last executing test programs:

3m53.134440376s ago: executing program 3 (id=1556):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create(0x7)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r4 = memfd_create(&(0x7f00000007c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa6\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07y\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfah&\x95V\xb1\xeb\xbaO>\xdd\x9d-\xee<#4L\xd6\xaaT\x96TM\x1e\x84\'\x05\xe1N\x97\xeb\xfe\x1f\xc1\xa3\x98\x86n\xd6Z\a\x8d7\x16\xb36\x99\buta\x17x\xa3\xa3\xef\x06(r\x9c\xe8\x9fb\xabH\xd0\v\x9a\x85Z\a\xc6\xf1T\x8a\xf1,\fk#\x80T\xdfX\xf6\xce\x03\x9a6{L\x82\x18\x12B.S\x8e\xa7\xa59c:\x8c\x90NA\x06\x1e\x85I\x9c\xe6\x9c\x05\xd1\xa7\xc0H\xff&\t0\x86\xbf0\xea+\x1a&y\xda\xed\x92\xd3\xa1mN\x98\xaf\xe7\xf5\x12m\xb6k\xb0RX\xd7Z\xb00\x8b\xfb\xffjc\x043\x8e=\xf3\xc0\\4s\\\xff\xd8\x0e\x03xE\xc7\xa9\xe33wL\xc4,\xf0j\xc7\x1c\x89\xd0\xfd\xb5\xb8({-v\x15\xdf\x7f\x8b]\xb7\xc6', 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x101, &(0x7f00000002c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000001040)={{0x7, 0x4, 0x9, 0xffffffff, '\x00', 0x9}, 0x3, 0x200, 0xe4a1, r1, 0x2, 0x4, 'syz1\x00', &(0x7f0000000c80)=['\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa6\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07y\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfah&\x95V\xb1\xeb\xbaO>\xdd\x9d-\xee<#4L\xd6\xaaT\x96TM\x1e\x84\'\x05\xe1N\x97\xeb\xfe\x1f\xc1\xa3\x98\x86n\xd6Z\a\x8d7\x16\xb36\x99\buta\x17x\xa3\xa3\xef\x06(r\x9c\xe8\x9fb\xabH\xd0\v\x9a\x85Z\a\xc6\xf1T\x8a\xf1,\fk#\x80T\xdfX\xf6\xce\x03\x9a6{L\x82\x18\x12B.S\x8e\xa7\xa59c:\x8c\x90NA\x06\x1e\x85I\x9c\xe6\x9c\x05\xd1\xa7\xc0H\xff&\t0\x86\xbf0\xea+\x1a&y\xda\xed\x92\xd3\xa1mN\x98\xaf\xe7\xf5\x12m\xb6k\xb0RX\xd7Z\xb00\x8b\xfb\xffjc\x043\x8e=\xf3\xc0\\4s\\\xff\xd8\x0e\x03xE\xc7\xa9\xe33wL\xc4,\xf0j\xc7\x1c\x89\xd0\xfd\xb5\xb8({-v\x15\xdf\x7f\x8b]\xb7\xc6', '\x00'], 0x38b})
socket$netlink(0x10, 0x3, 0x0)
ftruncate(r4, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffff9c)
lseek(r4, 0x0, 0x4)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x10f, 0x40, 0x0, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
listen(r6, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000041000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
write$P9_RREAD(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="11000000750100c937000050fde4210c19c71ca70d5f21dbadb8c046c6a77566"], 0x11)

3m50.697184832s ago: executing program 3 (id=1560):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x14, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}}, 0x14}}, 0x4800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc260}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000f14100026bd700d05cdfbfbdf2508000300000000001100000000000000006c74696301737402000000090018084830e50fcd2e73736d003d6300"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24000011)
r4 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000000)=0x9, 0x16)

3m49.532657194s ago: executing program 3 (id=1565):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}}, 0x400c004)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}}, 0x400c004) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async)

3m48.250308182s ago: executing program 3 (id=1568):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0xcd, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x40}, 0x6008045)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x3)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
r2 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
rt_sigqueueinfo(0x0, 0x7, &(0x7f0000000380)={0x28, 0x64, 0x6})
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x2020)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000240))
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x18000000000002a0, 0xe40, 0x2000, &(0x7f0000000000)="b9ff03318944268cb89914f086dd", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x9, 0xfffffffffffffffd, 0x77, 0x0, 0x3, 0xc002004c4, 0x4000001004, 0x4, 0x8, 0x4000000000000000, 0x1, 0x366817b8, 0x2800000000000000, 0x5, 0x2000d30], 0x26000, 0x3013d3})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3m41.274317196s ago: executing program 3 (id=1590):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
clock_adjtime(0x0, &(0x7f0000000300)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x9, 0x9f69, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff})
r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r2, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x8080)
connect$rxrpc(r2, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x24)
r3 = fsopen(&(0x7f0000000200)='nilfs2\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4693b, 0x4c801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x40}, 0x1, 0x0, 0x0, 0x3004c000}, 0x20040844)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008"], 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x8001)
syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0x5, "c39aed3c"}}, 0x0}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0xd)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x57, 0x4, 0x8, {0x3, 0x4}, {0x8, 0xfd}, @cond=[{0x8, 0x1, 0x10, 0xfeff, 0x11, 0xfffc}, {0x400, 0x7fff, 0xf3, 0xa000, 0x6022, 0x6}]})

3m35.309461016s ago: executing program 3 (id=1595):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141341, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x4000003}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xffffffffffffff5e, 0x7, 0x3}]}}]}, 0x48}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents64(r5, &(0x7f0000000100)=""/83, 0x53)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001d0083a6000000000000000007000000abda41a8dc6dae2f13b967ab72c5a6d1b1"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000600)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)=""/213, 0xd5}, {&(0x7f0000000280)=""/144, 0x90}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/132, 0x84}, {&(0x7f0000000440)=""/148, 0x94}], 0x5, &(0x7f0000000580)=""/77, 0x4d}, 0x40002003)
ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000700)={0x2f, 0x1})
pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
write$P9_RWRITE(r8, &(0x7f0000000680)={0xb, 0x77, 0x1, 0x8}, 0xb)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000000)={'bond0\x00', @ifru_ivalue=0x57})
ioctl$sock_netdev_private(r9, 0x89f0, &(0x7f0000000000))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x200})
write$binfmt_aout(r5, &(0x7f0000000740)={{0x10b, 0x6, 0x9, 0x130, 0x6b, 0xb, 0x2b2, 0x80000000}, "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", ['\x00', '\x00']}, 0x31c)

3m20.147511061s ago: executing program 32 (id=1595):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141341, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x4000003}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xffffffffffffff5e, 0x7, 0x3}]}}]}, 0x48}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents64(r5, &(0x7f0000000100)=""/83, 0x53)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001d0083a6000000000000000007000000abda41a8dc6dae2f13b967ab72c5a6d1b1"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000600)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)=""/213, 0xd5}, {&(0x7f0000000280)=""/144, 0x90}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/132, 0x84}, {&(0x7f0000000440)=""/148, 0x94}], 0x5, &(0x7f0000000580)=""/77, 0x4d}, 0x40002003)
ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000700)={0x2f, 0x1})
pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
write$P9_RWRITE(r8, &(0x7f0000000680)={0xb, 0x77, 0x1, 0x8}, 0xb)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000000)={'bond0\x00', @ifru_ivalue=0x57})
ioctl$sock_netdev_private(r9, 0x89f0, &(0x7f0000000000))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x200})
write$binfmt_aout(r5, &(0x7f0000000740)={{0x10b, 0x6, 0x9, 0x130, 0x6b, 0xb, 0x2b2, 0x80000000}, "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", ['\x00', '\x00']}, 0x31c)

2m28.059066588s ago: executing program 1 (id=1901):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@remote, <r2=>0x0}, &(0x7f0000000080)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', <r3=>0x0, 0x4, 0x6c, 0x8, 0x1, 0x80, @local, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1, 0x40, 0x3}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf0, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000040)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000824)

2m27.498919577s ago: executing program 1 (id=1902):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="f5b1020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="b8cf89a69455e6ed2fd46382308abb474f15599d603bbae84f0d3baad07918f387c2ecdc273e0bfc0c123f0aa98a9d91f6798ef35af400"/66], 0x3c}}, 0x800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6020400)
signalfd(r2, &(0x7f0000000040)={[0xffffffffffffff98]}, 0x8)
r3 = syz_open_dev$media(&(0x7f0000000000), 0x70, 0x101800)
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r4=>r3, {0x1}}, './file0\x00'})
recvmsg$inet_nvme(r4, &(0x7f0000000540)={&(0x7f0000000140)=@x25, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000400)=""/142, 0x8e}], 0x4, &(0x7f0000000500)=""/21, 0x15}, 0x10)
socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x19, 0x4, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5, [0xf, 0x80000000]}})
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000010180c200000e86dd60b8192300003200fe8000000000000000000000000000aafe8000000000000000000000000000aaffcaa0d3be9fb06ff9c95db9e5c08b9036db40dae3598be75a3a7dbd9533ba86da128381379ccc42c9665653fdfe24d3998d561e6639ffb19b16"], 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
unshare(0x400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000080), 0x2, 0x0)
sendfile(r7, r7, &(0x7f00000000c0)=0x4, 0x38c6)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@ipv4_delroute={0x24, 0x19, 0x1, 0x78bd27, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x0, 0xff, 0x0, 0xff, 0xa, 0x600}, [@RTA_TABLE={0x8, 0x12, 0x7fff}]}, 0x24}}, 0x1000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000000c0))

2m27.294610958s ago: executing program 1 (id=1904):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x54, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xa}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x8, 0x4, 0x8, 0x7}}]}}, @qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (fail_nth: 8)

2m27.098492561s ago: executing program 1 (id=1906):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9600, 0x0, 0x103, 0x1, 0x8, 0x400}, 0x20)

2m26.789674706s ago: executing program 1 (id=1907):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:s'], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000440)={0xa0280000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x4}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f00000002c0)=""/231, &(0x7f00000003c0)=[0x0], 0x1}, 0x58)
r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x105, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0xffffffff, 0x3131354f, 0x0, 0x0, [{0x2}, {}, {}, {}, {0x0, 0x3}]}})
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={<r1=>r0, &(0x7f0000000000)='!-\'^##\x00', 0x8080, &(0x7f0000000040)={@align=0x8001, {0x9, 0x5e2c, 0x9, 0x9}}, 0x101, &(0x7f0000000080), &(0x7f00000004c0)})
r2 = userfaultfd(0x1)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000980)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24000010)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240))
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f00000005c0), 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xa99d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r9 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000540)=<r10=>0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000380)={@nfc={0x27, r10, 0x0, 0x7}, {&(0x7f00000002c0)=""/107, 0x6b}, &(0x7f0000000500), 0xe090434aa60fa960}, 0xa0)

2m26.678433522s ago: executing program 1 (id=1909):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0xcd, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x40}, 0x6008045)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x3)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
r2 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
rt_sigqueueinfo(0x0, 0x7, &(0x7f0000000380)={0x28, 0x64, 0x6})
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x2020)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000240))
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0xe40, 0x2000, &(0x7f0000000000)="b9ff03318944268cb89914f086dd", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x9, 0xfffffffffffffffd, 0x77, 0x0, 0x3, 0xc002004c4, 0x4000001004, 0x4, 0x8, 0x4000000000000000, 0x1, 0x366817b8, 0x2800000000000000, 0x5, 0x2000d30], 0x26000, 0x3013d3})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2m4.245307878s ago: executing program 2 (id=1968):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_BULK(r1, 0xc0185502, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r3=>0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x1)
ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000080)={0x0, 0x2, 0x800})
ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f0000000480)=0x7)
r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x43, 0x2, 0xc, 0x6e})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10442, 0x0)
fanotify_init(0xf00, 0x1)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x3)
openat(0xffffffffffffff9c, 0x0, 0x68042, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="404b040715ca14b9b001000000004705b90080665b8d00000000000000000000098a3b361b4de92ad4e6f4fe9ca362cdebd1e9ff0324b289c3c1a69f15a26acb111f6a6fe1e85d06d2eb7ffa7b9a277a9e61ab51c2dc6cd8c8688e26f2fd89e524267488", @ANYRES32=0x0, @ANYRESDEC=r3], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x20040000)

2m3.102220044s ago: executing program 2 (id=1970):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32)
landlock_restrict_self(0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdir(&(0x7f0000000200)='./file0/file0\x00', 0xb19af21b0cc9c515)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
creat(&(0x7f0000000000)='./file0\x00', 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18)
landlock_restrict_self(0xffffffffffffffff, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0)
landlock_create_ruleset(&(0x7f00000000c0)={0x1100}, 0x18, 0x0)

2m2.892395823s ago: executing program 2 (id=1972):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x14, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}}, 0x14}}, 0x4800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc260}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000f14100026bd700d05cdfbfbdf2508000300000000001100000000000000006c74696301737402000000090018084830e50fcd2e73736d003d6300"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24000011)
r4 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000000)=0x9, 0x16)

1m59.436018539s ago: executing program 2 (id=1979):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_BULK(r1, 0xc0185502, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r3=>0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x1)
ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000080)={0x0, 0x2, 0x800})
ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f0000000480)=0x7)
r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x43, 0x2, 0xc, 0x6e})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10442, 0x0)
fanotify_init(0xf00, 0x1)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x3)
openat(0xffffffffffffff9c, 0x0, 0x68042, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="404b040715ca14b9b001000000004705b90080665b8d00000000000000000000098a3b361b4de92ad4e6f4fe9ca362cdebd1e9ff0324b289c3c1a69f15a26acb111f6a6fe1e85d06d2eb7ffa7b9a277a9e61ab51c2dc6cd8c8688e26f2fd89e524267488", @ANYRES32=0x0, @ANYRESDEC=r3], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x20040000)

1m58.193635253s ago: executing program 2 (id=1984):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x810)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x95}}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0xffffffff, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x40, 0x81, 0x206, 0x1ff, 0x7, 0x7, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x9, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x2, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x7, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)

1m57.020035416s ago: executing program 2 (id=1987):
unshare(0x4a040200)
r0 = socket$kcm(0x2d, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc)

1m40.99699811s ago: executing program 33 (id=1987):
unshare(0x4a040200)
r0 = socket$kcm(0x2d, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc)

1m7.322282318s ago: executing program 0 (id=2054):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000000000000000000000000208000f"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)

1m6.705454753s ago: executing program 0 (id=2055):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000900)="a9e07a4dc21be8047cd542442aa000b31656211baed8b0c2a7dbd03cff4732d633996bce76dfea1ee88d7a5fcae03419a55be014612ddab30eb77696f1e019fbe5024cfd7a993f367c9690fdbddbe5ff", 0x50}], 0x1}, 0x4000)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e0000000100009"], 0xe0}], 0x1, 0x0, 0x0, 0x1}, 0x40040)
write$P9_RLCREATE(r0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
linkat(r0, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x1400)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003700)=ANY=[], 0x2e8}}], 0x2, 0x0)

1m6.070800792s ago: executing program 0 (id=2059):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x7, 0xc}}}}}]}}]}}, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chroot(&(0x7f0000000000)='./bus\x00')
rmdir(&(0x7f0000000100)='./file1\x00')
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000000)={0x40, 0xb, 0x29, {0x29, 0x10, "17d11b055f02d464e164048453e77b9cad47c7c7c394b78989faa3a200abea14da2bf767670100"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

59.405810636s ago: executing program 0 (id=2065):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e1a, 0x0, @local, 0x2}, 0x1c)
connect$netlink(r6, &(0x7f00000000c0)=@unspec, 0xc)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f00000000c0)={0x3d, 0x1, 0x0, "d359100005000000000000000000ffff00000000ef2dd08900", 0x39565559})
r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x71, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xfc, 0xe9}}}}}]}}]}}, 0x0)
getpid()
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io(r8, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="9e1b6c"], 0x0, 0x0, 0x0, 0x0}, 0x0)
fsopen(&(0x7f0000000080)='efs\x00', 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="f00000001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2400050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000fe000000000000009201000000000010a39b000000000000ffff0010000000001c2508c1420000000500000000000100008000000000ffff0400000000000000090000000000100000000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e00000005350000020001002000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4008000}, 0x844)

54.013040965s ago: executing program 0 (id=2073):
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x29, 0x1, @scatter={0x0, 0x5c00, 0x0}, &(0x7f00000004c0)="851666ce20db96ab0c7d83e114e7ef1762249711e34f4ce12c6afeb7e6d77bd3b97644edd8e3a3b71f", 0x0, 0x10, 0x5bb727690d5f0ff6, 0x0, 0x0})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="810200000000000014001a801000"], 0x34}}, 0x0)

53.410245757s ago: executing program 0 (id=2074):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
getpid()

45.999628508s ago: executing program 5 (id=2086):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x39fd0d, 0x36c1b7})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af6ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000001900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94)

45.002156153s ago: executing program 5 (id=2087):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4734, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000740)="98e2d24a2d8ce4a509d138cc91611ed14f69b7d7aebfeca49d719bfbb537aef2a00ebefaf03915f43ec35efc4f2f060cab2fa2b5236842aaac0b9519376ea044a920d446a5c2a54c1ff847b7", 0x4c, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0xffffffffffffffff, 0xa401)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_sctp(0x2, 0x1, 0x84)

44.783504376s ago: executing program 5 (id=2088):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
fgetxattr(r0, &(0x7f0000000680)=@known='system.sockprotoname\x00', 0x0, 0x0)

42.242973791s ago: executing program 5 (id=2092):
r0 = socket(0x15, 0xa, 0x808)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$NBD_CLEAR_SOCK(r1, 0xab04)
bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e80)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000002dc0), &(0x7f0000002e40)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x20)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0xb0, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x2b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000002e00)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0xfffc, 0x0, 0x1, {0x22, 0x80}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
getresgid(&(0x7f0000000cc0), &(0x7f0000000d00)=<r5=>0x0, &(0x7f0000000d40))
r6 = getegid()
setregid(r6, 0xffffffffffffffff)
read$FUSE(r1, &(0x7f0000000d80)={0x2020, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020)
setresgid(r5, r6, r7)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x11, 0x56, {0x56, 0xd, "76ff154a496151aff79291207b6e311816d31c696f87f5aa626008cb3e9b580475ec3effbab42d99455b140c5c49a57513d6323c2a3eb3e736c75ddf04f302a33ce344d05ba6af502036a31c9498553b9e2e8acf"}}, &(0x7f0000000200)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "f2ac77dbab5c7a57e7148340ae77d46104256f83bba252259523137d7f022a74b803d19740a9a34f7adf7a80d4ac6b6407b8d87c76a143ceea8b27c6a584152c80d4af15f5055b507e3ab7d90f"}}, &(0x7f0000000280)={0x0, 0xf, 0xb6, {0x5, 0xf, 0xb6, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "984fd1a01811de64ab0f11b1816a460b"}, @generic={0x82, 0x10, 0x3, "1c682f3555aff4eef9c8f68469894dd0b98f7c8e5e4a768a632cc8ba360a067ce4481d8a4fb6f9df015d6d058f934760fed4bfd526d0490faca2037030db4626cc20bdb84f3a1bc63914020c7f44209c65a900e1060eb916c40a07d7db79c5ab3e2f8cd8eb088ee7aea2aef15e21b50cecec023ce3132a7498c7ff7e14a543"}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x9, 0x0, 0xe223, [0x28, 0xc0, 0x0]}, @ptm_cap={0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x3, 0xd4, "a58b1e17", "607c45ce"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x8, 0x47, 0x8, 0x5, 0xc}}}, &(0x7f0000000800)={0x84, &(0x7f0000000400)={0x40, 0xa, 0x1c, "2d98dfc9c5751fe46184956d5ab77dce2281f4df34a8b64add9ed114"}, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1000, 0x20}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "6ff8"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xbd15}, &(0x7f0000000640)={0x40, 0x13, 0x6, @random="d6ee3158b34f"}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "172a"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x72}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x6}})
ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f00000008c0))
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000003000)={0x14, &(0x7f0000002f00)={0x40, 0x21, 0x1e, {0x1e, 0x1, "ebdc4e4ea19afae58bd16fb4c7b022cae28e7ed14d8880bf20465676"}}, &(0x7f0000002f40)={0x0, 0x3, 0x87, @string={0x87, 0x3, "c491ed2e7bb2539c1f89197de1218b0bb4ff5394b226e967062a806fc676c8529796640f69f25e7d41fc63d96adc9325ba9db9660836dfde472aa915f7d297c12a284c282610ea70ac7592d6388948924481442e8c6b90e6508d0ec8e4f4390ed794ed7f11cd602f235cf39ea9ebb84d6bd8ecb35fd420a92e6f49cbe4054a78cb9d4f636e"}}}, &(0x7f0000003280)={0x34, &(0x7f0000003040)={0x40, 0x15, 0xe0, "ebfc34cdb565cbb28d6851287be80a856a0ea38d253037c1d0f86ceef799d9e7d9219be770843826b656214de7e4ad75c1ba9bce9a49390326b21befaad09d9c66e26dc9032b549d5d4902db5e74aace44da02367bcf2187442018e105b18ea1db56ffaafeb948743fa692911df371f1844ec21bc38dbb429729cfb4b57253011f7b0d393973f380f7c4e5a280613e81f058bfaed7686a0136e25195a71ffa5ae9abecd635488162346d4ee65e809679c63e53ce861e6cb2a23ba3aadf378c930fcbd21b96dbc353a6c3ec58544953764c41da227d3e64f1b889d556860fd8df"}, &(0x7f0000003140)={0x0, 0xa, 0x1, 0x1e}, &(0x7f0000003180)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000031c0)={0xc0, 0xa1, 0x4, 0xc8c}, &(0x7f0000003200)={0x40, 0xa0, 0x4, 0xffff24a7}, &(0x7f0000003240)={0xc0, 0xa2, 0x2f, "3690effc7900078db35797ddc4941853a2b2e0d0accc12b6c05a31fcea5c78254a26668d7f34a94ab6602c04bd855c"}})
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fefffffffffffffff4000f00fd000000", 0x24)

39.291827751s ago: executing program 5 (id=2094):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
preadv2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1, 0xbd43, 0x4, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvfrom$inet(0xffffffffffffffff, &(0x7f00000003c0)=""/99, 0x63, 0x20, &(0x7f0000000440)={0x2, 0x4e23, @private=0xa010101}, 0x10)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003a0000/0x4000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0xfc, 0xfd, 0x0, 0x0, 0x3, 0x1000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
r7 = syz_open_dev$I2C(0x0, 0x1, 0x2603)
ioctl$I2C_RDWR(r7, 0x707, 0x0)
setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r8 = syz_io_uring_setup(0x33ef, &(0x7f0000000300)={0x0, 0x7c87, 0x10, 0xfffffffe, 0x203}, &(0x7f0000000380), &(0x7f00000002c0), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1)
r9 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, 0x0)

37.335016608s ago: executing program 34 (id=2074):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
getpid()

35.438223448s ago: executing program 5 (id=2098):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x34, r1, 0x2799f5eec7981083, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
prctl$PR_GET_ENDIAN(0x42, 0x0)
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2})
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, 0x0)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
recvmmsg(r5, &(0x7f0000000900)=[{{&(0x7f0000000380)=@nl, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/221, 0xdd}, {&(0x7f0000000700)=""/149, 0x95}, {&(0x7f00000007c0)=""/227, 0xe3}], 0x3}, 0x7}], 0x1, 0x10100, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x401, 0x6, 0xffffffff, 0x284, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r7=>0x0})
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1f0000000200000044fb0000060000004c010400", @ANYRES32=r6, @ANYBLOB="000400000000000000004a9ec92395488d8a0000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="01000000000000000100"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1)
r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000000ff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r11, 0xc100565c, &(0x7f0000000400)={0x8, 0x7fffffff, 0x4, {0x1, @pix={0xd67, 0x0, 0x34343459, 0x3, 0x8, 0x1, 0x8, 0xb1, 0x0, 0x0, 0x1, 0x8f434b8c187c1541}}, 0x7})
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)

21.14239046s ago: executing program 4 (id=2106):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x4)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f0001000000060010000900000008000100aa"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}, 0x1, 0x800000000000000}, 0x0)

20.561136656s ago: executing program 4 (id=2107):
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
write$binfmt_format(r0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x26, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0b080510", @ANYRES64], 0xe)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000ff0205007f00000000000000030000000800054000000008"], 0x1c}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0)
write$qrtrtun(r0, &(0x7f0000000340)="ca0e808b935bd6a80b7829418cdf891029f40f779f53c6d9c2c406f3", 0x1c)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={{r1}, 0x87d3, 0x3, 0x100000001})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)}}, 0x40)
io_setup(0x3ff, &(0x7f0000000500))
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0)
io_setup(0x3, &(0x7f0000000000))

19.485927138s ago: executing program 35 (id=2098):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x34, r1, 0x2799f5eec7981083, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
prctl$PR_GET_ENDIAN(0x42, 0x0)
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2})
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, 0x0)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
recvmmsg(r5, &(0x7f0000000900)=[{{&(0x7f0000000380)=@nl, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/221, 0xdd}, {&(0x7f0000000700)=""/149, 0x95}, {&(0x7f00000007c0)=""/227, 0xe3}], 0x3}, 0x7}], 0x1, 0x10100, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x401, 0x6, 0xffffffff, 0x284, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r7=>0x0})
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1f0000000200000044fb0000060000004c010400", @ANYRES32=r6, @ANYBLOB="000400000000000000004a9ec92395488d8a0000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="01000000000000000100"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1)
r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000000ff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r11, 0xc100565c, &(0x7f0000000400)={0x8, 0x7fffffff, 0x4, {0x1, @pix={0xd67, 0x0, 0x34343459, 0x3, 0x8, 0x1, 0x8, 0xb1, 0x0, 0x0, 0x1, 0x8f434b8c187c1541}}, 0x7})
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)

19.442405496s ago: executing program 4 (id=2109):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000740), 0xffffffffffffffff)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000340)='nl80211\x00\xfd\"0\xcc\xd2W\x84Pb\xd7\x87,h\xce\x98\xec\xc2oe\x85\xfd/\xff\xc1\x80u\xd63\xeb\n\x8d~\xc9\x11\xe1\xcf\xf6l\x82Q\x1b\xd9Py\xfe=\xb60\x11\xdd\xae\xbd~\xc51\x1a\xb7\x81#`\x81\xf3\xefE\x06F\vy\v\xe32\x01\xc3K\x1f\xe7u\xa5T@G\xda\x1c\xd7\xb5\xe8\\\xd5z\x7f\xc8Y1\xa9\x9a\xa4\x0e\x9d\x83AVJ@\x99\xbcAx\xff\xbfZ\x17\x9c\x00_\xbb\x19\xb9O\\\xd8ujf|)H\xf6>1i')
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, 0x0, &(0x7f00000004c0)=0x1, 0x2)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0xfff3}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x8}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4f781da16473de2b1348efebb30fd109"}]}, 0x28}, 0x1, 0x0, 0x0, 0xc044081}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0)

18.404578619s ago: executing program 4 (id=2110):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0x4, 0xc, 0x0, 0x1, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdf)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x60000000}, 0xc)

18.306348759s ago: executing program 4 (id=2111):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x7, &(0x7f00000001c0)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000006e80)=[{{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000c00)=[{&(0x7f00000005c0)="4a46acbdffa51a70a5f4f87049bb18d355c8813f4dfb1271f433c18769d5a685beb1998d937f1d5af068a1120bba68e205f0389bff27703a889b738ce92b9cf2836f1a7311f36f32890db479f8807a850affdd22cf2a406b56a2c37bb9576521a48845795034c0e5e5350a9b6b943d98c18e00b513421f04cfb8ff366ccf210fcd711622832f23d43d75f1488c1288d071c2e5df53b7ff61e8239f78464ed7bb108bbbf814dd7b562f4dab92e63896b1b5d70c877a4cdcd715aca31b0328cee98681635d73f7a5a6ec3139f27a83a97f067faf773ae420eee303443874d0cfe1b856ad4396fb8723bb9e7e", 0xeb}, {&(0x7f00000006c0)="103b1b4fc8c0eb477c61e1216d04d51fb78f5a2df80735a944444f06b14c03ab70dca615f8cae24ac0aba69c4d2befd97fef000de3c7ce40318b38b61e01563be88dfac55eeb242679ee23bac5a847ec8c7d181d042ee659ca9aae8c931e1c3556996e8e2e5eed27b4ecacb0958974", 0x6f}, {&(0x7f0000000740)="428eec6dd7eb24118c2dd3ce3d439aca000ff32390be42b2d73fb9289b3a736d463b3c9669c65f6bdcab25e3d7e139a7a87fba6bed6d4be83300fa7dd1fa183ef4de027fa2c5f0f3054674782aeaa79191cdda7964ff237cb3f073644b245f2df11160d957499da78d", 0x69}, {&(0x7f00000007c0)="1d28c28c68bd14e419fe173ac8608ceb70af498921e146ad45058d9270439b5523d36b4d249954cf8281c11dd7aaf567ced44572ec99effa282b55c71871a91b37a738b4c8306b4762dd047172686030e3c7794d0d749095c71d212278b7a5b7d196e95f57b8b0b5493da704efd127c01576dc9a0ec203e0ece6f8a0a7e2d95312102d3073c5b376bfc4dcede9d31c404c9d20a1df1b4b2d0308985ae0a520de458c7d29", 0xa4}, {&(0x7f0000000880)="3968ea5c19454eb43da4e4c9597b999d87a2ae18331a7951c4e2041d785d7ed63bbed900e7074f380e0f74d4bd17c3f2cc5e5c9fd5f5e77af3fe4b80223dd100d1a9e3304695c8c22dd08f0c4c19d7472bad24e409b2be8cdef888bc21bbf2c6731b774d6c608d77cd743f3890fe7edf97133dd354afbaa819fdf87fbb4b06c09a65456676b60fbbe2a4fb8e7bd9e09269acfdd8f06a833cdba06585fb49f9216a4704026a73bc8cac430691bf362c8ddf3f0784f0a2ab5adbb38c477fcdbdeccb7ae70c0526bcf01988a078a2", 0xcd}, {&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000cc0)="6a31d0087a7c48c21214ecf3ee9d3c0ad47ec9", 0x13}, {&(0x7f0000000ac0)="0d98d5b28f75979d91dad1ab1a7c2f614a6b2f1e56aa7e68b8c8b32fc724747a9454cb02e6660b883b476dac4c9ae72bf69ce6a2a6a224d2", 0x38}, {&(0x7f0000000b00)="d4da219e6466f82465815527808622ba71a8a6bc431ec73334aadf9ef5fb49d86c8272765d8290dbbbf36407ec5e977325e88c6e2af1a569b67b1bfae7867e63a7c219e73a0c28a63be43ac3d5a6f9949d850223f0359a2fc82c36e453813333460a3a63e979519480c3826afea40284482aa3341beecf9d35c59437744499202f46909ccf347f585775d998a6f890de071a4dda2c4a6dbde010bc204d69d31eeff001520c1e23a1d4e90d9791775ce124e4b1abf107f94894c309b8616e21adcf77377f308c04a4b6107b", 0xcb}], 0x9, &(0x7f0000000f80)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x88, 0x4000}}, {{&(0x7f0000001900)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001a80)="336349e6bdc3a716f058bd0a972dec708068ddc393ca010802bf32cfc594a3ea94ac7db5709cb12cc971847a7873df1a6a5c9938d208fc31986f88d689a74be1c3fd55b630db0b92a1905b92818337037044779fc0c9523ed6462e21d4c01596b1a2902b9c97adcfee99bc0aff7c75f2655d75ff5463fee66d284bbc1522ac1372224248e8007398f1d21335258ec695badaf46613bb9ef8af3565bd3a127f2fb3d18b2561ed3f5f5067dd42ab11cc4379b42ce46ce4e70f7e7f9e86be3e72c7b59cb6878d", 0xc5}, {&(0x7f0000001b80)="2790e88d313d3c5d9d07b16ee531e6440d43e497e68aefcb201a68b05b7384e7a108e2f3111d09fc66babd200beae40d52cef58df1cc5244799787b8819668063d7dc3b6e394ab90c19b8cff51dcd4f40a0d78a04db247d30a18452e8e777bb67a9359ef941f3fa447a174c7d8329e0b596a80839fe4315aba896334bdff3db6f48f72c7d5d9163b830c", 0x8a}, {&(0x7f0000000480)="cb94c3ffcb1cebc7cbb7a4e515bb14da55a513da423cbbf58abb3690c8ac3fb669e8", 0x22}, {&(0x7f0000001c80)="15a066355502acb71d6cb2f259a98ee35f43aaaf9aed16bada29b87f90af3d382b2abb7f1064d1771fe667c021fc3bc0edde652ab5935dca60bb574b3761bf9d39c84381d2348515cb393cd7133a29f046247eacda37fb438f007c47222c4d7519e9c592313cae0dd50359f26fa27e3297ef6ffa26c7a239e7adce20c20ee013e8c90685eb84c2a8201f28daa5e9866ff6712ca0ca72820ed13163a074c6275fca84d29cead1064f8732d5cef18d3b1d2cc70a40b5c9c2d227446273d8fcbe832083b6bc791badad4b333b48e41cc45694944a82cf44d53d9f4f10ff510f9fdb9475b10e9e4a9ecdf31364cae1841bbdd6b418", 0xf3}, {&(0x7f0000001e00)="0cc2d84fdfdc5da7d30d12015098754fe20e7d1ddc6896b2d3c26e8d134650bf5f45eff075ae23f11917b9e9ebf5905eeb6c700a05c311", 0x37}], 0x5, &(0x7f0000002200)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108, 0x20000880}}, {{&(0x7f0000002340)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000003dc0)=[{&(0x7f00000023c0)="4afcaf7e0a2d283eea507f7a7707e4ae016bebd871341372b12f8596ee909907883638410b2f88c78280b7af9c3c7fe1ee4e6cae29828a5954ca97eeab316e73ce7e5a6c83b1922d6b70d373f67e48", 0x4f}, {&(0x7f0000002b80)="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", 0x1000}, {&(0x7f0000000d00)="27519c91a9f41a0d8cf14a28238f02d4a725e5a907f4d462e88ead0a1a38d4b64e70694c9bca22b1d494d5512f22a56826423cbef1dd3f9ba0df509111727585e16e6ef9dcd66fe79b2be779", 0x4c}, {&(0x7f0000003c00)="9eb6eec1c8d136906412f9819ddaeac2870659b7e4459a91def4cf2c61139b0278d8e175236d6e675adf65d49d28a05a5eb1b7a16ca99b9e4d2197932c4ef5fa7975bf83419d904b846764db760255dadf64af21550de27e4da6982a5932e40270c3af98a04f8f5444511fd9954ac0d921a0cac2f2807a5008b557a986603533d9fa60f400309f49099ddd6d8d8a62d4e6964b60d90cf7d1bfc273ee5b8edf9c1a697483ab66528cd40f42145c694e32009b632e9e6129a3888680e8acb353a5a4c7bb2009c297be203e9bffc0d01a12a48eff356fa90b82c2d71aeda458be", 0xdf}, {&(0x7f0000003d00)="3d661b27ae612283bac017eb5b0801be66a9e888ceab55627f53c6aaeffe84b7cac777b2683abbb781f91ed414113ebd13b8bd526e5c69b7c6bfc38920aef2c140eb7f633c4e0e05e64a7625f8e0df277c6540c50141cee28c047e9ea3964e9d08bf63798371e01366c57b319e80ff42cd6eaeca39c0cca6f94d19948fb95f6bf615786ea701dcbcea6acb21a06b44619d204b4e87b6c2ed91317271b6bdfe9a0099b0827ed39f19f0f63999abf8cfc7", 0xb0}], 0x5, &(0x7f0000003e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r0]}}], 0x88, 0x1d3ec2bf3ce02bd7}}, {{&(0x7f0000003f40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000061c0)=[{&(0x7f0000003fc0)="998e269801cd18d5", 0x8}, {&(0x7f0000004000)="91fb1e5e3fcd5aaf2dec2820684f911f746d1cb95a8cad773e1fbaebfd6b23c71231939357bd53b22ecd6cd68f27f0631b5b1554f13c67e5a36eb9", 0x3b}, {&(0x7f0000004040)="237a7627513619e49eea7e11f0d3d946a235d9940de3d2d29604ca1ed21b5d7e632c00162fb16505b828a15a0d7b1901f1613f67bff1578e8be67cff2a81ab4f0dd222dc679a6d9fa08649869a1fd8f3af921dca330272db141d4af6bbd89e6cc868e2b156b57341e0c9f0f920e7295f66c44fcc4c995d0c0425df39cf", 0x7d}, {&(0x7f00000040c0)="3ad712fdce26d3759207052eb2404921595b754c771e6ac04d39c460c682cd087a8a78c6c7049127063d19f357ffb9cedb9fa78c34750f34782e05f80be09ffbd37ae657ad0fd112b1ac1400274741fe9ebbd3c62282e335c025436fdabc2c29ba5d9ef35a989b04161cab3e09f4ce64a14d03ae27651b9d5ecae5049ce41a7cbb4cbfb151d0a342078761728c58081a3bdd93ae8796b79d76001dbdf1f3fc4e1ae979423deb49a5d7bff8441560f0347345af141b16e8c383c8ae9eb1865466a5fb62a9d642359790976199ce0d58a249837d07d7", 0xd5}], 0x4, &(0x7f0000006a40)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100, 0x4001}}, {{&(0x7f0000006bc0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000006d00)=[{&(0x7f0000006c40)="9a8420221e4e0f6b25705b8be3f068cc18ed16adedb6abc6ad958aa257aa19a8c4fda35357aebdbf011533c20f1e4d1fdd3d55e9ae5632550893f5a72122b672c873f23ab9f167714a61fed6b12e4bf8fe99a48da3536c26dde9ff487924aedcf352c8b1fff7b217c10280a1f48c7e1138e2391fc377e3c3a77e616e8fdab2cc66ed", 0x82}], 0x1, &(0x7f0000006d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138, 0x8000}}], 0x5, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRESHEX=0x0, @ANYRESOCT=r1], 0x20}, 0x1, 0x0, 0x0, 0x20044010}, 0xaa2f4e332b2af62a)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r5, 0x6, 0xd, &(0x7f00000000c0)=""/59, &(0x7f0000000200)=0x3b)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2181, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
r7 = creat(0x0, 0x108)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10)
r8 = socket$inet(0x2, 0x3, 0x4)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0)
setsockopt$inet_opts(r8, 0x0, 0x16, &(0x7f00000003c0)="7b9f0ffbb445b5904ec61989025bb8000000b9cce2632674fe425bba05b5246c409ac37138cab21d254b1b9036f672337f90c3d62cb81b468ff23678c6c2ea40ced4dfe67507ac519692fad0c8c95d0735e1d215351713f64b5aa22a7304f7ab8f4c2bfc7c0abe437a15c17d7a2688d5fab153efbd84ec8fb51bfad021d7310bc18a4364de6a6bdd166e0ef1f259831d00cede2fad7aad95b3b21d4bd7dcb8d1a074698699b14855cbe91cc45ec3", 0xae)
sendmmsg$inet(r8, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000)
sendfile(r6, r6, 0x0, 0x20000023896)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
sendto$inet_nvme_of_msg(r7, &(0x7f0000000300)={@data_h2c_hdigest={{0x6, 0x4, 0x18, 0x1c, 0x65b7}, 0x9, 0x4f7, 0x6, 0x8, "ae1e1e69"}, @val=&(0x7f0000000240)="ce6fbc017654fa9f34adda45db845a9bf8c15a8a754f357eed490bb8cf1fe933b397ecf0ae67491de0d0d432600a9bace243038cba31963fb01d18ad3eec5b740d791716bb3c6c69b7f8a3"}, 0x88, 0x0, 0x0, 0x0)
madvise(&(0x7f00008e6000/0x4000)=nil, 0x4000, 0x17)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)

15.225566152s ago: executing program 4 (id=2112):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009409010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000092, 0x0, 0x4}]})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', <r7=>0x0, 0x1, 0x8, 0x8000, 0x80, {{0x19, 0x4, 0x2, 0x17, 0x64, 0x67, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote, {[@timestamp_addr={0x44, 0x24, 0x8d, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010101, 0x3}, {@remote, 0x2}, {@loopback, 0x10}]}, @noop, @timestamp_addr={0x44, 0xc, 0x85, 0x1, 0x7, [{@empty, 0x2}]}, @noop, @lsrr={0x83, 0x7, 0x5f, [@broadcast]}, @rr={0x7, 0x13, 0xa1, [@multicast2, @empty, @multicast2, @multicast1]}, @generic={0x86, 0x4, "b3a7"}]}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r9=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=<r10=>0x0, &(0x7f00000003c0)=0x4)
r11 = socket(0x10, 0x803, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x7f, 0x2665aca8, 0xffffffff, 0x10, 0x14, 0x10, 0x3}}]}}]}, 0x48}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000400)={'syztnl0\x00', <r14=>0x0, 0x7807, 0x20, 0x9, 0x0, {{0xd, 0x4, 0x0, 0x3, 0x34, 0x66, 0x0, 0x2, 0x4, 0x0, @private=0xa010101, @broadcast, {[@cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x7, 0xf, "75a2a1507036d5c5b2b213651e"}, {0x1, 0x7, "70a4307cc7"}, {0x7, 0x2}]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)={0x24c, r2, 0x300, 0xfffffffc, 0x25dfdbfc, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20000084}, 0x841)

0s ago: executing program 36 (id=2112):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009409010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000092, 0x0, 0x4}]})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', <r7=>0x0, 0x1, 0x8, 0x8000, 0x80, {{0x19, 0x4, 0x2, 0x17, 0x64, 0x67, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote, {[@timestamp_addr={0x44, 0x24, 0x8d, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010101, 0x3}, {@remote, 0x2}, {@loopback, 0x10}]}, @noop, @timestamp_addr={0x44, 0xc, 0x85, 0x1, 0x7, [{@empty, 0x2}]}, @noop, @lsrr={0x83, 0x7, 0x5f, [@broadcast]}, @rr={0x7, 0x13, 0xa1, [@multicast2, @empty, @multicast2, @multicast1]}, @generic={0x86, 0x4, "b3a7"}]}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r9=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=<r10=>0x0, &(0x7f00000003c0)=0x4)
r11 = socket(0x10, 0x803, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x7f, 0x2665aca8, 0xffffffff, 0x10, 0x14, 0x10, 0x3}}]}}]}, 0x48}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000400)={'syztnl0\x00', <r14=>0x0, 0x7807, 0x20, 0x9, 0x0, {{0xd, 0x4, 0x0, 0x3, 0x34, 0x66, 0x0, 0x2, 0x4, 0x0, @private=0xa010101, @broadcast, {[@cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x7, 0xf, "75a2a1507036d5c5b2b213651e"}, {0x1, 0x7, "70a4307cc7"}, {0x7, 0x2}]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)={0x24c, r2, 0x300, 0xfffffffc, 0x25dfdbfc, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20000084}, 0x841)

kernel console output (not intermixed with test programs):

0001
[  761.959622][T11296] RAX: ffffffffffffffda RBX: 00007f8bfcdd5fa0 RCX: 00007f8bfcb5cdd9
[  761.959632][T11296] RDX: 0000000000000007 RSI: 0000200000000080 RDI: 0000000000000004
[  761.959641][T11296] RBP: 00007f8bfadae090 R08: 0000000000000000 R09: 0000000000000000
[  761.959651][T11296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  761.959660][T11296] R13: 00007f8bfcdd6038 R14: 00007f8bfcdd5fa0 R15: 00007ffc3f745578
[  761.959690][T11296]  </TASK>
[  761.966125][   T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  762.066464][T11297] fuse: Bad value for 'fd'
[  762.100324][   T10] usb 2-1: device descriptor read/8, error -71
[  762.555640][   T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  762.868354][   T10] usb 2-1: device descriptor read/8, error -71
[  762.985376][   T10] usb usb2-port1: unable to enumerate USB device
[  765.831747][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1
[  765.962995][T11313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1796'.
[  766.398071][ T1229] hsr_slave_0: left promiscuous mode
[  766.442081][ T1229] hsr_slave_1: left promiscuous mode
[  766.443397][ T1229] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  766.443505][ T1229] batman_adv: batadv0: Removing interface: batadv_slave_0
[  766.480250][T11350] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1808'.
[  766.518470][ T1229] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  766.518499][ T1229] batman_adv: batadv0: Removing interface: batadv_slave_1
[  766.893447][ T1229] veth1_macvtap: left promiscuous mode
[  766.918826][ T1229] veth0_macvtap: left promiscuous mode
[  766.919741][ T1229] veth1_vlan: left promiscuous mode
[  766.920258][ T1229] veth0_vlan: left promiscuous mode
[  766.948543][T11360] overlayfs: missing 'lowerdir'
[  767.226649][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'.
[  767.337460][T11377] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1818'.
[  768.414915][ T1229] team0 (unregistering): Port device team_slave_1 removed
[  768.575173][ T1229] team0 (unregistering): Port device team_slave_0 removed
[  768.992222][T11435] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  768.992278][T11435] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  770.327405][T11447] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  770.416183][T10875] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  770.530717][T10875] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  770.533657][T10875] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  770.595603][T10875] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  770.598811][T10875] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  770.701678][T10875] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  770.704435][T10875] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  770.939111][T11464] FAULT_INJECTION: forcing a failure.
[  770.939111][T11464] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  770.939146][T11464] CPU: 0 UID: 0 PID: 11464 Comm: syz.1.1852 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  770.939177][T11464] Tainted: [L]=SOFTLOCKUP
[  770.939185][T11464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  770.939196][T11464] Call Trace:
[  770.939204][T11464]  <TASK>
[  770.939213][T11464]  dump_stack_lvl+0xe8/0x150
[  770.939240][T11464]  should_fail_ex+0x46b/0x600
[  770.939274][T11464]  _copy_from_user+0x2d/0xb0
[  770.939296][T11464]  copy_from_bpfptr+0x5c/0x90
[  770.939320][T11464]  bpf_prog_load+0xad5/0x1a10
[  770.939354][T11464]  ? __pfx_bpf_prog_load+0x10/0x10
[  770.939378][T11464]  ? __might_fault+0xaf/0x130
[  770.939415][T11464]  ? bpf_lsm_bpf+0x9/0x20
[  770.939436][T11464]  ? security_bpf+0x7e/0x2d0
[  770.939463][T11464]  __sys_bpf+0x618/0x950
[  770.939487][T11464]  ? __pfx___sys_bpf+0x10/0x10
[  770.939506][T11464]  ? rt_mutex_slowunlock+0x1cb/0x300
[  770.939545][T11464]  ? ksys_write+0x248/0x270
[  770.939568][T11464]  ? __pfx_ksys_write+0x10/0x10
[  770.939593][T11464]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  770.939613][T11464]  __x64_sys_bpf+0x7c/0x90
[  770.939634][T11464]  do_syscall_64+0x15f/0xf80
[  770.939652][T11464]  ? trace_irq_disable+0x3b/0x140
[  770.939674][T11464]  ? clear_bhb_loop+0x40/0x90
[  770.939697][T11464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  770.939716][T11464] RIP: 0033:0x7f9c0f6acdd9
[  770.939735][T11464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  770.939752][T11464] RSP: 002b:00007f9c0d8fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  770.939772][T11464] RAX: ffffffffffffffda RBX: 00007f9c0f925fa0 RCX: 00007f9c0f6acdd9
[  770.939787][T11464] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  770.939800][T11464] RBP: 00007f9c0d8fe090 R08: 0000000000000000 R09: 0000000000000000
[  770.939820][T11464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  770.939832][T11464] R13: 00007f9c0f926038 R14: 00007f9c0f925fa0 R15: 00007ffd399011e8
[  770.939862][T11464]  </TASK>
[  771.259198][T10875] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  771.621274][T11472] FAULT_INJECTION: forcing a failure.
[  771.621274][T11472] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  771.621310][T11472] CPU: 1 UID: 0 PID: 11472 Comm: syz.1.1853 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  771.621337][T11472] Tainted: [L]=SOFTLOCKUP
[  771.621344][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  771.621356][T11472] Call Trace:
[  771.621363][T11472]  <TASK>
[  771.621372][T11472]  dump_stack_lvl+0xe8/0x150
[  771.621399][T11472]  should_fail_ex+0x46b/0x600
[  771.621433][T11472]  _copy_from_user+0x2d/0xb0
[  771.621454][T11472]  ____sys_sendmsg+0x2e2/0x9c0
[  771.621483][T11472]  ? __pfx_____sys_sendmsg+0x10/0x10
[  771.621521][T11472]  ? import_iovec+0x73/0xa0
[  771.621545][T11472]  ___sys_sendmsg+0x2a5/0x360
[  771.621566][T11472]  ? __lock_acquire+0x6b5/0x2cf0
[  771.621595][T11472]  ? __pfx____sys_sendmsg+0x10/0x10
[  771.621650][T11472]  ? __fget_files+0x2a/0x420
[  771.621676][T11472]  ? __fget_files+0x3a6/0x420
[  771.621711][T11472]  __x64_sys_sendmsg+0x1c3/0x2a0
[  771.621735][T11472]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  771.621766][T11472]  ? __pfx_ksys_write+0x10/0x10
[  771.621795][T11472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.621816][T11472]  do_syscall_64+0x15f/0xf80
[  771.621834][T11472]  ? trace_irq_disable+0x3b/0x140
[  771.621855][T11472]  ? clear_bhb_loop+0x40/0x90
[  771.621879][T11472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.621898][T11472] RIP: 0033:0x7f9c0f6acdd9
[  771.621915][T11472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  771.621932][T11472] RSP: 002b:00007f9c0d8fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  771.621953][T11472] RAX: ffffffffffffffda RBX: 00007f9c0f925fa0 RCX: 00007f9c0f6acdd9
[  771.621967][T11472] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000004
[  771.621980][T11472] RBP: 00007f9c0d8fe090 R08: 0000000000000000 R09: 0000000000000000
[  771.621993][T11472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  771.622008][T11472] R13: 00007f9c0f926038 R14: 00007f9c0f925fa0 R15: 00007ffd399011e8
[  771.622039][T11472]  </TASK>
[  772.831182][T10875] 8021q: adding VLAN 0 to HW filter on device bond0
[  773.003349][T10875] 8021q: adding VLAN 0 to HW filter on device team0
[  773.041899][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state
[  773.064162][ T1253] bridge0: port 1(bridge_slave_0) entered forwarding state
[  773.119507][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[  773.119705][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[  773.202970][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1864'.
[  773.659739][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2
[  773.660045][T11522] FAULT_INJECTION: forcing a failure.
[  773.660045][T11522] name failslab, interval 1, probability 0, space 0, times 0
[  773.660073][T11522] CPU: 1 UID: 0 PID: 11522 Comm: syz.1.1867 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  773.660096][T11522] Tainted: [L]=SOFTLOCKUP
[  773.660102][T11522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  773.660111][T11522] Call Trace:
[  773.660118][T11522]  <TASK>
[  773.660126][T11522]  dump_stack_lvl+0xe8/0x150
[  773.660149][T11522]  should_fail_ex+0x46b/0x600
[  773.660180][T11522]  should_failslab+0xa8/0x100
[  773.660198][T11522]  __kmalloc_node_track_caller_noprof+0xe2/0x7e0
[  773.660216][T11522]  ? lockdep_hardirqs_on+0x7a/0x110
[  773.660236][T11522]  ? ethnl_default_set_doit+0x59d/0xad0
[  773.660253][T11522]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  773.660288][T11522]  kmemdup_noprof+0x2b/0x70
[  773.660313][T11522]  ethnl_default_set_doit+0x59d/0xad0
[  773.660342][T11522]  genl_family_rcv_msg_doit+0x22a/0x330
[  773.660362][T11522]  ? __asan_memcpy+0x40/0x70
[  773.660387][T11522]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  773.660404][T11522]  ? rcu_is_watching+0x15/0xb0
[  773.660436][T11522]  ? bpf_lsm_capable+0x9/0x20
[  773.660455][T11522]  ? security_capable+0x7e/0x2c0
[  773.660483][T11522]  genl_rcv_msg+0x61c/0x7a0
[  773.660510][T11522]  ? __pfx_genl_rcv_msg+0x10/0x10
[  773.660530][T11522]  ? ref_tracker_free+0x673/0x820
[  773.660546][T11522]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  773.660575][T11522]  ? __pfx_ref_tracker_free+0x10/0x10
[  773.660589][T11522]  ? __asan_memcpy+0x40/0x70
[  773.660610][T11522]  ? __skb_clone+0x63/0x7a0
[  773.660634][T11522]  netlink_rcv_skb+0x232/0x4b0
[  773.660651][T11522]  ? __pfx_genl_rcv_msg+0x10/0x10
[  773.660672][T11522]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  773.660701][T11522]  ? netlink_deliver_tap+0x2e/0x1b0
[  773.660714][T11522]  ? netlink_deliver_tap+0x2e/0x1b0
[  773.660731][T11522]  genl_rcv+0x28/0x40
[  773.660746][T11522]  netlink_unicast+0x780/0x920
[  773.660774][T11522]  netlink_sendmsg+0x813/0xb40
[  773.660796][T11522]  ? __pfx_netlink_sendmsg+0x10/0x10
[  773.660812][T11522]  ? unwind_get_return_address+0x4d/0x90
[  773.660834][T11522]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  773.660851][T11522]  ____sys_sendmsg+0x94c/0x9c0
[  773.660874][T11522]  ? __pfx_____sys_sendmsg+0x10/0x10
[  773.660897][T11522]  ? import_iovec+0x73/0xa0
[  773.660916][T11522]  ___sys_sendmsg+0x2a5/0x360
[  773.660932][T11522]  ? __lock_acquire+0x6b5/0x2cf0
[  773.660957][T11522]  ? __pfx____sys_sendmsg+0x10/0x10
[  773.661007][T11522]  ? __fget_files+0x2a/0x420
[  773.661026][T11522]  ? __fget_files+0x3a6/0x420
[  773.661054][T11522]  __x64_sys_sendmsg+0x1c3/0x2a0
[  773.661074][T11522]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  773.661101][T11522]  ? __pfx_ksys_write+0x10/0x10
[  773.661126][T11522]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.661142][T11522]  do_syscall_64+0x15f/0xf80
[  773.661157][T11522]  ? trace_irq_disable+0x3b/0x140
[  773.661175][T11522]  ? clear_bhb_loop+0x40/0x90
[  773.661194][T11522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.661209][T11522] RIP: 0033:0x7f9c0f6acdd9
[  773.661225][T11522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  773.661238][T11522] RSP: 002b:00007f9c0d8fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  773.661256][T11522] RAX: ffffffffffffffda RBX: 00007f9c0f925fa0 RCX: 00007f9c0f6acdd9
[  773.661268][T11522] RDX: 0000000000040054 RSI: 0000200000000540 RDI: 0000000000000007
[  773.661279][T11522] RBP: 00007f9c0d8fe090 R08: 0000000000000000 R09: 0000000000000000
[  773.661290][T11522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  773.661300][T11522] R13: 00007f9c0f926038 R14: 00007f9c0f925fa0 R15: 00007ffd399011e8
[  773.661331][T11522]  </TASK>
[  774.415685][ T1229] IPVS: stop unused estimator thread 0...
[  774.585499][ T5833] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  775.033633][ T5833] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  775.033681][ T5833] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  775.033704][ T5833] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  775.033728][ T5833] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  775.033750][ T5833] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  775.840084][ T5833] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  775.840111][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.840130][ T5833] usb 2-1: Product: syz
[  775.840144][ T5833] usb 2-1: Manufacturer: syz
[  775.840159][ T5833] usb 2-1: SerialNumber: syz
[  776.477681][ T5833] cdc_ncm 2-1:1.0: bind() failure
[  776.523305][ T5833] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  776.528858][ T5833] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  776.544450][ T5833] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  776.569649][ T5833] usb 2-1: USB disconnect, device number 34
[  777.113512][T11581] FAULT_INJECTION: forcing a failure.
[  777.113512][T11581] name failslab, interval 1, probability 0, space 0, times 0
[  777.113568][T11581] CPU: 1 UID: 0 PID: 11581 Comm: syz.1.1879 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  777.113596][T11581] Tainted: [L]=SOFTLOCKUP
[  777.113603][T11581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  777.113614][T11581] Call Trace:
[  777.113623][T11581]  <TASK>
[  777.113631][T11581]  dump_stack_lvl+0xe8/0x150
[  777.113659][T11581]  should_fail_ex+0x46b/0x600
[  777.113692][T11581]  should_failslab+0xa8/0x100
[  777.113716][T11581]  __kmalloc_noprof+0xdf/0x7b0
[  777.113735][T11581]  ? kfree+0x4d/0x6c0
[  777.113750][T11581]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  777.113784][T11581]  tomoyo_realpath_from_path+0xe3/0x5d0
[  777.113811][T11581]  ? tomoyo_domain+0xd8/0x130
[  777.113834][T11581]  ? tomoyo_path_number_perm+0x219/0x630
[  777.113858][T11581]  tomoyo_path_number_perm+0x246/0x630
[  777.113885][T11581]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  777.113907][T11581]  ? __lock_acquire+0x6b5/0x2cf0
[  777.113934][T11581]  ? do_raw_spin_lock+0x12b/0x2f0
[  777.113988][T11581]  ? __fget_files+0x2a/0x420
[  777.114014][T11581]  ? __fget_files+0x2a/0x420
[  777.114037][T11581]  ? __fget_files+0x3a6/0x420
[  777.114061][T11581]  ? __fget_files+0x2a/0x420
[  777.114090][T11581]  security_file_ioctl+0xc3/0x2a0
[  777.114116][T11581]  __se_sys_ioctl+0x47/0x170
[  777.114138][T11581]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  777.114159][T11581]  do_syscall_64+0x15f/0xf80
[  777.114177][T11581]  ? trace_irq_disable+0x3b/0x140
[  777.114198][T11581]  ? clear_bhb_loop+0x40/0x90
[  777.114220][T11581]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  777.114238][T11581] RIP: 0033:0x7f9c0f6acdd9
[  777.114264][T11581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  777.114278][T11581] RSP: 002b:00007f9c0d8fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  777.114298][T11581] RAX: ffffffffffffffda RBX: 00007f9c0f925fa0 RCX: 00007f9c0f6acdd9
[  777.114312][T11581] RDX: 0000200000000400 RSI: 0000000000004c0a RDI: 0000000000000003
[  777.114324][T11581] RBP: 00007f9c0d8fe090 R08: 0000000000000000 R09: 0000000000000000
[  777.114336][T11581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  777.114347][T11581] R13: 00007f9c0f926038 R14: 00007f9c0f925fa0 R15: 00007ffd399011e8
[  777.114378][T11581]  </TASK>
[  777.114386][T11581] ERROR: Out of memory at tomoyo_realpath_from_path.
[  777.166828][T11581] loop3: detected capacity change from 0 to 7
[  777.382250][T11581] Dev loop3: unable to read RDB block 7
[  777.382292][T11581]  loop3: unable to read partition table
[  777.382465][T11581] loop3: partition table beyond EOD, truncated
[  777.382501][T11581] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  777.421136][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3
[  777.439181][T10875] 8021q: adding VLAN 0 to HW filter on device batadv0
[  778.783104][T10875] veth0_vlan: entered promiscuous mode
[  778.849301][T10875] veth1_vlan: entered promiscuous mode
[  778.911781][T11631] FAULT_INJECTION: forcing a failure.
[  778.911781][T11631] name failslab, interval 1, probability 0, space 0, times 0
[  778.911803][T11631] CPU: 1 UID: 0 PID: 11631 Comm: syz.4.1891 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  778.911819][T11631] Tainted: [L]=SOFTLOCKUP
[  778.911823][T11631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  778.911836][T11631] Call Trace:
[  778.911841][T11631]  <TASK>
[  778.911846][T11631]  dump_stack_lvl+0xe8/0x150
[  778.911864][T11631]  should_fail_ex+0x46b/0x600
[  778.911883][T11631]  should_failslab+0xa8/0x100
[  778.911898][T11631]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[  778.911909][T11631]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  778.911922][T11631]  ? dup_task_struct+0x52/0x840
[  778.911937][T11631]  dup_task_struct+0x52/0x840
[  778.911948][T11631]  ? rt_spin_unlock+0x160/0x200
[  778.911962][T11631]  copy_process+0x89b/0x4460
[  778.911989][T11631]  ? __pfx_copy_process+0x10/0x10
[  778.912008][T11631]  vhost_task_create+0x1f9/0x380
[  778.912022][T11631]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  778.912037][T11631]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  778.912051][T11631]  ? __pfx_vhost_task_create+0x10/0x10
[  778.912073][T11631]  ? __pfx_vhost_task_fn+0x10/0x10
[  778.912091][T11631]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  778.912107][T11631]  ? lockdep_hardirqs_on+0x7a/0x110
[  778.912123][T11631]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  778.912138][T11631]  ? mutex_lock_nested+0x152/0x1d0
[  778.912149][T11631]  ? kvm_mmu_post_init_vm+0x8f/0x2d0
[  778.912167][T11631]  kvm_mmu_post_init_vm+0x147/0x2d0
[  778.912183][T11631]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  778.912202][T11631]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  778.912215][T11631]  ? do_raw_spin_lock+0x12b/0x2f0
[  778.912233][T11631]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  778.912248][T11631]  ? lockdep_hardirqs_on+0x7a/0x110
[  778.912263][T11631]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  778.912278][T11631]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  778.912294][T11631]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  778.912307][T11631]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  778.912322][T11631]  ? lockdep_hardirqs_on+0x7a/0x110
[  778.912337][T11631]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  778.912352][T11631]  ? rt_write_unlock+0x190/0x230
[  778.912366][T11631]  kvm_vcpu_ioctl+0xa65/0xfe0
[  778.912384][T11631]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  778.912399][T11631]  ? __asan_memset+0x22/0x50
[  778.912414][T11631]  ? smack_file_ioctl+0x331/0x360
[  778.912428][T11631]  ? __pfx_smack_file_ioctl+0x10/0x10
[  778.912445][T11631]  ? __fget_files+0x2a/0x420
[  778.912460][T11631]  ? __fget_files+0x3a6/0x420
[  778.912474][T11631]  ? __fget_files+0x2a/0x420
[  778.912492][T11631]  ? bpf_lsm_file_ioctl+0x9/0x20
[  778.912512][T11631]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  778.912534][T11631]  __se_sys_ioctl+0xff/0x170
[  778.912546][T11631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.912558][T11631]  do_syscall_64+0x15f/0xf80
[  778.912567][T11631]  ? trace_irq_disable+0x3b/0x140
[  778.912579][T11631]  ? clear_bhb_loop+0x40/0x90
[  778.912592][T11631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.912602][T11631] RIP: 0033:0x7fbef7abcdd9
[  778.912613][T11631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  778.912622][T11631] RSP: 002b:00007fbef5ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  778.912633][T11631] RAX: ffffffffffffffda RBX: 00007fbef7d36090 RCX: 00007fbef7abcdd9
[  778.912641][T11631] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  778.912648][T11631] RBP: 00007fbef5ced090 R08: 0000000000000000 R09: 0000000000000000
[  778.912654][T11631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  778.912661][T11631] R13: 00007fbef7d36128 R14: 00007fbef7d36090 R15: 00007fffbce59488
[  778.912677][T11631]  </TASK>
[  778.923530][T11637] FAULT_INJECTION: forcing a failure.
[  778.923530][T11637] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  778.923563][T11637] CPU: 0 UID: 0 PID: 11637 Comm: syz.1.1893 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  778.923588][T11637] Tainted: [L]=SOFTLOCKUP
[  778.923596][T11637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  778.923606][T11637] Call Trace:
[  778.923613][T11637]  <TASK>
[  778.923621][T11637]  dump_stack_lvl+0xe8/0x150
[  778.923648][T11637]  should_fail_ex+0x46b/0x600
[  778.923678][T11637]  strncpy_from_user+0x36/0x2b0
[  778.923707][T11637]  do_getname+0x77/0x250
[  778.923731][T11637]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.923751][T11637]  __se_sys_rmdir+0x1e/0x140
[  778.923772][T11637]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.923791][T11637]  do_syscall_64+0x15f/0xf80
[  778.923809][T11637]  ? trace_irq_disable+0x3b/0x140
[  778.923829][T11637]  ? clear_bhb_loop+0x40/0x90
[  778.923851][T11637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.923869][T11637] RIP: 0033:0x7f9c0f6acdd9
[  778.923885][T11637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  778.923902][T11637] RSP: 002b:00007f9c0d8fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  778.923921][T11637] RAX: ffffffffffffffda RBX: 00007f9c0f925fa0 RCX: 00007f9c0f6acdd9
[  778.923935][T11637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340
[  778.923948][T11637] RBP: 00007f9c0d8fe090 R08: 0000000000000000 R09: 0000000000000000
[  778.923959][T11637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  778.923971][T11637] R13: 00007f9c0f926038 R14: 00007f9c0f925fa0 R15: 00007ffd399011e8
[  778.923999][T11637]  </TASK>
[  779.534297][T10875] veth0_macvtap: entered promiscuous mode
[  779.572801][T10875] veth1_macvtap: entered promiscuous mode
[  779.697290][T10875] batman_adv: batadv0: Interface activated: batadv_slave_0
[  779.835339][T10875] batman_adv: batadv0: Interface activated: batadv_slave_1
[  779.931312][ T1229] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  779.931564][ T1229] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  779.931602][ T1229] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  779.931636][ T1229] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  780.257810][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4
[  780.295675][   T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  780.476407][   T10] usb 5-1: Using ep0 maxpacket: 32
[  780.478932][   T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  780.478965][   T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  780.487710][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  780.487736][   T10] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  780.487757][   T10] usb 5-1: Product: syz
[  780.487770][   T10] usb 5-1: Manufacturer: syz
[  780.559800][   T10] hub 5-1:4.0: USB hub found
[  780.715540][T11658] FAULT_INJECTION: forcing a failure.
[  780.715540][T11658] name failslab, interval 1, probability 0, space 0, times 0
[  780.715576][T11658] CPU: 1 UID: 0 PID: 11658 Comm: syz.1.1899 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  780.715602][T11658] Tainted: [L]=SOFTLOCKUP
[  780.715609][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  780.715619][T11658] Call Trace:
[  780.715626][T11658]  <TASK>
[  780.715634][T11658]  dump_stack_lvl+0xe8/0x150
[  780.715661][T11658]  should_fail_ex+0x46b/0x600
[  780.715695][T11658]  should_failslab+0xa8/0x100
[  780.715719][T11658]  __kvmalloc_node_noprof+0x170/0x8e0
[  780.715743][T11658]  ? bpf_uprobe_multi_link_attach+0x59b/0x1020
[  780.715765][T11658]  ? bpf_uprobe_multi_link_attach+0x3b9/0x1020
[  780.715791][T11658]  bpf_uprobe_multi_link_attach+0x59b/0x1020
[  780.715829][T11658]  ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10
[  780.715850][T11658]  ? __fget_files+0x2a/0x420
[  780.715878][T11658]  ? __fget_files+0x2a/0x420
[  780.715903][T11658]  ? __fget_files+0x2a/0x420
[  780.715938][T11658]  ? bpf_prog_attach_check_attach_type+0x453/0x540
[  780.715968][T11658]  link_create+0x67c/0x850
[  780.715995][T11658]  __sys_bpf+0x468/0x950
[  780.716018][T11658]  ? __pfx___sys_bpf+0x10/0x10
[  780.716036][T11658]  ? rt_mutex_slowunlock+0x1cb/0x300
[  780.716075][T11658]  ? ksys_write+0x248/0x270
[  780.716096][T11658]  ? __pfx_ksys_write+0x10/0x10
[  780.716121][T11658]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  780.716142][T11658]  __x64_sys_bpf+0x7c/0x90
[  780.716162][T11658]  do_syscall_64+0x15f/0xf80
[  780.716178][T11658]  ? trace_irq_disable+0x3b/0x140
[  780.716201][T11658]  ? clear_bhb_loop+0x40/0x90
[  780.716222][T11658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  780.716236][T11658] RIP: 0033:0x7f9c0f6acdd9
[  780.716250][T11658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  780.716262][T11658] RSP: 002b:00007f9c0d8dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  780.716277][T11658] RAX: ffffffffffffffda RBX: 00007f9c0f926090 RCX: 00007f9c0f6acdd9
[  780.716287][T11658] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c
[  780.716296][T11658] RBP: 00007f9c0d8dd090 R08: 0000000000000000 R09: 0000000000000000
[  780.716304][T11658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  780.716312][T11658] R13: 00007f9c0f926128 R14: 00007f9c0f926090 R15: 00007ffd399011e8
[  780.716335][T11658]  </TASK>
[  780.723958][   T10] hub 5-1:4.0: 2 ports detected
[  782.035502][   T10] hub 5-1:4.0: hub_hub_status failed (err = -32)
[  782.035530][   T10] hub 5-1:4.0: config failed, can't get hub status (err -32)
[  782.131051][   T10] usb 5-1: USB disconnect, device number 36
[  782.210931][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  782.210951][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  782.555725][ T3047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  782.555753][ T3047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  783.982157][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  784.231719][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  784.239864][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  784.266111][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  784.270677][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  784.336219][T11703] FAULT_INJECTION: forcing a failure.
[  784.336219][T11703] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  784.336250][T11703] CPU: 0 UID: 0 PID: 11703 Comm: syz.5.1913 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  784.336272][T11703] Tainted: [L]=SOFTLOCKUP
[  784.336278][T11703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  784.336287][T11703] Call Trace:
[  784.336293][T11703]  <TASK>
[  784.336300][T11703]  dump_stack_lvl+0xe8/0x150
[  784.336324][T11703]  should_fail_ex+0x46b/0x600
[  784.336360][T11703]  _copy_from_user+0x2d/0xb0
[  784.336379][T11703]  memdup_user+0x5e/0xd0
[  784.336400][T11703]  strndup_user+0x68/0xd0
[  784.336421][T11703]  __se_sys_fsconfig+0x4bb/0x820
[  784.336447][T11703]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  784.336465][T11703]  ? ksys_write+0x248/0x270
[  784.336486][T11703]  ? __pfx_ksys_write+0x10/0x10
[  784.336510][T11703]  ? __x64_sys_fsconfig+0x20/0xc0
[  784.336527][T11703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.336545][T11703]  do_syscall_64+0x15f/0xf80
[  784.336559][T11703]  ? trace_irq_disable+0x3b/0x140
[  784.336578][T11703]  ? clear_bhb_loop+0x40/0x90
[  784.336597][T11703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.336616][T11703] RIP: 0033:0x7f67a342cdd9
[  784.336631][T11703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  784.336644][T11703] RSP: 002b:00007f67a167e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  784.336661][T11703] RAX: ffffffffffffffda RBX: 00007f67a36a5fa0 RCX: 00007f67a342cdd9
[  784.336674][T11703] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000004
[  784.336686][T11703] RBP: 00007f67a167e090 R08: 0000000000000000 R09: 0000000000000000
[  784.336697][T11703] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  784.336708][T11703] R13: 00007f67a36a6038 R14: 00007f67a36a5fa0 R15: 00007ffdd2252db8
[  784.336736][T11703]  </TASK>
[  784.742198][T11712] FAULT_INJECTION: forcing a failure.
[  784.742198][T11712] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  784.742232][T11712] CPU: 0 UID: 0 PID: 11712 Comm: syz.4.1915 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  784.742258][T11712] Tainted: [L]=SOFTLOCKUP
[  784.742265][T11712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  784.742276][T11712] Call Trace:
[  784.742283][T11712]  <TASK>
[  784.742292][T11712]  dump_stack_lvl+0xe8/0x150
[  784.742327][T11712]  should_fail_ex+0x46b/0x600
[  784.742361][T11712]  _copy_to_user+0x31/0xb0
[  784.742384][T11712]  bpf_verifier_vlog+0x3ba/0x8f0
[  784.742418][T11712]  __btf_verifier_log+0xe2/0x140
[  784.742445][T11712]  ? __pfx___btf_verifier_log+0x10/0x10
[  784.742465][T11712]  ? __might_fault+0xaf/0x130
[  784.742493][T11712]  ? btf_parse_hdr+0x1e1/0x850
[  784.742522][T11712]  btf_parse_hdr+0x311/0x850
[  784.742552][T11712]  btf_new_fd+0x387/0xdd0
[  784.742579][T11712]  ? __pfx_btf_new_fd+0x10/0x10
[  784.742599][T11712]  ? bpf_token_put+0x143/0x160
[  784.742623][T11712]  ? bpf_btf_load+0x126/0x190
[  784.742649][T11712]  __sys_bpf+0x4e5/0x950
[  784.742674][T11712]  ? __pfx___sys_bpf+0x10/0x10
[  784.742693][T11712]  ? rt_mutex_slowunlock+0x1cb/0x300
[  784.742733][T11712]  ? ksys_write+0x248/0x270
[  784.742756][T11712]  ? __pfx_ksys_write+0x10/0x10
[  784.742782][T11712]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.742802][T11712]  __x64_sys_bpf+0x7c/0x90
[  784.742821][T11712]  do_syscall_64+0x15f/0xf80
[  784.742839][T11712]  ? trace_irq_disable+0x3b/0x140
[  784.742860][T11712]  ? clear_bhb_loop+0x40/0x90
[  784.742884][T11712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.742903][T11712] RIP: 0033:0x7fbef7abcdd9
[  784.742921][T11712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  784.742939][T11712] RSP: 002b:00007fbef5d0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  784.742958][T11712] RAX: ffffffffffffffda RBX: 00007fbef7d35fa0 RCX: 00007fbef7abcdd9
[  784.742972][T11712] RDX: 0000000000000028 RSI: 00002000000005c0 RDI: 0000000000000012
[  784.742988][T11712] RBP: 00007fbef5d0e090 R08: 0000000000000000 R09: 0000000000000000
[  784.743000][T11712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  784.743011][T11712] R13: 00007fbef7d36038 R14: 00007fbef7d35fa0 R15: 00007fffbce59488
[  784.743043][T11712]  </TASK>
[  785.044502][    C1] Adjusting tsc more than 11% (6672144 vs 8464090)
[  785.094936][T11716] FAULT_INJECTION: forcing a failure.
[  785.094936][T11716] name failslab, interval 1, probability 0, space 0, times 0
[  785.094959][T11716] CPU: 1 UID: 0 PID: 11716 Comm: syz.0.1917 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  785.094974][T11716] Tainted: [L]=SOFTLOCKUP
[  785.094978][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  785.094985][T11716] Call Trace:
[  785.094989][T11716]  <TASK>
[  785.094994][T11716]  dump_stack_lvl+0xe8/0x150
[  785.095011][T11716]  should_fail_ex+0x46b/0x600
[  785.095030][T11716]  should_failslab+0xa8/0x100
[  785.095044][T11716]  __kmalloc_cache_noprof+0x84/0x690
[  785.095056][T11716]  ? percpu_ref_get_many+0x19/0x140
[  785.095068][T11716]  ? alloc_mnt_ns+0xb3/0x2c0
[  785.095085][T11716]  alloc_mnt_ns+0xb3/0x2c0
[  785.095101][T11716]  copy_mnt_ns+0x2d4/0xcb0
[  785.095119][T11716]  ? __pfx_copy_mnt_ns+0x10/0x10
[  785.095135][T11716]  ? kmem_cache_alloc_noprof+0x388/0x680
[  785.095146][T11716]  ? create_new_namespaces+0x33/0x6a0
[  785.095160][T11716]  create_new_namespaces+0xcf/0x6a0
[  785.095172][T11716]  ? bpf_lsm_capable+0x9/0x20
[  785.095184][T11716]  ? security_capable+0x7e/0x2c0
[  785.095203][T11716]  unshare_nsproxy_namespaces+0x149/0x190
[  785.095215][T11716]  ksys_unshare+0x57d/0x9f0
[  785.095233][T11716]  ? __pfx_ksys_unshare+0x10/0x10
[  785.095245][T11716]  ? __pfx_ksys_write+0x10/0x10
[  785.095260][T11716]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  785.095271][T11716]  __x64_sys_unshare+0x38/0x50
[  785.095283][T11716]  do_syscall_64+0x15f/0xf80
[  785.095293][T11716]  ? trace_irq_disable+0x3b/0x140
[  785.095306][T11716]  ? clear_bhb_loop+0x40/0x90
[  785.095318][T11716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  785.095328][T11716] RIP: 0033:0x7f8bfcb5cdd9
[  785.095338][T11716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  785.095347][T11716] RSP: 002b:00007f8bfadae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  785.095358][T11716] RAX: ffffffffffffffda RBX: 00007f8bfcdd5fa0 RCX: 00007f8bfcb5cdd9
[  785.095366][T11716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400
[  785.095372][T11716] RBP: 00007f8bfadae090 R08: 0000000000000000 R09: 0000000000000000
[  785.095379][T11716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  785.095385][T11716] R13: 00007f8bfcdd6038 R14: 00007f8bfcdd5fa0 R15: 00007ffc3f745578
[  785.095401][T11716]  </TASK>
[  786.712936][T10363] Bluetooth: hci0: command tx timeout
[  787.795324][T11753] FAULT_INJECTION: forcing a failure.
[  787.795324][T11753] name failslab, interval 1, probability 0, space 0, times 0
[  787.795359][T11753] CPU: 0 UID: 0 PID: 11753 Comm: syz.4.1927 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  787.795385][T11753] Tainted: [L]=SOFTLOCKUP
[  787.795392][T11753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  787.795404][T11753] Call Trace:
[  787.795411][T11753]  <TASK>
[  787.795420][T11753]  dump_stack_lvl+0xe8/0x150
[  787.795447][T11753]  should_fail_ex+0x46b/0x600
[  787.795481][T11753]  should_failslab+0xa8/0x100
[  787.795505][T11753]  __kmalloc_cache_noprof+0x84/0x690
[  787.795526][T11753]  ? sctp_add_bind_addr+0x8c/0x370
[  787.795558][T11753]  sctp_add_bind_addr+0x8c/0x370
[  787.795588][T11753]  sctp_copy_local_addr_list+0x314/0x4f0
[  787.795617][T11753]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  787.795644][T11753]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  787.795675][T11753]  ? sctp_v4_is_any+0x35/0x60
[  787.795692][T11753]  ? sctp_copy_one_addr+0x93/0x360
[  787.795725][T11753]  sctp_bind_addr_copy+0xb3/0x3c0
[  787.795752][T11753]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  787.795779][T11753]  sctp_connect_new_asoc+0x2ff/0x6b0
[  787.795804][T11753]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  787.795827][T11753]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  787.795848][T11753]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  787.795868][T11753]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  787.795890][T11753]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  787.795911][T11753]  ? security_sctp_bind_connect+0x7e/0x2c0
[  787.795939][T11753]  sctp_sendmsg+0x14c0/0x2990
[  787.795976][T11753]  ? __pfx_sctp_sendmsg+0x10/0x10
[  787.796003][T11753]  ? __might_fault+0xaf/0x130
[  787.796033][T11753]  ? __might_fault+0xaf/0x130
[  787.796065][T11753]  ? sock_rps_record_flow+0x19/0x350
[  787.796084][T11753]  ? __pfx_inet_sendmsg+0x10/0x10
[  787.796106][T11753]  ? inet_sendmsg+0x2f4/0x370
[  787.796124][T11753]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  787.796144][T11753]  ? __pfx_inet_sendmsg+0x10/0x10
[  787.796165][T11753]  __sys_sendto+0x5f1/0x710
[  787.796193][T11753]  ? __pfx___sys_sendto+0x10/0x10
[  787.796241][T11753]  ? ksys_write+0x248/0x270
[  787.796264][T11753]  ? __pfx_ksys_write+0x10/0x10
[  787.796291][T11753]  __x64_sys_sendto+0xde/0x100
[  787.796312][T11753]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  787.796333][T11753]  do_syscall_64+0x15f/0xf80
[  787.796349][T11753]  ? trace_irq_disable+0x3b/0x140
[  787.796370][T11753]  ? clear_bhb_loop+0x40/0x90
[  787.796393][T11753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  787.796410][T11753] RIP: 0033:0x7fbef7abcdd9
[  787.796427][T11753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  787.796443][T11753] RSP: 002b:00007fbef5d0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  787.796463][T11753] RAX: ffffffffffffffda RBX: 00007fbef7d35fa0 RCX: 00007fbef7abcdd9
[  787.796482][T11753] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000004
[  787.796494][T11753] RBP: 00007fbef5d0e090 R08: 0000200000000240 R09: 000000000000001c
[  787.796508][T11753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  787.796519][T11753] R13: 00007fbef7d36038 R14: 00007fbef7d35fa0 R15: 00007fffbce59488
[  787.796550][T11753]  </TASK>
[  788.948173][T10363] Bluetooth: hci0: command tx timeout
[  789.433661][ T2968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.112879][T10363] Bluetooth: hci0: command tx timeout
[  791.925714][ T2968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.069219][T11804] FAULT_INJECTION: forcing a failure.
[  793.069219][T11804] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  793.069256][T11804] CPU: 1 UID: 0 PID: 11804 Comm: syz.5.1940 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  793.069287][T11804] Tainted: [L]=SOFTLOCKUP
[  793.069294][T11804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  793.069306][T11804] Call Trace:
[  793.069314][T11804]  <TASK>
[  793.069323][T11804]  dump_stack_lvl+0xe8/0x150
[  793.069355][T11804]  should_fail_ex+0x46b/0x600
[  793.069388][T11804]  _copy_to_user+0x31/0xb0
[  793.069412][T11804]  simple_read_from_buffer+0xe1/0x170
[  793.069444][T11804]  proc_fail_nth_read+0x1be/0x230
[  793.069474][T11804]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  793.069504][T11804]  ? rw_verify_area+0x2ac/0x4e0
[  793.069524][T11804]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  793.069559][T11804]  vfs_read+0x212/0xa80
[  793.069588][T11804]  ? __pfx_vfs_read+0x10/0x10
[  793.069611][T11804]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  793.069638][T11804]  ? lockdep_hardirqs_on+0x7a/0x110
[  793.069666][T11804]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  793.069691][T11804]  ? mutex_lock_nested+0x152/0x1d0
[  793.069713][T11804]  ? fdget_pos+0x252/0x320
[  793.069739][T11804]  ksys_read+0x156/0x270
[  793.069763][T11804]  ? __pfx_ksys_read+0x10/0x10
[  793.069790][T11804]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  793.069809][T11804]  do_syscall_64+0x15f/0xf80
[  793.069826][T11804]  ? trace_irq_disable+0x3b/0x140
[  793.069845][T11804]  ? clear_bhb_loop+0x40/0x90
[  793.069866][T11804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  793.069883][T11804] RIP: 0033:0x7f67a33ed60e
[  793.069899][T11804] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  793.069915][T11804] RSP: 002b:00007f67a167dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  793.069933][T11804] RAX: ffffffffffffffda RBX: 00007f67a167e6c0 RCX: 00007f67a33ed60e
[  793.069946][T11804] RDX: 000000000000000f RSI: 00007f67a167e0a0 RDI: 0000000000000003
[  793.069957][T11804] RBP: 00007f67a167e090 R08: 0000000000000000 R09: 0000000000000000
[  793.069969][T11804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  793.069981][T11804] R13: 00007f67a36a6038 R14: 00007f67a36a5fa0 R15: 00007ffdd2252db8
[  793.070012][T11804]  </TASK>
[  793.124232][ T2968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.240199][T10363] Bluetooth: hci0: command tx timeout
[  794.822301][T11819] ubi: mtd0 is already attached to ubi31
[  795.990566][T11828] devpts: Bad value for 'max'
[  796.197270][ T2968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.977316][ T5728] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  797.327064][ T5728] usb 5-1: Using ep0 maxpacket: 8
[  797.330538][ T5728] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  797.330562][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.333977][T11819] netlink: 'syz.0.1946': attribute type 9 has an invalid length.
[  797.432300][ T5728] pvrusb2: Hardware description: Terratec Grabster AV400
[  797.432318][ T5728] pvrusb2: **********
[  797.432326][ T5728] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  797.436282][ T5728] pvrusb2: Important functionality might not be entirely working.
[  797.436297][ T5728] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  797.436309][ T5728] pvrusb2: **********
[  797.768304][T11843] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1949'.
[  798.475966][ T5613] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  798.717476][ T5613] usb 1-1: Using ep0 maxpacket: 32
[  798.723447][ T5613] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  798.723472][ T5613] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  798.749771][ T5613] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  798.749800][ T5613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  798.749819][ T5613] usb 1-1: Product: syz
[  798.749829][ T5613] usb 1-1: Manufacturer: syz
[  798.749837][ T5613] usb 1-1: SerialNumber: syz
[  798.893777][ T5613] usb 1-1: config 0 descriptor??
[  799.183833][ T5729] usb 1-1: USB disconnect, device number 48
[  799.314442][ T2374] pvrusb2: Invalid write control endpoint
[  799.336024][ T5728] usb 5-1: USB disconnect, device number 37
[  799.691704][ T2374] pvrusb2: Invalid write control endpoint
[  799.691719][ T2374] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  799.691729][ T2374] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  799.691737][ T2374] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  799.691746][ T2374] pvrusb2: Device being rendered inoperable
[  799.691781][ T2374] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  799.691828][ T2374] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  799.702269][ T2374] pvrusb2: Attached sub-driver cx25840
[  799.702284][ T2374] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  799.702293][ T2374] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  800.455895][   T36] kauditd_printk_skb: 44 callbacks suppressed
[  800.455913][   T36] audit: type=1800 audit(1777890319.671:492): pid=11872 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.2.1954" name="/" dev="pipefs" ino=4688 res=0 errno=0
[  800.661685][T11881] netlink: 'syz.4.1956': attribute type 1 has an invalid length.
[  800.661708][T11881] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1956'.
[  802.804928][ T2968] bridge_slave_1: left allmulticast mode
[  802.804962][ T2968] bridge_slave_1: left promiscuous mode
[  802.805210][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.981830][ T2968] bridge_slave_0: left allmulticast mode
[  802.981852][ T2968] bridge_slave_0: left promiscuous mode
[  803.016835][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state
[  805.222457][ T5729] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  805.402460][ T5729] usb 5-1: Using ep0 maxpacket: 32
[  805.406902][ T5729] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  805.406929][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.406950][ T5729] usb 5-1: Product: syz
[  805.406964][ T5729] usb 5-1: Manufacturer: syz
[  805.406978][ T5729] usb 5-1: SerialNumber: syz
[  805.414066][ T5729] usb 5-1: config 0 descriptor??
[  805.634820][ T8324] usb 5-1: USB disconnect, device number 38
[  806.528909][T11942] overlayfs: failed to clone upperpath
[  807.098383][ T2968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  807.165918][ T2968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  807.219101][ T2968] bond0 (unregistering): Released all slaves
[  807.629580][T11696] bridge0: port 1(bridge_slave_0) entered blocking state
[  807.629657][T11696] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.629783][T11696] bridge_slave_0: entered allmulticast mode
[  807.632964][T11696] bridge_slave_0: entered promiscuous mode
[  807.641827][T11696] bridge0: port 2(bridge_slave_1) entered blocking state
[  807.641938][T11696] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.654353][T11696] bridge_slave_1: entered allmulticast mode
[  807.658939][T11696] bridge_slave_1: entered promiscuous mode
[  808.064806][T11696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  808.394646][T11965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1976'.
[  808.991476][T11696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  809.532162][T11696] team0: Port device team_slave_0 added
[  809.567423][T11696] team0: Port device team_slave_1 added
[  810.275980][T11992] netlink: 'syz.0.1980': attribute type 1 has an invalid length.
[  810.276002][T11992] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1980'.
[  810.397000][T11696] batman_adv: batadv0: Adding interface: batadv_slave_0
[  810.397016][T11696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  810.397042][T11696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  810.503761][ T8324] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  810.673807][ T8324] usb 5-1: Using ep0 maxpacket: 32
[  810.678054][ T8324] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  810.678082][ T8324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.678103][ T8324] usb 5-1: Product: syz
[  810.678118][ T8324] usb 5-1: Manufacturer: syz
[  810.678132][ T8324] usb 5-1: SerialNumber: syz
[  810.681252][ T8324] usb 5-1: config 0 descriptor??
[  811.255429][ T8324] usb 5-1: USB disconnect, device number 39
[  811.298481][T11696] batman_adv: batadv0: Adding interface: batadv_slave_1
[  811.298497][T11696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  811.298524][T11696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  811.413847][ T5833] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  812.623264][ T5833] usb 1-1: unable to get BOS descriptor or descriptor too short
[  812.623787][ T5833] usb 1-1: not running at top speed; connect to a high speed hub
[  812.641404][ T5833] usb 1-1: config 39 has an invalid interface number: 165 but max is 0
[  812.641430][ T5833] usb 1-1: config 39 has no interface number 0
[  812.641478][ T5833] usb 1-1: config 39 interface 165 has no altsetting 0
[  812.666658][ T5833] usb 1-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=da.9f
[  812.666674][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.666685][ T5833] usb 1-1: Product: syz
[  812.666692][ T5833] usb 1-1: Manufacturer: syz
[  812.666699][ T5833] usb 1-1: SerialNumber: syz
[  812.884142][ T2968] hsr_slave_0: left promiscuous mode
[  812.928119][ T2968] hsr_slave_1: left promiscuous mode
[  812.929132][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  812.929157][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_0
[  812.980418][ T5833] usb 1-1: USB disconnect, device number 49
[  813.091439][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  813.091467][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_1
[  813.348886][ T2968] veth1_macvtap: left promiscuous mode
[  813.348985][ T2968] veth0_macvtap: left promiscuous mode
[  813.349216][ T2968] veth1_vlan: left promiscuous mode
[  813.367655][ T2968] veth0_vlan: left promiscuous mode
[  813.394538][T12021] FAULT_INJECTION: forcing a failure.
[  813.394538][T12021] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  813.394572][T12021] CPU: 1 UID: 0 PID: 12021 Comm: syz.4.1990 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  813.394599][T12021] Tainted: [L]=SOFTLOCKUP
[  813.394606][T12021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  813.394617][T12021] Call Trace:
[  813.394626][T12021]  <TASK>
[  813.394634][T12021]  dump_stack_lvl+0xe8/0x150
[  813.394661][T12021]  should_fail_ex+0x46b/0x600
[  813.394694][T12021]  _copy_from_user+0x2d/0xb0
[  813.394715][T12021]  copy_from_bpfptr+0x5c/0x90
[  813.394736][T12021]  bpf_prog_load+0xad5/0x1a10
[  813.394769][T12021]  ? __pfx_bpf_prog_load+0x10/0x10
[  813.394790][T12021]  ? __might_fault+0xaf/0x130
[  813.394827][T12021]  ? bpf_lsm_bpf+0x9/0x20
[  813.394847][T12021]  ? security_bpf+0x7e/0x2d0
[  813.394874][T12021]  __sys_bpf+0x618/0x950
[  813.394898][T12021]  ? __pfx___sys_bpf+0x10/0x10
[  813.394917][T12021]  ? rt_mutex_slowunlock+0x1cb/0x300
[  813.394963][T12021]  ? ksys_write+0x248/0x270
[  813.394985][T12021]  ? __pfx_ksys_write+0x10/0x10
[  813.395009][T12021]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.395030][T12021]  __x64_sys_bpf+0x7c/0x90
[  813.395050][T12021]  do_syscall_64+0x15f/0xf80
[  813.395068][T12021]  ? trace_irq_disable+0x3b/0x140
[  813.395089][T12021]  ? clear_bhb_loop+0x40/0x90
[  813.395112][T12021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.395131][T12021] RIP: 0033:0x7fbef7abcdd9
[  813.395148][T12021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  813.395165][T12021] RSP: 002b:00007fbef5d0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  813.395185][T12021] RAX: ffffffffffffffda RBX: 00007fbef7d35fa0 RCX: 00007fbef7abcdd9
[  813.395199][T12021] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[  813.395212][T12021] RBP: 00007fbef5d0e090 R08: 0000000000000000 R09: 0000000000000000
[  813.395224][T12021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  813.395236][T12021] R13: 00007fbef7d36038 R14: 00007fbef7d35fa0 R15: 00007fffbce59488
[  813.395267][T12021]  </TASK>
[  813.678118][T12025] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  814.504040][ T5729] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  814.679577][ T5729] usb 1-1: Using ep0 maxpacket: 32
[  814.687420][ T5729] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  814.687449][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.687470][ T5729] usb 1-1: Product: syz
[  814.687484][ T5729] usb 1-1: Manufacturer: syz
[  814.687499][ T5729] usb 1-1: SerialNumber: syz
[  814.700176][ T5729] usb 1-1: config 0 descriptor??
[  814.984006][    T9] usb 1-1: USB disconnect, device number 50
[  816.435847][ T2968] team0 (unregistering): Port device team_slave_1 removed
[  816.487188][ T2968] team0 (unregistering): Port device team_slave_0 removed
[  816.942238][T11696] hsr_slave_0: entered promiscuous mode
[  816.951162][T11696] hsr_slave_1: entered promiscuous mode
[  818.649067][T12057] netlink: 'syz.4.1998': attribute type 1 has an invalid length.
[  819.381351][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  819.381420][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  820.137442][T12057] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  820.984219][    T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  821.171099][    T9] usb 1-1: Using ep0 maxpacket: 32
[  821.174265][ T5729] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  821.205925][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  821.205965][    T9] usb 1-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[  821.205989][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  821.251612][    T9] usb 1-1: config 0 descriptor??
[  821.344135][ T5729] usb 5-1: Using ep0 maxpacket: 32
[  821.347285][ T5729] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  821.347309][ T5729] usb 5-1: config 0 has no interface number 0
[  821.351150][ T5729] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  821.351177][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.351257][ T5729] usb 5-1: Product: syz
[  821.351273][ T5729] usb 5-1: Manufacturer: syz
[  821.351287][ T5729] usb 5-1: SerialNumber: syz
[  821.440988][ T5729] usb 5-1: config 0 descriptor??
[  821.509978][ T5729] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  821.510006][ T5729] usb 5-1: selecting invalid altsetting 1
[  821.510021][ T5729] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  821.543216][T12073] vti0: entered promiscuous mode
[  821.644939][ T5729] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  821.649582][ T5729] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  821.649635][ T5729] usb 5-1: media controller created
[  821.678814][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5
[  821.772198][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  821.896588][ T5729] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  821.896687][ T5729] zl10353_read_register: readreg error (reg=127, ret==-71)
[  821.897188][ T5729] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  822.153360][    T9] thrustmaster 0003:044F:B323.000C: unexpected long global item
[  822.162779][    T9] thrustmaster 0003:044F:B323.000C: parse failed
[  822.162854][    T9] thrustmaster 0003:044F:B323.000C: probe with driver thrustmaster failed with error -22
[  822.358705][ T5844] usb 1-1: USB disconnect, device number 51
[  822.371034][ T5729] usb 5-1: USB disconnect, device number 40
[  824.784240][ T5729] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  824.945183][ T5729] usb 1-1: Using ep0 maxpacket: 8
[  824.947636][ T5729] usb 1-1: descriptor type invalid, skip
[  825.054425][ T5729] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[  825.054461][ T5729] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  825.054489][ T5729] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  825.061214][ T5729] usb 1-1: language id specifier not provided by device, defaulting to English
[  825.268726][ T5729] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  825.268757][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.268777][ T5729] usb 1-1: Product: Ñ‹
[  825.268792][ T5729] usb 1-1: Manufacturer: а
[  825.268806][ T5729] usb 1-1: SerialNumber: Ц
[  825.740828][T12096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  825.758603][T12096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  830.096505][ T5729] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  830.096565][ T5729] usb 1-1: MIDIStreaming interface descriptor not found
[  830.167113][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6
[  830.710300][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  830.781160][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  830.784171][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  830.814511][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  830.815380][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  831.045988][ T5729] usb 1-1: USB disconnect, device number 52
[  832.974508][T10363] Bluetooth: hci1: command tx timeout
[  832.993485][T10982] udevd[10982]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  835.054415][T10363] Bluetooth: hci1: command tx timeout
[  837.212799][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7
[  837.333776][T10363] Bluetooth: hci1: command tx timeout
[  839.476940][ T8324] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  839.572265][T10363] Bluetooth: hci1: command tx timeout
[  839.688161][ T8324] usb 5-1: Using ep0 maxpacket: 32
[  839.690363][ T8324] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  839.690386][ T8324] usb 5-1: config 0 has no interface number 0
[  839.692940][ T8324] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  839.692968][ T8324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.692990][ T8324] usb 5-1: Product: syz
[  839.693004][ T8324] usb 5-1: Manufacturer: syz
[  839.693019][ T8324] usb 5-1: SerialNumber: syz
[  839.807772][ T8324] usb 5-1: config 0 descriptor??
[  839.898346][ T8324] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  839.898367][ T8324] usb 5-1: selecting invalid altsetting 1
[  839.898376][ T8324] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  839.936022][ T8324] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  839.936295][ T8324] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  839.938654][ T8324] usb 5-1: media controller created
[  840.000059][ T8324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  840.071425][T12181] kthread_run failed with err -4
[  840.765327][ T8324] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  840.765387][ T8324] zl10353_read_register: readreg error (reg=127, ret==-71)
[  840.765827][ T8324] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  841.207658][ T8324] usb 5-1: USB disconnect, device number 41
[  842.470231][T12198] FAULT_INJECTION: forcing a failure.
[  842.470231][T12198] name failslab, interval 1, probability 0, space 0, times 0
[  842.470276][T12198] CPU: 0 UID: 0 PID: 12198 Comm: syz.5.2021 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  842.470303][T12198] Tainted: [L]=SOFTLOCKUP
[  842.470310][T12198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  842.470321][T12198] Call Trace:
[  842.470329][T12198]  <TASK>
[  842.470338][T12198]  dump_stack_lvl+0xe8/0x150
[  842.470366][T12198]  should_fail_ex+0x46b/0x600
[  842.470400][T12198]  should_failslab+0xa8/0x100
[  842.470428][T12198]  __kmalloc_noprof+0xdf/0x7b0
[  842.470450][T12198]  ? __pfx_nf_confirm+0x10/0x10
[  842.470471][T12198]  ? ___neigh_create+0x722/0x2350
[  842.470496][T12198]  ? nf_hook+0xa1/0x3a0
[  842.470522][T12198]  ___neigh_create+0x722/0x2350
[  842.470557][T12198]  ? __ipv6_neigh_lookup_noref+0x531/0x710
[  842.470594][T12198]  ip6_finish_output2+0x729/0x1430
[  842.470627][T12198]  ? ip6_output+0x126/0x550
[  842.470648][T12198]  ip6_output+0x340/0x550
[  842.470670][T12198]  ? ip6_send_skb+0x10f/0x390
[  842.470693][T12198]  ip6_send_skb+0x1d5/0x390
[  842.470719][T12198]  udp_v6_send_skb+0xaca/0x1350
[  842.470759][T12198]  udpv6_sendmsg+0x1dfc/0x25c0
[  842.470796][T12198]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  842.470825][T12198]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  842.470853][T12198]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  842.470897][T12198]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  842.470926][T12198]  ? inet_send_prepare+0x1b9/0x270
[  842.470951][T12198]  ? inet6_sendmsg+0xe4/0x120
[  842.470980][T12198]  ____sys_sendmsg+0x5aa/0x9c0
[  842.471007][T12198]  ? __pfx_____sys_sendmsg+0x10/0x10
[  842.471039][T12198]  ? import_iovec+0x73/0xa0
[  842.471064][T12198]  ___sys_sendmsg+0x2a5/0x360
[  842.471084][T12198]  ? __lock_acquire+0x6b5/0x2cf0
[  842.471113][T12198]  ? __pfx____sys_sendmsg+0x10/0x10
[  842.471140][T12198]  ? kstrtouint+0x6e/0xe0
[  842.471194][T12198]  ? __fget_files+0x2a/0x420
[  842.471219][T12198]  ? __fget_files+0x3a6/0x420
[  842.471263][T12198]  __sys_sendmmsg+0x282/0x4e0
[  842.471290][T12198]  ? __pfx___sys_sendmmsg+0x10/0x10
[  842.471322][T12198]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  842.471361][T12198]  ? ksys_write+0x248/0x270
[  842.471385][T12198]  ? __pfx_ksys_write+0x10/0x10
[  842.471413][T12198]  __x64_sys_sendmmsg+0xa0/0xc0
[  842.471435][T12198]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  842.471456][T12198]  do_syscall_64+0x15f/0xf80
[  842.471473][T12198]  ? trace_irq_disable+0x3b/0x140
[  842.471495][T12198]  ? clear_bhb_loop+0x40/0x90
[  842.471519][T12198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  842.471538][T12198] RIP: 0033:0x7f67a342cdd9
[  842.471556][T12198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  842.471573][T12198] RSP: 002b:00007f67a167e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  842.471594][T12198] RAX: ffffffffffffffda RBX: 00007f67a36a5fa0 RCX: 00007f67a342cdd9
[  842.471608][T12198] RDX: 0000000000000002 RSI: 0000200000006b80 RDI: 0000000000000003
[  842.471621][T12198] RBP: 00007f67a167e090 R08: 0000000000000000 R09: 0000000000000000
[  842.471633][T12198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  842.471645][T12198] R13: 00007f67a36a6038 R14: 00007f67a36a5fa0 R15: 00007ffdd2252db8
[  842.471677][T12198]  </TASK>
[  842.579211][T10363] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5
[  844.765451][ T5728] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  844.957939][ T5728] usb 6-1: Using ep0 maxpacket: 8
[  844.968381][ T5728] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  844.968407][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  845.031030][ T5728] pvrusb2: Hardware description: Terratec Grabster AV400
[  845.031047][ T5728] pvrusb2: **********
[  845.031055][ T5728] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  845.031067][ T5728] pvrusb2: Important functionality might not be entirely working.
[  845.031075][ T5728] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  845.031086][ T5728] pvrusb2: **********
[  845.040350][T12117] bridge0: port 1(bridge_slave_0) entered blocking state
[  845.040568][T12117] bridge0: port 1(bridge_slave_0) entered disabled state
[  845.040778][T12117] bridge_slave_0: entered allmulticast mode
[  845.043699][T12117] bridge_slave_0: entered promiscuous mode
[  845.146976][T12117] bridge0: port 2(bridge_slave_1) entered blocking state
[  845.147186][T12117] bridge0: port 2(bridge_slave_1) entered disabled state
[  845.147388][T12117] bridge_slave_1: entered allmulticast mode
[  845.149921][T12117] bridge_slave_1: entered promiscuous mode
[  845.495256][T12117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  846.103158][T12117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  846.562099][ T5605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  846.612611][ T5605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  846.627491][ T5605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  846.681810][ T2374] pvrusb2: Invalid write control endpoint
[  846.691979][ T5605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  846.702242][ T5605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  846.795387][ T5728] usb 6-1: USB disconnect, device number 2
[  846.873041][T12220] FAULT_INJECTION: forcing a failure.
[  846.873041][T12220] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  846.873075][T12220] CPU: 0 UID: 0 PID: 12220 Comm: syz.4.2027 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  846.873100][T12220] Tainted: [L]=SOFTLOCKUP
[  846.873107][T12220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  846.873118][T12220] Call Trace:
[  846.873125][T12220]  <TASK>
[  846.873134][T12220]  dump_stack_lvl+0xe8/0x150
[  846.873160][T12220]  should_fail_ex+0x46b/0x600
[  846.873192][T12220]  _copy_to_user+0x31/0xb0
[  846.873214][T12220]  simple_read_from_buffer+0xe1/0x170
[  846.873245][T12220]  proc_fail_nth_read+0x1be/0x230
[  846.873274][T12220]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  846.873302][T12220]  ? rw_verify_area+0x2ac/0x4e0
[  846.873323][T12220]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  846.873348][T12220]  vfs_read+0x212/0xa80
[  846.873374][T12220]  ? __pfx_vfs_read+0x10/0x10
[  846.873397][T12220]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  846.873423][T12220]  ? lockdep_hardirqs_on+0x7a/0x110
[  846.873450][T12220]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  846.873474][T12220]  ? mutex_lock_nested+0x152/0x1d0
[  846.873494][T12220]  ? fdget_pos+0x252/0x320
[  846.873520][T12220]  ksys_read+0x156/0x270
[  846.873539][T12220]  ? tty_jobctrl_ioctl+0x557/0xb50
[  846.873566][T12220]  ? __pfx_ksys_read+0x10/0x10
[  846.873585][T12220]  ? __pfx_tty_ioctl+0x10/0x10
[  846.873612][T12220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.873632][T12220]  do_syscall_64+0x15f/0xf80
[  846.873648][T12220]  ? trace_irq_disable+0x3b/0x140
[  846.873670][T12220]  ? clear_bhb_loop+0x40/0x90
[  846.873693][T12220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.873712][T12220] RIP: 0033:0x7fbef7a7d60e
[  846.873730][T12220] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  846.873745][T12220] RSP: 002b:00007fbef5d0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  846.873764][T12220] RAX: ffffffffffffffda RBX: 00007fbef5d0e6c0 RCX: 00007fbef7a7d60e
[  846.873777][T12220] RDX: 000000000000000f RSI: 00007fbef5d0e0a0 RDI: 0000000000000004
[  846.873789][T12220] RBP: 00007fbef5d0e090 R08: 0000000000000000 R09: 0000000000000000
[  846.873800][T12220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  846.873818][T12220] R13: 00007fbef7d36038 R14: 00007fbef7d35fa0 R15: 00007fffbce59488
[  846.873848][T12220]  </TASK>
[  847.762682][ T2374] pvrusb2: Invalid write control endpoint
[  847.762696][ T2374] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  847.762707][ T2374] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  847.762715][ T2374] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  847.762725][ T2374] pvrusb2: Device being rendered inoperable
[  847.762760][ T2374] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  847.762805][ T2374] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  847.763830][ T2374] pvrusb2: Attached sub-driver cx25840
[  847.763843][ T2374] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  847.763853][ T2374] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  848.142369][T12117] team0: Port device team_slave_0 added
[  848.166778][T12117] team0: Port device team_slave_1 added
[  848.339767][T12117] batman_adv: batadv0: Adding interface: batadv_slave_0
[  848.339784][T12117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  848.339809][T12117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  848.397753][T12117] batman_adv: batadv0: Adding interface: batadv_slave_1
[  848.397769][T12117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  848.397795][T12117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  848.444730][ T5729] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  848.606148][ T5729] usb 5-1: Using ep0 maxpacket: 32
[  848.609735][ T5729] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  848.609762][ T5729] usb 5-1: config 0 has no interface number 0
[  848.614517][ T5729] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  848.614534][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.614545][ T5729] usb 5-1: Product: syz
[  848.614552][ T5729] usb 5-1: Manufacturer: syz
[  848.614560][ T5729] usb 5-1: SerialNumber: syz
[  848.681078][ T5729] usb 5-1: config 0 descriptor??
[  848.697754][ T5729] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  848.697783][ T5729] usb 5-1: selecting invalid altsetting 1
[  848.697799][ T5729] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  848.790442][T10363] Bluetooth: hci6: command tx timeout
[  848.858087][ T5729] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  848.859300][ T5729] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  848.859351][ T5729] usb 5-1: media controller created
[  848.939184][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  849.049263][T12117] hsr_slave_0: entered promiscuous mode
[  849.064235][T12117] hsr_slave_1: entered promiscuous mode
[  849.082610][T12117] debugfs: 'hsr0' already exists in 'hsr'
[  849.082644][T12117] Cannot create hsr debugfs directory
[  849.168107][ T5729] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  849.168163][ T5729] zl10353_read_register: readreg error (reg=127, ret==-71)
[  849.176496][ T5729] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  849.741870][ T5729] usb 5-1: USB disconnect, device number 42
[  850.418143][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'.
[  850.418166][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'.
[  850.418190][T12246] netlink: 'syz.0.2034': attribute type 14 has an invalid length.
[  850.418203][T12246] netlink: 'syz.0.2034': attribute type 13 has an invalid length.
[  850.873941][T10363] Bluetooth: hci6: command tx timeout
[  852.026889][ T5728] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  852.176101][ T5729] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  852.326266][ T5729] usb 1-1: Using ep0 maxpacket: 32
[  852.353127][ T5729] usb 1-1: config 0 interface 0 has no altsetting 0
[  852.353167][ T5729] usb 1-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[  852.353191][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.418444][ T5729] usb 1-1: config 0 descriptor??
[  852.536699][ T5728] usb 5-1: Using ep0 maxpacket: 8
[  852.538621][ T5728] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  852.538649][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.553642][ T5728] pvrusb2: Hardware description: Terratec Grabster AV400
[  852.553660][ T5728] pvrusb2: **********
[  852.553667][ T5728] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  852.553679][ T5728] pvrusb2: Important functionality might not be entirely working.
[  852.553689][ T5728] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  852.553701][ T5728] pvrusb2: **********
[  852.961791][T10363] Bluetooth: hci6: command tx timeout
[  853.078010][ T5729] thrustmaster 0003:044F:B323.000D: unexpected long global item
[  853.079466][ T5729] thrustmaster 0003:044F:B323.000D: parse failed
[  853.079541][ T5729] thrustmaster 0003:044F:B323.000D: probe with driver thrustmaster failed with error -22
[  853.343483][ T5729] usb 1-1: USB disconnect, device number 53
[  853.898810][ T2374] pvrusb2: Invalid write control endpoint
[  854.169228][ T5728] usb 5-1: USB disconnect, device number 43
[  854.639709][ T5729] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  854.833784][ T2374] pvrusb2: Invalid write control endpoint
[  854.833800][ T2374] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  854.833810][ T2374] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  854.833818][ T2374] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  854.833828][ T2374] pvrusb2: Device being rendered inoperable
[  854.894233][ T2374] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  854.894288][ T2374] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  854.895347][ T2374] pvrusb2: Attached sub-driver cx25840
[  854.895359][ T2374] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  854.895369][ T2374] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  854.910225][ T5729] usb 1-1: Using ep0 maxpacket: 32
[  854.920546][ T5729] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  854.920572][ T5729] usb 1-1: config 0 has no interface number 0
[  854.996179][ T5729] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  854.996211][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.996232][ T5729] usb 1-1: Product: syz
[  854.996247][ T5729] usb 1-1: Manufacturer: syz
[  854.996263][ T5729] usb 1-1: SerialNumber: syz
[  855.040249][T10363] Bluetooth: hci6: command tx timeout
[  855.072412][ T5729] usb 1-1: config 0 descriptor??
[  855.095648][ T5729] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  855.095675][ T5729] usb 1-1: selecting invalid altsetting 1
[  855.095693][ T5729] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  855.555021][ T5729] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  855.555263][ T5729] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  855.555291][ T5729] usb 1-1: media controller created
[  855.692723][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  855.907299][ T5729] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  855.907354][ T5729] zl10353_read_register: readreg error (reg=127, ret==-71)
[  855.907880][ T5729] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  856.211482][ T5729] usb 1-1: USB disconnect, device number 54
[  856.285228][T12287] dlm: no local IP address has been set
[  856.285245][T12287] dlm: cannot start dlm midcomms -107
[  856.945204][T12294] FAULT_INJECTION: forcing a failure.
[  856.945204][T12294] name failslab, interval 1, probability 0, space 0, times 0
[  856.945254][T12294] CPU: 0 UID: 0 PID: 12294 Comm: syz.4.2046 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  856.945280][T12294] Tainted: [L]=SOFTLOCKUP
[  856.945287][T12294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  856.945299][T12294] Call Trace:
[  856.945307][T12294]  <TASK>
[  856.945315][T12294]  dump_stack_lvl+0xe8/0x150
[  856.945343][T12294]  should_fail_ex+0x46b/0x600
[  856.945376][T12294]  should_failslab+0xa8/0x100
[  856.945400][T12294]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[  856.945421][T12294]  ? __alloc_skb+0x1d0/0x7d0
[  856.945438][T12294]  ? lockdep_hardirqs_on+0x7a/0x110
[  856.945470][T12294]  __alloc_skb+0x1d0/0x7d0
[  856.945494][T12294]  netlink_sendmsg+0x5d4/0xb40
[  856.945528][T12294]  ? __pfx_netlink_sendmsg+0x10/0x10
[  856.945550][T12294]  ? unwind_get_return_address+0x4d/0x90
[  856.945578][T12294]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  856.945602][T12294]  ____sys_sendmsg+0x94c/0x9c0
[  856.945629][T12294]  ? __pfx_____sys_sendmsg+0x10/0x10
[  856.945665][T12294]  ? import_iovec+0x73/0xa0
[  856.945690][T12294]  ___sys_sendmsg+0x2a5/0x360
[  856.945710][T12294]  ? __lock_acquire+0x6b5/0x2cf0
[  856.945739][T12294]  ? __pfx____sys_sendmsg+0x10/0x10
[  856.945795][T12294]  ? __fget_files+0x2a/0x420
[  856.945821][T12294]  ? __fget_files+0x3a6/0x420
[  856.945856][T12294]  __x64_sys_sendmsg+0x1c3/0x2a0
[  856.945880][T12294]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  856.945910][T12294]  ? __pfx_ksys_write+0x10/0x10
[  856.945940][T12294]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.945961][T12294]  do_syscall_64+0x15f/0xf80
[  856.945978][T12294]  ? trace_irq_disable+0x3b/0x140
[  856.945999][T12294]  ? clear_bhb_loop+0x40/0x90
[  856.946022][T12294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.946040][T12294] RIP: 0033:0x7fbef7abcdd9
[  856.946058][T12294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  856.946074][T12294] RSP: 002b:00007fbef5d0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  856.946095][T12294] RAX: ffffffffffffffda RBX: 00007fbef7d35fa0 RCX: 00007fbef7abcdd9
[  856.946109][T12294] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  856.946122][T12294] RBP: 00007fbef5d0e090 R08: 0000000000000000 R09: 0000000000000000
[  856.946134][T12294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  856.946146][T12294] R13: 00007fbef7d36038 R14: 00007fbef7d35fa0 R15: 00007fffbce59488
[  856.946178][T12294]  </TASK>
[  857.032757][T12293] 9p: Bad value for 'wfdno'
[  857.891469][T10363] Bluetooth: hci5: command 0x0406 tx timeout
[  858.706860][ T5330] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  858.763603][ T8324] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  858.865640][ T5330] usb 5-1: Using ep0 maxpacket: 32
[  858.868795][ T5330] usb 5-1: config 0 interface 0 has no altsetting 0
[  858.868831][ T5330] usb 5-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[  858.868855][ T5330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.926064][ T5330] usb 5-1: config 0 descriptor??
[  858.971310][ T8324] usb 6-1: Using ep0 maxpacket: 8
[  858.973312][ T8324] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  858.973341][ T8324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.129869][ T8324] pvrusb2: Hardware description: Terratec Grabster AV400
[  859.129890][ T8324] pvrusb2: **********
[  859.129897][ T8324] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  859.129909][ T8324] pvrusb2: Important functionality might not be entirely working.
[  859.129918][ T8324] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  859.129930][ T8324] pvrusb2: **********
[  859.581822][ T5330] thrustmaster 0003:044F:B323.000E: unexpected long global item
[  859.605995][ T5330] thrustmaster 0003:044F:B323.000E: parse failed
[  859.606073][ T5330] thrustmaster 0003:044F:B323.000E: probe with driver thrustmaster failed with error -22
[  859.781726][ T5729] usb 5-1: USB disconnect, device number 44
[  861.285531][ T2374] pvrusb2: Invalid write control endpoint
[  861.395300][ T5729] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  861.523280][ T8324] usb 6-1: USB disconnect, device number 3
[  861.555459][ T5729] usb 5-1: Using ep0 maxpacket: 16
[  861.559377][ T5729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  861.559412][ T5729] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  861.559464][ T5729] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  861.559488][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.665587][ T5729] usb 5-1: config 0 descriptor??
[  862.152334][ T2374] pvrusb2: Invalid write control endpoint
[  862.152364][ T2374] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  862.152375][ T2374] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  862.152383][ T2374] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  862.152394][ T2374] pvrusb2: Device being rendered inoperable
[  862.152431][ T2374] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  862.152488][ T2374] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  862.255339][ T2374] pvrusb2: Attached sub-driver cx25840
[  862.255355][ T2374] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  862.255365][ T2374] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  862.283140][ T5729] konepure 0003:1E7D:2DBE.000F: unknown main item tag 0x0
[  862.283181][ T5729] konepure 0003:1E7D:2DBE.000F: unknown main item tag 0x0
[  862.283204][ T5729] konepure 0003:1E7D:2DBE.000F: unknown main item tag 0x0
[  862.283226][ T5729] konepure 0003:1E7D:2DBE.000F: unknown main item tag 0x0
[  862.283248][ T5729] konepure 0003:1E7D:2DBE.000F: unknown main item tag 0x0
[  862.283269][ T5729] konepure 0003:1E7D:2DBE.000F: unknown main item tag 0x0
[  862.283291][ T5729] konepure 0003:1E7D:2DBE.000F: unknown main item tag 0x0
[  862.283315][ T5729] konepure 0003:1E7D:2DBE.000F: unknown main item tag 0x0
[  862.283338][ T5729] konepure 0003:1E7D:2DBE.000F: unknown main item tag 0x0
[  862.283362][ T5729] konepure 0003:1E7D:2DBE.000F: unknown main item tag 0x0
[  862.384965][ T5729] konepure 0003:1E7D:2DBE.000F: hidraw0: USB HID vff.fe Device [HID 1e7d:2dbe] on usb-dummy_hcd.4-1/input0
[  862.478711][ T5729] usb 5-1: USB disconnect, device number 45
[  862.542543][T12215] bridge0: port 1(bridge_slave_0) entered blocking state
[  862.542871][T12215] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.543129][T12215] bridge_slave_0: entered allmulticast mode
[  862.568217][T12215] bridge_slave_0: entered promiscuous mode
[  862.596389][T12215] bridge0: port 2(bridge_slave_1) entered blocking state
[  862.596647][T12215] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.596883][T12215] bridge_slave_1: entered allmulticast mode
[  862.599701][T12215] bridge_slave_1: entered promiscuous mode
[  862.782621][T12333] geneve2: entered promiscuous mode
[  862.828460][T12215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  862.911524][T12331] fido_id[12331]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  862.925423][T12215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  863.056219][ T8324] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  863.285459][ T8324] usb 6-1: Using ep0 maxpacket: 32
[  863.329387][ T8324] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  863.329415][ T8324] usb 6-1: config 0 has no interface number 0
[  863.359842][ T8324] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  863.359872][ T8324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.359892][ T8324] usb 6-1: Product: syz
[  863.359906][ T8324] usb 6-1: Manufacturer: syz
[  863.359921][ T8324] usb 6-1: SerialNumber: syz
[  863.893762][ T8324] usb 6-1: config 0 descriptor??
[  864.899398][ T8324] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  864.899426][ T8324] usb 6-1: selecting invalid altsetting 1
[  864.899443][ T8324] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  864.987306][ T7160] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  864.991309][ T8324] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  864.991623][ T8324] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  864.991655][ T8324] usb 6-1: media controller created
[  865.007369][ T5729] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  865.116540][ T8324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  865.227524][ T5729] usb 1-1: Using ep0 maxpacket: 32
[  865.230695][ T5729] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  865.230728][ T5729] usb 1-1: config 0 interface 0 has no altsetting 0
[  865.230762][ T5729] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  865.230785][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.318461][ T5729] usb 1-1: config 0 descriptor??
[  865.347459][ T7160] usb 5-1: Using ep0 maxpacket: 8
[  865.349266][ T7160] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  865.349293][ T7160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.352750][ T8324] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  865.352801][ T8324] zl10353_read_register: readreg error (reg=127, ret==-71)
[  865.353265][ T8324] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  865.663821][T12215] team0: Port device team_slave_0 added
[  865.774075][T12215] team0: Port device team_slave_1 added
[  865.793096][ T7160] pvrusb2: Hardware description: Terratec Grabster AV400
[  865.793114][ T7160] pvrusb2: **********
[  865.793122][ T7160] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  865.793134][ T7160] pvrusb2: Important functionality might not be entirely working.
[  865.793143][ T7160] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  865.793154][ T7160] pvrusb2: **********
[  866.830653][ T5729] hid (null): report_id 0 is invalid
[  866.830687][ T5729] hid (null): global environment stack underflow
[  868.343844][ T2374] pvrusb2: Invalid write control endpoint
[  868.379181][   T36] audit: type=1800 audit(1778414675.234:493): pid=12370 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2063" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  870.142766][T12215] batman_adv: batadv0: Adding interface: batadv_slave_0
[  870.142786][T12215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  870.142814][T12215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  870.283981][ T7160] usb 5-1: USB disconnect, device number 46
[  870.434291][ T5729] hid_parser_main: 31 callbacks suppressed
[  870.434316][ T5729] uclogic 0003:5543:0042.0010: unknown main item tag 0x0
[  870.454124][ T5729] uclogic 0003:5543:0042.0010: reserved main item tag 0xe
[  870.454168][ T5729] uclogic 0003:5543:0042.0010: report_id 0 is invalid
[  870.454184][ T5729] uclogic 0003:5543:0042.0010: item 0 0 1 8 parsing failed
[  870.454996][ T5729] uclogic 0003:5543:0042.0010: parse failed
[  870.455100][ T5729] uclogic 0003:5543:0042.0010: probe with driver uclogic failed with error -22
[  870.468987][T12215] batman_adv: batadv0: Adding interface: batadv_slave_1
[  870.469003][T12215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  870.469029][T12215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  870.602285][ T8324] usb 6-1: USB disconnect, device number 4
[  870.690438][ T5729] usb 1-1: USB disconnect, device number 55
[  870.730516][ T2374] pvrusb2: Invalid write control endpoint
[  870.730531][ T2374] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  870.730542][ T2374] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  870.730550][ T2374] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  870.730560][ T2374] pvrusb2: Device being rendered inoperable
[  870.750180][ T2374] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  870.750391][ T2374] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  870.878962][ T2374] pvrusb2: Attached sub-driver cx25840
[  870.878980][ T2374] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  870.878991][ T2374] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  872.857378][ T5729] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  873.012744][ T5729] usb 1-1: Using ep0 maxpacket: 16
[  873.014857][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  873.014979][ T5729] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  873.015024][ T5729] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  873.015048][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.055722][ T5729] usb 1-1: config 0 descriptor??
[  873.070183][T12215] hsr_slave_0: entered promiscuous mode
[  873.100049][T12215] hsr_slave_1: entered promiscuous mode
[  873.157099][T12215] debugfs: 'hsr0' already exists in 'hsr'
[  873.157128][T12215] Cannot create hsr debugfs directory
[  873.628787][ T5729] uclogic 0003:28BD:0071.0011: interface is invalid, ignoring
[  875.572009][ T5729] usb 1-1: USB disconnect, device number 56
[  875.685915][ T5833] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  876.072925][ T5833] usb 6-1: Using ep0 maxpacket: 8
[  876.074727][ T5833] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  876.074765][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  876.116378][ T5833] pvrusb2: Hardware description: Terratec Grabster AV400
[  876.116395][ T5833] pvrusb2: **********
[  876.116403][ T5833] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  876.116416][ T5833] pvrusb2: Important functionality might not be entirely working.
[  876.116426][ T5833] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  876.116438][ T5833] pvrusb2: **********
[  877.393692][ T2374] pvrusb2: Invalid write control endpoint
[  877.625199][ T5833] usb 6-1: USB disconnect, device number 5
[  877.762393][ T2374] pvrusb2: Invalid write control endpoint
[  877.762408][ T2374] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  877.762418][ T2374] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  877.762426][ T2374] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  877.762437][ T2374] pvrusb2: Device being rendered inoperable
[  877.763018][ T2374] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  877.763068][ T2374] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  877.842400][ T2374] pvrusb2: Attached sub-driver cx25840
[  877.842416][ T2374] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  877.842427][ T2374] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  881.480611][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  881.480727][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  881.695796][ T5330] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  881.769442][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2084'.
[  881.769467][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'.
[  881.769492][T12465] netlink: 'syz.4.2084': attribute type 14 has an invalid length.
[  881.769506][T12465] netlink: 'syz.4.2084': attribute type 13 has an invalid length.
[  881.846028][ T5330] usb 6-1: Using ep0 maxpacket: 8
[  882.172964][ T5330] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  882.172995][ T5330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.260309][ T5330] pvrusb2: Hardware description: Terratec Grabster AV400
[  882.260327][ T5330] pvrusb2: **********
[  882.260335][ T5330] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  882.260347][ T5330] pvrusb2: Important functionality might not be entirely working.
[  882.260357][ T5330] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  882.260369][ T5330] pvrusb2: **********
[  883.627520][ T2374] pvrusb2: Invalid write control endpoint
[  883.669347][ T5330] usb 6-1: USB disconnect, device number 6
[  883.811981][ T2374] pvrusb2: Invalid write control endpoint
[  883.811997][ T2374] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  883.812007][ T2374] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  883.812015][ T2374] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  883.812026][ T2374] pvrusb2: Device being rendered inoperable
[  883.812101][ T2374] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  883.812148][ T2374] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  883.816358][ T2374] pvrusb2: Attached sub-driver cx25840
[  883.816372][ T2374] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  883.822451][ T2374] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  887.818976][ T5330] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  887.988846][ T5330] usb 5-1: device descriptor read/64, error -71
[  888.239301][ T5330] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  888.369131][ T5330] usb 5-1: device descriptor read/64, error -71
[  888.481821][ T5330] usb usb5-port1: attempt power cycle
[  888.539377][ T5729] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  888.690850][ T5729] usb 6-1: Using ep0 maxpacket: 32
[  888.730235][ T5729] usb 6-1: config 0 interface 0 has no altsetting 0
[  888.730276][ T5729] usb 6-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[  888.730300][ T5729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  888.767479][ T5729] usb 6-1: config 0 descriptor??
[  888.839545][ T5330] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  888.860206][ T5330] usb 5-1: device descriptor read/8, error -71
[  889.169611][ T5330] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  889.190376][ T5330] usb 5-1: device descriptor read/8, error -71
[  889.305587][ T5330] usb usb5-port1: unable to enumerate USB device
[  889.464615][ T5729] thrustmaster 0003:044F:B323.0012: unexpected long global item
[  889.465423][ T5729] thrustmaster 0003:044F:B323.0012: parse failed
[  889.465497][ T5729] thrustmaster 0003:044F:B323.0012: probe with driver thrustmaster failed with error -22
[  889.668244][ T5729] usb 6-1: USB disconnect, device number 7
[  890.385898][T10363] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  890.455458][T10363] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  890.470721][T10363] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  890.472663][T10363] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  891.026614][T10363] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  892.291075][ T8324] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  892.661294][ T8324] usb 6-1: Using ep0 maxpacket: 8
[  892.663321][ T8324] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  892.663372][ T8324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.842429][ T8324] pvrusb2: Hardware description: Terratec Grabster AV400
[  892.842447][ T8324] pvrusb2: **********
[  892.842454][ T8324] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  892.842465][ T8324] pvrusb2: Important functionality might not be entirely working.
[  892.842474][ T8324] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  892.842486][ T8324] pvrusb2: **********
[  893.740495][T10363] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  893.790806][T10363] Bluetooth: hci7: command tx timeout
[  894.045692][ T2374] pvrusb2: Invalid write control endpoint
[  894.080099][T10363] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  894.111753][T10363] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  894.113557][T10363] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  894.116713][T10363] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  894.220049][ T8324] usb 6-1: USB disconnect, device number 8
[  895.162924][ T2374] pvrusb2: Invalid write control endpoint
[  895.162939][ T2374] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  895.162949][ T2374] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  895.162957][ T2374] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  895.162967][ T2374] pvrusb2: Device being rendered inoperable
[  895.163075][ T2374] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  895.163121][ T2374] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  895.168070][ T2374] pvrusb2: Attached sub-driver cx25840
[  895.168082][ T2374] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  895.168091][ T2374] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  895.862904][T10363] Bluetooth: hci7: command tx timeout
[  896.169553][T12493] bridge0: port 1(bridge_slave_0) entered blocking state
[  896.169762][T12493] bridge0: port 1(bridge_slave_0) entered disabled state
[  896.169968][T12493] bridge_slave_0: entered allmulticast mode
[  896.179658][T12493] bridge_slave_0: entered promiscuous mode
[  896.196080][T10363] Bluetooth: hci8: command tx timeout
[  896.220544][T12493] bridge0: port 2(bridge_slave_1) entered blocking state
[  896.220757][T12493] bridge0: port 2(bridge_slave_1) entered disabled state
[  896.225406][T12493] bridge_slave_1: entered allmulticast mode
[  896.240537][T12493] bridge_slave_1: entered promiscuous mode
[  896.419063][T12493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  896.456586][T12493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  896.734174][T12493] team0: Port device team_slave_0 added
[  896.767770][T12493] team0: Port device team_slave_1 added
[  896.970232][T12493] batman_adv: batadv0: Adding interface: batadv_slave_0
[  896.970249][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  896.970275][T12493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  896.972590][T12493] batman_adv: batadv0: Adding interface: batadv_slave_1
[  896.972604][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  896.972630][T12493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  897.327593][T12493] hsr_slave_0: entered promiscuous mode
[  897.329007][T12493] hsr_slave_1: entered promiscuous mode
[  897.329956][T12493] debugfs: 'hsr0' already exists in 'hsr'
[  897.329994][T12493] Cannot create hsr debugfs directory
[  897.946035][T10363] Bluetooth: hci7: command tx timeout
[  898.264187][T10363] Bluetooth: hci8: command tx timeout
[  900.026728][T10363] Bluetooth: hci7: command tx timeout
[  900.351842][T10363] Bluetooth: hci8: command tx timeout
[  902.559909][T10363] Bluetooth: hci8: command tx timeout
[  904.755663][T12509] bridge0: port 1(bridge_slave_0) entered blocking state
[  904.755894][T12509] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.756115][T12509] bridge_slave_0: entered allmulticast mode
[  904.784440][T12509] bridge_slave_0: entered promiscuous mode
[  904.950562][T12509] bridge0: port 2(bridge_slave_1) entered blocking state
[  905.037655][T12509] bridge0: port 2(bridge_slave_1) entered disabled state
[  905.037943][T12509] bridge_slave_1: entered allmulticast mode
[  905.051601][T12509] bridge_slave_1: entered promiscuous mode
[  905.493292][T12509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  906.448739][T12509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  906.748417][ T5605] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  906.858527][ T5605] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  906.865828][ T5605] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  906.887848][ T5605] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  906.893950][ T5605] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  906.962906][ T5613] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  908.291014][T12509] team0: Port device team_slave_0 added
[  908.294466][T12509] team0: Port device team_slave_1 added
[  908.379031][ T5613] usb 5-1: Using ep0 maxpacket: 8
[  908.380060][ T5613] usb 5-1: device descriptor read/all, error -71
[  908.390586][T12509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  908.390600][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  908.390626][T12509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  908.400108][T12509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  908.400124][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  908.400152][T12509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  908.712056][T12582] ipip0: entered promiscuous mode
[  908.936644][T12581] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ipip0
[  908.938177][T12581] gretap1: entered promiscuous mode
[  908.938202][T12581] gretap1: entered allmulticast mode
[  908.972213][T12509] hsr_slave_0: entered promiscuous mode
[  908.976601][T12509] hsr_slave_1: entered promiscuous mode
[  908.981558][T12509] debugfs: 'hsr0' already exists in 'hsr'
[  908.981584][T12509] Cannot create hsr debugfs directory
[  909.071100][ T5605] Bluetooth: hci9: command tx timeout
[  909.214997][ T5605] Bluetooth: hci3: unexpected event for opcode 0x1005
[  910.706089][T10363] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  910.816904][T10363] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  910.845567][T10363] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  910.846953][T10363] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  910.848912][T10363] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  911.150495][ T5605] Bluetooth: hci9: command tx timeout
[  911.690930][    T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  911.841017][    T9] usb 5-1: Using ep0 maxpacket: 32
[  911.847549][    T9] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  911.847579][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  911.847600][    T9] usb 5-1: Product: syz
[  911.847614][    T9] usb 5-1: Manufacturer: syz
[  911.847629][    T9] usb 5-1: SerialNumber: syz
[  911.904456][    T9] usb 5-1: config 0 descriptor??
[  912.991418][ T5605] Bluetooth: hci10: command tx timeout
[  913.232959][ T5605] Bluetooth: hci9: command tx timeout
[  914.032381][    T9] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate
[  914.032424][    T9] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110
[  914.337124][    T9] usb 5-1: USB disconnect, device number 53
[  915.024825][T12573] bridge0: port 1(bridge_slave_0) entered blocking state
[  915.025032][T12573] bridge0: port 1(bridge_slave_0) entered disabled state
[  915.025240][T12573] bridge_slave_0: entered allmulticast mode
[  915.027894][T12573] bridge_slave_0: entered promiscuous mode
[  915.031410][T12573] bridge0: port 2(bridge_slave_1) entered blocking state
[  915.031632][T12573] bridge0: port 2(bridge_slave_1) entered disabled state
[  915.031833][T12573] bridge_slave_1: entered allmulticast mode
[  915.072387][ T5605] Bluetooth: hci10: command tx timeout
[  915.086563][T12573] bridge_slave_1: entered promiscuous mode
[  915.148931][T12573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  915.164091][T12573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  915.221293][T12573] team0: Port device team_slave_0 added
[  915.231087][T12573] team0: Port device team_slave_1 added
[  915.285415][T12573] batman_adv: batadv0: Adding interface: batadv_slave_0
[  915.285431][T12573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  915.285459][T12573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  915.287674][T12573] batman_adv: batadv0: Adding interface: batadv_slave_1
[  915.287688][T12573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  915.287715][T12573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  915.322947][ T5605] Bluetooth: hci9: command tx timeout
[  915.691994][T12573] hsr_slave_0: entered promiscuous mode
[  915.701285][T12573] hsr_slave_1: entered promiscuous mode
[  915.702349][T12573] debugfs: 'hsr0' already exists in 'hsr'
[  915.702375][T12573] Cannot create hsr debugfs directory
[  917.153993][ T5605] Bluetooth: hci10: command tx timeout
[  917.986044][T12592] bridge0: port 1(bridge_slave_0) entered blocking state
[  917.986516][T12592] bridge0: port 1(bridge_slave_0) entered disabled state
[  917.986745][T12592] bridge_slave_0: entered allmulticast mode
[  917.989490][T12592] bridge_slave_0: entered promiscuous mode
[  918.045743][T12592] bridge0: port 2(bridge_slave_1) entered blocking state
[  918.045946][T12592] bridge0: port 2(bridge_slave_1) entered disabled state
[  918.046166][T12592] bridge_slave_1: entered allmulticast mode
[  918.053041][T12592] bridge_slave_1: entered promiscuous mode
[  918.169379][T12592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  918.200615][T12592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  918.305031][T12592] team0: Port device team_slave_0 added
[  918.333316][T12592] team0: Port device team_slave_1 added
[  918.443005][T12592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  918.443023][T12592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  918.443050][T12592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  918.491881][T12592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  918.491898][T12592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  918.491926][T12592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  918.723808][T12592] hsr_slave_0: entered promiscuous mode
[  918.731604][T12592] hsr_slave_1: entered promiscuous mode
[  918.732659][T12592] debugfs: 'hsr0' already exists in 'hsr'
[  918.732683][T12592] Cannot create hsr debugfs directory
[  919.235035][ T5605] Bluetooth: hci10: command tx timeout
[  930.126091][T10363] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  930.202353][T10363] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  930.231083][T10363] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  930.237044][T10363] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  930.239173][T10363] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  932.090395][T12628] bridge0: port 1(bridge_slave_0) entered blocking state
[  932.090608][T12628] bridge0: port 1(bridge_slave_0) entered disabled state
[  932.109684][T12628] bridge_slave_0: entered allmulticast mode
[  932.123201][T12628] bridge_slave_0: entered promiscuous mode
[  932.127662][T12628] bridge0: port 2(bridge_slave_1) entered blocking state
[  932.127859][T12628] bridge0: port 2(bridge_slave_1) entered disabled state
[  932.128070][T12628] bridge_slave_1: entered allmulticast mode
[  932.178597][T12628] bridge_slave_1: entered promiscuous mode
[  932.250622][T12628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  932.271294][T12628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  932.360273][T12628] team0: Port device team_slave_0 added
[  932.361362][ T5605] Bluetooth: hci11: command tx timeout
[  932.384998][T12628] team0: Port device team_slave_1 added
[  932.445682][T12628] batman_adv: batadv0: Adding interface: batadv_slave_0
[  932.445700][T12628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  932.445726][T12628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  932.448693][T12628] batman_adv: batadv0: Adding interface: batadv_slave_1
[  932.448707][T12628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  932.448733][T12628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  932.697309][T12628] hsr_slave_0: entered promiscuous mode
[  932.707894][T12628] hsr_slave_1: entered promiscuous mode
[  932.709066][T12628] debugfs: 'hsr0' already exists in 'hsr'
[  932.709090][T12628] Cannot create hsr debugfs directory
[  934.442263][ T5605] Bluetooth: hci11: command tx timeout
[  936.524768][ T5605] Bluetooth: hci11: command tx timeout
[  938.604365][ T5605] Bluetooth: hci11: command tx timeout
[  942.849182][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  942.849252][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  951.831806][T10363] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  951.934660][T10363] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  951.940529][T10363] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  952.001016][T10363] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  952.019385][T10363] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  953.320507][T12594] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  953.415044][T12594] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  953.419292][T12594] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  953.443561][T12594] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  953.476728][T12594] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  954.141428][T12594] Bluetooth: hci12: command tx timeout
[  954.559183][T12649] bridge0: port 1(bridge_slave_0) entered blocking state
[  954.559390][T12649] bridge0: port 1(bridge_slave_0) entered disabled state
[  954.559604][T12649] bridge_slave_0: entered allmulticast mode
[  954.563646][T12649] bridge_slave_0: entered promiscuous mode
[  954.568764][T12649] bridge0: port 2(bridge_slave_1) entered blocking state
[  954.568972][T12649] bridge0: port 2(bridge_slave_1) entered disabled state
[  954.569164][T12649] bridge_slave_1: entered allmulticast mode
[  954.571567][T12649] bridge_slave_1: entered promiscuous mode
[  954.650912][T12649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  955.140255][T12649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  955.174099][T12594] Bluetooth: hci1: command 0x0406 tx timeout
[  955.268053][T12649] team0: Port device team_slave_0 added
[  955.279342][T12649] team0: Port device team_slave_1 added
[  955.397887][T12649] batman_adv: batadv0: Adding interface: batadv_slave_0
[  955.397905][T12649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  955.397931][T12649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  955.470722][T12649] batman_adv: batadv0: Adding interface: batadv_slave_1
[  955.470739][T12649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  955.470764][T12649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  955.683440][T12649] hsr_slave_0: entered promiscuous mode
[  955.685474][T12649] hsr_slave_1: entered promiscuous mode
[  955.686553][T12649] debugfs: 'hsr0' already exists in 'hsr'
[  955.686580][T12649] Cannot create hsr debugfs directory
[  955.892965][T12594] Bluetooth: hci13: command tx timeout
[  956.213007][ T5605] Bluetooth: hci12: command tx timeout
[  957.979604][ T5605] Bluetooth: hci13: command tx timeout
[  958.294077][ T5605] Bluetooth: hci12: command tx timeout
[  960.054928][ T5605] Bluetooth: hci13: command tx timeout
[  960.375120][ T5605] Bluetooth: hci12: command tx timeout
[  962.135927][ T5605] Bluetooth: hci13: command tx timeout
[  963.889557][T12662] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.046970][T12662] bridge0: port 1(bridge_slave_0) entered disabled state
[  964.047299][T12662] bridge_slave_0: entered allmulticast mode
[  964.049967][T12662] bridge_slave_0: entered promiscuous mode
[  964.053746][T12662] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.053927][T12662] bridge0: port 2(bridge_slave_1) entered disabled state
[  964.054131][T12662] bridge_slave_1: entered allmulticast mode
[  964.062170][T12662] bridge_slave_1: entered promiscuous mode
[  964.673404][T12662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  964.692119][T12662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  964.864035][T12662] team0: Port device team_slave_0 added
[  964.885431][T12662] team0: Port device team_slave_1 added
[  965.022925][T12662] batman_adv: batadv0: Adding interface: batadv_slave_0
[  965.022943][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  965.022968][T12662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  965.032864][T12662] batman_adv: batadv0: Adding interface: batadv_slave_1
[  965.032881][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  965.032906][T12662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  966.675306][T12662] hsr_slave_0: entered promiscuous mode
[  966.676839][T12662] hsr_slave_1: entered promiscuous mode
[  966.677932][T12662] debugfs: 'hsr0' already exists in 'hsr'
[  966.677957][T12662] Cannot create hsr debugfs directory
[  967.385681][T12594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  967.444974][T12594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  967.521621][T12594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  967.558984][T12594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  967.561062][T12594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  969.127566][T12744] bridge0: port 1(bridge_slave_0) entered blocking state
[  969.138018][T12744] bridge0: port 1(bridge_slave_0) entered disabled state
[  969.138588][T12744] bridge_slave_0: entered allmulticast mode
[  969.164960][T12744] bridge_slave_0: entered promiscuous mode
[  969.169155][T12744] bridge0: port 2(bridge_slave_1) entered blocking state
[  969.200267][T12744] bridge0: port 2(bridge_slave_1) entered disabled state
[  969.200612][T12744] bridge_slave_1: entered allmulticast mode
[  969.204081][T12744] bridge_slave_1: entered promiscuous mode
[  969.300731][T12744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  969.307579][T12744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  969.384880][T12744] team0: Port device team_slave_0 added
[  969.388759][T12744] team0: Port device team_slave_1 added
[  969.448380][T12744] batman_adv: batadv0: Adding interface: batadv_slave_0
[  969.448396][T12744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  969.448422][T12744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  969.481218][T12744] batman_adv: batadv0: Adding interface: batadv_slave_1
[  969.481235][T12744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  969.481260][T12744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  969.659741][T12594] Bluetooth: hci4: command tx timeout
[  969.779790][T12744] hsr_slave_0: entered promiscuous mode
[  969.781346][T12744] hsr_slave_1: entered promiscuous mode
[  969.782463][T12744] debugfs: 'hsr0' already exists in 'hsr'
[  969.782486][T12744] Cannot create hsr debugfs directory
[  970.540148][T12594] Bluetooth: hci6: command 0x0406 tx timeout
[  970.838651][T10363] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  970.890776][T10363] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  970.897808][T10363] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  970.915032][T10363] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  970.915897][T10363] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  971.741736][ T5605] Bluetooth: hci4: command tx timeout
[  972.838065][T12764] bridge0: port 1(bridge_slave_0) entered blocking state
[  972.839825][T12764] bridge0: port 1(bridge_slave_0) entered disabled state
[  972.840118][T12764] bridge_slave_0: entered allmulticast mode
[  972.875791][T12764] bridge_slave_0: entered promiscuous mode
[  972.879488][T12764] bridge0: port 2(bridge_slave_1) entered blocking state
[  972.879717][T12764] bridge0: port 2(bridge_slave_1) entered disabled state
[  972.879945][T12764] bridge_slave_1: entered allmulticast mode
[  972.912971][T12764] bridge_slave_1: entered promiscuous mode
[  972.966864][T12764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  972.971058][T12764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  973.021867][ T5605] Bluetooth: hci14: command tx timeout
[  973.049843][T12764] team0: Port device team_slave_0 added
[  973.059679][T12764] team0: Port device team_slave_1 added
[  973.367181][T12764] batman_adv: batadv0: Adding interface: batadv_slave_0
[  973.367192][T12764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  973.367208][T12764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  973.368729][T12764] batman_adv: batadv0: Adding interface: batadv_slave_1
[  973.368737][T12764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  973.368752][T12764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  973.821821][ T5605] Bluetooth: hci4: command tx timeout
[  975.102537][ T5605] Bluetooth: hci14: command tx timeout
[  975.669009][ T5605] Bluetooth: hci0: command 0x0406 tx timeout
[  975.902991][ T5605] Bluetooth: hci4: command tx timeout
[  976.228495][T12764] hsr_slave_0: entered promiscuous mode
[  976.974318][T12764] hsr_slave_1: entered promiscuous mode
[  976.994738][T12764] debugfs: 'hsr0' already exists in 'hsr'
[  976.994767][T12764] Cannot create hsr debugfs directory
[  977.183580][T12594] Bluetooth: hci14: command tx timeout
[  979.264653][T12594] Bluetooth: hci14: command tx timeout
[  991.431216][ T5605] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  991.479280][ T5605] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  991.482307][ T5605] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  991.483851][ T5605] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  991.493919][ T5605] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  993.671991][T12594] Bluetooth: hci15: command tx timeout
[  993.973431][T12783] bridge0: port 1(bridge_slave_0) entered blocking state
[  993.977014][T12783] bridge0: port 1(bridge_slave_0) entered disabled state
[  993.977195][T12783] bridge_slave_0: entered allmulticast mode
[  993.978681][T12783] bridge_slave_0: entered promiscuous mode
[  993.985330][T12783] bridge0: port 2(bridge_slave_1) entered blocking state
[  993.985464][T12783] bridge0: port 2(bridge_slave_1) entered disabled state
[  993.985631][T12783] bridge_slave_1: entered allmulticast mode
[  994.097520][T12783] bridge_slave_1: entered promiscuous mode
[  994.203655][T12783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  994.206633][T12783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  995.447458][T12783] team0: Port device team_slave_0 added
[  995.451349][T12783] team0: Port device team_slave_1 added
[  995.512219][T12783] batman_adv: batadv0: Adding interface: batadv_slave_0
[  995.512237][T12783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  995.512263][T12783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  995.532637][T12783] batman_adv: batadv0: Adding interface: batadv_slave_1
[  995.532654][T12783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  995.532680][T12783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  995.628712][T12783] hsr_slave_0: entered promiscuous mode
[  995.630313][T12783] hsr_slave_1: entered promiscuous mode
[  995.631449][T12783] debugfs: 'hsr0' already exists in 'hsr'
[  995.631474][T12783] Cannot create hsr debugfs directory
[  995.762903][T12594] Bluetooth: hci15: command tx timeout
[  997.833858][T12594] Bluetooth: hci15: command tx timeout
[  999.914865][T12594] Bluetooth: hci15: command tx timeout
[ 1001.115563][   T37] INFO: task syz-executor:12117 blocked for more than 143 seconds.
[ 1001.115599][   T37]       Tainted: G             L      syzkaller #0
[ 1001.115610][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1001.115618][   T37] task:syz-executor    state:D stack:20376 pid:12117 tgid:12117 ppid:1      task_flags:0x400140 flags:0x00080002
[ 1001.115664][   T37] Call Trace:
[ 1001.115670][   T37]  <TASK>
[ 1001.115682][   T37]  __schedule+0x1681/0x54c0
[ 1001.115746][   T37]  ? __pfx___schedule+0x10/0x10
[ 1001.115769][   T37]  ? rt_mutex_slowlock_block+0x2e9/0x680
[ 1001.115808][   T37]  rt_mutex_schedule+0x76/0xf0
[ 1001.115828][   T37]  rt_mutex_slowlock_block+0x508/0x680
[ 1001.115862][   T37]  ? rt_mutex_slowlock_block+0x2e9/0x680
[ 1001.115886][   T37]  rt_mutex_slowlock+0x2dc/0x780
[ 1001.115909][   T37]  ? rt_mutex_slowlock+0x1fd/0x780
[ 1001.115932][   T37]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1001.115966][   T37]  ? del_device_store+0xd7/0x370
[ 1001.115998][   T37]  ? del_device_store+0xd7/0x370
[ 1001.116030][   T37]  ? del_device_store+0xd7/0x370
[ 1001.116053][   T37]  mutex_lock_nested+0x168/0x1d0
[ 1001.116082][   T37]  del_device_store+0xd7/0x370
[ 1001.116106][   T37]  ? sysfs_file_kobj+0x1a/0x230
[ 1001.116133][   T37]  ? __pfx_del_device_store+0x10/0x10
[ 1001.116158][   T37]  ? sysfs_file_kobj+0x1e4/0x230
[ 1001.116183][   T37]  ? sysfs_kf_write+0x166/0x260
[ 1001.116210][   T37]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1001.116230][   T37]  kernfs_fop_write_iter+0x3b0/0x540
[ 1001.116257][   T37]  vfs_write+0x629/0xba0
[ 1001.116286][   T37]  ? __pfx_vfs_write+0x10/0x10
[ 1001.116307][   T37]  ? do_sys_openat2+0x14c/0x200
[ 1001.116329][   T37]  ? kmem_cache_free+0x187/0x6c0
[ 1001.116365][   T37]  ksys_write+0x156/0x270
[ 1001.116389][   T37]  ? __pfx_ksys_write+0x10/0x10
[ 1001.116419][   T37]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.116440][   T37]  do_syscall_64+0x15f/0xf80
[ 1001.116461][   T37]  ? clear_bhb_loop+0x40/0x90
[ 1001.116484][   T37]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.116505][   T37] RIP: 0033:0x7fa1690fd60e
[ 1001.116522][   T37] RSP: 002b:00007ffe9cb81e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1001.116542][   T37] RAX: ffffffffffffffda RBX: 00005555598fc500 RCX: 00007fa1690fd60e
[ 1001.116556][   T37] RDX: 0000000000000001 RSI: 00007ffe9cb81f00 RDI: 0000000000000005
[ 1001.116566][   T37] RBP: 00007fa1691d35ec R08: 0000000000000000 R09: 0000000000000000
[ 1001.116585][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1001.116597][   T37] R13: 00007ffe9cb81f00 R14: 00007fa169ee4620 R15: 0000000000000003
[ 1001.116629][   T37]  </TASK>
[ 1001.116691][   T37] 
[ 1001.116691][   T37] Showing all locks held in the system:
[ 1001.116702][   T37] 7 locks held by kworker/u8:0/12:
[ 1001.116716][   T37] 5 locks held by rcuc/1/28:
[ 1001.116728][   T37] 1 lock held by khungtaskd/37:
[ 1001.116738][   T37]  #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1001.116812][   T37] 4 locks held by kworker/u8:13/2968:
[ 1001.116823][   T37]  #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1001.116869][   T37]  #1: ffffc9000debfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1001.116912][   T37]  #2: ffffffff8f3471c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[ 1001.116956][   T37]  #3: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1001.117003][   T37] 2 locks held by getty/5357:
[ 1001.117014][   T37]  #0: ffff8880365a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1001.117057][   T37]  #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[ 1001.117108][   T37] 3 locks held by kworker/0:6/5729:
[ 1001.117119][   T37]  #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1001.117164][   T37]  #1: ffffc9000595fc40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1001.117208][   T37]  #2: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1001.117254][   T37] 7 locks held by syz-executor/11696:
[ 1001.117265][   T37]  #0: ffff888036b6c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1001.117313][   T37]  #1: ffff88803872f878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1001.117357][   T37]  #2: ffff8880293b03c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1001.117403][   T37]  #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1001.117452][   T37]  #4: ffff88803b1a4160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870
[ 1001.117499][   T37]  #5: ffff8880222ac310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[ 1001.117544][   T37]  #6: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1001.117594][   T37] 2 locks held by syz.2.1987/12036:
[ 1001.117606][   T37]  #0: ffffffff8f3471c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[ 1001.117655][   T37]  #1: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1001.117699][   T37] 4 locks held by syz-executor/12117:
[ 1001.117708][   T37]  #0: ffff888036b6c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1001.117756][   T37]  #1: ffff888060b9d078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1001.117801][   T37]  #2: ffff8880293b03c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1001.117850][   T37]  #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1001.117899][   T37] 4 locks held by syz-executor/12215:
[ 1001.117910][   T37]  #0: ffff888036b6c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1001.117957][   T37]  #1: ffff888036aa3c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1001.118003][   T37]  #2: ffff8880293b03c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1001.118053][   T37]  #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1001.118105][   T37] 1 lock held by syz.0.2074/12422:
[ 1001.118116][   T37]  #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1001.118159][   T37] 4 locks held by syz-executor/12493:
[ 1001.118170][   T37]  #0: ffff888036b6c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1001.118217][   T37]  #1: ffff88803cb70478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1001.118263][   T37]  #2: ffff8880293b03c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1001.118305][   T37]  #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1001.118336][   T37] 4 locks held by syz-executor/12509:
[ 1001.118342][   T37]  #0: ffff888036b6c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1001.118367][   T37]  #1: ffff8880370cf078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1001.118392][   T37]  #2: ffff8880293b03c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1001.118418][   T37]  #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1001.118445][   T37] 1 lock held by syz.5.2098/12522:
[ 1001.118452][   T37]  #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1001.118481][   T37] 4 locks held by syz-executor/12573:
[ 1001.118488][   T37]  #0: ffff888036b6c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1001.118513][   T37]  #1: ffff88803854e878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1001.118537][   T37]  #2: ffff8880293b03c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1001.118563][   T37]  #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1001.118600][   T37] 4 locks held by syz-executor/12592:
[ 1001.118606][   T37]  #0: ffff888036b6c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1001.118631][   T37]  #1: ffff888038720478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1001.118655][   T37]  #2: ffff8880293b03c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1001.118682][   T37]  #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1001.118709][   T37] 1 lock held by syz.4.2112/12614:
[ 1001.118715][   T37]  #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1001.118738][   T37] 4 locks held by syz-executor/12628:
[ 1001.118744][   T37]  #0: ffff888036b6c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1001.118769][   T37]  #1: ffff888040a06078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1001.118794][   T37]  #2: ffff8880293b03c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1001.118820][   T37]  #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1001.118848][   T37] 4 locks held by syz-executor/12649:
[ 1001.118853][   T37]  #0: ffff888036b6c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1001.118878][   T37]  #1: ffff88802b8c9478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1001.118902][   T37]  #2: ffff8880293b03c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1001.118929][   T37]  #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1001.118956][   T37] 4 locks held by syz-executor/12662:
[ 1001.118962][   T37]  #0: ffff888036b6c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1001.118987][   T37]  #1: ffff88807bc75478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1001.119011][   T37]  #2: ffff8880293b03c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1001.119047][   T37]  #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1001.119086][   T37] 4 locks held by syz-executor/12744:
[ 1001.119092][   T37]  #0: ffff888036b6c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1001.119117][   T37]  #1: ffff888061ce9478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1001.119142][   T37]  #2: ffff8880293b03c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1001.119168][   T37]  #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1001.119196][   T37] 4 locks held by syz-executor/12764:
[ 1001.119202][   T37]  #0: ffff888036b6c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1001.119226][   T37]  #1: ffff88809fe34478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1001.119250][   T37]  #2: ffff8880293b03c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1001.119277][   T37]  #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1001.119304][   T37] 4 locks held by syz-executor/12783:
[ 1001.119310][   T37]  #0: ffff888036b6c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1001.119335][   T37]  #1: ffff888079e9a878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1001.119359][   T37]  #2: ffff8880293b03c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1001.119385][   T37]  #3: ffffffff8ebceb18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1001.119413][   T37] 
[ 1001.119416][   T37] =============================================
[ 1001.119416][   T37] 
[ 1001.119429][   T37] NMI backtrace for cpu 1
[ 1001.119440][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1001.119455][   T37] Tainted: [L]=SOFTLOCKUP
[ 1001.119458][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1001.119465][   T37] Call Trace:
[ 1001.119470][   T37]  <TASK>
[ 1001.119475][   T37]  dump_stack_lvl+0xe8/0x150
[ 1001.119489][   T37]  nmi_cpu_backtrace+0x274/0x2d0
[ 1001.119502][   T37]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1001.119516][   T37]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1001.119530][   T37]  sys_info+0x135/0x170
[ 1001.119540][   T37]  watchdog+0xfd3/0x1030
[ 1001.119556][   T37]  ? watchdog+0x1c9/0x1030
[ 1001.119571][   T37]  kthread+0x388/0x470
[ 1001.119590][   T37]  ? __pfx_watchdog+0x10/0x10
[ 1001.119600][   T37]  ? __pfx_kthread+0x10/0x10
[ 1001.119613][   T37]  ret_from_fork+0x514/0xb70
[ 1001.119627][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[ 1001.119638][   T37]  ? __switch_to+0xc79/0x1410
[ 1001.119655][   T37]  ? __pfx_kthread+0x10/0x10
[ 1001.119669][   T37]  ret_from_fork_asm+0x1a/0x30
[ 1001.119689][   T37]  </TASK>
[ 1001.119693][   T37] Sending NMI from CPU 1 to CPUs 0:
[ 1001.119726][    C0] NMI backtrace for cpu 0
[ 1001.119742][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1001.119768][    C0] Tainted: [L]=SOFTLOCKUP
[ 1001.119774][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1001.119783][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1001.119807][    C0] Code: cb 6e 02 e9 43 c8 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 8b 2d 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1001.119820][    C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 00000242
[ 1001.119834][    C0] RAX: 000000000088d22f RBX: ffffffff819953aa RCX: 0000000080000001
[ 1001.119846][    C0] RDX: 0000000000000001 RSI: ffffffff8d60237d RDI: ffffffff8ba74b60
[ 1001.119857][    C0] RBP: ffffffff8dc07eb0 R08: ffff8880b8833e9b R09: 1ffff110171067d3
[ 1001.119868][    C0] R10: dffffc0000000000 R11: ffffed10171067d4 R12: 0000000000000000
[ 1001.119879][    C0] R13: 1ffffffff1b9fdd8 R14: 0000000000000000 R15: 1ffffffff1b9fdd8
[ 1001.119890][    C0] FS:  0000000000000000(0000) GS:ffff88812617d000(0000) knlGS:0000000000000000
[ 1001.119903][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1001.119915][    C0] CR2: 00007fb260ef1a5e CR3: 000000000ddb6000 CR4: 00000000003526f0
[ 1001.119930][    C0] Call Trace:
[ 1001.119936][    C0]  <TASK>
[ 1001.119941][    C0]  default_idle+0x9/0x20
[ 1001.119957][    C0]  default_idle_call+0x72/0xb0
[ 1001.119974][    C0]  do_idle+0x36a/0x5f0
[ 1001.119992][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1001.120011][    C0]  cpu_startup_entry+0x43/0x60
[ 1001.120025][    C0]  rest_init+0x2de/0x300
[ 1001.120043][    C0]  start_kernel+0x38a/0x3e0
[ 1001.120173][    C0]  x86_64_start_reservations+0x24/0x30
[ 1001.120232][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1001.120250][    C0]  common_startup_64+0x13e/0x147
[ 1001.120277][    C0]  </TASK>
[ 1001.120718][   T37] Kernel panic - not syncing: hung_task: blocked tasks
[ 1001.120729][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1001.120743][   T37] Tainted: [L]=SOFTLOCKUP
[ 1001.120747][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1001.120753][   T37] Call Trace:
[ 1001.120758][   T37]  <TASK>
[ 1001.120763][   T37]  vpanic+0x56c/0xa60
[ 1001.120778][   T37]  ? __pfx_vpanic+0x10/0x10
[ 1001.120794][   T37]  panic+0xc5/0xd0
[ 1001.120806][   T37]  ? __pfx_panic+0x10/0x10
[ 1001.120822][   T37]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[ 1001.120837][   T37]  watchdog+0x102c/0x1030
[ 1001.120852][   T37]  ? watchdog+0x1c9/0x1030
[ 1001.120866][   T37]  kthread+0x388/0x470
[ 1001.120880][   T37]  ? __pfx_watchdog+0x10/0x10
[ 1001.120890][   T37]  ? __pfx_kthread+0x10/0x10
[ 1001.120903][   T37]  ret_from_fork+0x514/0xb70
[ 1001.120916][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[ 1001.120927][   T37]  ? __switch_to+0xc79/0x1410
[ 1001.120943][   T37]  ? __pfx_kthread+0x10/0x10
[ 1001.120957][   T37]  ret_from_fork_asm+0x1a/0x30
[ 1001.120977][   T37]  </TASK>
[ 1001.121461][   T37] Kernel Offset: disabled