team_slave_0 added
[ 1017.254544][T22606] team0: Port device team_slave_1 added
[ 1017.313471][T22606] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1017.313484][T22606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1017.313498][T22606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1017.323709][T22606] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1017.323720][T22606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1017.323733][T22606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1017.376172][ T5810] bridge_slave_1: left allmulticast mode
[ 1017.376199][ T5810] bridge_slave_1: left promiscuous mode
[ 1017.376383][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1017.390808][ T5810] bridge_slave_0: left allmulticast mode
[ 1017.390836][ T5810] bridge_slave_0: left promiscuous mode
[ 1017.390993][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1017.528694][ T5810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1017.530355][ T5810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1017.535124][ T5810] bond0 (unregistering): Released all slaves
[ 1017.551538][T22606] hsr_slave_0: entered promiscuous mode
[ 1017.552125][T22606] hsr_slave_1: entered promiscuous mode
[ 1017.552663][T22606] debugfs: 'hsr0' already exists in 'hsr'
[ 1017.552680][T22606] Cannot create hsr debugfs directory
[ 1017.662021][T22633] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1017.900998][ T5810] hsr_slave_0: left promiscuous mode
[ 1017.908626][ T5810] hsr_slave_1: left promiscuous mode
[ 1017.909404][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1017.909422][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1017.912608][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1017.912625][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1017.917222][T22636] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1017.924243][ T5810] veth1_macvtap: left promiscuous mode
[ 1017.924305][ T5810] veth0_macvtap: left promiscuous mode
[ 1017.924439][ T5810] veth1_vlan: left promiscuous mode
[ 1017.924529][ T5810] veth0_vlan: left promiscuous mode
[ 1018.098896][ T5810] team0 (unregistering): Port device team_slave_1 removed
[ 1018.107023][ T5810] team0 (unregistering): Port device team_slave_0 removed
[ 1018.190554][ T5459] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1018.446614][T22651] 9p: Bad value for 'msize'
[ 1018.458995][T22650] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1018.501436][ T5769] Bluetooth: hci2: command tx timeout
[ 1018.586260][T22655] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1018.606256][T22669] 9pnet_virtio: no channels available for device syz
[ 1018.620024][T22664] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1019.083107][T22606] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1019.085110][T22606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1019.085483][T22606] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1019.086928][T22606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1019.087441][T22606] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1019.089633][T22606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1019.090114][T22606] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1019.092047][T22606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1019.154134][T22606] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1019.167611][T22606] 8021q: adding VLAN 0 to HW filter on device team0
[ 1019.174052][ T8122] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1019.174151][ T8122] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1019.180127][ T8122] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1019.180219][ T8122] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1019.514621][T22606] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1019.550965][T22606] veth0_vlan: entered promiscuous mode
[ 1019.555474][T22606] veth1_vlan: entered promiscuous mode
[ 1019.569081][T22606] veth0_macvtap: entered promiscuous mode
[ 1019.572458][T22606] veth1_macvtap: entered promiscuous mode
[ 1019.578981][T22606] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1019.581135][T22606] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1019.612015][ T5810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.647203][ T5810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.647514][ T5810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.647544][ T5810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.683892][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1019.683910][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1019.713605][T22699] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1019.730702][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1019.730723][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1019.761333][   T30] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[ 1019.814386][T22702] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1019.933837][   T30] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1019.934913][   T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1019.934938][   T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1019.937245][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.937272][   T30] usb 5-1: Product: syz
[ 1019.937285][   T30] usb 5-1: Manufacturer: syz
[ 1019.937299][   T30] usb 5-1: SerialNumber: syz
[ 1019.939645][   T30] usb 5-1: config 0 descriptor??
[ 1019.941068][T22704] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1019.948139][   T30] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1019.948161][   T30] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1019.953142][   T30] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input22
[ 1020.007589][T22609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1020.011989][T22609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1020.013024][T22609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1020.013481][T22609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1020.013764][T22609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1020.275364][T22719] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1020.306439][ T5810] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1020.365032][  T850] usb 5-1: USB disconnect, device number 17
[ 1020.477023][ T5810] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1020.534293][T22728] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1020.558211][T22709] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1020.558312][T22709] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1020.558444][T22709] bridge_slave_0: entered allmulticast mode
[ 1020.564905][T22732] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1020.570571][T22709] bridge_slave_0: entered promiscuous mode
[ 1020.572271][T22709] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1020.572320][T22709] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1020.572384][T22709] bridge_slave_1: entered allmulticast mode
[ 1020.573127][T22709] bridge_slave_1: entered promiscuous mode
[ 1020.583105][ T5769] Bluetooth: hci2: command tx timeout
[ 1020.622592][ T5810] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1020.636267][T22738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3470'.
[ 1020.637471][T22738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3470'.
[ 1020.641855][T22709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1020.643651][T22709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1020.649141][T22736] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1020.662639][T22709] team0: Port device team_slave_0 added
[ 1020.664356][T22709] team0: Port device team_slave_1 added
[ 1020.679885][T22709] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1020.679896][T22709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1020.679909][T22709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1020.687290][T22709] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1020.687306][T22709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1020.687330][T22709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1020.715673][ T5810] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1020.749030][T22709] hsr_slave_0: entered promiscuous mode
[ 1020.749457][T22709] hsr_slave_1: entered promiscuous mode
[ 1020.749752][T22709] debugfs: 'hsr0' already exists in 'hsr'
[ 1020.749764][T22709] Cannot create hsr debugfs directory
[ 1020.871279][ T5810] bridge_slave_1: left allmulticast mode
[ 1020.871310][ T5810] bridge_slave_1: left promiscuous mode
[ 1020.871484][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1020.877983][ T5810] bridge_slave_0: left allmulticast mode
[ 1020.878006][ T5810] bridge_slave_0: left promiscuous mode
[ 1020.878187][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1020.988100][T22739] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1021.043530][ T5810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1021.051727][ T5810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1021.058581][ T5810] bond0 (unregistering): Released all slaves
[ 1021.267669][T22748] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1021.328892][ T5810] hsr_slave_0: left promiscuous mode
[ 1021.330098][ T5810] hsr_slave_1: left promiscuous mode
[ 1021.330628][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1021.330640][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1021.332530][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1021.332541][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1021.340676][ T5810] veth1_macvtap: left promiscuous mode
[ 1021.340728][ T5810] veth0_macvtap: left promiscuous mode
[ 1021.343559][ T5810] veth1_vlan: left promiscuous mode
[ 1021.343654][ T5810] veth0_vlan: left promiscuous mode
[ 1021.598609][T22759] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1021.647662][ T5810] team0 (unregistering): Port device team_slave_1 removed
[ 1021.660013][ T5810] team0 (unregistering): Port device team_slave_0 removed
[ 1021.708616][T22761] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1021.737153][ T5459] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1021.913133][T22765] 9p: Bad value for 'msize'
[ 1021.958975][T22763] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1022.009070][T22766] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1022.021385][ T5769] Bluetooth: hci3: command tx timeout
[ 1022.440720][T22780] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1022.573529][T22709] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1022.575495][T22709] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1022.576061][T22709] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1022.577712][T22709] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1022.578235][T22709] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1022.580418][T22709] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1022.580898][T22709] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1022.605643][T22709] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1022.661368][ T5769] Bluetooth: hci2: command tx timeout
[ 1022.663660][T22782] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1022.943059][T22709] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1022.958669][T22709] 8021q: adding VLAN 0 to HW filter on device team0
[ 1022.967960][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1022.968044][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1022.979185][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1022.979266][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1023.170504][T22794] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1023.440336][T22709] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1023.448391][T22800] netlink: 'syz.2.3486': attribute type 3 has an invalid length.
[ 1023.448464][T22800] netlink: 'syz.2.3486': attribute type 1 has an invalid length.
[ 1023.448472][T22800] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3486'.
[ 1023.536295][T22813] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1023.644484][T22709] veth0_vlan: entered promiscuous mode
[ 1023.650747][T22709] veth1_vlan: entered promiscuous mode
[ 1023.675701][T22709] veth0_macvtap: entered promiscuous mode
[ 1023.683118][T22709] veth1_macvtap: entered promiscuous mode
[ 1023.695005][T22709] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1023.706593][T22709] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1023.762487][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1023.762526][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1023.762555][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1023.762585][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1023.793689][ T8130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1023.793708][ T8130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1023.838608][  T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1023.838630][  T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1024.101288][ T5769] Bluetooth: hci3: command tx timeout
[ 1024.341013][T22824] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1024.531905][T22609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1024.550187][T22609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1024.555548][T22609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1024.559978][T22609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1024.567458][T22609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1024.742231][ T5769] Bluetooth: hci2: command tx timeout
[ 1024.893298][T22839] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1025.017951][T22846] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1025.152838][T22828] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1025.152947][T22828] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1025.153038][T22828] bridge_slave_0: entered allmulticast mode
[ 1025.154469][T22828] bridge_slave_0: entered promiscuous mode
[ 1025.158169][T22828] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1025.158244][T22828] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1025.158311][T22828] bridge_slave_1: entered allmulticast mode
[ 1025.159215][T22828] bridge_slave_1: entered promiscuous mode
[ 1025.176181][T22828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1025.177805][T22828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1025.193299][T22828] team0: Port device team_slave_0 added
[ 1025.195633][T22828] team0: Port device team_slave_1 added
[ 1025.216361][T22828] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1025.216378][T22828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1025.216399][T22828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1025.217790][T22828] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1025.217802][T22828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1025.217823][T22828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1025.252416][T22828] hsr_slave_0: entered promiscuous mode
[ 1025.252891][T22828] hsr_slave_1: entered promiscuous mode
[ 1025.300297][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1025.387796][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1025.392484][T22857] netlink: 'syz.2.3495': attribute type 3 has an invalid length.
[ 1025.392497][T22857] netlink: 'syz.2.3495': attribute type 1 has an invalid length.
[ 1025.392503][T22857] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3495'.
[ 1025.457804][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1025.525382][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1025.712349][   T13] bridge_slave_1: left allmulticast mode
[ 1025.712374][   T13] bridge_slave_1: left promiscuous mode
[ 1025.712559][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1025.722700][   T13] bridge_slave_0: left allmulticast mode
[ 1025.722724][   T13] bridge_slave_0: left promiscuous mode
[ 1025.722908][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1025.906689][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1025.935757][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1025.949327][   T13] bond0 (unregistering): Released all slaves
[ 1026.191271][ T5769] Bluetooth: hci3: command tx timeout
[ 1026.198710][   T13] hsr_slave_0: left promiscuous mode
[ 1026.199198][   T13] hsr_slave_1: left promiscuous mode
[ 1026.199576][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1026.199587][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1026.200275][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1026.200284][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1026.210978][   T13] veth1_macvtap: left promiscuous mode
[ 1026.211011][   T13] veth0_macvtap: left promiscuous mode
[ 1026.211084][   T13] veth1_vlan: left promiscuous mode
[ 1026.211128][   T13] veth0_vlan: left promiscuous mode
[ 1026.218668][T22877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3501'.
[ 1026.219586][T22877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3501'.
[ 1026.421010][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1026.438463][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1026.582565][ T5769] Bluetooth: hci0: command tx timeout
[ 1026.603362][ T5459] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1026.604482][T22888] 9pnet_virtio: no channels available for device syz
[ 1026.613027][T22886] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1026.655925][T22885] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1027.068270][T22910] netlink: 'syz.2.3508': attribute type 3 has an invalid length.
[ 1027.068290][T22910] netlink: 'syz.2.3508': attribute type 1 has an invalid length.
[ 1027.068306][T22910] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3508'.
[ 1027.101076][T22911] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1027.506622][T22828] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1027.510617][T22828] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1027.512974][T22828] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1027.518408][T22828] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1027.519160][T22828] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1027.525079][T22828] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1027.525937][T22828] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1027.530766][T22828] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1027.582842][T22923] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1027.638569][T22828] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1027.655383][T22828] 8021q: adding VLAN 0 to HW filter on device team0
[ 1027.660869][ T8130] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1027.660926][ T8130] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1027.666755][ T8130] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1027.666803][ T8130] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1027.828035][T22936] netlink: 'syz.2.3515': attribute type 3 has an invalid length.
[ 1027.828056][T22936] netlink: 'syz.2.3515': attribute type 1 has an invalid length.
[ 1027.828066][T22936] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3515'.
[ 1028.026324][T22828] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1028.118595][T22950] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1028.203910][T22828] veth0_vlan: entered promiscuous mode
[ 1028.210837][T22828] veth1_vlan: entered promiscuous mode
[ 1028.227677][T22828] veth0_macvtap: entered promiscuous mode
[ 1028.234272][T22828] veth1_macvtap: entered promiscuous mode
[ 1028.242120][T22828] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1028.247813][T22828] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1028.261968][ T5769] Bluetooth: hci3: command tx timeout
[ 1028.281843][ T5810] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.281867][ T5810] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.281884][ T5810] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.281901][ T5810] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.297240][T22960] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1028.306461][  T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1028.306481][  T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1028.327964][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1028.327985][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1028.444509][T22970] 9pnet_virtio: no channels available for device syz
[ 1028.464731][T22969] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1028.480000][T22967] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1028.565445][T22972] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1028.661258][ T5769] Bluetooth: hci0: command tx timeout
[ 1028.770562][T22609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1028.774976][T22609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1028.776981][T22609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1028.777847][T22609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1028.778598][T22609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1028.955895][T22985] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1029.061786][T22991] netlink: 'syz.9.3527': attribute type 3 has an invalid length.
[ 1029.061807][T22991] netlink: 'syz.9.3527': attribute type 1 has an invalid length.
[ 1029.061818][T22991] netlink: 228 bytes leftover after parsing attributes in process `syz.9.3527'.
[ 1029.345789][T23003] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1029.346765][ T5810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1029.357577][T23007] 9pnet_virtio: no channels available for device syz
[ 1029.379793][T23006] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1029.459656][ T5810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1029.500589][T23010] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1029.580901][ T5810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1029.600954][T22982] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1029.601032][T22982] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1029.601086][T22982] bridge_slave_0: entered allmulticast mode
[ 1029.605490][T22982] bridge_slave_0: entered promiscuous mode
[ 1029.606893][T22982] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1029.611772][T22982] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1029.611861][T22982] bridge_slave_1: entered allmulticast mode
[ 1029.616013][T22982] bridge_slave_1: entered promiscuous mode
[ 1029.635234][T22982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1029.636620][T22982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1029.716419][ T5810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1029.743058][T22982] team0: Port device team_slave_0 added
[ 1029.746545][T23019] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1029.748292][T22982] team0: Port device team_slave_1 added
[ 1029.779114][T22982] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1029.779131][T22982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1029.779159][T22982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1029.810682][T22982] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1029.810701][T22982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1029.810728][T22982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1029.884531][T22982] hsr_slave_0: entered promiscuous mode
[ 1029.885102][T22982] hsr_slave_1: entered promiscuous mode
[ 1029.885384][T22982] debugfs: 'hsr0' already exists in 'hsr'
[ 1029.885394][T22982] Cannot create hsr debugfs directory
[ 1030.090287][ T5810] bridge_slave_1: left allmulticast mode
[ 1030.090306][ T5810] bridge_slave_1: left promiscuous mode
[ 1030.090412][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1030.096888][ T5810] bridge_slave_0: left allmulticast mode
[ 1030.096912][ T5810] bridge_slave_0: left promiscuous mode
[ 1030.097076][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1030.581039][ T5810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1030.587572][ T5810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1030.589229][ T5810] bond0 (unregistering): Released all slaves
[ 1030.752261][T22609] Bluetooth: hci0: command tx timeout
[ 1030.826551][T22609] Bluetooth: hci1: command tx timeout
[ 1030.863499][T23035] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1031.030531][ T5810] hsr_slave_0: left promiscuous mode
[ 1031.033969][ T5810] hsr_slave_1: left promiscuous mode
[ 1031.036995][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1031.037010][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1031.056672][ T5810] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1031.056693][ T5810] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1031.076511][ T5810] veth1_macvtap: left promiscuous mode
[ 1031.076559][ T5810] veth0_macvtap: left promiscuous mode
[ 1031.076702][ T5810] veth1_vlan: left promiscuous mode
[ 1031.076802][ T5810] veth0_vlan: left promiscuous mode
[ 1031.156745][T23043] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1031.348606][ T5810] team0 (unregistering): Port device team_slave_1 removed
[ 1031.374006][ T5810] team0 (unregistering): Port device team_slave_0 removed
[ 1031.597025][ T5459] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1031.652990][T23058] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1031.880576][T22982] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1031.886612][T22982] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1031.887604][T22982] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1031.890225][T22982] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1031.890622][T22982] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1031.896732][T22982] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1031.898264][T22982] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1031.902541][T22982] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1031.917722][T23071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3547'.
[ 1031.923325][T23071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3547'.
[ 1031.972605][T22982] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1031.984874][T22982] 8021q: adding VLAN 0 to HW filter on device team0
[ 1031.989817][ T8130] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1031.989901][ T8130] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1032.004108][ T8130] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1032.004155][ T8130] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1032.241320][ T7385] usb 10-1: new full-speed USB device number 11 using dummy_hcd
[ 1032.281120][T23085] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1032.322934][T22982] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1032.353202][T22982] veth0_vlan: entered promiscuous mode
[ 1032.359549][T22982] veth1_vlan: entered promiscuous mode
[ 1032.380545][T22982] veth0_macvtap: entered promiscuous mode
[ 1032.382972][T22982] veth1_macvtap: entered promiscuous mode
[ 1032.389399][T22982] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1032.395105][T22982] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1032.407304][ T7385] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1032.408354][ T7385] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1032.408381][ T7385] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1032.413913][ T7385] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1032.413936][ T7385] usb 10-1: Product: syz
[ 1032.413949][ T7385] usb 10-1: Manufacturer: syz
[ 1032.413964][ T7385] usb 10-1: SerialNumber: syz
[ 1032.414691][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.416268][ T7385] usb 10-1: config 0 descriptor??
[ 1032.419621][ T7385] hub 10-1:0.0: bad descriptor, ignoring hub
[ 1032.419641][ T7385] hub 10-1:0.0: probe with driver hub failed with error -5
[ 1032.426146][ T7385] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input23
[ 1032.511994][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1032.512015][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1032.532685][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1032.532705][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1032.541950][ T5810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.553361][T17706] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.553405][T17706] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.839235][T22609] Bluetooth: hci0: command tx timeout
[ 1032.861954][ T5875] usb 10-1: USB disconnect, device number 11
[ 1032.901448][T22609] Bluetooth: hci1: command tx timeout
[ 1033.027459][T23105] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1033.906271][T23119] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1034.170640][T23131] 9pnet_virtio: no channels available for device syz
[ 1034.188443][T23130] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1034.302114][T23132] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1034.916542][T23141] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1034.981365][T22609] Bluetooth: hci1: command tx timeout
[ 1035.154102][T23143] netlink: 'syz.2.3564': attribute type 3 has an invalid length.
[ 1035.154122][T23143] netlink: 'syz.2.3564': attribute type 1 has an invalid length.
[ 1035.154132][T23143] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3564'.
[ 1035.247232][T23146] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1035.390350][T23153] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1035.665893][T23160] netlink: 'syz.5.3571': attribute type 3 has an invalid length.
[ 1035.665907][T23160] netlink: 'syz.5.3571': attribute type 1 has an invalid length.
[ 1035.665913][T23160] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3571'.
[ 1036.273011][T23170] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1036.292832][T23169] netlink: 'syz.2.3576': attribute type 3 has an invalid length.
[ 1036.292850][T23169] netlink: 'syz.2.3576': attribute type 1 has an invalid length.
[ 1036.292860][T23169] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3576'.
[ 1036.557966][T23178] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1036.811954][T23186] 9pnet_virtio: no channels available for device syz
[ 1036.833678][T23185] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1036.882071][T23190] 9pnet_virtio: no channels available for device syz
[ 1036.888115][T23183] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1036.916906][T23189] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1037.013391][T23191] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1037.062144][T22609] Bluetooth: hci1: command tx timeout
[ 1037.075170][T23188] netlink: 'syz.5.3582': attribute type 3 has an invalid length.
[ 1037.075184][T23188] netlink: 'syz.5.3582': attribute type 1 has an invalid length.
[ 1037.075190][T23188] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3582'.
[ 1037.432042][ T5875] usb 10-1: new full-speed USB device number 12 using dummy_hcd
[ 1037.583470][ T5875] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1037.584749][ T5875] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1037.584776][ T5875] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1037.586944][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1037.586965][ T5875] usb 10-1: Product: syz
[ 1037.586978][ T5875] usb 10-1: Manufacturer: syz
[ 1037.586991][ T5875] usb 10-1: SerialNumber: syz
[ 1037.589122][ T5875] usb 10-1: config 0 descriptor??
[ 1037.592823][ T5875] hub 10-1:0.0: bad descriptor, ignoring hub
[ 1037.592843][ T5875] hub 10-1:0.0: probe with driver hub failed with error -5
[ 1037.598205][ T5875] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input24
[ 1037.749083][T23209] netlink: 'syz.0.3592': attribute type 3 has an invalid length.
[ 1037.749103][T23209] netlink: 'syz.0.3592': attribute type 1 has an invalid length.
[ 1037.749113][T23209] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3592'.
[ 1037.910652][T23210] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3590'.
[ 1038.091919][ T5875] usb 10-1: USB disconnect, device number 12
[ 1038.294390][T23218] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1038.408428][T23217] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3595'.
[ 1039.025980][T23236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3598'.
[ 1039.031980][T23236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3598'.
[ 1039.608631][T23243] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1039.716796][T23246] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3602'.
[ 1039.824164][   T43] audit: type=1800 audit(1789485200.577:2): pid=23242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3602" name="memory.events.local" dev="sda1" ino=2049 res=0 errno=0
[ 1040.115632][T23259] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3605'.
[ 1040.120924][T23257] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1040.286554][T23264] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1040.504858][T23271] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1040.733144][T23273] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1040.990547][T23284] validate_nla: 8 callbacks suppressed
[ 1040.990565][T23284] netlink: 'syz.9.3615': attribute type 3 has an invalid length.
[ 1040.990576][T23284] netlink: 'syz.9.3615': attribute type 1 has an invalid length.
[ 1040.990595][T23284] netlink: 228 bytes leftover after parsing attributes in process `syz.9.3615'.
[ 1041.146342][T23292] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1041.193641][T23295] 9pnet_virtio: no channels available for device syz
[ 1041.218704][T23294] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1041.222293][   T43] audit: type=1800 audit(1789485201.967:3): pid=23282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3615" name="memory.events.local" dev="sda1" ino=2049 res=0 errno=0
[ 1041.345599][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3624'.
[ 1041.839087][T23314] netlink: 'syz.9.3629': attribute type 3 has an invalid length.
[ 1041.839106][T23314] netlink: 'syz.9.3629': attribute type 1 has an invalid length.
[ 1041.847352][T23313] netlink: 'syz.0.3627': attribute type 3 has an invalid length.
[ 1041.847374][T23313] netlink: 'syz.0.3627': attribute type 1 has an invalid length.
[ 1042.130886][T23320] 9pnet_virtio: no channels available for device syz
[ 1042.167085][T23318] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1042.169665][T23317] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1042.205475][T23325] 9pnet_virtio: no channels available for device syz
[ 1042.219283][T23324] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1042.427329][T23327] netlink: 'syz.9.3636': attribute type 3 has an invalid length.
[ 1042.427350][T23327] netlink: 'syz.9.3636': attribute type 1 has an invalid length.
[ 1042.427359][T23327] __nla_validate_parse: 3 callbacks suppressed
[ 1042.427369][T23327] netlink: 228 bytes leftover after parsing attributes in process `syz.9.3636'.
[ 1042.512063][T22666] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[ 1042.580398][T23333] netlink: 'syz.5.3635': attribute type 3 has an invalid length.
[ 1042.580411][T23333] netlink: 'syz.5.3635': attribute type 1 has an invalid length.
[ 1042.580418][T23333] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3635'.
[ 1042.607938][T23341] 9pnet_virtio: no channels available for device syz
[ 1042.618960][T23338] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1042.621843][T23340] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1042.692089][T22666] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1042.693200][T22666] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1042.693225][T22666] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1042.695342][T22666] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1042.695360][T22666] usb 7-1: Product: syz
[ 1042.695373][T22666] usb 7-1: Manufacturer: syz
[ 1042.695385][T22666] usb 7-1: SerialNumber: syz
[ 1042.698206][T22666] usb 7-1: config 0 descriptor??
[ 1042.700461][T22666] hub 7-1:0.0: bad descriptor, ignoring hub
[ 1042.700480][T22666] hub 7-1:0.0: probe with driver hub failed with error -5
[ 1042.705137][T23342] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1042.739719][T22666] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input25
[ 1042.966461][T23350] 9pnet_virtio: no channels available for device syz
[ 1042.977523][T23349] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1043.021757][T23346] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1043.131542][T23356] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1043.192795][ T5875] usb 7-1: USB disconnect, device number 21
[ 1043.309930][T23358] netlink: 228 bytes leftover after parsing attributes in process `syz.9.3647'.
[ 1043.375620][T23365] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1043.507369][T23367] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3651'.
[ 1043.668580][T23368] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1043.864469][T23371] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3655'.
[ 1043.931468][T23373] netlink: 228 bytes leftover after parsing attributes in process `syz.9.3657'.
[ 1044.083648][T23391] 9pnet_virtio: no channels available for device syz
[ 1044.091468][T23390] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1044.097679][T23388] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1044.098616][T23393] 9pnet_virtio: no channels available for device syz
[ 1044.113868][T23392] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1044.185208][T23383] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3658'.
[ 1044.342759][T23402] hub 8-0:1.0: USB hub found
[ 1044.343024][T23402] hub 8-0:1.0: 1 port detected
[ 1044.367460][T23401] ALSA: mixer_oss: invalid OSS volume ';Ê'
[ 1044.381296][T17856] usb 10-1: new full-speed USB device number 13 using dummy_hcd
[ 1044.532446][T17856] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1044.533342][T17856] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1044.533359][T17856] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1044.535005][T17856] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.535018][T17856] usb 10-1: Product: syz
[ 1044.535026][T17856] usb 10-1: Manufacturer: syz
[ 1044.535034][T17856] usb 10-1: SerialNumber: syz
[ 1044.536787][T17856] usb 10-1: config 0 descriptor??
[ 1044.539472][T17856] hub 10-1:0.0: bad descriptor, ignoring hub
[ 1044.539485][T17856] hub 10-1:0.0: probe with driver hub failed with error -5
[ 1044.542865][T17856] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input26
[ 1044.599624][T23411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3671'.
[ 1045.186526][T23428] Invalid logical block size (2)
[ 1045.883404][T22666] usb 14-1: new full-speed USB device number 20 using dummy_hcd
[ 1046.047326][T22666] usb 14-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00
[ 1046.048181][T22666] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1046.048209][T22666] usb 14-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1046.048232][T22666] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.257381][T22666] dvb_ttusb_budget: ttusb_init_controller: error
[ 1046.257459][T22666] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1046.429009][T22666] DVB: Unable to find symbol stv0299_attach()
[ 1046.498536][T22666] DVB: Unable to find symbol tda8083_attach()
[ 1046.498546][T22666] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[ 1046.505634][T22666] usb 14-1: USB disconnect, device number 20
[ 1046.916304][T23440] capability: warning: `syz.9.3680' uses 32-bit capabilities (legacy support in use)
[ 1046.928349][T23440] program syz.9.3680 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1048.082851][T23454] faux_driver vgem: [drm] Unknown color mode 43944; guessing buffer size.
[ 1048.187090][T23458] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3689'.
[ 1048.299437][T23462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3691'.
[ 1048.313357][T23462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3691'.
[ 1048.321434][T23462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3691'.
[ 1048.713460][T23468] wlan0 speed is unknown, defaulting to 1000
[ 1048.713520][T23468] wlan0 speed is unknown, defaulting to 1000
[ 1048.760949][T23468] wlan0 speed is unknown, defaulting to 1000
[ 1048.773885][T23468] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 1048.773924][T23468] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 1048.773989][T23468] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 1048.775504][T23468] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1048.778858][T23468] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1048.908945][T23468] wlan0 speed is unknown, defaulting to 1000
[ 1048.944050][T23468] wlan0 speed is unknown, defaulting to 1000
[ 1048.963766][T23468] wlan0 speed is unknown, defaulting to 1000
[ 1048.985076][T23468] wlan0 speed is unknown, defaulting to 1000
[ 1049.168505][T23476] netlink: ct family unspecified
[ 1049.168530][T23476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1049.354495][T23482] ªªªªª: renamed from virt_wifi0
[ 1050.008092][ T7385] usb 10-1: USB disconnect, device number 13
[ 1050.640912][T23500] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1050.642252][T23500] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1050.770180][T23500] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1050.791523][T23500] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1051.181270][ T5810] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1051.181299][ T5810] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1051.181317][ T5810] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1051.181335][ T5810] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.397485][T22609] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[ 1052.397511][T22609] CPU: 0 UID: 0 PID: 22609 Comm: kworker/u34:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1052.397541][T22609] Tainted: [L]=SOFTLOCKUP
[ 1052.397549][T22609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1052.397561][T22609] Workqueue: hci3 hci_rx_work
[ 1052.397592][T22609] Call Trace:
[ 1052.397598][T22609]  <TASK>
[ 1052.397606][T22609]  dump_stack_lvl+0x100/0x190
[ 1052.397636][T22609]  sysfs_warn_dup.cold+0x1c/0x28
[ 1052.397665][T22609]  sysfs_create_dir_ns+0x24b/0x2b0
[ 1052.397705][T22609]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1052.397726][T22609]  ? find_held_lock+0x2b/0x80
[ 1052.397748][T22609]  ? kobject_add_internal+0x25f/0x930
[ 1052.397772][T22609]  ? kobject_add_internal+0x25f/0x930
[ 1052.397797][T22609]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1052.397820][T22609]  kobject_add_internal+0x2c8/0x930
[ 1052.397848][T22609]  kobject_add+0x16a/0x1e0
[ 1052.397872][T22609]  ? __pfx_kobject_add+0x10/0x10
[ 1052.397893][T22609]  ? class_to_subsys+0x10f/0x150
[ 1052.397926][T22609]  ? kobject_put+0xb9/0x640
[ 1052.397966][T22609]  ? _raw_spin_unlock+0x28/0x50
[ 1052.398003][T22609]  device_add+0x294/0x1970
[ 1052.398033][T22609]  ? __pfx_dev_set_name+0x10/0x10
[ 1052.398053][T22609]  ? __pfx_device_add+0x10/0x10
[ 1052.398082][T22609]  ? mgmt_send_event_skb+0x2fb/0x460
[ 1052.398116][T22609]  hci_conn_add_sysfs+0x1a3/0x260
[ 1052.398146][T22609]  le_conn_complete_evt+0x122f/0x2130
[ 1052.398178][T22609]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1052.398202][T22609]  ? hci_event_packet+0x186/0xcd0
[ 1052.398232][T22609]  hci_le_conn_complete_evt+0x23c/0x3a0
[ 1052.398258][T22609]  ? skb_pull_data+0x15f/0x1e0
[ 1052.398279][T22609]  hci_le_meta_evt+0x34a/0x5f0
[ 1052.398305][T22609]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1052.398334][T22609]  hci_event_packet+0x51c/0xcd0
[ 1052.398360][T22609]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1052.398387][T22609]  ? __pfx_hci_event_packet+0x10/0x10
[ 1052.398417][T22609]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1052.398449][T22609]  hci_rx_work+0x451/0xfc0
[ 1052.398478][T22609]  process_one_work+0xac7/0x1b10
[ 1052.398513][T22609]  ? __pfx_process_one_work+0x10/0x10
[ 1052.398537][T22609]  ? lock_acquire+0x1d1/0x380
[ 1052.398569][T22609]  ? __pfx_hci_rx_work+0x10/0x10
[ 1052.398596][T22609]  worker_thread+0x5ef/0xe50
[ 1052.398625][T22609]  ? __pfx_worker_thread+0x10/0x10
[ 1052.398649][T22609]  ? kthread+0x13a/0x450
[ 1052.398669][T22609]  ? __pfx_worker_thread+0x10/0x10
[ 1052.398686][T22609]  kthread+0x373/0x450
[ 1052.398705][T22609]  ? __pfx_kthread+0x10/0x10
[ 1052.398728][T22609]  ret_from_fork+0x730/0xd60
[ 1052.398758][T22609]  ? __pfx_ret_from_fork+0x10/0x10
[ 1052.398790][T22609]  ? __switch_to+0x800/0x10f0
[ 1052.398814][T22609]  ? __pfx_kthread+0x10/0x10
[ 1052.398837][T22609]  ret_from_fork_asm+0x1a/0x30
[ 1052.398868][T22609]  </TASK>
[ 1052.398966][T22609] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1052.399003][T22609] Bluetooth: hci3: failed to register connection device
[ 1052.824368][T23532] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3715'.
[ 1052.971814][T23532] ovs-system: entered promiscuous mode
[ 1053.511486][T23542] FAULT_INJECTION: forcing a failure.
[ 1053.511486][T23542] name failslab, interval 1, probability 0, space 0, times 1
[ 1053.511547][T23542] CPU: 0 UID: 0 PID: 23542 Comm: syz.9.3719 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1053.511588][T23542] Tainted: [L]=SOFTLOCKUP
[ 1053.511594][T23542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1053.511604][T23542] Call Trace:
[ 1053.511610][T23542]  <TASK>
[ 1053.511618][T23542]  dump_stack_lvl+0x100/0x190
[ 1053.511645][T23542]  should_fail_ex.cold+0x5/0xa
[ 1053.511669][T23542]  should_failslab+0xc2/0x120
[ 1053.511692][T23542]  __kmalloc_noprof+0xfc/0x840
[ 1053.511713][T23542]  ? __memcg_list_lru_alloc+0x418/0x680
[ 1053.511741][T23542]  __memcg_list_lru_alloc+0x418/0x680
[ 1053.511765][T23542]  ? xa_load+0x149/0x2c0
[ 1053.511786][T23542]  ? __pfx___memcg_list_lru_alloc+0x10/0x10
[ 1053.511817][T23542]  ? rcu_read_unlock+0x17/0x60
[ 1053.511848][T23542]  memcg_list_lru_alloc+0xd3/0x100
[ 1053.511875][T23542]  __memcg_slab_post_alloc_hook+0x27b/0x1270
[ 1053.511908][T23542]  ? kasan_save_track+0x14/0x30
[ 1053.511929][T23542]  kmem_cache_alloc_lru_noprof+0x4f6/0x6a0
[ 1053.511950][T23542]  ? alloc_inode+0x183/0x250
[ 1053.511979][T23542]  alloc_inode+0x183/0x250
[ 1053.512002][T23542]  path_from_stashed+0x25b/0x760
[ 1053.512028][T23542]  pidfs_alloc_file+0xf8/0x290
[ 1053.512048][T23542]  ? __pfx_pidfs_alloc_file+0x10/0x10
[ 1053.512073][T23542]  pidfd_prepare+0x107/0x1b0
[ 1053.512109][T23542]  __ia32_sys_pidfd_open+0x105/0x1a0
[ 1053.512131][T23542]  ? __pfx___ia32_sys_pidfd_open+0x10/0x10
[ 1053.512158][T23542]  __do_fast_syscall_32+0x13a/0x8b0
[ 1053.512186][T23542]  do_fast_syscall_32+0x32/0x70
[ 1053.512211][T23542]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1053.512232][T23542] RIP: 0023:0xf6ffefec
[ 1053.512251][T23542] Code: Unable to access opcode bytes at 0xf6ffefc2.
[ 1053.512259][T23542] RSP: 002b:00000000f53ed4dc EFLAGS: 00000296 ORIG_RAX: 00000000000001b2
[ 1053.512276][T23542] RAX: ffffffffffffffda RBX: 00000000000000ba RCX: 0000000000000000
[ 1053.512287][T23542] RDX: 00000000a9257a00 RSI: 00000000f53ed5b0 RDI: 00000000f7021736
[ 1053.512298][T23542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1053.512309][T23542] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1053.512320][T23542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1053.512343][T23542]  </TASK>
[ 1053.668759][T23548] jffs2: notice: (23548) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1053.742590][T23553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3721'.
[ 1053.826732][T23559] ieee802154 phy0 wpan0: encryption failed: -22
[ 1053.887764][T23548] validate_nla: 10 callbacks suppressed
[ 1053.887782][T23548] netlink: 'syz.2.3721': attribute type 3 has an invalid length.
[ 1053.887795][T23548] netlink: 'syz.2.3721': attribute type 1 has an invalid length.
[ 1053.887806][T23548] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3721'.
[ 1056.414563][T23603] =======================================================
[ 1056.414563][T23603] WARNING: The mand mount option has been deprecated and
[ 1056.414563][T23603]          and is ignored by this kernel. Remove the mand
[ 1056.414563][T23603]          option from the mount to silence this warning.
[ 1056.414563][T23603] =======================================================
[ 1056.437944][T23603] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1056.621939][T23603] ucma_write: process 210 (syz.9.3741) changed security contexts after opening file descriptor, this is not allowed.
[ 1057.388898][T23616] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12
[ 1057.412756][T23616] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12
[ 1057.911546][T23626] process 'syz.0.3750' launched './file1' with NULL argv: empty string added
[ 1060.054012][T23658] FAULT_INJECTION: forcing a failure.
[ 1060.054012][T23658] name failslab, interval 1, probability 0, space 0, times 0
[ 1060.054041][T23658] CPU: 3 UID: 0 PID: 23658 Comm: syz.2.3760 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1060.054069][T23658] Tainted: [L]=SOFTLOCKUP
[ 1060.054077][T23658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1060.054089][T23658] Call Trace:
[ 1060.054095][T23658]  <TASK>
[ 1060.054103][T23658]  dump_stack_lvl+0x100/0x190
[ 1060.054135][T23658]  should_fail_ex.cold+0x5/0xa
[ 1060.054165][T23658]  should_failslab+0xc2/0x120
[ 1060.054192][T23658]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1060.054219][T23658]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1060.054236][T23658]  ? nf_tables_commit+0x743/0x9300
[ 1060.054259][T23658]  nf_tables_commit+0x743/0x9300
[ 1060.054273][T23658]  ? rcu_is_watching+0x13/0xc0
[ 1060.054285][T23658]  ? nf_tables_newrule+0x1a28/0x2be0
[ 1060.054307][T23658]  ? nf_tables_newrule+0x10ed/0x2be0
[ 1060.054363][T23658]  ? __pfx_nf_tables_commit+0x10/0x10
[ 1060.054381][T23658]  ? net_generic+0x25/0x2a0
[ 1060.054402][T23658]  ? __nla_parse+0x40/0x60
[ 1060.054417][T23658]  nfnetlink_rcv_batch+0x1a4d/0x2880
[ 1060.054444][T23658]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[ 1060.054461][T23658]  ? find_held_lock+0x2b/0x80
[ 1060.054475][T23658]  ? __local_bh_enable_ip+0xa5/0x120
[ 1060.054492][T23658]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1060.054510][T23658]  ? __dev_queue_xmit+0xa12/0x4970
[ 1060.054547][T23658]  ? __nla_parse+0x40/0x60
[ 1060.054561][T23658]  nfnetlink_rcv+0x3bd/0x440
[ 1060.054579][T23658]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1060.054600][T23658]  netlink_unicast+0x585/0x850
[ 1060.054617][T23658]  ? __pfx_netlink_unicast+0x10/0x10
[ 1060.054635][T23658]  netlink_sendmsg+0x8b0/0xda0
[ 1060.054653][T23658]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1060.054670][T23658]  ? apparmor_socket_sendmsg+0x165/0x280
[ 1060.054688][T23658]  ____sys_sendmsg+0xa4d/0xbe0
[ 1060.054699][T23658]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1060.054714][T23658]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1060.054732][T23658]  ___sys_sendmsg+0x190/0x1e0
[ 1060.054745][T23658]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1060.054757][T23658]  ? futex_wait+0x11e/0x370
[ 1060.054777][T23658]  ? find_held_lock+0x2b/0x80
[ 1060.054798][T23658]  __sys_sendmsg+0x160/0x210
[ 1060.054814][T23658]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1060.054838][T23658]  __do_fast_syscall_32+0x13a/0x8b0
[ 1060.054858][T23658]  do_fast_syscall_32+0x32/0x70
[ 1060.054876][T23658]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1060.054892][T23658] RIP: 0023:0xf70cefec
[ 1060.054906][T23658] Code: Unable to access opcode bytes at 0xf70cefc2.
[ 1060.054911][T23658] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1060.054924][T23658] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0
[ 1060.054931][T23658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1060.054938][T23658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1060.054945][T23658] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1060.054951][T23658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1060.054966][T23658]  </TASK>
[ 1060.496965][T23677] hub 8-0:1.0: USB hub found
[ 1060.497110][T23677] hub 8-0:1.0: 1 port detected
[ 1061.204158][T23685] syz_tun: entered promiscuous mode
[ 1061.207462][T23685] macvtap1: entered promiscuous mode
[ 1061.207654][T23685] macvtap1: entered allmulticast mode
[ 1061.207668][T23685] syz_tun: entered allmulticast mode
[ 1061.784353][T23711] FAULT_INJECTION: forcing a failure.
[ 1061.784353][T23711] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1061.784384][T23711] CPU: 2 UID: 0 PID: 23711 Comm: syz.2.3783 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1061.784408][T23711] Tainted: [L]=SOFTLOCKUP
[ 1061.784413][T23711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1061.784424][T23711] Call Trace:
[ 1061.784430][T23711]  <TASK>
[ 1061.784437][T23711]  dump_stack_lvl+0x100/0x190
[ 1061.784462][T23711]  should_fail_ex.cold+0x5/0xa
[ 1061.784484][T23711]  strncpy_from_user+0x3b/0x2d0
[ 1061.784510][T23711]  path_getxattrat+0x102/0x430
[ 1061.784534][T23711]  ? __pfx_path_getxattrat+0x10/0x10
[ 1061.784550][T23711]  ? find_held_lock+0x2b/0x80
[ 1061.784568][T23711]  ? ksys_write+0x190/0x250
[ 1061.784590][T23711]  ? do_futex+0x190/0x440
[ 1061.784632][T23711]  __do_fast_syscall_32+0x13a/0x8b0
[ 1061.784657][T23711]  do_fast_syscall_32+0x32/0x70
[ 1061.784683][T23711]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1061.784705][T23711] RIP: 0023:0xf70cefec
[ 1061.784724][T23711] Code: Unable to access opcode bytes at 0xf70cefc2.
[ 1061.784731][T23711] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000e7
[ 1061.784749][T23711] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000000000
[ 1061.784756][T23711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1061.784764][T23711] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1061.784773][T23711] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1061.784784][T23711] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1061.784806][T23711]  </TASK>
[ 1062.064391][T23730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3790'.
[ 1062.104949][T23716] kvm: requested 25980 ns i8254 timer period limited to 200000 ns
[ 1062.478767][T23747] netlink: 'syz.2.3792': attribute type 9 has an invalid length.
[ 1062.478845][T23747] netlink: 'syz.2.3792': attribute type 6 has an invalid length.
[ 1062.544107][T23751] kernel read not supported for file / 
œ7³ÏüâW)«s“§Ç!Q�öì¥fsõ‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|�Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 23751 comm: syz.9.3798)
[ 1062.545408][   T43] audit: type=1800 audit(1789485223.297:4): pid=23751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3798" name=20019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=125276 res=0 errno=0
[ 1062.680398][T23756] TCP: tcp_parse_options: Illegal window scaling value 162 > 14 received
[ 1062.891867][T23760] syz.0.3801 uses obsolete (PF_INET,SOCK_PACKET)
[ 1062.911514][T23761] FAULT_INJECTION: forcing a failure.
[ 1062.911514][T23761] name fail_futex, interval 1, probability 0, space 0, times 1
[ 1062.911546][T23761] CPU: 1 UID: 0 PID: 23761 Comm: syz.9.3802 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1062.911573][T23761] Tainted: [L]=SOFTLOCKUP
[ 1062.911580][T23761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1062.911591][T23761] Call Trace:
[ 1062.911599][T23761]  <TASK>
[ 1062.911607][T23761]  dump_stack_lvl+0x100/0x190
[ 1062.911637][T23761]  should_fail_ex.cold+0x5/0xa
[ 1062.911663][T23761]  get_futex_key+0x1d0/0x14f0
[ 1062.911694][T23761]  ? __pfx_get_futex_key+0x10/0x10
[ 1062.911744][T23761]  ? putname+0xb1/0x110
[ 1062.911769][T23761]  ? kasan_save_stack+0x3f/0x50
[ 1062.911789][T23761]  ? kasan_save_stack+0x30/0x50
[ 1062.911809][T23761]  ? kasan_save_track+0x14/0x30
[ 1062.911834][T23761]  futex_wake+0xf4/0x5e0
[ 1062.911874][T23761]  ? __pfx_futex_wake+0x10/0x10
[ 1062.911906][T23761]  do_futex+0x2b2/0x440
[ 1062.911926][T23761]  ? __pfx_do_futex+0x10/0x10
[ 1062.911946][T23761]  __ia32_sys_futex_time32+0x2f4/0x470
[ 1062.911969][T23761]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[ 1062.911989][T23761]  ? kmem_cache_free+0x127/0x6c0
[ 1062.912026][T23761]  __do_fast_syscall_32+0x13a/0x8b0
[ 1062.912065][T23761]  do_fast_syscall_32+0x32/0x70
[ 1062.912094][T23761]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1062.912119][T23761] RIP: 0023:0xf6ffefec
[ 1062.912139][T23761] Code: Unable to access opcode bytes at 0xf6ffefc2.
[ 1062.912148][T23761] RSP: 002b:00000000f53ed5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[ 1062.912166][T23761] RAX: ffffffffffffffda RBX: 00000000f73f4f8c RCX: 0000000000000081
[ 1062.912178][T23761] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473
[ 1062.912189][T23761] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000
[ 1062.912201][T23761] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1062.912213][T23761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1062.912234][T23761]  </TASK>
[ 1062.949638][T23760] netlink: 'syz.0.3801': attribute type 2 has an invalid length.
[ 1062.949660][T23760] netlink: 'syz.0.3801': attribute type 2 has an invalid length.
[ 1064.261526][T23772] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore
[ 1064.261546][T23772] overlayfs: missing 'lowerdir'
[ 1065.124841][T23768] ima: policy update failed
[ 1065.129848][   T43] audit: type=1802 audit(1789485225.877:5): pid=23768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3806" res=0 errno=0
[ 1065.200573][   T43] audit: type=1326 audit(1789485225.947:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23780 comm="syz.5.3810" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdefec code=0x0
[ 1065.434829][   T43] audit: type=1326 audit(1789485226.187:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23792 comm="syz.2.3813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000
[ 1065.434997][   T43] audit: type=1326 audit(1789485226.187:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23792 comm="syz.2.3813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000
[ 1065.436938][   T43] audit: type=1326 audit(1789485226.187:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23792 comm="syz.2.3813" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf70cefec code=0x7ffc0000
[ 1065.436964][   T43] audit: type=1326 audit(1789485226.187:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23792 comm="syz.2.3813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000
[ 1065.436985][   T43] audit: type=1326 audit(1789485226.187:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23792 comm="syz.2.3813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000
[ 1065.437434][   T43] audit: type=1326 audit(1789485226.187:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23792 comm="syz.2.3813" exe="/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf70cefec code=0x7ffc0000
[ 1065.505096][   T43] audit: type=1326 audit(1789485226.257:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23792 comm="syz.2.3813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000
[ 1065.756357][T23804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3818'.
[ 1065.756379][T23804] bridge: RTM_NEWNEIGH with invalid ether address
[ 1065.757282][T23804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3818'.
[ 1065.757297][T23804] bridge: RTM_NEWNEIGH with invalid ether address
[ 1066.224745][T23824] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3826'.
[ 1067.055511][T23834] loop5: detected capacity change from 0 to 7
[ 1067.095292][T23834] Dev loop5: unable to read RDB block 7
[ 1067.095327][T23834]  loop5: unable to read partition table
[ 1067.095533][T23834] loop5: partition table beyond EOD, truncated
[ 1067.095549][T23834] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1067.223825][ T1442] ieee802154 phy0 wpan0: encryption failed: -22
[ 1067.224676][ T1442] ieee802154 phy1 wpan1: encryption failed: -22
[ 1067.272281][T23838] device-mapper: raid: Ignoring chunk size parameter for RAID 1
[ 1067.272297][T23838] device-mapper: raid: Choosing default region size of 4MiB
[ 1067.535023][T23838] device-mapper: table: 248:0: raid: RAID device lookup failure (-ENOTBLK)
[ 1067.535043][T23838] device-mapper: ioctl: error adding target to table
[ 1067.674662][T23850] netlink: 'syz.0.3838': attribute type 1 has an invalid length.
[ 1069.408470][T23872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3845'.
[ 1069.409375][T23872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3845'.
[ 1070.504446][T23878] netlink: 'syz.5.3849': attribute type 1 has an invalid length.
[ 1070.714048][T17706] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.983580][T17706] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1071.149835][T17706] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1071.247644][T23889] netlink: 920 bytes leftover after parsing attributes in process `syz.5.3851'.
[ 1071.284149][T17706] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1071.445420][T17706] bridge_slave_1: left allmulticast mode
[ 1071.445445][T17706] bridge_slave_1: left promiscuous mode
[ 1071.445619][T17706] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1071.448191][T17706] bridge_slave_0: left allmulticast mode
[ 1071.448213][T17706] bridge_slave_0: left promiscuous mode
[ 1071.448363][T17706] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1071.496408][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1071.500253][ T5769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1071.500926][ T5769] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1071.501517][ T5769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1071.501833][ T5769] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1071.563229][T23905] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1071.706153][T17706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1071.709914][T17706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1071.713330][T17706] bond0 (unregistering): Released all slaves
[ 1071.922552][T23940] program syz.5.3864 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1071.959689][T23899] wlan0 speed is unknown, defaulting to 1000
[ 1072.014874][T17706] hsr_slave_0: left promiscuous mode
[ 1072.016389][T17706] hsr_slave_1: left promiscuous mode
[ 1072.017175][T17706] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1072.017192][T17706] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1072.018360][T17706] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1072.018369][T17706] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1072.029038][T17706] veth1_macvtap: left promiscuous mode
[ 1072.029068][T17706] veth0_macvtap: left promiscuous mode
[ 1072.029111][T17706] veth1_vlan: left promiscuous mode
[ 1072.029150][T17706] veth0_vlan: left promiscuous mode
[ 1072.147800][T23946] ftl_cs: FTL header not found.
[ 1072.153822][T23952] UBIFS error (pid: 23952): cannot open "ubi0_0", error -19
[ 1072.302771][T23946] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536]
[ 1072.318394][T17706] team0 (unregistering): Port device team_slave_1 removed
[ 1072.328901][T17706] team0 (unregistering): Port device team_slave_0 removed
[ 1072.489680][ T5459] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1072.852409][ T5459] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1072.879832][T23899] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1072.879934][T23899] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1072.879991][T23899] bridge_slave_0: entered allmulticast mode
[ 1072.881914][T23899] bridge_slave_0: entered promiscuous mode
[ 1072.889889][T23899] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1072.889969][T23899] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1072.890091][T23899] bridge_slave_1: entered allmulticast mode
[ 1072.891635][T23899] bridge_slave_1: entered promiscuous mode
[ 1072.953666][T23899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1072.957764][T23899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1072.980352][T23899] team0: Port device team_slave_0 added
[ 1072.986388][T23899] team0: Port device team_slave_1 added
[ 1073.022819][T23899] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1073.022831][T23899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1073.025142][T23899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1073.026291][T23899] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1073.026300][T23899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1073.026313][T23899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1073.064453][T23989] Bluetooth: MGMT ver 1.23
[ 1073.100816][T23899] hsr_slave_0: entered promiscuous mode
[ 1073.104132][T23899] hsr_slave_1: entered promiscuous mode
[ 1073.104458][T23899] debugfs: 'hsr0' already exists in 'hsr'
[ 1073.104471][T23899] Cannot create hsr debugfs directory
[ 1073.351534][ T5459] 8021q: adding VLAN 0 to HW filter on device eth12
[ 1073.541334][T22609] Bluetooth: hci2: command tx timeout
[ 1073.713424][ T5459] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1073.727024][T24000] syzkaller0: entered promiscuous mode
[ 1073.727045][T24000] syzkaller0: entered allmulticast mode
[ 1073.743967][T24000] tipc: Started in network mode
[ 1073.743991][T24000] tipc: Node identity 8696d1e0475b, cluster identity 4711
[ 1073.744147][T24000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1073.758552][T24000] tipc: Resetting bearer <eth:syzkaller0>
[ 1073.862039][T23999] tipc: Resetting bearer <eth:syzkaller0>
[ 1073.906419][T23999] tipc: Disabling bearer <eth:syzkaller0>
[ 1074.036462][T24015] overlayfs: missing 'lowerdir'
[ 1074.225779][T24020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3879'.
[ 1074.762367][T24036] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1074.765763][T23899] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1074.810290][T23899] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1074.810978][T23899] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1074.824695][T23899] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1074.825500][T23899] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1074.856904][T23899] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1074.863281][T23899] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1075.129491][T23899] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1075.354612][T23899] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1075.383056][T23899] 8021q: adding VLAN 0 to HW filter on device team0
[ 1075.392286][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1075.392369][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1075.414339][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1075.414433][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1075.631648][T22609] Bluetooth: hci2: command tx timeout
[ 1076.334053][T23899] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1076.491803][T23899] veth0_vlan: entered promiscuous mode
[ 1076.524319][T23899] veth1_vlan: entered promiscuous mode
[ 1076.581605][T23899] veth0_macvtap: entered promiscuous mode
[ 1076.604862][T23899] veth1_macvtap: entered promiscuous mode
[ 1076.667064][T23899] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1076.688130][T23899] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1076.921952][ T5810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1076.922004][ T5810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1076.922032][ T5810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1076.922063][ T5810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1077.325983][ T8122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1077.326006][ T8122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1077.413398][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1077.413413][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1077.701948][T22609] Bluetooth: hci2: command tx timeout
[ 1079.115405][T23955] syz.0.3867 (23955) used greatest stack depth: 17160 bytes left
[ 1079.791458][T22609] Bluetooth: hci2: command tx timeout
[ 1083.440319][T24153] syz_tun: entered allmulticast mode
[ 1083.445571][T24152] syz_tun: left allmulticast mode
[ 1083.839538][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.030027][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.242635][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.258010][T24168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3905'.
[ 1084.464364][T24175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3902'.
[ 1084.466145][T24175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3902'.
[ 1084.834026][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1085.311390][T22609] Bluetooth: hci1: link tx timeout
[ 1085.314825][T22609] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1085.443007][   T13] bridge_slave_1: left allmulticast mode
[ 1085.443024][   T13] bridge_slave_1: left promiscuous mode
[ 1085.443151][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1085.472659][   T13] bridge_slave_0: left allmulticast mode
[ 1085.472687][   T13] bridge_slave_0: left promiscuous mode
[ 1085.472718][T24189] block2mtd: error: cannot open device /dev/ram0
[ 1085.472863][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1085.658043][ T5767] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1085.674274][ T5767] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1085.677472][ T5767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1085.683446][ T5767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1085.688211][ T5767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1085.877953][T24186] ubi0: attaching mtd1
[ 1085.971006][T24186] ubi0: scanning is finished
[ 1085.971021][T24186] ubi0: empty MTD device detected
[ 1086.028348][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1086.050328][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1086.053197][   T13] bond0 (unregistering): Released all slaves
[ 1086.180377][T24189] UBIFS error (pid: 24189): cannot open "ubi0_0", error -19
[ 1086.395536][T24186] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[ 1086.577224][T24221] netlink: 'syz.9.3911': attribute type 1 has an invalid length.
[ 1086.734420][ T5459] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1086.875926][   T13] hsr_slave_0: left promiscuous mode
[ 1086.877010][   T13] hsr_slave_1: left promiscuous mode
[ 1086.877645][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1086.877656][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1086.897928][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1086.897948][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1086.915073][   T13] veth1_macvtap: left promiscuous mode
[ 1086.915141][   T13] veth0_macvtap: left promiscuous mode
[ 1086.915243][   T13] veth1_vlan: left promiscuous mode
[ 1086.915300][   T13] veth0_vlan: left promiscuous mode
[ 1086.986002][ T8130] IPVS: starting estimator thread 0...
[ 1087.071327][T24235] IPVS: using max 43 ests per chain, 103200 per kthread
[ 1087.381230][ T5769] Bluetooth: hci1: command 0x0406 tx timeout
[ 1087.601710][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1087.614273][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1087.784054][T22609] Bluetooth: hci2: command tx timeout
[ 1087.860505][T24195] wlan0 speed is unknown, defaulting to 1000
[ 1088.302638][T24195] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1088.305048][T24195] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1088.305115][T24195] bridge_slave_0: entered allmulticast mode
[ 1088.305913][T24195] bridge_slave_0: entered promiscuous mode
[ 1088.316022][T24195] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1088.316098][T24195] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1088.316155][T24195] bridge_slave_1: entered allmulticast mode
[ 1088.317001][T24195] bridge_slave_1: entered promiscuous mode
[ 1088.350266][T24195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1088.357404][T24195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1088.379690][T24195] team0: Port device team_slave_0 added
[ 1088.384390][T24195] team0: Port device team_slave_1 added
[ 1088.409743][T24195] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1088.409803][T24195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1088.409824][T24195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1088.432114][T24195] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1088.432128][T24195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1088.432149][T24195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1088.489257][T24195] hsr_slave_0: entered promiscuous mode
[ 1088.490544][T24195] hsr_slave_1: entered promiscuous mode
[ 1088.496240][T24195] debugfs: 'hsr0' already exists in 'hsr'
[ 1088.496259][T24195] Cannot create hsr debugfs directory
[ 1088.935083][ T5459] 8021q: adding VLAN 0 to HW filter on device eth15
[ 1089.455600][ T5459] 8021q: adding VLAN 0 to HW filter on device eth16
[ 1089.572749][T24195] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1089.585491][T24195] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1089.585979][T24195] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1089.602007][T24195] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1089.604093][T24195] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1089.610393][T24195] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1089.611044][T24195] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1089.642508][T24195] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1089.724962][T24195] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1089.758546][ T5459] 8021q: adding VLAN 0 to HW filter on device eth17
[ 1089.773611][T24195] 8021q: adding VLAN 0 to HW filter on device team0
[ 1089.779957][ T9729] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1089.780010][ T9729] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1089.805911][ T9729] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1089.805958][ T9729] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1089.871424][T22609] Bluetooth: hci2: command tx timeout
[ 1090.191319][ T3381] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[ 1090.299846][T24195] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1090.354132][ T3381] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[ 1090.354957][ T3381] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1090.354973][ T3381] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1090.354985][ T3381] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1090.355000][ T3381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1090.356120][ T3381] usb 5-1: config 0 descriptor??
[ 1090.356543][T24321] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1090.571196][T24347] kAFS: No cell specified
[ 1090.670168][T24355] netlink: 'syz.9.3935': attribute type 1 has an invalid length.
[ 1090.738802][T24195] veth0_vlan: entered promiscuous mode
[ 1090.757513][T24195] veth1_vlan: entered promiscuous mode
[ 1090.779151][ T3381] apple 0003:05AC:027A.0002: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling
[ 1090.792365][ T3381] input: HID 05ac:027a as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:05AC:027A.0002/input/input28
[ 1090.795600][T24195] veth0_macvtap: entered promiscuous mode
[ 1090.802119][T24195] veth1_macvtap: entered promiscuous mode
[ 1090.809801][T24195] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1090.819003][T24195] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1090.892819][ T5810] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.893166][ T5810] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.893199][ T5810] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.893229][ T5810] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.972152][ T8181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1090.972165][ T8181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1091.011082][ T3381] apple 0003:05AC:027A.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0
[ 1091.044434][ T9726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1091.044453][ T9726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1091.521260][ T7430] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1091.683410][ T7430] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[ 1091.683452][ T7430] usb 10-1: no configurations
[ 1091.683465][ T7430] usb 10-1: can't read configurations, error -22
[ 1091.811793][ T7430] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1091.941288][T22609] Bluetooth: hci2: command tx timeout
[ 1091.994198][ T7430] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[ 1091.994237][ T7430] usb 10-1: no configurations
[ 1091.994249][ T7430] usb 10-1: can't read configurations, error -22
[ 1092.003615][ T7430] usb usb10-port1: attempt power cycle
[ 1092.351311][ T7430] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1092.374590][ T7430] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[ 1092.374632][ T7430] usb 10-1: no configurations
[ 1092.374645][ T7430] usb 10-1: can't read configurations, error -22
[ 1092.502361][ T7430] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1092.537877][ T7430] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[ 1092.537917][ T7430] usb 10-1: no configurations
[ 1092.537928][ T7430] usb 10-1: can't read configurations, error -22
[ 1092.538156][ T7430] usb usb10-port1: unable to enumerate USB device
[ 1092.551054][T24423] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3946'.
[ 1092.555621][T24423] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3946'.
[ 1092.702651][T22896] usb 5-1: USB disconnect, device number 18
[ 1092.856208][T24434] netlink: 'syz.6.3949': attribute type 1 has an invalid length.
[ 1094.021466][T22609] Bluetooth: hci2: command tx timeout
[ 1094.182418][T24474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3957'.
[ 1094.428625][T24488] netlink: 'syz.5.3960': attribute type 9 has an invalid length.
[ 1094.787415][T24499] Driver unsupported XDP return value 0 on prog  (id 190) dev N/A, expect packet loss!
[ 1095.247356][T24517] FAULT_INJECTION: forcing a failure.
[ 1095.247356][T24517] name failslab, interval 1, probability 0, space 0, times 0
[ 1095.247379][T24517] CPU: 3 UID: 0 PID: 24517 Comm: syz.0.3968 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1095.247394][T24517] Tainted: [L]=SOFTLOCKUP
[ 1095.247398][T24517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1095.247405][T24517] Call Trace:
[ 1095.247409][T24517]  <TASK>
[ 1095.247413][T24517]  dump_stack_lvl+0x100/0x190
[ 1095.247431][T24517]  should_fail_ex.cold+0x5/0xa
[ 1095.247447][T24517]  should_failslab+0xc2/0x120
[ 1095.247463][T24517]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[ 1095.247478][T24517]  ? find_held_lock+0x2b/0x80
[ 1095.247489][T24517]  ? sock_alloc_inode+0x26/0x2c0
[ 1095.247506][T24517]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1095.247523][T24517]  sock_alloc_inode+0x26/0x2c0
[ 1095.247541][T24517]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1095.247556][T24517]  alloc_inode+0x68/0x250
[ 1095.247572][T24517]  sock_alloc+0x44/0x280
[ 1095.247586][T24517]  ? security_socket_create+0x7f/0x250
[ 1095.247600][T24517]  __sock_create+0xc2/0x860
[ 1095.247613][T24517]  __sys_socket+0x14d/0x260
[ 1095.247623][T24517]  ? xfd_validate_state+0x129/0x190
[ 1095.247639][T24517]  ? __pfx___sys_socket+0x10/0x10
[ 1095.247654][T24517]  __ia32_sys_socket+0x72/0xb0
[ 1095.247665][T24517]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1095.247681][T24517]  __do_fast_syscall_32+0x13a/0x8b0
[ 1095.247700][T24517]  do_fast_syscall_32+0x32/0x70
[ 1095.247716][T24517]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1095.247730][T24517] RIP: 0023:0xf706efec
[ 1095.247742][T24517] Code: Unable to access opcode bytes at 0xf706efc2.
[ 1095.247747][T24517] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167
[ 1095.247758][T24517] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003
[ 1095.247765][T24517] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000
[ 1095.247771][T24517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1095.247776][T24517] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1095.247782][T24517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1095.247796][T24517]  </TASK>
[ 1095.247801][T24517] socket: no more sockets
[ 1096.657152][T24605] hub 8-0:1.0: USB hub found
[ 1096.657578][T24605] hub 8-0:1.0: 1 port detected
[ 1097.307934][T24624] FAULT_INJECTION: forcing a failure.
[ 1097.307934][T24624] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1097.307968][T24624] CPU: 0 UID: 0 PID: 24624 Comm: syz.6.3993 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1097.307995][T24624] Tainted: [L]=SOFTLOCKUP
[ 1097.308002][T24624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1097.308013][T24624] Call Trace:
[ 1097.308019][T24624]  <TASK>
[ 1097.308027][T24624]  dump_stack_lvl+0x100/0x190
[ 1097.308056][T24624]  should_fail_ex.cold+0x5/0xa
[ 1097.308082][T24624]  _copy_from_user+0x2e/0xd0
[ 1097.308107][T24624]  __do_sys_copy_file_range+0xf9/0x460
[ 1097.308134][T24624]  ? xfd_validate_state+0x129/0x190
[ 1097.308163][T24624]  ? __pfx___do_sys_copy_file_range+0x10/0x10
[ 1097.308199][T24624]  __do_fast_syscall_32+0x13a/0x8b0
[ 1097.308231][T24624]  do_fast_syscall_32+0x32/0x70
[ 1097.308256][T24624]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1097.308281][T24624] RIP: 0023:0xf7f35fec
[ 1097.308303][T24624] Code: Unable to access opcode bytes at 0xf7f35fc2.
[ 1097.308311][T24624] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000179
[ 1097.308331][T24624] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[ 1097.308345][T24624] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000006
[ 1097.308356][T24624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1097.308367][T24624] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1097.308380][T24624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1097.308406][T24624]  </TASK>
[ 1098.880257][T24643] 
: renamed from bond_slave_0
[ 1099.238939][T24655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4003'.
[ 1100.289976][T24670] capability: warning: `syz.6.4009' uses deprecated v2 capabilities in a way that may be insecure
[ 1103.171260][   T30] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1103.341035][   T30] usb 5-1: Using ep0 maxpacket: 32
[ 1103.342039][   T30] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1103.343398][   T30] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 1103.343425][   T30] usb 5-1: config 0 has no interface number 0
[ 1103.343453][   T30] usb 5-1: config 0 interface 12 has no altsetting 0
[ 1103.345952][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1103.345971][   T30] usb 5-1: Product: syz
[ 1103.345984][   T30] usb 5-1: Manufacturer: syz
[ 1103.345996][   T30] usb 5-1: SerialNumber: syz
[ 1103.348171][   T30] usb 5-1: config 0 descriptor??
[ 1104.046882][   T30] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1104.046926][   T30] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[ 1104.046940][   T30] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1104.046998][   T30] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[ 1104.055943][   T30] usb 5-1: USB disconnect, device number 19
[ 1105.599831][T24753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4034'.
[ 1105.624517][T24753] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4034'.
[ 1106.305458][T24757] loop0: detected capacity change from 0 to 4096
[ 1107.537880][T24812] cgroup: Unknown subsys name 'cpuset'
[ 1107.838294][T24818] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4048'.
[ 1107.841259][T24818] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4048'.
[ 1108.938327][T24832] XFS (nbd9): SB validate failed with error -5.
[ 1109.178294][T24847] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4056'.
[ 1109.179182][T24847] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4056'.
[ 1109.205313][T24843] kvm: requested 62019 ns i8254 timer period limited to 200000 ns
[ 1109.255758][T24843] kvm: requested 196952 ns i8254 timer period limited to 200000 ns
[ 1109.440110][T24843] kvm: requested 149181 ns i8254 timer period limited to 200000 ns
[ 1109.447634][T24843] kvm: requested 10895 ns i8254 timer period limited to 200000 ns
[ 1109.454797][T24843] kvm: requested 186057 ns i8254 timer period limited to 200000 ns
[ 1109.521395][T24843] kvm: requested 107276 ns i8254 timer period limited to 200000 ns
[ 1109.553741][T24857] FAULT_INJECTION: forcing a failure.
[ 1109.553741][T24857] name failslab, interval 1, probability 0, space 0, times 0
[ 1109.553778][T24857] CPU: 1 UID: 0 PID: 24857 Comm: syz.5.4058 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1109.553805][T24857] Tainted: [L]=SOFTLOCKUP
[ 1109.553812][T24857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1109.553824][T24857] Call Trace:
[ 1109.553831][T24857]  <TASK>
[ 1109.553839][T24857]  dump_stack_lvl+0x100/0x190
[ 1109.553869][T24857]  should_fail_ex.cold+0x5/0xa
[ 1109.553894][T24857]  should_failslab+0xc2/0x120
[ 1109.553919][T24857]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1109.553941][T24857]  ? skb_clone+0x190/0x400
[ 1109.553972][T24857]  skb_clone+0x190/0x400
[ 1109.553997][T24857]  pfkey_process+0xc0/0x810
[ 1109.554025][T24857]  ? trace_contention_end+0x126/0x160
[ 1109.554053][T24857]  ? __pfx_pfkey_process+0x10/0x10
[ 1109.554080][T24857]  ? pfkey_sendmsg+0x41a/0x840
[ 1109.554123][T24857]  ? __pfx___alloc_skb+0x10/0x10
[ 1109.554154][T24857]  pfkey_sendmsg+0x428/0x840
[ 1109.554186][T24857]  ____sys_sendmsg+0xa4d/0xbe0
[ 1109.554202][T24857]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1109.554232][T24857]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1109.554262][T24857]  ___sys_sendmsg+0x190/0x1e0
[ 1109.554284][T24857]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1109.554304][T24857]  ? futex_wait+0x11e/0x370
[ 1109.554336][T24857]  ? find_held_lock+0x2b/0x80
[ 1109.554380][T24857]  __sys_sendmsg+0x160/0x210
[ 1109.554407][T24857]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1109.554448][T24857]  __do_fast_syscall_32+0x13a/0x8b0
[ 1109.554478][T24857]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1109.554506][T24857]  do_fast_syscall_32+0x32/0x70
[ 1109.554534][T24857]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1109.554558][T24857] RIP: 0023:0xf6fdefec
[ 1109.554579][T24857] Code: Unable to access opcode bytes at 0xf6fdefc2.
[ 1109.554587][T24857] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1109.554606][T24857] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000180
[ 1109.554618][T24857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1109.554630][T24857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1109.554641][T24857] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1109.554653][T24857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1109.554680][T24857]  </TASK>
[ 1109.952885][T24861] FAULT_INJECTION: forcing a failure.
[ 1109.952885][T24861] name failslab, interval 1, probability 0, space 0, times 0
[ 1109.952919][T24861] CPU: 0 UID: 0 PID: 24861 Comm: syz.5.4061 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1109.952945][T24861] Tainted: [L]=SOFTLOCKUP
[ 1109.952952][T24861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1109.952963][T24861] Call Trace:
[ 1109.952969][T24861]  <TASK>
[ 1109.952977][T24861]  dump_stack_lvl+0x100/0x190
[ 1109.953007][T24861]  should_fail_ex.cold+0x5/0xa
[ 1109.953030][T24861]  should_failslab+0xc2/0x120
[ 1109.953055][T24861]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1109.953083][T24861]  ? snd_virmidi_output_open+0xc4/0x670
[ 1109.953112][T24861]  snd_virmidi_output_open+0xc4/0x670
[ 1109.953140][T24861]  open_substream+0x480/0x970
[ 1109.953160][T24861]  rawmidi_open_priv+0x595/0x6f0
[ 1109.953183][T24861]  snd_rawmidi_open+0x4b4/0xb90
[ 1109.953205][T24861]  ? __pfx_snd_rawmidi_open+0x10/0x10
[ 1109.953224][T24861]  ? lock_acquire+0x1d1/0x380
[ 1109.953247][T24861]  ? __pfx_default_wake_function+0x10/0x10
[ 1109.953274][T24861]  ? soundcore_open+0x231/0x5a0
[ 1109.953298][T24861]  ? soundcore_open+0x231/0x5a0
[ 1109.953323][T24861]  ? __pfx_snd_rawmidi_open+0x10/0x10
[ 1109.953342][T24861]  soundcore_open+0x2e3/0x5a0
[ 1109.953367][T24861]  ? __pfx_soundcore_open+0x10/0x10
[ 1109.953390][T24861]  chrdev_open+0x234/0x6a0
[ 1109.953410][T24861]  ? __pfx_chrdev_open+0x10/0x10
[ 1109.953432][T24861]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 1109.953461][T24861]  do_dentry_open+0x6ab/0x14d0
[ 1109.953479][T24861]  ? __pfx_chrdev_open+0x10/0x10
[ 1109.953527][T24861]  vfs_open+0x82/0x3f0
[ 1109.953556][T24861]  path_openat+0x19fa/0x2440
[ 1109.953580][T24861]  ? __pfx_path_openat+0x10/0x10
[ 1109.953624][T24861]  do_file_open+0x20e/0x430
[ 1109.953649][T24861]  ? __pfx_do_file_open+0x10/0x10
[ 1109.953710][T24861]  ? _raw_spin_unlock+0x28/0x50
[ 1109.953734][T24861]  ? alloc_fd+0x471/0x7a0
[ 1109.953761][T24861]  do_sys_openat2+0x10f/0x1e0
[ 1109.953785][T24861]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1109.953812][T24861]  ? __ia32_sys_futex_time32+0x2f4/0x470
[ 1109.953830][T24861]  ? __ia32_sys_futex_time32+0x2fd/0x470
[ 1109.953861][T24861]  __ia32_compat_sys_openat+0x12d/0x210
[ 1109.953888][T24861]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[ 1109.953923][T24861]  do_int80_emulation+0x166/0x650
[ 1109.953952][T24861]  asm_int80_emulation+0x1a/0x20
[ 1109.953970][T24861] RIP: 0023:0xf71175ab
[ 1109.953985][T24861] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 1109.954001][T24861] RSP: 002b:00000000f53cd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1109.954021][T24861] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53cd100
[ 1109.954034][T24861] RDX: 0000000000189083 RSI: 0000000000000000 RDI: 0000000000000000
[ 1109.954046][T24861] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1109.954056][T24861] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1109.954066][T24861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1109.954089][T24861]  </TASK>
[ 1110.069915][T24864] warning: `syz.0.4063' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1110.146995][T24869] bond0: entered promiscuous mode
[ 1110.147010][T24869] 
: entered promiscuous mode
[ 1110.147118][T24869] bond_slave_1: entered promiscuous mode
[ 1111.496025][T24862] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4057'.
[ 1112.073492][T24894] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4073'.
[ 1113.635453][T24934] sctp: [Deprecated]: syz.0.4089 (pid 24934) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1113.635453][T24934] Use struct sctp_sack_info instead
[ 1113.937607][T24947] block nbd0: not configured, cannot reconfigure
[ 1114.488580][T24968] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (eth1)
[ 1115.055332][T24978] tipc: Started in network mode
[ 1115.055350][T24978] tipc: Node identity 4, cluster identity 4711
[ 1115.055357][T24978] tipc: Node number set to 4
[ 1116.935263][T24993] kAFS: No cell specified
[ 1119.084828][T25023] hub 8-0:1.0: USB hub found
[ 1119.087665][T25023] hub 8-0:1.0: 1 port detected
[ 1119.417508][T25030] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4125'.
[ 1119.687403][T25037] FAULT_INJECTION: forcing a failure.
[ 1119.687403][T25037] name failslab, interval 1, probability 0, space 0, times 0
[ 1119.687437][T25037] CPU: 2 UID: 0 PID: 25037 Comm: syz.0.4128 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1119.687463][T25037] Tainted: [L]=SOFTLOCKUP
[ 1119.687470][T25037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1119.687479][T25037] Call Trace:
[ 1119.687487][T25037]  <TASK>
[ 1119.687495][T25037]  dump_stack_lvl+0x100/0x190
[ 1119.687523][T25037]  should_fail_ex.cold+0x5/0xa
[ 1119.687545][T25037]  should_failslab+0xc2/0x120
[ 1119.687572][T25037]  __kvmalloc_node_noprof+0x113/0x9b0
[ 1119.687593][T25037]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[ 1119.687622][T25037]  ? percpu_ref_init+0xec/0x3f0
[ 1119.687650][T25037]  ? io_alloc_cache_init+0x38/0x170
[ 1119.687669][T25037]  io_alloc_cache_init+0x38/0x170
[ 1119.687687][T25037]  io_uring_setup.cold+0x450/0x1c5e
[ 1119.687714][T25037]  ? ksys_write+0x190/0x250
[ 1119.687730][T25037]  ? ksys_write+0x190/0x250
[ 1119.687742][T25037]  ? __pfx_io_uring_setup+0x10/0x10
[ 1119.687757][T25037]  ? do_futex+0x190/0x440
[ 1119.687768][T25037]  ? __pfx_do_futex+0x10/0x10
[ 1119.687784][T25037]  ? xfd_validate_state+0x129/0x190
[ 1119.687804][T25037]  __ia32_sys_io_uring_setup+0xc2/0x170
[ 1119.687820][T25037]  __do_fast_syscall_32+0x13a/0x8b0
[ 1119.687838][T25037]  do_fast_syscall_32+0x32/0x70
[ 1119.687854][T25037]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1119.687874][T25037] RIP: 0023:0xf706efec
[ 1119.687888][T25037] Code: Unable to access opcode bytes at 0xf706efc2.
[ 1119.687894][T25037] RSP: 002b:00000000f545d4bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9
[ 1119.687906][T25037] RAX: ffffffffffffffda RBX: 000000000000654c RCX: 0000000080000200
[ 1119.687928][T25037] RDX: 00000000f71d0fd7 RSI: 0000000000000001 RDI: 00000000f545d53c
[ 1119.687936][T25037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1119.687944][T25037] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1119.687952][T25037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1119.687967][T25037]  </TASK>
[ 1119.918373][T25043] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore
[ 1119.918390][T25043] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[ 1119.918404][T25043] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1120.032399][T25046] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4131'.
[ 1120.796898][T25054] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4133'.
[ 1120.797807][T25054] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4133'.
[ 1121.093484][T25075] syz.0.4141 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1122.731576][T22663] usb 14-1: new full-speed USB device number 21 using dummy_hcd
[ 1122.883657][T22663] usb 14-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83
[ 1122.891599][T22663] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1122.891614][T22663] usb 14-1: Product: syz
[ 1122.891621][T22663] usb 14-1: Manufacturer: syz
[ 1122.891628][T22663] usb 14-1: SerialNumber: syz
[ 1122.894578][T22663] usb 14-1: config 0 descriptor??
[ 1122.901724][T22663] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[ 1123.316242][T22663] gspca_m5602: Failed to find a sensor
[ 1123.316252][T22663] ALi m5602 14-1:0.0: ALi m5602 webcam failed
[ 1123.321258][T22663] usb 14-1: USB disconnect, device number 21
[ 1123.652509][T25146] FAULT_INJECTION: forcing a failure.
[ 1123.652509][T25146] name failslab, interval 1, probability 0, space 0, times 0
[ 1123.652530][T25146] CPU: 1 UID: 0 PID: 25146 Comm: syz.5.4170 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1123.652546][T25146] Tainted: [L]=SOFTLOCKUP
[ 1123.652550][T25146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1123.652556][T25146] Call Trace:
[ 1123.652560][T25146]  <TASK>
[ 1123.652565][T25146]  dump_stack_lvl+0x100/0x190
[ 1123.652583][T25146]  should_fail_ex.cold+0x5/0xa
[ 1123.652598][T25146]  should_failslab+0xc2/0x120
[ 1123.652614][T25146]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[ 1123.652628][T25146]  ? lock_acquire+0x1d1/0x380
[ 1123.652643][T25146]  ? sock_alloc_inode+0x26/0x2c0
[ 1123.652661][T25146]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1123.652678][T25146]  sock_alloc_inode+0x26/0x2c0
[ 1123.652694][T25146]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1123.652711][T25146]  alloc_inode+0x68/0x250
[ 1123.652727][T25146]  sock_alloc+0x44/0x280
[ 1123.652742][T25146]  ? security_socket_create+0x7f/0x250
[ 1123.652757][T25146]  __sock_create+0xc2/0x860
[ 1123.652770][T25146]  __sys_socketpair+0x1e4/0x5b0
[ 1123.652783][T25146]  ? __pfx___sys_socketpair+0x10/0x10
[ 1123.652795][T25146]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[ 1123.652808][T25146]  ? __pfx_ksys_write+0x10/0x10
[ 1123.652821][T25146]  __ia32_sys_socketpair+0x95/0x100
[ 1123.652846][T25146]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1123.652866][T25146]  __do_fast_syscall_32+0x13a/0x8b0
[ 1123.652886][T25146]  do_fast_syscall_32+0x32/0x70
[ 1123.652904][T25146]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1123.652918][T25146] RIP: 0023:0xf6fdefec
[ 1123.652931][T25146] Code: Unable to access opcode bytes at 0xf6fdefc2.
[ 1123.652936][T25146] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000168
[ 1123.652947][T25146] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000001
[ 1123.652954][T25146] RDX: 0000000000000000 RSI: 0000000080000200 RDI: 0000000000000000
[ 1123.652960][T25146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1123.652966][T25146] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1123.652972][T25146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1123.652985][T25146]  </TASK>
[ 1123.653021][T25146] socket: no more sockets
[ 1124.480732][T25159] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4175'.
[ 1124.483783][T25159] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4175'.
[ 1124.854834][T25165] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4177'.
[ 1125.718545][T22899] usb 14-1: new full-speed USB device number 22 using dummy_hcd
[ 1125.876672][T22899] usb 14-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83
[ 1125.890222][T22899] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1125.890237][T22899] usb 14-1: Product: syz
[ 1125.890249][T22899] usb 14-1: Manufacturer: syz
[ 1125.890257][T22899] usb 14-1: SerialNumber: syz
[ 1125.900670][T22899] usb 14-1: config 0 descriptor??
[ 1125.911983][T22899] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[ 1126.111484][T22899] gspca_m5602: Failed to find a sensor
[ 1126.111499][T22899] ALi m5602 14-1:0.0: ALi m5602 webcam failed
[ 1126.113141][T22899] usb 14-1: USB disconnect, device number 22
[ 1126.852564][T24065] usb 14-1: new high-speed USB device number 23 using dummy_hcd
[ 1127.011474][T24065] usb 14-1: Using ep0 maxpacket: 8
[ 1127.012269][T24065] usb 14-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83
[ 1127.015349][T24065] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1127.015367][T24065] usb 14-1: Product: syz
[ 1127.015379][T24065] usb 14-1: Manufacturer: syz
[ 1127.015390][T24065] usb 14-1: SerialNumber: syz
[ 1127.027088][T24065] usb 14-1: config 0 descriptor??
[ 1127.031128][T24065] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[ 1127.148254][T25197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4189'.
[ 1127.446878][T24065] gspca_m5602: Failed to find a sensor
[ 1127.446891][T24065] ALi m5602 14-1:0.0: ALi m5602 webcam failed
[ 1127.454392][T24065] usb 14-1: USB disconnect, device number 23
[ 1127.931470][   T43] kauditd_printk_skb: 1 callbacks suppressed
[ 1127.931483][   T43] audit: type=1326 audit(1789485288.677:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25218 comm="syz.0.4198" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706efec code=0x0
[ 1128.298932][T22609] Bluetooth: hci3: link tx timeout
[ 1128.299058][T22609] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1128.304483][ T5769] Bluetooth: hci3: link tx timeout
[ 1128.304496][ T5769] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1128.449994][    C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000003) at rIP: 0xffffffff81b2afda (__mcheck_cpu_init_prepare_banks+0x18a/0x380)
[ 1128.450095][    C0] Call Trace:
[ 1128.450105][    C0]  <IRQ>
[ 1128.450114][    C0]  ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10
[ 1128.450136][    C0]  ? sched_clock_cpu+0x6c/0x570
[ 1128.450159][    C0]  ? find_held_lock+0x2b/0x80
[ 1128.450176][    C0]  ? tick_nohz_irq_exit+0x142/0x240
[ 1128.450225][    C0]  ? __pfx_mce_cpu_restart+0x10/0x10
[ 1128.450242][    C0]  mce_cpu_restart+0xd5/0x1f0
[ 1128.450258][    C0]  __flush_smp_call_function_queue+0x289/0x8c0
[ 1128.450285][    C0]  __sysvec_call_function+0x81/0x420
[ 1128.450306][    C0]  sysvec_call_function+0x9e/0xc0
[ 1128.450335][    C0]  </IRQ>
[ 1128.450340][    C0]  <TASK>
[ 1128.450347][    C0]  asm_sysvec_call_function+0x1a/0x20
[ 1128.450364][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1128.450385][    C0] Code: 48 9d 02 e9 43 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 45 1d 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1128.450401][    C0] RSP: 0000:ffffffff8ea07cf0 EFLAGS: 00000202
[ 1128.450416][    C0] RAX: 000000000134e3cd RBX: ffffffff8ea91540 RCX: ffffffff8bce7185
[ 1128.450427][    C0] RDX: 0000000000000001 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80
[ 1128.450433][    C0] RBP: fffffbfff1d522a8 R08: 0000000000000001 R09: ffffed10056467bd
[ 1128.450441][    C0] R10: ffff88802b233deb R11: 0000000000000001 R12: 0000000000000000
[ 1128.450451][    C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000
[ 1128.450467][    C0]  ? ct_kernel_exit+0x125/0x180
[ 1128.450492][    C0]  default_idle+0x9/0x10
[ 1128.450505][    C0]  default_idle_call+0x6c/0xb0
[ 1128.450519][    C0]  do_idle+0x3ae/0x5b0
[ 1128.450535][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1128.450551][    C0]  cpu_startup_entry+0x4f/0x60
[ 1128.450563][    C0]  rest_init+0x2d3/0x2e0
[ 1128.450579][    C0]  ? __pfx_rest_init+0x10/0x10
[ 1128.450601][    C0]  ? __pfx_kernel_init+0x10/0x10
[ 1128.450619][    C0]  ? acpi_ut_status_exit+0x111/0x1c0
[ 1128.450636][    C0]  ? acpi_ut_status_exit+0x111/0x1c0
[ 1128.450655][    C0]  ? acpi_enable_subsystem+0x4d9/0x4f0
[ 1128.450671][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1128.450694][    C0]  start_kernel+0x48e/0x490
[ 1128.450717][    C0]  x86_64_start_reservations+0x24/0x30
[ 1128.450738][    C0]  x86_64_start_kernel+0x12b/0x130
[ 1128.450760][    C0]  common_startup_64+0x13e/0x158
[ 1128.450784][    C0]  </TASK>
[ 1128.553603][T25242] trusted_key: encrypted_key: insufficient parameters specified
[ 1128.664106][ T1442] ieee802154 phy0 wpan0: encryption failed: -22
[ 1128.664144][ T1442] ieee802154 phy1 wpan1: encryption failed: -22
[ 1128.666334][T25249] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4209'.
[ 1130.058854][T25273] syz_tun: entered allmulticast mode
[ 1130.210316][T25282] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12
[ 1130.342420][ T5769] Bluetooth: hci3: command 0x0406 tx timeout
[ 1130.560627][T25318] FAULT_INJECTION: forcing a failure.
[ 1130.560627][T25318] name failslab, interval 1, probability 0, space 0, times 0
[ 1130.560652][T25318] CPU: 2 UID: 0 PID: 25318 Comm: syz.0.4234 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1130.560667][T25318] Tainted: [L]=SOFTLOCKUP
[ 1130.560671][T25318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1130.560677][T25318] Call Trace:
[ 1130.560681][T25318]  <TASK>
[ 1130.560686][T25318]  dump_stack_lvl+0x100/0x190
[ 1130.560705][T25318]  should_fail_ex.cold+0x5/0xa
[ 1130.560722][T25318]  should_failslab+0xc2/0x120
[ 1130.560737][T25318]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[ 1130.560751][T25318]  ? lock_acquire+0x1d1/0x380
[ 1130.560766][T25318]  ? sock_alloc_inode+0x26/0x2c0
[ 1130.560783][T25318]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1130.560799][T25318]  sock_alloc_inode+0x26/0x2c0
[ 1130.560816][T25318]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1130.560831][T25318]  alloc_inode+0x68/0x250
[ 1130.560847][T25318]  sock_alloc+0x44/0x280
[ 1130.560861][T25318]  ? security_socket_create+0x7f/0x250
[ 1130.560875][T25318]  __sock_create+0xc2/0x860
[ 1130.560888][T25318]  __sys_socketpair+0x1e4/0x5b0
[ 1130.560901][T25318]  ? __pfx___sys_socketpair+0x10/0x10
[ 1130.560917][T25318]  __ia32_sys_socketpair+0x95/0x100
[ 1130.560929][T25318]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1130.560945][T25318]  __do_fast_syscall_32+0x13a/0x8b0
[ 1130.560964][T25318]  do_fast_syscall_32+0x32/0x70
[ 1130.560981][T25318]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1130.560995][T25318] RIP: 0023:0xf706efec
[ 1130.561007][T25318] Code: Unable to access opcode bytes at 0xf706efc2.
[ 1130.561013][T25318] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000168
[ 1130.561024][T25318] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000001
[ 1130.561031][T25318] RDX: 0000000000000000 RSI: 0000000080000200 RDI: 0000000000000000
[ 1130.561038][T25318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1130.561045][T25318] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1130.561052][T25318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1130.561064][T25318]  </TASK>
[ 1130.561070][T25318] socket: no more sockets
[ 1130.592882][T25308] syz_tun: entered allmulticast mode
[ 1130.614843][ T5459] veth0_vlan: left promiscuous mode
[ 1130.627336][T22899] veth0_vlan: entered promiscuous mode
[ 1130.771322][T24191] usb 14-1: new high-speed USB device number 24 using dummy_hcd
[ 1130.922128][T24191] usb 14-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1130.923363][T24191] usb 14-1: config 0 has an invalid interface number: 1 but max is 0
[ 1130.923383][T24191] usb 14-1: config 0 has no interface number 0
[ 1130.925962][T24191] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1130.925981][T24191] usb 14-1: Product: syz
[ 1130.925995][T24191] usb 14-1: Manufacturer: syz
[ 1130.926008][T24191] usb 14-1: SerialNumber: syz
[ 1130.931673][T24191] usb 14-1: config 0 descriptor??
[ 1131.141449][T24191] dvb_usb_ec168 14-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[ 1131.143026][T24191] usb 14-1: USB disconnect, device number 24
[ 1135.221956][T25411] FAULT_INJECTION: forcing a failure.
[ 1135.221956][T25411] name failslab, interval 1, probability 0, space 0, times 0
[ 1135.221989][T25411] CPU: 3 UID: 0 PID: 25411 Comm: syz.0.4267 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1135.222016][T25411] Tainted: [L]=SOFTLOCKUP
[ 1135.222023][T25411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1135.222048][T25411] Call Trace:
[ 1135.222056][T25411]  <TASK>
[ 1135.222063][T25411]  dump_stack_lvl+0x100/0x190
[ 1135.222094][T25411]  should_fail_ex.cold+0x5/0xa
[ 1135.222119][T25411]  should_failslab+0xc2/0x120
[ 1135.222145][T25411]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[ 1135.222168][T25411]  ? lock_acquire+0x1d1/0x380
[ 1135.222192][T25411]  ? sock_alloc_inode+0x26/0x2c0
[ 1135.222225][T25411]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1135.222255][T25411]  sock_alloc_inode+0x26/0x2c0
[ 1135.222282][T25411]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1135.222309][T25411]  alloc_inode+0x68/0x250
[ 1135.222335][T25411]  sock_alloc+0x44/0x280
[ 1135.222360][T25411]  ? security_socket_create+0x7f/0x250
[ 1135.222385][T25411]  __sock_create+0xc2/0x860
[ 1135.222408][T25411]  __sys_socketpair+0x1e4/0x5b0
[ 1135.222429][T25411]  ? __pfx___sys_socketpair+0x10/0x10
[ 1135.222458][T25411]  __ia32_sys_socketpair+0x95/0x100
[ 1135.222478][T25411]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1135.222505][T25411]  __do_fast_syscall_32+0x13a/0x8b0
[ 1135.222537][T25411]  do_fast_syscall_32+0x32/0x70
[ 1135.222572][T25411]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1135.222597][T25411] RIP: 0023:0xf706efec
[ 1135.222616][T25411] Code: Unable to access opcode bytes at 0xf706efc2.
[ 1135.222625][T25411] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000168
[ 1135.222643][T25411] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000001
[ 1135.222655][T25411] RDX: 0000000000000000 RSI: 0000000080000200 RDI: 0000000000000000
[ 1135.222667][T25411] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1135.222679][T25411] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1135.222691][T25411] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1135.222715][T25411]  </TASK>
[ 1135.222811][T25411] socket: no more sockets
[ 1136.074959][T25421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4269'.
[ 1136.079402][T25421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4269'.
[ 1136.926984][T25431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4276'.
[ 1137.111951][T25437] FAULT_INJECTION: forcing a failure.
[ 1137.111951][T25437] name failslab, interval 1, probability 0, space 0, times 0
[ 1137.112021][T25437] CPU: 2 UID: 0 PID: 25437 Comm: syz.9.4277 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1137.112049][T25437] Tainted: [L]=SOFTLOCKUP
[ 1137.112056][T25437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1137.112067][T25437] Call Trace:
[ 1137.112073][T25437]  <TASK>
[ 1137.112082][T25437]  dump_stack_lvl+0x100/0x190
[ 1137.112126][T25437]  should_fail_ex.cold+0x5/0xa
[ 1137.112153][T25437]  should_failslab+0xc2/0x120
[ 1137.112179][T25437]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[ 1137.112200][T25437]  ? lock_acquire+0x1d1/0x380
[ 1137.112225][T25437]  ? sock_alloc_inode+0x26/0x2c0
[ 1137.112258][T25437]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1137.112287][T25437]  sock_alloc_inode+0x26/0x2c0
[ 1137.112314][T25437]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1137.112342][T25437]  alloc_inode+0x68/0x250
[ 1137.112385][T25437]  sock_alloc+0x44/0x280
[ 1137.112412][T25437]  ? security_socket_create+0x7f/0x250
[ 1137.112438][T25437]  __sock_create+0xc2/0x860
[ 1137.112462][T25437]  __sys_socketpair+0x1e4/0x5b0
[ 1137.112487][T25437]  ? __pfx___sys_socketpair+0x10/0x10
[ 1137.112518][T25437]  __ia32_sys_socketpair+0x95/0x100
[ 1137.112540][T25437]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1137.112567][T25437]  __do_fast_syscall_32+0x13a/0x8b0
[ 1137.112600][T25437]  do_fast_syscall_32+0x32/0x70
[ 1137.112637][T25437]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1137.112664][T25437] RIP: 0023:0xf6ffefec
[ 1137.112687][T25437] Code: Unable to access opcode bytes at 0xf6ffefc2.
[ 1137.112696][T25437] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000168
[ 1137.112716][T25437] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000001
[ 1137.112730][T25437] RDX: 0000000000000000 RSI: 0000000080000200 RDI: 0000000000000000
[ 1137.112743][T25437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1137.112755][T25437] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1137.112767][T25437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1137.112791][T25437]  </TASK>
[ 1137.118328][T25437] socket: no more sockets
[ 1137.557446][T25446] 
: renamed from bond_slave_0 (while UP)
[ 1137.635065][T25450] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4281'.
[ 1137.636496][T25450] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4281'.
[ 1140.335431][T25488] FAULT_INJECTION: forcing a failure.
[ 1140.335431][T25488] name failslab, interval 1, probability 0, space 0, times 0
[ 1140.335467][T25488] CPU: 2 UID: 0 PID: 25488 Comm: syz.6.4295 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1140.335494][T25488] Tainted: [L]=SOFTLOCKUP
[ 1140.335501][T25488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1140.335513][T25488] Call Trace:
[ 1140.335519][T25488]  <TASK>
[ 1140.335527][T25488]  dump_stack_lvl+0x100/0x190
[ 1140.335557][T25488]  should_fail_ex.cold+0x5/0xa
[ 1140.335591][T25488]  should_failslab+0xc2/0x120
[ 1140.335618][T25488]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[ 1140.335641][T25488]  ? lock_acquire+0x1d1/0x380
[ 1140.335669][T25488]  ? sock_alloc_inode+0x26/0x2c0
[ 1140.335700][T25488]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1140.335731][T25488]  sock_alloc_inode+0x26/0x2c0
[ 1140.335760][T25488]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1140.335787][T25488]  alloc_inode+0x68/0x250
[ 1140.335816][T25488]  sock_alloc+0x44/0x280
[ 1140.335842][T25488]  ? security_socket_create+0x7f/0x250
[ 1140.335869][T25488]  __sock_create+0xc2/0x860
[ 1140.335893][T25488]  __sys_socketpair+0x1e4/0x5b0
[ 1140.335913][T25488]  ? __pfx___sys_socketpair+0x10/0x10
[ 1140.335935][T25488]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[ 1140.335959][T25488]  ? __pfx_ksys_write+0x10/0x10
[ 1140.335984][T25488]  __ia32_sys_socketpair+0x95/0x100
[ 1140.336005][T25488]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1140.336034][T25488]  __do_fast_syscall_32+0x13a/0x8b0
[ 1140.336066][T25488]  do_fast_syscall_32+0x32/0x70
[ 1140.336093][T25488]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1140.336117][T25488] RIP: 0023:0xf7f35fec
[ 1140.336138][T25488] Code: Unable to access opcode bytes at 0xf7f35fc2.
[ 1140.336146][T25488] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000168
[ 1140.336165][T25488] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000001
[ 1140.336177][T25488] RDX: 0000000000000000 RSI: 0000000080000200 RDI: 0000000000000000
[ 1140.336188][T25488] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1140.336199][T25488] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1140.336211][T25488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1140.336237][T25488]  </TASK>
[ 1140.336247][T25488] socket: no more sockets
[ 1141.838840][T25518] FAULT_INJECTION: forcing a failure.
[ 1141.838840][T25518] name failslab, interval 1, probability 0, space 0, times 0
[ 1141.838960][T25518] CPU: 0 UID: 0 PID: 25518 Comm: syz.0.4304 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1141.838976][T25518] Tainted: [L]=SOFTLOCKUP
[ 1141.838992][T25518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1141.838999][T25518] Call Trace:
[ 1141.839004][T25518]  <TASK>
[ 1141.839009][T25518]  dump_stack_lvl+0x100/0x190
[ 1141.839028][T25518]  should_fail_ex.cold+0x5/0xa
[ 1141.839043][T25518]  should_failslab+0xc2/0x120
[ 1141.839059][T25518]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[ 1141.839073][T25518]  ? lock_acquire+0x1d1/0x380
[ 1141.839088][T25518]  ? sock_alloc_inode+0x26/0x2c0
[ 1141.839106][T25518]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1141.839123][T25518]  sock_alloc_inode+0x26/0x2c0
[ 1141.839139][T25518]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1141.839154][T25518]  alloc_inode+0x68/0x250
[ 1141.839170][T25518]  sock_alloc+0x44/0x280
[ 1141.839185][T25518]  ? security_socket_create+0x7f/0x250
[ 1141.839199][T25518]  __sock_create+0xc2/0x860
[ 1141.839212][T25518]  __sys_socketpair+0x1e4/0x5b0
[ 1141.839225][T25518]  ? __pfx___sys_socketpair+0x10/0x10
[ 1141.839242][T25518]  __ia32_sys_socketpair+0x95/0x100
[ 1141.839254][T25518]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1141.839270][T25518]  __do_fast_syscall_32+0x13a/0x8b0
[ 1141.839288][T25518]  do_fast_syscall_32+0x32/0x70
[ 1141.839304][T25518]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1141.839318][T25518] RIP: 0023:0xf706efec
[ 1141.839330][T25518] Code: Unable to access opcode bytes at 0xf706efc2.
[ 1141.839335][T25518] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000168
[ 1141.839347][T25518] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000001
[ 1141.839353][T25518] RDX: 0000000000000000 RSI: 0000000080000200 RDI: 0000000000000000
[ 1141.839359][T25518] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1141.839365][T25518] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1141.839372][T25518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1141.839385][T25518]  </TASK>
[ 1141.839507][T25518] socket: no more sockets
[ 1142.721865][T25531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4308'.
[ 1144.591838][T25555] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4316'.
[ 1144.595522][T25555] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4316'.
[ 1144.733128][T25560] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1145.042723][T25564] netlink: 'syz.5.4319': attribute type 1 has an invalid length.
[ 1145.123070][T25564] bond2: (slave macvlan1): Enslaving as an active interface with an up link
[ 1148.717797][T25489] ------------[ cut here ]------------
[ 1148.717811][T25489] current->flags & PF_MEMALLOC
[ 1148.717866][T25489] WARNING: mm/page_alloc.c:4816 at __alloc_frozen_pages_noprof+0x1eac/0x3300, CPU#0: syz.5.4291/25489
[ 1148.728120][T25489] Modules linked in:
[ 1148.729991][T25489] CPU: 0 UID: 0 PID: 25489 Comm: syz.5.4291 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1148.734591][T25489] Tainted: [L]=SOFTLOCKUP
[ 1148.736400][T25489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1148.740554][T25489] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300
[ 1148.743578][T25489] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 56 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03
[ 1148.751827][T25489] RSP: 0000:ffffc90003a9d838 EFLAGS: 00010202
[ 1148.754338][T25489] RAX: ffff888029ae8000 RBX: 0000000000000000 RCX: 1ffff1100fffad29
[ 1148.757329][T25489] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938
[ 1148.760505][T25489] RBP: ffff888029ae802c R08: 0000000000008000 R09: 0000000000000001
[ 1148.763901][T25489] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40
[ 1148.767263][T25489] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000753b21
[ 1148.770616][T25489] FS:  0000000000000000(0000) GS:ffff888096960000(0063) knlGS:00000000f53acb40
[ 1148.774488][T25489] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1148.777544][T25489] CR2: 00000000f70a9190 CR3: 000000006c003000 CR4: 0000000000352ef0
[ 1148.781203][T25489] Call Trace:
[ 1148.782653][T25489]  <TASK>
[ 1148.783946][T25489]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1148.786527][T25489]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1148.789040][T25489]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1148.792348][T25489]  ? mas_find+0x2cb/0x790
[ 1148.794461][T25489]  ? get_next_vma+0x319/0x420
[ 1148.796806][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1148.799285][T25489]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1148.802082][T25489]  ? policy_nodemask+0xed/0x4f0
[ 1148.804177][T25489]  alloc_pages_mpol+0x201/0x550
[ 1148.806280][T25489]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1148.808864][T25489]  ? filemap_get_entry+0x22d/0x450
[ 1148.811563][T25489]  ? filemap_get_entry+0x22d/0x450
[ 1148.814016][T25489]  folio_alloc_noprof+0x22/0x250
[ 1148.816369][T25489]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[ 1148.819067][T25489]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[ 1148.822437][T25489]  ? lock_acquire+0x1d1/0x380
[ 1148.824502][T25489]  ? ext4_get_group_info+0x146/0x480
[ 1148.826851][T25489]  ? find_held_lock+0x2b/0x80
[ 1148.828878][T25489]  __filemap_get_folio_mpol+0x653/0x1320
[ 1148.831264][T25489]  ext4_mb_load_buddy_gfp+0x70d/0x1b20
[ 1148.833684][T25489]  ext4_discard_preallocations+0x584/0x10c0
[ 1148.836426][T25489]  ? __pfx_ext4_discard_preallocations+0x10/0x10
[ 1148.839249][T25489]  ? __pfx_xa_destroy+0x10/0x10
[ 1148.841397][T25489]  ? inode_wait_for_writeback+0x171/0x390
[ 1148.844251][T25489]  ? inode_lru_isolate+0x37/0xf00
[ 1148.846464][T25489]  ext4_clear_inode+0x6e/0x280
[ 1148.848807][T25489]  ext4_evict_inode+0x1de/0x17d0
[ 1148.851065][T25489]  ? evict+0x37e/0xad0
[ 1148.853083][T25489]  ? __pfx_ext4_evict_inode+0x10/0x10
[ 1148.855388][T25489]  evict+0x3c2/0xad0
[ 1148.856895][T25489]  ? _raw_spin_unlock+0x28/0x50
[ 1148.858873][T25489]  ? __list_lru_walk_one+0x26d/0x550
[ 1148.861962][T25489]  ? __pfx_evict+0x10/0x10
[ 1148.863966][T25489]  ? xa_load+0x149/0x2c0
[ 1148.865887][T25489]  ? xa_load+0x149/0x2c0
[ 1148.867679][T25489]  dispose_list+0x117/0x1e0
[ 1148.869427][T25489]  prune_icache_sb+0xea/0x150
[ 1148.871587][T25489]  ? list_lru_count_one+0x147/0x320
[ 1148.873529][T25489]  ? __pfx_prune_icache_sb+0x10/0x10
[ 1148.875582][T25489]  super_cache_scan+0x3ac/0x5c0
[ 1148.877733][T25489]  do_shrink_slab+0x416/0x1200
[ 1148.879793][T25489]  shrink_slab+0xa82/0x12e0
[ 1148.881415][T25489]  ? shrink_slab+0x677/0x12e0
[ 1148.883491][T25489]  ? __pfx_shrink_slab+0x10/0x10
[ 1148.885711][T25489]  ? lock_acquire+0x1d1/0x380
[ 1148.887816][T25489]  shrink_one+0x398/0x850
[ 1148.889568][T25489]  ? shrink_node+0x2b00/0x4320
[ 1148.891478][T25489]  shrink_node+0x2b20/0x4320
[ 1148.893544][T25489]  ? __pfx_stack_trace_save+0x10/0x10
[ 1148.895779][T25489]  ? shrink_node+0x286e/0x4320
[ 1148.898063][T25489]  ? __pfx_shrink_node+0x10/0x10
[ 1148.900281][T25489]  ? queue_work_on+0x141/0x1e0
[ 1148.902419][T25489]  ? do_try_to_free_pages+0x33e/0x16d0
[ 1148.904852][T25489]  do_try_to_free_pages+0x33e/0x16d0
[ 1148.907242][T25489]  ? __pfx_do_try_to_free_pages+0x10/0x10
[ 1148.909742][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1148.912060][T25489]  try_to_free_pages+0x2a0/0x740
[ 1148.914206][T25489]  ? __pfx_try_to_free_pages+0x10/0x10
[ 1148.916540][T25489]  ? find_held_lock+0x2b/0x80
[ 1148.918783][T25489]  ? fs_reclaim_acquire+0x70/0x100
[ 1148.920965][T25489]  ? fs_reclaim_acquire+0x70/0x100
[ 1148.923235][T25489]  __alloc_frozen_pages_noprof+0xf8a/0x3300
[ 1148.925680][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1148.927671][T25489]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1148.930339][T25489]  ? lock_acquire+0x1d1/0x380
[ 1148.932606][T25489]  ? do_raw_spin_lock+0x128/0x260
[ 1148.934828][T25489]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1148.937088][T25489]  ? find_held_lock+0x2b/0x80
[ 1148.939107][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1148.941401][T25489]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1148.943789][T25489]  ? policy_nodemask+0xed/0x4f0
[ 1148.945939][T25489]  alloc_pages_mpol+0x201/0x550
[ 1148.947942][T25489]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1148.950222][T25489]  ? __folio_batch_add_and_move+0x5e5/0xc60
[ 1148.952815][T25489]  folio_alloc_mpol_noprof+0x36/0x260
[ 1148.955147][T25489]  shmem_alloc_folio+0x135/0x160
[ 1148.957420][T25489]  shmem_alloc_and_add_folio+0x371/0xd40
[ 1148.959809][T25489]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1148.962535][T25489]  ? shmem_allowable_huge_orders+0x2bd/0x400
[ 1148.965115][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1148.967241][T25489]  shmem_get_folio_gfp+0x75b/0x1980
[ 1148.969472][T25489]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1148.972008][T25489]  ? inode_set_ctime_current+0x9c/0x850
[ 1148.974363][T25489]  ? find_held_lock+0x2b/0x80
[ 1148.976335][T25489]  ? timestamp_truncate+0x22e/0x2f0
[ 1148.978652][T25489]  shmem_write_begin+0x1a4/0x420
[ 1148.981043][T25489]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1148.983536][T25489]  ? inode_set_ctime_current+0x283/0x850
[ 1148.985903][T25489]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[ 1148.988794][T25489]  ? inode_maybe_inc_iversion+0x169/0x220
[ 1148.991275][T25489]  generic_perform_write+0x292/0xa40
[ 1148.993581][T25489]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1148.996211][T25489]  ? __pfx_generic_perform_write+0x10/0x10
[ 1148.998844][T25489]  ? mnt_put_write_access_file+0x4e/0x100
[ 1149.001368][T25489]  ? file_update_time_flags+0x38c/0x520
[ 1149.004081][T25489]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1149.006547][T25489]  shmem_file_write_iter+0x10e/0x140
[ 1149.008977][T25489]  __kernel_write_iter+0x2ac/0x930
[ 1149.011297][T25489]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1149.014367][T25489]  ? __up_read+0x333/0x980
[ 1149.016335][T25489]  ? dump_user_range+0x65e/0xad0
[ 1149.018436][T25489]  dump_user_range+0x3f9/0xad0
[ 1149.020607][T25489]  ? __pfx_dump_user_range+0x10/0x10
[ 1149.022933][T25489]  ? __pfx_writenote+0x10/0x10
[ 1149.024984][T25489]  ? elf_core_dump+0x2276/0x42f0
[ 1149.027371][T25489]  elf_core_dump+0x31f8/0x42f0
[ 1149.029421][T25489]  ? __pfx_elf_core_dump+0x10/0x10
[ 1149.032338][T25489]  ? __kasan_kmalloc+0xaa/0xb0
[ 1149.034458][T25489]  ? __kvmalloc_node_noprof+0x35b/0x9b0
[ 1149.037009][T25489]  ? vfs_coredump+0x21f6/0x54a0
[ 1149.039169][T25489]  ? get_signal+0x1f2a/0x21e0
[ 1149.041326][T25489]  ? arch_do_signal_or_restart+0x91/0x7a0
[ 1149.043807][T25489]  ? asm_exc_page_fault+0x26/0x30
[ 1149.046072][T25489]  ? lock_acquire+0x1d1/0x380
[ 1149.048100][T25489]  ? get_signal+0x1f2a/0x21e0
[ 1149.050131][T25489]  ? vfs_coredump+0x281a/0x54a0
[ 1149.052144][T25489]  vfs_coredump+0x281a/0x54a0
[ 1149.054193][T25489]  ? __pfx_vfs_coredump+0x10/0x10
[ 1149.056282][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1149.058397][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1149.060494][T25489]  ? lock_acquire+0x1d1/0x380
[ 1149.062768][T25489]  ? unwind_next_frame+0xbd/0x2090
[ 1149.064963][T25489]  ? lock_acquire+0x1d1/0x380
[ 1149.067059][T25489]  ? bpf_ksym_find+0x124/0x1c0
[ 1149.069125][T25489]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1149.071816][T25489]  ? arch_stack_walk+0xa6/0xf0
[ 1149.073913][T25489]  ? __sigqueue_free+0xbe/0x2a0
[ 1149.076004][T25489]  ? stack_trace_save+0x8e/0xc0
[ 1149.078254][T25489]  ? __pfx_stack_trace_save+0x10/0x10
[ 1149.080586][T25489]  ? stack_depot_save_flags+0x27/0x9f0
[ 1149.083240][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1149.085752][T25489]  ? proc_coredump_connector+0x2d3/0x4f0
[ 1149.088126][T25489]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1149.090783][T25489]  ? rcu_is_watching+0x13/0xc0
[ 1149.093023][T25489]  get_signal+0x1f2a/0x21e0
[ 1149.095088][T25489]  ? __pfx_get_signal+0x10/0x10
[ 1149.097340][T25489]  ? __pfx_force_sig_fault+0x10/0x10
[ 1149.099975][T25489]  arch_do_signal_or_restart+0x91/0x7a0
[ 1149.102478][T25489]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1149.105115][T25489]  irqentry_exit+0x402/0xa10
[ 1149.107138][T25489]  asm_exc_page_fault+0x26/0x30
[ 1149.109465][T25489] RIP: 0023:0xf6fdefec
[ 1149.111649][T25489] Code: Unable to access opcode bytes at 0xf6fdefc2.
[ 1149.114555][T25489] RSP: 002b:00000000fffffe70 EFLAGS: 00010282
[ 1149.117417][T25489] RAX: 0000000000000000 RBX: 0000000000008000 RCX: 00000000fffffe70
[ 1149.121096][T25489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1149.124594][T25489] RBP: 00000000f53ac5ec R08: 0000000000000000 R09: 0000000000000000
[ 1149.128430][T25489] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1149.131997][T25489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1149.135606][T25489]  </TASK>
[ 1149.137045][T25489] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1149.140172][T25489] CPU: 0 UID: 0 PID: 25489 Comm: syz.5.4291 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1149.145300][T25489] Tainted: [L]=SOFTLOCKUP
[ 1149.147236][T25489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1149.151617][T25489] Call Trace:
[ 1149.153058][T25489]  <TASK>
[ 1149.154351][T25489]  dump_stack_lvl+0x100/0x190
[ 1149.156375][T25489]  vpanic+0x553/0x970
[ 1149.158099][T25489]  ? __pfx_vpanic+0x10/0x10
[ 1149.160041][T25489]  panic+0xd1/0xe0
[ 1149.161500][T25489]  ? __pfx_panic+0x10/0x10
[ 1149.163354][T25489]  check_panic_on_warn.cold+0x19/0x34
[ 1149.165618][T25489]  ? __alloc_frozen_pages_noprof+0x1eac/0x3300
[ 1149.168342][T25489]  __warn.cold+0x191/0x318
[ 1149.170246][T25489]  __report_bug+0x30f/0x440
[ 1149.172273][T25489]  ? __alloc_frozen_pages_noprof+0x1eac/0x3300
[ 1149.175027][T25489]  ? __pfx___report_bug+0x10/0x10
[ 1149.177279][T25489]  ? __zone_watermark_ok+0x281/0x500
[ 1149.179535][T25489]  ? get_page_from_freelist+0x344/0x35d0
[ 1149.182036][T25489]  ? __alloc_frozen_pages_noprof+0x1eac/0x3300
[ 1149.184623][T25489]  report_bug+0xb3/0x220
[ 1149.186391][T25489]  ? __alloc_frozen_pages_noprof+0x1eac/0x3300
[ 1149.189319][T25489]  handle_bug+0x16a/0x2a0
[ 1149.191300][T25489]  exc_invalid_op+0x17/0x50
[ 1149.193280][T25489]  asm_exc_invalid_op+0x1a/0x20
[ 1149.195352][T25489] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300
[ 1149.198194][T25489] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 56 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03
[ 1149.206783][T25489] RSP: 0000:ffffc90003a9d838 EFLAGS: 00010202
[ 1149.209354][T25489] RAX: ffff888029ae8000 RBX: 0000000000000000 RCX: 1ffff1100fffad29
[ 1149.212682][T25489] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938
[ 1149.216028][T25489] RBP: ffff888029ae802c R08: 0000000000008000 R09: 0000000000000001
[ 1149.219947][T25489] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40
[ 1149.223370][T25489] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000753b21
[ 1149.226839][T25489]  ? __alloc_frozen_pages_noprof+0x2eb/0x3300
[ 1149.229571][T25489]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1149.232109][T25489]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1149.234653][T25489]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1149.237314][T25489]  ? mas_find+0x2cb/0x790
[ 1149.239179][T25489]  ? get_next_vma+0x319/0x420
[ 1149.241204][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1149.243625][T25489]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1149.246212][T25489]  ? policy_nodemask+0xed/0x4f0
[ 1149.248289][T25489]  alloc_pages_mpol+0x201/0x550
[ 1149.250372][T25489]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1149.253036][T25489]  ? filemap_get_entry+0x22d/0x450
[ 1149.255330][T25489]  ? filemap_get_entry+0x22d/0x450
[ 1149.257566][T25489]  folio_alloc_noprof+0x22/0x250
[ 1149.259675][T25489]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[ 1149.262450][T25489]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[ 1149.265500][T25489]  ? lock_acquire+0x1d1/0x380
[ 1149.267511][T25489]  ? ext4_get_group_info+0x146/0x480
[ 1149.269763][T25489]  ? find_held_lock+0x2b/0x80
[ 1149.271767][T25489]  __filemap_get_folio_mpol+0x653/0x1320
[ 1149.274166][T25489]  ext4_mb_load_buddy_gfp+0x70d/0x1b20
[ 1149.276590][T25489]  ext4_discard_preallocations+0x584/0x10c0
[ 1149.279103][T25489]  ? __pfx_ext4_discard_preallocations+0x10/0x10
[ 1149.281836][T25489]  ? __pfx_xa_destroy+0x10/0x10
[ 1149.284274][T25489]  ? inode_wait_for_writeback+0x171/0x390
[ 1149.286697][T25489]  ? inode_lru_isolate+0x37/0xf00
[ 1149.288841][T25489]  ext4_clear_inode+0x6e/0x280
[ 1149.290899][T25489]  ext4_evict_inode+0x1de/0x17d0
[ 1149.293184][T25489]  ? evict+0x37e/0xad0
[ 1149.294948][T25489]  ? __pfx_ext4_evict_inode+0x10/0x10
[ 1149.297229][T25489]  evict+0x3c2/0xad0
[ 1149.298936][T25489]  ? _raw_spin_unlock+0x28/0x50
[ 1149.301022][T25489]  ? __list_lru_walk_one+0x26d/0x550
[ 1149.303315][T25489]  ? __pfx_evict+0x10/0x10
[ 1149.305222][T25489]  ? xa_load+0x149/0x2c0
[ 1149.307040][T25489]  ? xa_load+0x149/0x2c0
[ 1149.308857][T25489]  dispose_list+0x117/0x1e0
[ 1149.310791][T25489]  prune_icache_sb+0xea/0x150
[ 1149.312886][T25489]  ? list_lru_count_one+0x147/0x320
[ 1149.315121][T25489]  ? __pfx_prune_icache_sb+0x10/0x10
[ 1149.317446][T25489]  super_cache_scan+0x3ac/0x5c0
[ 1149.319538][T25489]  do_shrink_slab+0x416/0x1200
[ 1149.321603][T25489]  shrink_slab+0xa82/0x12e0
[ 1149.323571][T25489]  ? shrink_slab+0x677/0x12e0
[ 1149.325564][T25489]  ? __pfx_shrink_slab+0x10/0x10
[ 1149.327871][T25489]  ? lock_acquire+0x1d1/0x380
[ 1149.329949][T25489]  shrink_one+0x398/0x850
[ 1149.331813][T25489]  ? shrink_node+0x2b00/0x4320
[ 1149.333907][T25489]  shrink_node+0x2b20/0x4320
[ 1149.335886][T25489]  ? __pfx_stack_trace_save+0x10/0x10
[ 1149.338184][T25489]  ? shrink_node+0x286e/0x4320
[ 1149.340433][T25489]  ? __pfx_shrink_node+0x10/0x10
[ 1149.342610][T25489]  ? queue_work_on+0x141/0x1e0
[ 1149.344710][T25489]  ? do_try_to_free_pages+0x33e/0x16d0
[ 1149.347096][T25489]  do_try_to_free_pages+0x33e/0x16d0
[ 1149.349343][T25489]  ? __pfx_do_try_to_free_pages+0x10/0x10
[ 1149.351783][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1149.353938][T25489]  try_to_free_pages+0x2a0/0x740
[ 1149.356037][T25489]  ? __pfx_try_to_free_pages+0x10/0x10
[ 1149.358357][T25489]  ? find_held_lock+0x2b/0x80
[ 1149.360362][T25489]  ? fs_reclaim_acquire+0x70/0x100
[ 1149.362566][T25489]  ? fs_reclaim_acquire+0x70/0x100
[ 1149.364769][T25489]  __alloc_frozen_pages_noprof+0xf8a/0x3300
[ 1149.367281][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1149.369385][T25489]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1149.372196][T25489]  ? lock_acquire+0x1d1/0x380
[ 1149.374224][T25489]  ? do_raw_spin_lock+0x128/0x260
[ 1149.376364][T25489]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1149.378636][T25489]  ? find_held_lock+0x2b/0x80
[ 1149.380727][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1149.382873][T25489]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1149.385378][T25489]  ? policy_nodemask+0xed/0x4f0
[ 1149.387468][T25489]  alloc_pages_mpol+0x201/0x550
[ 1149.389538][T25489]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1149.391588][T25489]  ? __folio_batch_add_and_move+0x5e5/0xc60
[ 1149.394111][T25489]  folio_alloc_mpol_noprof+0x36/0x260
[ 1149.396383][T25489]  shmem_alloc_folio+0x135/0x160
[ 1149.398502][T25489]  shmem_alloc_and_add_folio+0x371/0xd40
[ 1149.400886][T25489]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1149.403702][T25489]  ? shmem_allowable_huge_orders+0x2bd/0x400
[ 1149.406329][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1149.408446][T25489]  shmem_get_folio_gfp+0x75b/0x1980
[ 1149.410674][T25489]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1149.413033][T25489]  ? inode_set_ctime_current+0x9c/0x850
[ 1149.415222][T25489]  ? find_held_lock+0x2b/0x80
[ 1149.417219][T25489]  ? timestamp_truncate+0x22e/0x2f0
[ 1149.419426][T25489]  shmem_write_begin+0x1a4/0x420
[ 1149.421572][T25489]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1149.423899][T25489]  ? inode_set_ctime_current+0x283/0x850
[ 1149.426251][T25489]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[ 1149.429084][T25489]  ? inode_maybe_inc_iversion+0x169/0x220
[ 1149.431464][T25489]  generic_perform_write+0x292/0xa40
[ 1149.433704][T25489]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1149.436140][T25489]  ? __pfx_generic_perform_write+0x10/0x10
[ 1149.438471][T25489]  ? mnt_put_write_access_file+0x4e/0x100
[ 1149.440854][T25489]  ? file_update_time_flags+0x38c/0x520
[ 1149.443212][T25489]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1149.445642][T25489]  shmem_file_write_iter+0x10e/0x140
[ 1149.447873][T25489]  __kernel_write_iter+0x2ac/0x930
[ 1149.450040][T25489]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1149.452372][T25489]  ? __up_read+0x333/0x980
[ 1149.454300][T25489]  ? dump_user_range+0x65e/0xad0
[ 1149.456417][T25489]  dump_user_range+0x3f9/0xad0
[ 1149.458448][T25489]  ? __pfx_dump_user_range+0x10/0x10
[ 1149.460681][T25489]  ? __pfx_writenote+0x10/0x10
[ 1149.462738][T25489]  ? elf_core_dump+0x2276/0x42f0
[ 1149.464822][T25489]  elf_core_dump+0x31f8/0x42f0
[ 1149.466846][T25489]  ? __pfx_elf_core_dump+0x10/0x10
[ 1149.469002][T25489]  ? __kasan_kmalloc+0xaa/0xb0
[ 1149.471026][T25489]  ? __kvmalloc_node_noprof+0x35b/0x9b0
[ 1149.473358][T25489]  ? vfs_coredump+0x21f6/0x54a0
[ 1149.475004][T25489]  ? get_signal+0x1f2a/0x21e0
[ 1149.477029][T25489]  ? arch_do_signal_or_restart+0x91/0x7a0
[ 1149.479452][T25489]  ? asm_exc_page_fault+0x26/0x30
[ 1149.481656][T25489]  ? lock_acquire+0x1d1/0x380
[ 1149.483670][T25489]  ? get_signal+0x1f2a/0x21e0
[ 1149.485696][T25489]  ? vfs_coredump+0x281a/0x54a0
[ 1149.487760][T25489]  vfs_coredump+0x281a/0x54a0
[ 1149.489788][T25489]  ? __pfx_vfs_coredump+0x10/0x10
[ 1149.491909][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1149.494041][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1149.496125][T25489]  ? lock_acquire+0x1d1/0x380
[ 1149.498124][T25489]  ? unwind_next_frame+0xbd/0x2090
[ 1149.500271][T25489]  ? lock_acquire+0x1d1/0x380
[ 1149.502303][T25489]  ? bpf_ksym_find+0x124/0x1c0
[ 1149.504311][T25489]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1149.507001][T25489]  ? arch_stack_walk+0xa6/0xf0
[ 1149.509044][T25489]  ? __sigqueue_free+0xbe/0x2a0
[ 1149.511114][T25489]  ? stack_trace_save+0x8e/0xc0
[ 1149.513189][T25489]  ? __pfx_stack_trace_save+0x10/0x10
[ 1149.515457][T25489]  ? stack_depot_save_flags+0x27/0x9f0
[ 1149.517763][T25489]  ? __lock_acquire+0x5c0/0x1f40
[ 1149.519897][T25489]  ? proc_coredump_connector+0x2d3/0x4f0
[ 1149.522268][T25489]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1149.524807][T25489]  ? rcu_is_watching+0x13/0xc0
[ 1149.526844][T25489]  get_signal+0x1f2a/0x21e0
[ 1149.528793][T25489]  ? __pfx_get_signal+0x10/0x10
[ 1149.530864][T25489]  ? __pfx_force_sig_fault+0x10/0x10
[ 1149.533087][T25489]  arch_do_signal_or_restart+0x91/0x7a0
[ 1149.535436][T25489]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1149.538033][T25489]  irqentry_exit+0x402/0xa10
[ 1149.539988][T25489]  asm_exc_page_fault+0x26/0x30
[ 1149.542070][T25489] RIP: 0023:0xf6fdefec
[ 1149.543808][T25489] Code: Unable to access opcode bytes at 0xf6fdefc2.
[ 1149.546578][T25489] RSP: 002b:00000000fffffe70 EFLAGS: 00010282
[ 1149.549114][T25489] RAX: 0000000000000000 RBX: 0000000000008000 RCX: 00000000fffffe70
[ 1149.552413][T25489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1149.555698][T25489] RBP: 00000000f53ac5ec R08: 0000000000000000 R09: 0000000000000000
[ 1149.558996][T25489] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1149.562273][T25489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1149.565572][T25489]  </TASK>
[ 1149.567602][T25489] Kernel Offset: disabled
[ 1149.569417][T25489] Rebooting in 86400 seconds..