last executing test programs:

28m14.403008181s ago: executing program 32 (id=206):
r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0x8, 0x77, 0xfc}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0xf3}}}}}}]}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1300000065ffffdd910000f6"], 0xc8)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="2044080000000811e4ff14eea81f2f1f764f3f048d3b8f7a0bfdc73224d54bddd14377d8597badfc318e2c4ba36eac56"], 0x0}, 0x0)

27m41.383077309s ago: executing program 33 (id=328):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r1=>0x0}, &(0x7f0000000080)=0xc)
setreuid(0xffffffffffffffff, r1)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
pipe2$9p(&(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
r5 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_io_uring_setup(0x1ee, &(0x7f0000000240)={0x0, 0x9d6e, 0x0, 0x3, 0xd3, 0x0, r4}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340))
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setresuid(0x0, 0xee00, 0x0) (async)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)
setreuid(0xffffffffffffffff, r1) (async)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async)
chdir(&(0x7f00000001c0)='./bus\x00') (async)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) (async)
pipe2$9p(&(0x7f00000000c0), 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) (async)
openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) (async)
syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff"], 0x0) (async)
syz_usb_control_io(r5, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_io_uring_setup(0x1ee, &(0x7f0000000240)={0x0, 0x9d6e, 0x0, 0x3, 0xd3, 0x0, r4}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) (async)

13m54.188269984s ago: executing program 34 (id=3153):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000000000000000000000000000ffff"], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef)

13m46.656376164s ago: executing program 35 (id=3173):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, 0x0}, 0x800000b}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001bc0)=""/4084, 0xff4}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000000280)=""/172, 0xac}, {&(0x7f00000006c0)=""/167, 0xa7}, {&(0x7f0000000a40)=""/101, 0x65}, {&(0x7f0000004b00)=""/4098, 0x1002}, {&(0x7f0000004ac0)=""/41, 0x29}, {&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000500)=""/248, 0xf8}], 0x9}, 0x19}], 0x3, 0x0, 0x0)

13m30.326547736s ago: executing program 0 (id=3272):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f40)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
close(r0)

13m30.296105114s ago: executing program 0 (id=3273):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0x27c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880)

13m30.210522142s ago: executing program 0 (id=3274):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000700)=""/249, 0xffffffffffffffdb, 0x10120, 0x0, 0xfffffffffffffeb4)

13m30.019954093s ago: executing program 0 (id=3275):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="13050b249d4ec4744f3c26e3653a77725fbac5b82ef06586b41dc10b9b457613b3ff7f303f41e812bba19e1b24cbc3774f930241b7d889b3861c150efb87377231c07e9a1170aff7c696cb66", 0x4c}], 0x1, 0x0, 0x0, 0x81817f961ce36e31}], 0x1, 0x4044800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f00000000c0)=""/105, 0x69}], 0x2}, 0x0)

13m29.898221383s ago: executing program 0 (id=3276):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xe}]}}]}, 0x3c}}, 0x80)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)

13m14.253360884s ago: executing program 36 (id=3276):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xe}]}}]}, 0x3c}}, 0x80)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)

13m13.585895668s ago: executing program 37 (id=3281):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_mr_cache\x00')
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:s'], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', <r1=>0x0, 0x4, 0x10, 0x4, 0xfffffff3, 0x1e, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x720, 0x80, 0xae, 0x6}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b2000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vxcan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@delchain={0x2cc, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x298, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x288, 0x1, [@m_tunnel_key={0x210, 0xf, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}]}, {0x173, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x74, 0x3, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x14, 0x1, 0xffff, 0x6}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xec41, 0xa, 0x0, 0x2, 0xa}, 0x2, r2}}]}, {0x6, 0x6, "7ca6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xec}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r4)
setns(0xc9, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, &(0x7f0000001dc0)={0xf, 0xf}, 0x20)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r0)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4400f5870000bf48f9400a3b70d7acd06ddd9451d79d10b0ab2dc49a3e09935e47cfaa6616149f7fba58dcf9d76208a4b96e04f3f2b07966453c104f6beb5be7533e3a52fe92b57f162cde7e6ce9df5d17b13831128de537c577480436ed4c2c52b976baa803f54bf9019f6819cd9a5ef9d4e13b58969fe92673bd1e3f40527ac248e4486daa25180843bce1613f9fd0e274ee2e9be583f95462b62f69eb6454c431b2df19cccab8dd277defe8c7d01538e2995bc777176c2976f4978637cc9a53826e35292a90", @ANYRES16=r6, @ANYBLOB="000426bd7000fddbdf250700000005000500dd00000008000200050000000800030000000000080002000300000008000400080000000500050008000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x48010)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000000)="17000000020001000003be8c5e687a8a6a006c000a0100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x4, 0x3)

11m45.615773553s ago: executing program 9 (id=3548):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff1, 0x7}, {0xfff1, 0xffff}, {0xe, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}}, 0x0)

11m44.740947373s ago: executing program 9 (id=3558):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r1, 0x6d5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
accept4(r2, 0x0, 0x0, 0x0)
close(0x3)

11m44.461967602s ago: executing program 9 (id=3561):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000600)={0x48, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x28c}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000)

11m44.260651316s ago: executing program 7 (id=3563):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11a2be7a06008210bfa9b712e09c000000000000", 0x14}], 0x2}, 0x4000000)

11m44.164139553s ago: executing program 9 (id=3564):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0xc004841}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

11m44.11909137s ago: executing program 8 (id=3567):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)

11m43.848076265s ago: executing program 9 (id=3568):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)

11m43.790982488s ago: executing program 7 (id=3570):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r1, 0x5, 0x10000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11m43.752884768s ago: executing program 8 (id=3572):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x50, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x140000}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xb}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x85}, 0x8040)

11m43.602659614s ago: executing program 9 (id=3574):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x101}}]}}]}, 0x48}}, 0x20040084)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0x80000c, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x7ffd}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5c, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0xea3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd975, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0x3, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff7ffe, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x5}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x48}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0xffffffff, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x54c4, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x83, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x5, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

11m43.485100665s ago: executing program 8 (id=3576):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200002100fe003d3948907960fdc24477b65fc5b6a2001367fcbed0668efb4a77601a980000000400670008004b000100000014004c0012ac0f000cac0f000cac0f0003ac0f0004000801"], 0xd8}}, 0x0)

11m43.469561999s ago: executing program 7 (id=3578):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0xc004841}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

11m41.322784002s ago: executing program 8 (id=3580):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)

11m41.3104584s ago: executing program 7 (id=3581):
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$phonet(0x23, 0x2, 0x1)
sendmsg$nl_route(r0, 0x0, 0x0)

11m41.110960463s ago: executing program 5 (id=3582):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11a2be7a06008210bfa9b712e09c000000000000", 0x14}], 0x2}, 0x4000000)

11m41.056225404s ago: executing program 8 (id=3583):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)

11m40.886150956s ago: executing program 7 (id=3584):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)

11m40.819560058s ago: executing program 5 (id=3585):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, 0x0, 0x38}, 0x0)

11m40.817649677s ago: executing program 8 (id=3586):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x50, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x140000}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xb}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x85}, 0x8040)

11m40.642313374s ago: executing program 7 (id=3587):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000)

11m40.642073427s ago: executing program 5 (id=3588):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x80}}, 0x0)

11m40.50603965s ago: executing program 5 (id=3589):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x24, r2, 0x309, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890)

11m40.370328657s ago: executing program 5 (id=3590):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x1, {0x0, 0xec}, 0xff}, 0x18)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xec}, 0x1}, 0x20)
sendmsg$can_j1939(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x801)

11m40.214708322s ago: executing program 5 (id=3591):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200002100fe003d3948907960fdc24477b65fc5b6a2001367fcbed0668efb4a77601a980000000400670008004b000100000014004c0012ac0f000cac0f000cac0f0003ac0f0004000801"], 0xd8}}, 0x0)

11m28.411299786s ago: executing program 38 (id=3574):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x101}}]}}]}, 0x48}}, 0x20040084)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0x80000c, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x7ffd}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5c, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0xea3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd975, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0x3, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff7ffe, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x5}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x48}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0xffffffff, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x54c4, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x83, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x5, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

11m24.987977748s ago: executing program 39 (id=3591):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200002100fe003d3948907960fdc24477b65fc5b6a2001367fcbed0668efb4a77601a980000000400670008004b000100000014004c0012ac0f000cac0f000cac0f0003ac0f0004000801"], 0xd8}}, 0x0)

11m24.883617134s ago: executing program 40 (id=3587):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000)

11m24.78541246s ago: executing program 41 (id=3586):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x50, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x140000}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xb}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x85}, 0x8040)

10m25.03991427s ago: executing program 0 (id=3609):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123482, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000200)=r3)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f00000004c0)='G', 0x1, 0x40, &(0x7f00000005c0)={0x11, 0x18, r6, 0x1, 0x6}, 0x14)

10m9.872278563s ago: executing program 42 (id=3609):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123482, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000200)=r3)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f00000004c0)='G', 0x1, 0x40, &(0x7f00000005c0)={0x11, 0x18, r6, 0x1, 0x6}, 0x14)

1m33.200210099s ago: executing program 6 (id=5305):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000001080)=0x4)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000480)={r1, 0x3, 0x1, '~'}, 0x9)

1m32.817567005s ago: executing program 6 (id=5307):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socket$inet6(0xa, 0x80002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0)
ioctl$BLKZEROOUT(r4, 0xc01070ce, 0x0)
request_key(&(0x7f0000000280)='ceph\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='devtmpfs\x00', 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r5, &(0x7f0000001dc0)=""/4096, 0x1000)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000500)={&(0x7f0000000400)=""/245, 0x4000, 0x1800, 0x2, 0x2}, 0x20)
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
close(0x3)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002", @ANYRES64=r7, @ANYRESHEX=r9], 0x58}}, 0x0)

1m31.432828842s ago: executing program 6 (id=5313):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7c, 0x2, 0x6, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x204, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0xe, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x3fe, 0x7d, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc5, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x804e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0xfffffffe, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x5, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x0, 0x3, 0x7ff, 0x12b, 0xb, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x802006, 0x80a2f0, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x9, 0x57, 0x4, 0x3, 0x2, 0x10000, 0x4, 0x5fff, 0x10002, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x0, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d613, 0xa1f, 0xf42, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x10, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x3)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080))

1m31.171138878s ago: executing program 6 (id=5314):
r0 = shmget$private(0x0, 0x9000, 0x100, &(0x7f0000ff5000/0x9000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/203)

1m30.982144682s ago: executing program 6 (id=5316):
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfeffffff00000000, 0x1ff0000aa}, @private2}}}}}}, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRESDEC], 0x16)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x20000)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x2000, 0x2, 0x3aa}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd)
r8 = dup(r7)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'wlan1\x00', 0xc1fe})
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x56)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x8, 0x4)
ioctl$KVM_NMI(r11, 0xae9a)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, <r12=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={&(0x7f00000002c0)="f0b8a4a664d09ee15c3c7aed98224eae265522b65410ec6b0c01b649954be3f79f0dc043b819375aeaecbcd97d68fcdf593fa94f7bf6d5a6e401dfc6e2a1601190c5794f4e889567e9be9d9f4a51d4e0ffd4b02c6d4083de75631f316b1617e6bd2c6a1a73f35e73d957c37709c2032a6f994af69093cbe83c3e50298009e2d0", &(0x7f0000000400)=""/110, &(0x7f0000000500)="e0294827d92434486b2c83cc56d7dfe014ba452b429a21acdbf889501e7f7ce80a40dc5518b1bae0b70d35885a1bd7cf15fbc1ba06c5cd9da03141eacb3b12387775f13eaa1c2ef9e226f516d57510d8ec7f4cb30abf12816bffda87d31ba13363b58594c6fd398b2dd64e7a71dba4448c11eb460b7c4dd534f6ba66ae1d75b57ba0751f095daaa470a19e1ef70e1b7165dfd2bf8432a707d16588ac3bdfcea940cb511210c1b3cb241bdd5e4ca597d9aef3cee5ccb0028ec529b6ee558f53998cf54b35a9864150fc9f1458", &(0x7f0000000600)="fa5a76459b4995b6b938352ab81d4f637dabcf483c7a8f631783ba43e076b2d1c6dc5d8b2fcd0cde2ddf3d25894e1d5e1bc10dbbe5d783bb9fc4b378a9370fd43f05890c5788abb096a4bb6ab10f8c330af5de88fd19850db39b28dd4baa2bc029557ae6ea978d72bf8c3ac9435531298efa5d6138e21cc93babd2cef1b8529e4d8294c27c68ca362c8855a229ec4e85991ae90c7c4cfa5395b19db4befa46aaf71cd549c3", 0xaa257e00, r12}, 0x38)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c)
dup(r6)

1m30.573040297s ago: executing program 6 (id=5319):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x10, 0x110, 0xa}], 0x10}, 0xfc40)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000900)={[{@name={'name', 0x3d, 'hugetlb'}}]})

1m12.957132392s ago: executing program 43 (id=5319):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x10, 0x110, 0xa}], 0x10}, 0xfc40)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000900)={[{@name={'name', 0x3d, 'hugetlb'}}]})

14.178371409s ago: executing program 4 (id=5501):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
listen(r2, 0x6)
connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe)
r3 = socket(0x23, 0x80805, 0x0)
listen(r3, 0x0)
connect$802154_dgram(r3, &(0x7f0000000100)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)
io_setup(0x2, &(0x7f0000000200)=<r4=>0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00')
getdents64(r5, &(0x7f0000000380)=""/4057, 0xfd9)
r6 = openat$mice(0xffffffffffffff9c, 0x0, 0x4200)
io_submit(r4, 0x3, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0xfd0, r1, &(0x7f0000000240), 0x0, 0x80000001, 0x0, 0x1, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0xc5, r0, &(0x7f00000002c0), 0x0, 0x8a1, 0x0, 0x0, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x1, r1, &(0x7f0000000380)="e155b9c7650997837ead188a7298808f", 0x10, 0x5}])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r7, 0xc138fd08, &(0x7f0000000000)="0400000000000000000000003801")

11.436436415s ago: executing program 4 (id=5507):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
personality(0x619641b6fb4b8591)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000004c0))
r0 = getpid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
fchown(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4aa}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x42000000)
bpf$BPF_GET_PROG_INFO(0x4, 0x0, 0x0)

9.786030784s ago: executing program 4 (id=5509):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x22, &(0x7f0000000400)=ANY=[@ANYBLOB="0065c529907800000000ffffffff0200c49705000000d5a626ba6b6e14205f7cf41ccabec06a4981d562a118da00006831cfbbbca7e7a418d5167c0ef2c883be95b908c07dd39bf76897963ccb92b7421c6e14cb1171f4f930c67964f1c6d19c3cea8c1827b90501047ca5af414a38cb93666e7ff4d01aef0000000000000000000000000000000f5872485555e812c32cf2c892243fc52377b46841bfa3fd5000d30d928934c8d2e6c2e820808371b4a7843e2046b56139"], 0x0)
unshare(0x22020400)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r4, &(0x7f0000001dc0)=""/4096, 0x1000)

7.345775539s ago: executing program 4 (id=5510):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
lseek(0xffffffffffffffff, 0xf800100000000000, 0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4, 0x0, r6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x2c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4e, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
ioctl$RTC_UIE_ON(r6, 0x7003)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000d257e6e6d9a342d751ac5cc0d3586c7ff7a93be036ec01f804ebf37592cdb73d805c932b213b4b21888b45262a8396", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf253700000008000300", @ANYRES32=r2, @ANYBLOB="08002600ad1600000800570050050000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)

6.857473668s ago: executing program 3 (id=5511):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r0=>0x0, 0x0, 0xb5, 0xbb, 0x6, 0x36, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x1, 0x1, 0x3, 0x6}})
setns(0xc9, 0x0)
r1 = socket(0x8, 0x5, 0x5)
recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x41)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newchain={0x3c, 0x64, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xfff3, 0x5}, {0xc, 0x3}, {0xffe0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_RATE={0x6, 0x5, {0xb, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94)

6.493988573s ago: executing program 3 (id=5512):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
write(r1, &(0x7f0000000200)="89", 0xffe3)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20)
write(r0, &(0x7f0000000700)='h', 0x1)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
setresuid(0xee00, 0xee00, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)='file read /etc/passwd /ask.uid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]==/bin\"\n', 0x4c)

6.130420865s ago: executing program 3 (id=5514):
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x0, 0x1a, 0x0, 0x1, 0x2, 0x10000}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
fanotify_init(0x40, 0x101000)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000100), 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
r7 = fcntl$getown(r0, 0x9)
geteuid()
sendmsg$nl_generic(r0, &(0x7f0000001780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000004000)=ANY=[@ANYBLOB="2c1400003d00000128bd7000fcdbdf25110000000c00dc800800c500", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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"], 0x142c}, 0x1, 0x0, 0x0, 0x4}, 0x22050806)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/4117, 0x1015}], 0x1)

4.299806331s ago: executing program 3 (id=5516):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001300)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="110025bd7000ffdbdf258200000008000300", @ANYRES32=r6, @ANYBLOB="eb13c4cb9acea1a7c1a3e7f7baed247a0ce22cd457c713c51195ac76d5c4d468dcf350c71169f9"], 0x1c}, 0x1, 0x0, 0x0, 0x404c0c4}, 0x800)
sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04012cbd7000ffdbdf251700021100000100000a000600ffffffffffff00000a001a68c5bbc5ad06fd24560c4f00ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a000e00ffffffffffff00000a003a0008021100"/121], 0x74}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r8 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
fchdir(r9)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r10, &(0x7f00000000c0)=""/55, 0x37)
lseek(r10, 0x3, 0x0)

3.723680428s ago: executing program 1 (id=5517):
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (fail_nth: 2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

3.190912557s ago: executing program 1 (id=5519):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000540)={{r0}, 0x0, 0x1c, @unused=[0xe2, 0x6, 0x1000, 0x8c95], @name="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"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000000}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
close(r0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10)
syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], 0x0)

2.822319056s ago: executing program 1 (id=5521):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$vim2m(&(0x7f0000000140), 0x246, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x88}}, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000340)={0x3, 0x0, 0xfffffffe, 0x4, 0x401, 0x7, 0x1})
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f00000008c0)={&(0x7f0000000600)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x20004844)

2.191113315s ago: executing program 1 (id=5523):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
write(r1, &(0x7f0000000200)="89", 0xffe3)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20)
write(r0, &(0x7f0000000700)='h', 0x1)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
setresuid(0xee00, 0xee00, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)='file read /etc/passwd /ask.uid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]==/bin\"\n', 0x4c)

2.087360234s ago: executing program 4 (id=5524):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x20003)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_open_dev$cec(0x0, 0x0, 0x109403)
getpid()
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000380))
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r2, 0x0, r0, 0x0, 0x6, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6)

2.082161958s ago: executing program 1 (id=5525):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x2, r0, 0xfffffff8, 0x80000})
r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}]})
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, 0x0)
write(r3, &(0x7f0000000000)="90", 0x1)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r4, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000080)={r2, 0x33ba, 0x80000004})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)={<r6=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={r6, 0x1, r1, 0x3, 0x80000})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r6, 0x5, 0x4000003})
ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000040)={0xf, r1, 'id1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x79}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)

1.811719118s ago: executing program 4 (id=5526):
syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002413b88400819151300000000000109022d0000000000000904"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
statx(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mtdblock0\x00', 0x0, 0x100, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
setuid(r2)
setreuid(r0, r2)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
lseek(r3, 0x10001, 0x0)

1.325939932s ago: executing program 2 (id=5527):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg\x00'})
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x5, &(0x7f00000003c0)={0x7fffffff, {{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {{0xa, 0x4e24, 0xffffffff, @mcast2, 0x6}}}, 0x108)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil)
mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff)
write$cgroup_pid(r4, &(0x7f0000000380), 0x12)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000003a000/0x1000)=nil, &(0x7f00006ef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
read$FUSE(r5, &(0x7f0000002700)={0x2020}, 0x2020)

917.184302ms ago: executing program 2 (id=5528):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4044846) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0)
read(r0, &(0x7f0000000180)=""/4096, 0x1000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x1, 0xe8d, 0x0, 0x0, 0x1000, 0x1}}}, &(0x7f0000000180)) (async)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) (async)
socket$tipc(0x1e, 0x0, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) (async, rerun: 64)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x1b, 0x0, &(0x7f0000000000)) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8804) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}, 0x40000100) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0xc, 0xffffffffffffffff, 0xffffffff}, 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r6 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}})
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc) (async)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)

847.478722ms ago: executing program 2 (id=5529):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004001c369ffd485b130040558d142a0b963c289be14268590000000000ba4e71c6d93d590d4b5c8ae6fd7f1dbe059c43951c19d9eaf22e59e3316b7eba86d3b3ab5b4675c3301e5cda8627c0116f75cbc13563fa1110cb303e5039986b73c434d49feb289eb6a6777fd1161fd0ad5f066862e9957f367a94ba17bf4372e442fbaad838aaf694a34db8c354bd91f61e8c57ae49"], 0x48)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@initdev, @remote}, &(0x7f0000000440)=0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0x3, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x83, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xfffffffd, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0xfffffffa, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x46, 0x1cc, 0x9, 0x80000004, 0x6, 0x1ff, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x3, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x6, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x7, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x5, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x6, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x401, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x2, 0x7fff, 0x2, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vivid(0x0, 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000006c0)={0x2, 0x5, 0x1, {0xc, @pix={0x5, 0x9, 0x30395056, 0x0, 0x0, 0xcaf, 0xc, 0x4, 0x0, 0x1, 0x2, 0x3}}, 0x3})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x300, 0x0, 0xff, 0x9, 0x0, 0x6}, 0x20)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x4, 0x1, 0x1, 0x0, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000000)=@sg0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x800000, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
socket$inet(0x2, 0x5, 0x833b)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

779.695981ms ago: executing program 2 (id=5530):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0) (async)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000040)={{r0}, "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"}) (async)
readv(r0, &(0x7f0000001500)=[{&(0x7f0000001040)=""/132, 0x84}, {&(0x7f0000001100)=""/221, 0xdd}, {&(0x7f0000001200)=""/215, 0xd7}, {&(0x7f0000001300)=""/109, 0x6d}, {&(0x7f0000001380)=""/45, 0x2d}, {&(0x7f00000013c0)=""/38, 0x26}, {&(0x7f0000001400)=""/242, 0xf2}], 0x7) (async)
r1 = syz_io_uring_setup(0x5981, &(0x7f0000001580)={0x0, 0xb03b, 0x4000, 0x1, 0x3d8}, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680))
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000016c0)={0x0, 0x0, <r2=>r1})
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001740)=@o_path={&(0x7f0000001700)='./file0\x00', r2, 0x4000, r2}, 0x18) (async)
getdents64(0xffffffffffffff9c, &(0x7f0000001780)=""/47, 0x2f) (async)
landlock_create_ruleset(&(0x7f00000017c0)={0x100, 0x6, 0x0, 0x4, 0x0, 0x1}, 0x30, 0x0) (async)
r3 = syz_open_dev$dvb_dvr(&(0x7f0000001800), 0x9, 0x41) (async)
r4 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$DVB_DVR_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000001840)={0x9, 0x80000, <r5=>r4})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000001940)={r0, r0, 0xd, 0xae, &(0x7f0000001880)="735f50d7d3ac198987d021d5e1d8cba059a3ec1b905f4f410c9f03b0a48c624160dc355999a87ecb64381dcf0fc4fea3acc63acb25055ec7dce43ea012754ff1c8f9a72cd9aa2e49ab0a726d2afb3c702efed2ad4ef515d1e245841cee76874ec1ef35efcb0c5be93f49c81b0c3770e7d27c9d5ea934ab31e5429576b6293afc7dfa57bc72929607c3d10a4d4930cc6b5a51b11cc0ac3b3697891cae9f902709f0130e772b564361ac22ead4b5ba", 0x9, 0x4, 0x40, 0x4, 0x6, 0x2, 0x4f6d, 'syz1\x00'})
read$mtd(r5, &(0x7f0000001a00)=""/150, 0x96) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r2)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x50, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x810)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, &(0x7f0000001c40)) (async)
ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x1) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000001c80), r2)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001d00)=@generic={&(0x7f0000001cc0)='./file0\x00', 0x0, 0x4}, 0x18) (async)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001d40), 0x1, 0x0) (async)
r9 = getuid() (async)
getresgid(&(0x7f0000001d80), &(0x7f0000001dc0), &(0x7f0000001e00)=<r10=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000001e40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r9, r10}}, './file0\x00'}) (async)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000001e80)) (async)
syz_open_dev$sndmidi(&(0x7f0000001ec0), 0x2, 0x40000)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000001f00)={<r11=>0x0, 0x0, "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", "88e16cc3d8d93bf4b8c0a3269451beac8bd21aaec5fb740ff4694d1f97cd4ea16a0da00450d95c5fc51181bcfc73153113c0294d11f4d9530d649702261da579323a96bf19e91f911f3315e0a1d2d7e8d24c9c600e8ed27270d29d5b837dbc1dd651d5aeba64dad4851478a9712f29b5bfb256a0e72009cb0579f79eb0cb9dca41286dbfaadd874e986c9ec05f334c9b7b75b02abcef9299f5d062921a45cb9e9a2380cb0f1de3381befb077abc2459aa95671e4fa12324e52eb90c2af891264eb0b01ffc4e1452e696e7371e53a9fa28068e577331be847832ef17b33b27cd8d39273d681994b359221ed0ae357ae9bd74673cbae3efb280474308d20faef53e56c44910395f542b363933c37b004955fb29921f358229d3604a3226418056e8f546e4cdd6c540cb0e29d65cda9cfd66d4aa9e5cb0bed7eab631527f825fd2cdbd428aad6a0a941d4a14b47c25826e7bb4d63496daf2dc75561e69f0afbf45d125e0a42ec21216aea41349e7bf2b0ac43771fb8b9de50e753b3ae9c741e87e024601ad5b2cb0fd7a40e67b22dc18ddcf9fdb685a5a1b744497eb121be6c6ff06332b52f82a5048985f2d4e24edd88aa7a7d04c2b471adce75cc3025499b143ca31d9c3996a337f886de85f0ddbe9f43c188900f1761c438b584111c3679ab1009eac4dcc080a3dc344a9b03dd21c003786363eba433bdfac9f791b570be1e7416cf76716206c78e08005b7c99d03c2424a5aa1b0f0e22936940c3e0cf2a2b938be32dd37b03fe48796d299f2b2a39f9a5cf1906f4b96c8d571b5934b91b0ad3e1db53447ec35cffab1a43c918cb861c9bb706e0da88bfc3895ccde7790237afc828113c22a8a3e587f8877af1c9a77f302d0ccf3e603116d33860cb6bca941bb9e37b7091153d16f8d56fab0f8a509ba04eae2cca8b1e1d3c3c108dd0d33ac01690bcd06fc432d7785e5f52f49655423d0093c4bd5518745b224e575f0bfa5ffc502cbe268e4533e3ed76a2557251d3effabd8459a06e3c717e7d36bb7a89e06b2f483aed9eb05ca45445714f83152786ba1480cb521998ad97ddb549a9bf5a27f92f7308876cd8ea7a6f3c78b658c7ca88b470839455197999c30a05ab34272f26a46efc543d8b01ddb1a81a6eccacfb705a60ee634a82776ae85d52a8030d8c18a69aa040eefeaf44263c8c68b7e21954a701837aeb6174dca764c3081e6b88e0480a76d0cb73261d9804977d979661624905944446d9ea2b1bec93f63736d49e79ea3b926de2f8719d2e753ba0016663c8477b7f94e97a0dfc67d10cb72c6fc8f985cc73cdf3be8783d3e5f6baf60d7ad92a7f9c8c88385ffd694de8f468a0474380e5dfbf03b68fc0ca4a0fb73dd61b08e69c777699e6918aeac0dd5375340ad06f506978134bd830abf7495782de22b4eddca4e3f9da557604debf73795a3ce99626d0dc9e8b81792b93d1533ad82bbbe3e4b556e1a51a9fb9d88cf3fce566c14b13ba8ddbf8ff8aa0c8a4eef5b0bf36bbd0c08cf30f13f9e822c67fd696c04d1be091407fcd126ec67e13ab7c70ef034ace5e3bb8f641fa97fbaadccdb18fc609084a08f461cf584134ff2c431033fb5719986334b3e9fe672fc311237a8f35c408938cbf4714cb4617cdefdc06eea56da3a820c4fd52a6564a800e81ddb9a7470ad87f4003bed71533572952e376a9d40e8c3657508b6efdd51ca6821e1fb6fbd223821381c0d9ef32f5682495ad1781e017f6933b175b2c94de2b7120528b9afcda8d6e6e553d99751178f3c4e2369afb6f87b44f5c66007e31096d139bf323b20f7c5b5839a76a9a3401b079ed00a7eb3f4437c1d9d9d8368d314f8b05e9e27229e839cf1bbdf42c2960e2f7a2eb1beb82f7fe5a7535451b52855a24f8fa245a801d30475485496b38ed0690aa41186efa2aed16aac8b7703e6ed2759f620bd13b372532667e724d5472a75566ff499e5d64828d25d95dec68275b6ab5a2f8ac56236411649219d6fb6f0d94d4f023275316042a30711dee1ada7cf5ac8945ae92a7cf09248e33bf016228d684bb2bc1f639f31cab229b1d52c3b2332b811fa4d9ff5d74e890067a6db307e567244a4018fd6d3e9cad6de56a2c3dc30e9753144ef9ef04d845d06835e091d4e899071a90c3087c6bbd0ea62c3de8bbbd67030dc862463cd32f4cf7382817e8edc572c03e97b4ba55a3f5538f9ca1f8bd6ee686aa42fbc681a424e8eeca076b93eb8659e8c3cecb59067ed17f9f94ecc7123b85639542d78a202c8f72d4647cd9e6d6c93d7af785bd586308dfb14842794167e84a99b56f90d65b89c37946fd308347c1281ddc40d21f56ff4050570e17b113042b395c8118c5a202db5ed81ba17172b9384933780b4cb5df55d106cde1f0d0b568d2e31698f7f03199964b6bf8f657a3e94a9e1003bb8ade9bcf14b79c8ec375caea9bc275ec569b4a96d4e52f839ab7070eb2477350c0c98c912e971a2c2cddcdd8458109e3c43ad547322b687c3bfb3412f741ab2f905177b7bd4b7b2fa4df99d0c6c65380f166cf7f205f6491768f4420b2d2aad005699dbb46369ee99896435119759444d6eabcb3314e0f3e4efd7d3e7d1221ae3803145feb59f72ee761e757322408f37b8f4a72637723620eaa0c18e49e3d8b9f5e98e0e8ff6ffd98e54599d2312d28f39709902b3543212ca62d825a8e49690de9ba13044ce713f671a961ecf7fec74b7f5f2348faf9329d95fb2a93d2b65de1f4873583d115c5ccf3d6689188fd54b8edcd5c61b10efa5fcbdf55e98ede50672f9f6c0bebce04c893da0f7d048e7509de5043257ab7e62c20d94c78c09cd2d8bfc2a6008988272ff0da6c1f17d98c26bb39992503873e547ff3d10275f327d1df15513cdeb4ad2acea3031c1bd0deee91b39f8d4206a6f19a198dec72e8ef9e432a81b34ce084354f8ea1949b63b14b721ca5a0ae5ae929b093b090b623022a4017f97640e662539df66c435558f2166de3a633d4f3ff487724efd49de2179aa8cc322e21df266fd70d5354b7ce8a83d786afc8d5c5e2bed67dfa5428d5227b8233aa88e8a329a8d7e82848dc336d51fcb3c27f98376e6cdf34782c46fd7c99ca1ef4100f0d34b7012b3e021ef3e3ed54c9ecb25db7eb8e096dceee4fe1605c979e159edbf276e2a96494c479643ad92ba8e66a3c6f15c5f0b0b7504f24e4744a2ea8513c2bcaea585a36cd90863ed5b41e9ac1a1fbfae1683a0de52a648e6c7c8d3f6607f358f4bc52d7e79a6de3596b7561bd34d50c51141941141fd65abc8a60c75629d0ca1cbb85b550625e3f8ae8d9fe67e2cf7a3b3d5d41e908eb237ad7034b3dbbda86c6f688d8319a99e83dff874925debc225e87afedadee85e8438e25a1f1af0497dfe247ebb5281ed37d6a27ec9293b255b6b4f7bf25ff88d3f32193cde567be5d780128966fe96cab0d373665f99827f2272515663b6a8a6b70665b9f1c77c61ecf5437669d343a780be33d826c33711bdfc41910dd40aa92418534b1eb225a50d1d3a33fff1c77d4f86627c94be2fc1f1d102cbf230ee37223943fad32515066876f519dae4e166f64d46d77a34b6fc960e683ed0884ee68325deaa26cd667c7eeb7d1cc96e27f1c7b39d8eff175015223d3113b65c6ead512f8d7814d8c399d9f2c249646a295df380dcd85420d10fdebf608fe76ec3437ff4c8eda87ef0aff6b16aa7d59c29411deb470294ec4f92e06bac78b4e24c26ac75251c428d98ce7f0018bcb087dcd7479f72db2e3f856f532f86f345e9e17bc17a7ecdb387217e8a545568c5a88b0d34610c7337b4050e70e0cb1b94c93eb97ec2431aca6e0fb7a8f1d9159bc935da1d9540c8f7310760f96f4430b047f4bd421d7166ba34b5ae1f2ec176ec8abca2d6ac835fd87b00518264ecdf867d53ef3572c11b0b1ef0ba4f60638749b567b346ed757bf4569c0bc45bbe77ee3accaaf3a83c87d86b07f26ca8c25850bfb67dbbcfb499cff23c2f5d15b85bf1b7743dcb41a4e77cae3ece3fc8868d6b5ca01c401bbde41bebca2fe8e4fe374e66a87092967b61fc16ed8fa56452cd58ffc2a0aeb1ee7507b83eaeb67a5248fa8bd51008d6cf4d730411cedea5892af25bc081bd63db40ff9fee6defb09439febdfd78afedabf84dcb3c272b1b8adc096bcdea1a5f1a553bd08ec522602863f9446ab2baa495b04ee55c717de96e4e353e67b2897746e568b620259023f0b3e47417ba02ffef6fd3e77a755f2dee0f9332253c93f48c4a8fe56a11196e9ab3c6d507fbd4ffd951b65450e7e1a4fe53de1d4804c2b8d920a48d9e132c90c6c73df26c2ec9bc97674360c8890117d2285b31e25d593770535b1f8cb5eebe49c02c5b58ea961f0ac34bf597393c9749a85db924b3b42dce39959c70209f428478ce4983d2459406810930e23296ddfec92c2fcdaecde97de596a313739e1d93335597d645c67d5c05427e34ad8a23871ba7127dacd3a665be54d319440c1fc94f77610911b14aebf019b329c850a1fa0894280bf0f98cc5f0192ecb0ad69b9b624accbf3ddee34cb2d43c8075769d080df0229588adf1b72a9c8e884cdd1a62133081550427be8389730174af35b8d0b14bc15b5f5985db1d9f6946dda4d62123e984adf6b712b24fd1a153e4656ec7606c51e24c5cd1631105bb52d1c8acb0832d1cd6b6c705c3a38eb445371505b6528063cc89c41a759ea84ac1c1e8454882605fef346ada9e3a9800cdabe4b035264ae8fe3f87297ee33e5c4729ae2976d025a1a86a368538c9588656cf8102c9de3e360cdabfcb0ffae7a54cb69e5555ed03e8dac156fa7156509ea5802c5065e3f31c1592158b072bf77e9d81b3328f78d31b4038ee788dd26c8391591c82ad24ac277d592d6f2f07dbe3d302ad5ee9486f4ca8ae8774eeb21706ae706f3968e4521d6d5dffbd68447b12eb46efd8d5f289d5329e5f6d4f2a3ebe5d56e26635547ef1131278030f8319616f546fc9f2df6f393a0b4cf57e18d8cb9071e92fb22a9fb76ec845c177fe10507686449dd2c0a4d7149ce0e281a206623cc0bb36faf5b184cf603e0dfb2c59bed9d56b15c99ad6a82ddf89a37a597612c010efc654ebb4859c8328f7152e1ff221e70a8f640c0b42d4c32f507b35379f4438ce9c8d54fd6db66b130fa5ed56e6a9836057ca07d0aa64d6875722435ba02e4dce607db11ee6363408d75dcc75ed54943e6610924f5bf6abb1204e53219eb7da290ceaed3207df0466aca2236edcb4309ba10b6b7e2ff9c2ed33f03838ce2679e09c2805783cfb6687f55a75652a7a4c8e026cbe8c386333db5bc2aab2afb0657a66f47d0507721644c52b93fd58025976aba5bcb58812c45d53f319363329c00659d297077b3a338802f59747a"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002f00)={0x0, <r12=>0x0, "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", "9812b364e963d447cc37d99d5434ed994b92b89e5df3ac2050dd9574755fa3b15289284b7627a7014263477f32d5b2c33c084d13f2124528b7c130cd37b7188e452a180f2997cbdcc6b566bed5e4e51dcd802a7639d81438823c511d7ef1a93c8b86f87ae5000bade40654b2bf3a1770280f4ca7e354585153f8ccce16348fc9d0d6d5fe406519210a0308a87fbb353153ce788122486f719beb5c198789ee90cbd8625bbb14d9b990d35a948e13a5a7092d721cf5769970d30f60654dbdf4ccfe77f5e71ddf5be6433b4949d2393165346f51a6edf16a1b702fc2a371822a2481d24f52c7d888830cdce999f1f8b522cca66442d2a3c1d744b61cfa3dee75c4d15dd37513f5e8664ed378ad3f95d3917ac2822b178c9c547626ab54dbbba5c5e26b612e8db1ce654896a03f82d431d87b0fb85cf07250918313474f6922746498dfc0bf7c818432412ea30db317b1fd4bb680db2fa10c2028d750938ddc34562c7167319efd1171ebf1aa495ce766075a898cd753d81a54d4fd165d58d0076f6223b569e92c2c66bc8641e691f31d2034757e8fd182f429f067acea7fa024679f81af8863cb5859e1b9482f521b1d35c89190163373f12cb9c99e511f1573dfa5da3660c316cf336833bbfcbf11102b24f3120d98c9773ab930b821a21e8525cdc72d36d6d11779b02be0034e1becf963e7cef96f6e6476ab887e7e9c083335c0c91eea96d8abae00bc3896e54fdc3602d67c16a227f9202c0bc449419b06c18b9edfbd2cb3a723c1c7ef8ab62016ac2c70ad06795b027fa2b68c929efd31906c6e6a3aba7b654d6ea8d1102dc239766cb57289620d9026168c3c9de0def54a0ffe1a693f03e8d9580274a5c77a757fe9e510c4244a1e624f81661fa8ff99b89183d403fefbd95cb81b7c48330b934478b036a87c2f55e427ec53789ea981634b4d85a8269d5fbade562582ce65bdf2e7caf8e8607704db9633d7c721fc57a9bcc10b75163f20d5330e7b5e8b37859ceef1811ab51b67222b3501d2314fdae102faf25273b1ea823ec1d938ddd74fd9f44648507e4642b3650c44678c3cabb7d2c6428a0d4827f449051c0d9142b03c6332e5146130497fbe61228553d91cdbaef7bd9af6fe0e3c5b7555978273013b31dd45ccae96cf1752846a600de044977e7cc274df01df0e5b8c507e8a5420fe36d1b03cde7b52aa048ba20efea2870ad43f2a857f4a74dffa8e397c32b3706f0c912a32f6db585fff045750606c4057eb4a139d76f2b066f8f0c0e8f3dad715c749e0c4754f8d5d70ff6ae56ba7702c243870b32a00619712cbf907904fa6cc19cc29b44932bd88912ee9b35e02bbe9644efb96e672e9f0cd407c34af8803b23248985f4d3093f5d2496bd42e92a7e8bfa45b6b46e18123a86d1c92c54e6f0f568089c4d467dadae9ebac58d8023fef5ba3cfac1bd7a0246dad3c9783aa72744862dc76feff75e1bde8563c22052155179993a92a3063b2b27a5de197640540cec00555636d39c76d1497f7b50898cf025f131b9ec6107f423387b97bf9daa87f4d7532e244778a96da0aed86bd8ae0c755bb47158a2a53663c22885ddbd989e05056cdad786ba0eabed87b173975fb0eec4f56e59efe1a26ef8f0d7077196cc899518cf97872531d85825fe6256b448332849a3fdb9cfc05410f98a8a51ddce296c1d2c1ba2678234f68d9e58599b6cb333668b8320c168a06d3b02dd482a4cf741320e105d53871345f253348409436064b975b278d4c104e929edfc2d71f98f64cd79b9bc5a90ffce6ba3c46b2bb5cdc28af613421b8310f6d7abd96f426b9538c30231fb3365744755e93da542e3554d8f3b61fd4a8ef3946e174a7a1104699b448c492538fe7b44c8e307246073bc01379074ef07789464c74cf04e28d164baf9262e179758c879a14f626b1ac6ec1d8837b0a38c090b3e79c2f36faed13ad6a1c775f09e9b489c276627ab687819eea4ccbbbb5c6163f555bee1974a6d953b9fdedb4b5509e914f9cedb50f97e88b0d318ed987cedf6d030cb30623a115346e62169285a088a8500d3b2faff21b0d1c411d359921065ccb9a8d56f5a547f5662d4310920b1be156341d6d2b6eefe2128912916bce28321d53ff0b5d08de16cac1e6e884fd4b7b34fe454feffb5708aa76d7fd32d87409037709e312cb88859072e21fbcb2e71bc2cc7d797f5975b5e973a30d108077d47924e6978d8676ceb326244914a6f25b0d75741b8f61b4a105fa2a46b5fcfd034711dda0819c88c484e7e0e129da62359f25760ef43d30e5f7ca690305e623c81f1ebf689af90f4b38d782f0ecf6a9e6f009a1518b1287a656944ddb11bb63126a5adb67bb854886f44dba048222daad360b6387e87605ed6f57c4fd34f883254acb96c85d8ee55ebdf07505631ea8ea5a8aca3de7ebf7d17b84ec41e5ebddaa30aee814b9904272dac9ba88d684dfdfd7e3d302510391964c4bcb422bb8faaaeec7ac36daf408416f0c0185e48853ab9103786a50e13a62b10a9c83e48a3f5a14dda3632bd19219db6b31fe755528dde3e9fca399deffbeee48a5ee3546b8baccf0a0001e4fcd88d5ca78784681b4d6f9ad6d272cc38cc2660e4db19525f585f9ec384c3b28570179a096f0efc5f9e4bd83588f5cde79b074e61b019a5ae9d0af5dbb6b35ad90bc151bea1d395d2b9927b2f81396d04de73eeef65699dc30f0c864b14361d2ab3bef1a27a06bf86fafa09bcc216ef6455bfffb9cab7c0b682722060f4614fec2b47fd1383e73c1801e3a41f24775cc50bee138faaec6f4d18f868ac0c52bfb9861eef3e3f62a9a75a02192289f9c3a2f2cbfa6846f4fecc3353ac6fc48a82b574a9439008093c94a4a46dc7cbbcec37f1572fde58853c4f656b8440a9c0c6515a9c5c79c21246d338f684f0d525547deae5bf8a1cb1f7cb2f377703ff249e1d365eb325937fa50280fefe95ecc6f0d31e011e85ce3466fb3d22af9b8ca300ada57834df7d2afe1a12a833f3c274793310277519dc8c864cffd5bc7676b5be46409235705d7b48175ac9d2dd63bc4aa637a2fb929fa9db131a4bd0d4985990d9f010e62380bfd8c373d653d8041a41674b0361960dd9d68fcb6c17e3c4ebef6bbca43e0ddc585df40084c9914038345e4b97fe9d43e25978a9f3cf9a98d41841789956429e6a56fdac19928db4cd7b2a1eef63bcef4b18dace0fafcfae324e5c0247a79ab07912999fa409e4de5bfae18c6a25937357917ef9515dca4da49b4213d05e70249a7fbae51e08282f2870337902db208820d0218643d5164c6e397b9b9771580774fff5b8ad74b7291f6da781fb1b67485f0f5fa17d69b2039c0774fa1ec136d406c9a1a44d6a36409ab6a6d8c6120d1dc5dee3cb50726a268f8daad0c6da94f131df141b2e7586a01495aa25352c9453b1e6d3c419d3e2ef48a92323845a7316f7c52872b512a35764926cf06105c14ce30f311312a9d89bb69fc17ed51cc0950a2964db93a190e982d37a72fb15fe1771f6fb0f065080449b11401fad569060e9b5030b152350c3f5d8e6c56778bbbc2c2d55fa3264a6c3c1f82ee91091ddc39ed213d4d7bc61d68d96a40c02016242712fa51bb0050e462e481629798da97abf6f93629d6072419a69a7203750096c83d788b35dba148aded2065258311a8331d82a239f765f1010013c47860fc84cf6313349550d3941bbd4d250d59b237084e3a3f41f35356effc3f8cc19ed19cc00463f0d289e03f716fc1143253fe42f549917da5041479f8b0d78808040e746f8fd0e4b922264ab3e31cbf8e85ac01408c467d2b2bfb0a9d02bc724420a18b78de2f24b1250af56580247d5353082fc3afd11d947066c4d14f9afe8e3eef94d2b47293a881a284697d9240cb87b63796f8951b4d1e3b43c9f3148f31b3fe64a4bfcdf5eebf9cbba64cfd907ab9b096b94efa12c5e1a68b1153943324aa6afa7aa2e9d8feccb815db5f943584a0fddcaa0753029e54155367a7c93be1816d18bc42809973227f95659ebe2308679ee73b38183a245db6ee1f5f8f0f5b61520659c1c9629c35f14815e6c1373ff20b0316f9fc0d74339eb953c9d514c76691e7b01f3ecf551e982ea0a31e7d92a9a11a43bbb2b4d0550cd2c775a65242e45c8150f761f6baf669db5d906991001e8586c46eea5abc0495b8418e5b3c7044fa31f236875e53c74b34cb14515d5f578de1f812f974fa558a14a1d0eeb0de7424e48cb1ec8725bb13cfbdabfca66c388e02b2c3f5247b01eca3cdc31fe59395cdf1550435d7b88b4c30ce5c264dd4d9e56ee1f747f94718f41204cc1c03a1d6cd7ec7ac5f2b3c626a62f50e6a8284f0b4ba9d10f0a31218da50421207c4e6e38275fc19b74468a6595e057ca8c3104b887bb40d7332eba82fbff3f40b149b932361aa1097bb606fcaf30da24e2018783d8cf37bfe17de63525a218027815756173316114bb80ec417009ed42c6daca2fe3cdeaa5567a65d42b2d43a1621f2933f6a58bb47e88f729db9bfe8dacbd6538c8f9ed29a9aed1fe86adb7054e2f1fca355e9d7a380ab9098b0758eb46995227c02802d75c851a71e3a310ba113fb30f34de65b02ccfedb95fb8362e42004ddb61a2d1e2f918c3a350c7f943405ab7bacfe9182a8ae47a14ca086ea83ae6a40960d7d9c816002b496e9338ace6b6d75655d4d101cf91f520e599228497057a905912e99caf49ca3273cb18f0cf9c17385866f0fa49825b49c44cdd453d24b9d1a196e91340562a3ea23521a0bda760fb02c3b820361f18764d50bf08585cd4b2adcafa4235d9d06fbdb46a1d672ca8273b72fdd53fde396782ebab6b6ab225532c13b6914e90d24187fa7670f0eee19bbbb7f5f43c98a25f2a751925e1e89917a7ba270f66b454660bd194ff7352c2859e651683537d0df68fe519ca794d5fdffb94ee6e518b34949ec7a4ba27cd0270a2d22befdcbe6ead5bfde4f8834bc9c4b3709990fd3210aae5c7129b42705605e06128f14e988f515929ce92534233001706c7cdd64b3dc5a8d2ee227f3f36571894304fad5284ee861fe84e82dc2fb575d704685164ea966af2a80d828e47b8e92431b20f0b0b072e5e8ae3579314f76384a64341f9a11586a07edb9e767188e6f1da368ed91afd4b87f7967e0b45c7e9123837c4a7ae69969a128f4265c9bcaf2890fd060bf0869f0e9b0235a637e3d10c81f816615bde7ba41c17b9c8ea4ca2edbf2ae7c9066821efb502b2059779570c8f2912f72b9e4e59b5ca7f9b2acf2258c3a2c56db10396d60676f0fae6ab44d614f7f149a233a8a7e781effeaed3015cb999ff4ddcb49e8c0a6b84f1ece63e8d77725a329299daafaf4717ac7fc07a3f350819f45bfc46e454bf5"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000104a40)={0x4, [{}, {0x0, r11}, {r12}], 0x9, "2ab28e4d99bb72"})

634.029763ms ago: executing program 2 (id=5531):
timer_create(0xfffffffffffffffe, 0x0, &(0x7f00000000c0)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {0x0, 0x9}}, 0x0)
timer_gettime(r0, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001000000070021"], 0x24}}, 0x40004)

298.468598ms ago: executing program 1 (id=5532):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f00000002c0)="e3ef7f670000ec6789b424154494000000000016aa00000000040033a42c9550f58100", 0x0, 0xa0002000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

276.267046ms ago: executing program 2 (id=5533):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0xffffffff, @local, 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000080)='\x00', 0x1}], 0x10000000000002cb}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000440)="6ae9", 0x2}], 0x1}}], 0x2, 0x0) (async)
sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0xffffffff, @local, 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000080)='\x00', 0x1}], 0x10000000000002cb}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000440)="6ae9", 0x2}], 0x1}}], 0x2, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x9, 0x1018c0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
dup(r2)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x22100) (async)
recvmsg$can_raw(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x22100)
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0)
timer_create(0x4, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)
syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) (async)
r6 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f00000004c0)={0x24, &(0x7f0000000280)={0x20, 0x6, 0x5b, {0x5b, 0xd, "848a99087b04e99a6557003790cd156827eeb522d04808dd6e86b4cbde161321e1ddfbb241cec2f45ddab270598d0a4d05c6ffb3949131d2a0c5245f2405d7386f0ce328f9a17409a168244366da071c85c30f2ebd1c9813b0"}}, &(0x7f0000000340)={0x0, 0x3, 0x4a, @string={0x4a, 0x3, "fbe63f19d1a6883648384debcd92055d0b97abaad85ccee7f06edc4f44d142c6ed60431871fdeb3584bb67701bf831eb09e507241d6a414c358a714bf457f00af08def50db39e0e3"}}, &(0x7f00000003c0)={0x0, 0x22, 0x11, {[@local=@item_012={0x1, 0x2, 0xa, 'v'}, @main=@item_012={0x2, 0x0, 0xc, "f8d3"}, @main=@item_012={0x2, 0x0, 0x9, "0343"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x1, 0x0, 0x0, "7f"}, @local=@item_012={0x2, 0x2, 0x0, "90e4"}, @global=@item_012={0x2, 0x1, 0x4, "e440"}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xf0, 0x1, {0x22, 0xadf}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000580)={0x20, 0x15, 0xc3, "5a775ea010c1c2b864b39d6bc1feff6dbc34d9561f63d09541b37a03b3201f1b43efaadfc2df204beaee1877f8de87c9251f636c35a6b394afeee115a31916f039fe48fa1e9917768859b8f554a2c1f7fd33ff987e43d493e59da18e0593226f23ad70af81d3667ce8e47c88ce97a90195d758de818a5b2d511a5638aaf94ddf70d076dc7a357b7ec87b393161c7697eccb83c9484af075d5e9489343bb2204dba50b08720391cb4afc9d4644b6d496e62cd60c96fda3724dbc95f97fd7da2d3f64915"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000700)={0x20, 0x1, 0xc1, "2e9d6d82550848f94688d986b495ce740875f282bbfa0169a4e50da11801ff973b06e2717581c20fb1426fcc620cfd78300cbd8a6dfbaab47eaef6438654bbbd406ddc53f91a87f477a9765b657f4cc6c303aba8dc0f7ef0ca29a063921aaf9974370336e059a7853602bce14b5506a9e7f7cfaf2e999888476ca350a6bd4f666fe8d4bce8bf9137267b086e9f0e1154e1757af61662a891fe68b7047bfd2dfa75768187fa0d1ab71d4df2f6cd076c10c8eb65b355cfc523f7a0cf3db3b977ecfc"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0xa0}})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRES16=r0, @ANYBLOB="040046000a0034000202020202020000080026"], 0x48}, 0x1, 0x0, 0x0, 0xf040}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRES16=r0, @ANYBLOB="040046000a0034000202020202020000080026"], 0x48}, 0x1, 0x0, 0x0, 0xf040}, 0x0)
shutdown(r0, 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$setpipe(r7, 0x8, 0x80000000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x7, 0x15}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x7, 0x15}, 0x90)

41.866454ms ago: executing program 3 (id=5534):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
write(r1, &(0x7f0000000200)="89", 0xffe3)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20)
write(r0, &(0x7f0000000700)='h', 0x1)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
setresuid(0xee00, 0xee00, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)='file read /etc/passwd /ask.uid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]==/bin\"\n', 0x4c)

0s ago: executing program 3 (id=5535):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x20003)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_open_dev$cec(0x0, 0x0, 0x109403)
getpid()
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r2, 0x0, r0, 0x0, 0x6, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6)

kernel console output (not intermixed with test programs):

x10/0x10
[ 1805.185408][T25192]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1805.185445][T25192]  ? rt_mutex_slowunlock+0x219/0x460
[ 1805.185493][T25192]  ? ksys_write+0x248/0x270
[ 1805.185528][T25192]  ? __pfx_ksys_write+0x10/0x10
[ 1805.185566][T25192]  __x64_sys_bpf+0xba/0xd0
[ 1805.185593][T25192]  do_syscall_64+0x166/0x520
[ 1805.185622][T25192]  ? trace_irq_disable+0x3b/0x140
[ 1805.185645][T25192]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1805.185670][T25192]  ? clear_bhb_loop+0x70/0xc0
[ 1805.185699][T25192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1805.185723][T25192] RIP: 0033:0x7f714ed9e0d9
[ 1805.185744][T25192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1805.185765][T25192] RSP: 002b:00007f714cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1805.185790][T25192] RAX: ffffffffffffffda RBX: 00007f714f025fa0 RCX: 00007f714ed9e0d9
[ 1805.185808][T25192] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005
[ 1805.185824][T25192] RBP: 00007f714cff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1805.185839][T25192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1805.185854][T25192] R13: 00007f714f026038 R14: 00007f714f025fa0 R15: 00007ffcdfc202b8
[ 1805.185890][T25192]  </TASK>
[ 1805.228159][T25192] syz.1.5379: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1805.228423][T25192] CPU: 1 UID: 0 PID: 25192 Comm: syz.1.5379 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1805.228472][T25192] Tainted: [L]=SOFTLOCKUP
[ 1805.228493][T25192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1805.228532][T25192] Call Trace:
[ 1805.228553][T25192]  <TASK>
[ 1805.228580][T25192]  dump_stack_lvl+0xe8/0x150
[ 1805.228689][T25192]  warn_alloc+0x24d/0x270
[ 1805.228736][T25192]  ? __kasan_kmalloc+0x22/0xb0
[ 1805.228800][T25192]  ? __pfx_warn_alloc+0x10/0x10
[ 1805.228859][T25192]  ? __get_vm_area_node+0x155/0x2f0
[ 1805.228946][T25192]  ? __get_vm_area_node+0x2a9/0x2f0
[ 1805.229009][T25192]  ? __lock_acquire+0x683/0x2ce0
[ 1805.229078][T25192]  __vmalloc_node_range_noprof+0x376/0x1560
[ 1805.229237][T25192]  ? __lock_acquire+0x683/0x2ce0
[ 1805.229312][T25192]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1805.229388][T25192]  ? kernel_text_address+0xa5/0xe0
[ 1805.229454][T25192]  ? bpf_prog_alloc_no_stats+0x47/0x560
[ 1805.229499][T25192]  __vmalloc_noprof+0xd2/0x120
[ 1805.229566][T25192]  ? bpf_prog_alloc_no_stats+0x47/0x560
[ 1805.229628][T25192]  bpf_prog_alloc_no_stats+0x47/0x560
[ 1805.229685][T25192]  ? bpf_prog_alloc+0x2a/0x1a0
[ 1805.229793][T25192]  bpf_prog_alloc+0x3c/0x1a0
[ 1805.229868][T25192]  bpf_prog_load+0x7f8/0x1c20
[ 1805.229935][T25192]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1805.230063][T25192]  __sys_bpf+0xd0d/0xd90
[ 1805.230147][T25192]  ? __pfx___sys_bpf+0x10/0x10
[ 1805.230221][T25192]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1805.230310][T25192]  ? rt_mutex_slowunlock+0x219/0x460
[ 1805.230417][T25192]  ? ksys_write+0x248/0x270
[ 1805.230503][T25192]  ? __pfx_ksys_write+0x10/0x10
[ 1805.230604][T25192]  __x64_sys_bpf+0xba/0xd0
[ 1805.230668][T25192]  do_syscall_64+0x166/0x520
[ 1805.230721][T25192]  ? trace_irq_disable+0x3b/0x140
[ 1805.230777][T25192]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1805.230838][T25192]  ? clear_bhb_loop+0x70/0xc0
[ 1805.230904][T25192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1805.231000][T25192] RIP: 0033:0x7f714ed9e0d9
[ 1805.231029][T25192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1805.231045][T25192] RSP: 002b:00007f714cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1805.231100][T25192] RAX: ffffffffffffffda RBX: 00007f714f025fa0 RCX: 00007f714ed9e0d9
[ 1805.231154][T25192] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005
[ 1805.231200][T25192] RBP: 00007f714cff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1805.231243][T25192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1805.231272][T25192] R13: 00007f714f026038 R14: 00007f714f025fa0 R15: 00007ffcdfc202b8
[ 1805.231328][T25192]  </TASK>
[ 1805.277216][T25192] Mem-Info:
[ 1805.277252][T25192] active_anon:214 inactive_anon:17855 isolated_anon:0
[ 1805.277252][T25192]  active_file:29809 inactive_file:35069 isolated_file:0
[ 1805.277252][T25192]  unevictable:0 dirty:147 writeback:0
[ 1805.277252][T25192]  slab_reclaimable:13559 slab_unreclaimable:115717
[ 1805.277252][T25192]  mapped:47375 shmem:9827 pagetables:1990
[ 1805.277252][T25192]  sec_pagetables:0 bounce:0
[ 1805.277252][T25192]  kernel_misc_reclaimable:0
[ 1805.277252][T25192]  free:1218653 free_pcp:11299 free_cma:0
[ 1805.277376][T25192] Node 0 active_anon:856kB inactive_anon:71420kB active_file:119044kB inactive_file:140276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:189500kB dirty:588kB writeback:0kB shmem:39308kB kernel_stack:17092kB pagetables:7800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1805.277499][T25192] Node 1 active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1805.277597][T25192] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1805.277732][T25192] lowmem_reserve[]: 0 2499 2501 2501 2501
[ 1805.277818][T25192] Node 0 DMA32 free:912424kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:856kB inactive_anon:71420kB active_file:119044kB inactive_file:140276kB unevictable:0kB writepending:588kB zspages:0kB present:3129332kB managed:2559548kB mlocked:0kB bounce:0kB free_pcp:45176kB local_pcp:8556kB free_cma:0kB
[ 1805.277962][T25192] lowmem_reserve[]: 0 0 1 1 1
[ 1805.278038][T25192] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1840kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB
[ 1805.278158][T25192] lowmem_reserve[]: 0 0 0 0 0
[ 1805.278256][T25192] Node 1 Normal free:3946828kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1805.278453][T25192] lowmem_reserve[]: 0 0 0 0 0
[ 1805.278545][T25192] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1805.307059][T25192] Node 0 DMA32: 1866*4kB (UME) 1379*8kB (UME) 484*16kB (UM) 513*32kB (UME) 366*64kB (UME) 300*128kB (UME) 212*256kB (UME) 74*512kB (UME) 23*1024kB (UME) 14*2048kB (UM) 162*4096kB (UM) = 912416kB
[ 1805.307390][T25192] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1805.307594][T25192] Node 1 Normal: 5*4kB (UM) 7*8kB (UM) 6*16kB (UM) 7*32kB (UM) 7*64kB (UM) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 961*4096kB (M) = 3946828kB
[ 1805.307992][T25192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1805.308030][T25192] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1805.308067][T25192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1805.308106][T25192] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1805.308171][T25192] 74706 total pagecache pages
[ 1805.308192][T25192] 5 pages in swap cache
[ 1805.308219][T25192] Free swap  = 124976kB
[ 1805.308238][T25192] Total swap = 124996kB
[ 1805.308257][T25192] 2097051 pages RAM
[ 1805.308276][T25192] 0 pages HighMem/MovableOnly
[ 1805.341731][T25192] 425089 pages reserved
[ 1805.341763][T25192] 0 pages cma reserved
[ 1805.487215][ T5699] usb 4-1: new full-speed USB device number 92 using dummy_hcd
[ 1805.767742][ T5699] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1806.229472][ T5699] usb 4-1: config index 0 descriptor too short (expected 63186, got 210)
[ 1806.229502][ T5699] usb 4-1: config 0 has an invalid interface number: 106 but max is 0
[ 1806.229523][ T5699] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1806.229543][ T5699] usb 4-1: config 0 has no interface number 0
[ 1806.229585][ T5699] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1806.229609][ T5699] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1806.229632][ T5699] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1806.229683][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1806.315599][ T5699] usb 4-1: config 0 descriptor??
[ 1806.383062][T25195] binder: BINDER_SET_CONTEXT_MGR already set
[ 1806.383077][T25195] binder: 25193:25195 ioctl 4018620d 200000000100 returned -16
[ 1806.424286][ T5699] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1806.528900][   T37] kauditd_printk_skb: 43 callbacks suppressed
[ 1806.528935][   T37] audit: type=1326 audit(1787360206.115:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25189 comm="syz.3.5380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50b92de0d9 code=0x0
[ 1806.820811][T25214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1806.822228][T25214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1808.037130][T17594] Bluetooth: hci0: command tx timeout
[ 1808.199619][T15513] usb 4-1: Failed to submit usb control message: -110
[ 1808.199655][T15513] usb 4-1: unable to send the bmi data to the device: -110
[ 1808.199673][T15513] usb 4-1: unable to get target info from device
[ 1808.199687][T15513] usb 4-1: could not get target info (-110)
[ 1808.199705][T15513] usb 4-1: could not probe fw (-110)
[ 1808.310464][T25114] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1808.310619][T25114] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1808.310846][T25114] bridge_slave_0: entered allmulticast mode
[ 1808.360603][T25114] bridge_slave_0: entered promiscuous mode
[ 1808.445237][T13330] usb 4-1: USB disconnect, device number 92
[ 1808.460306][T25114] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1808.460416][T25114] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1808.460597][T25114] bridge_slave_1: entered allmulticast mode
[ 1808.538347][T25114] bridge_slave_1: entered promiscuous mode
[ 1808.833090][T25114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1808.856035][T25114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1808.914643][T25222] FAULT_INJECTION: forcing a failure.
[ 1808.914643][T25222] name failslab, interval 1, probability 0, space 0, times 0
[ 1808.914683][T25222] CPU: 1 UID: 0 PID: 25222 Comm: syz.3.5390 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1808.914737][T25222] Tainted: [L]=SOFTLOCKUP
[ 1808.914752][T25222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1808.914775][T25222] Call Trace:
[ 1808.914791][T25222]  <TASK>
[ 1808.914801][T25222]  dump_stack_lvl+0xe8/0x150
[ 1808.914837][T25222]  should_fail_ex+0x46b/0x600
[ 1808.914866][T25222]  should_failslab+0xa8/0x100
[ 1808.914892][T25222]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1808.914927][T25222]  ? __alloc_skb+0x1db/0x7a0
[ 1808.914957][T25222]  ? __alloc_skb+0x1db/0x7a0
[ 1808.914993][T25222]  __alloc_skb+0x1db/0x7a0
[ 1808.915027][T25222]  netlink_sendmsg+0x5d4/0xb40
[ 1808.915060][T25222]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1808.915085][T25222]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1808.915112][T25222]  ? __kernel_text_address+0xd/0x30
[ 1808.915132][T25222]  ? unwind_get_return_address+0x4d/0x90
[ 1808.915158][T25222]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1808.915181][T25222]  sock_sendmsg_nosec+0x13a/0x180
[ 1808.915211][T25222]  ____sys_sendmsg+0x565/0x870
[ 1808.915232][T25222]  ? __might_fault+0xaf/0x130
[ 1808.915259][T25222]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1808.915289][T25222]  ? import_iovec+0x73/0xa0
[ 1808.915318][T25222]  ___sys_sendmsg+0x2a5/0x360
[ 1808.915339][T25222]  ? __lock_acquire+0x683/0x2ce0
[ 1808.915365][T25222]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1808.915420][T25222]  ? __fget_files+0x2a/0x420
[ 1808.915452][T25222]  ? __fget_files+0x3a8/0x420
[ 1808.915491][T25222]  __x64_sys_sendmsg+0x1b7/0x290
[ 1808.915541][T25222]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1808.915589][T25222]  do_syscall_64+0x166/0x520
[ 1808.915618][T25222]  ? trace_irq_disable+0x3b/0x140
[ 1808.915641][T25222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1808.915666][T25222]  ? clear_bhb_loop+0x70/0xc0
[ 1808.915695][T25222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1808.915718][T25222] RIP: 0033:0x7f50b92de0d9
[ 1808.915740][T25222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1808.915761][T25222] RSP: 002b:00007f50b7536028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1808.915786][T25222] RAX: ffffffffffffffda RBX: 00007f50b9565fa0 RCX: 00007f50b92de0d9
[ 1808.915803][T25222] RDX: 0000000000040814 RSI: 0000200000000100 RDI: 0000000000000004
[ 1808.915819][T25222] RBP: 00007f50b7536090 R08: 0000000000000000 R09: 0000000000000000
[ 1808.915834][T25222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1808.915848][T25222] R13: 00007f50b9566038 R14: 00007f50b9565fa0 R15: 00007ffd92510038
[ 1808.915884][T25222]  </TASK>
[ 1809.254956][T25224] GUP no longer grows the stack in syz.4.5389 (25224): 200000003000-200000200000 (200000002000)
[ 1809.254992][T25224] CPU: 1 UID: 0 PID: 25224 Comm: syz.4.5389 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1809.255021][T25224] Tainted: [L]=SOFTLOCKUP
[ 1809.255029][T25224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1809.255043][T25224] Call Trace:
[ 1809.255051][T25224]  <TASK>
[ 1809.255061][T25224]  dump_stack_lvl+0xe8/0x150
[ 1809.255098][T25224]  __get_user_pages+0x22b5/0x2650
[ 1809.255162][T25224]  __gup_longterm_locked+0xd52/0x15c0
[ 1809.255200][T25224]  ? process_vm_rw+0x626/0xba0
[ 1809.255237][T25224]  ? process_vm_rw+0x626/0xba0
[ 1809.255277][T25224]  pin_user_pages_remote+0xdc/0x130
[ 1809.255312][T25224]  ? __pfx_pin_user_pages_remote+0x10/0x10
[ 1809.255345][T25224]  ? up_read+0x34/0x180
[ 1809.255376][T25224]  ? mm_access+0x188/0x2c0
[ 1809.255402][T25224]  process_vm_rw+0x650/0xba0
[ 1809.255445][T25224]  ? __pfx_process_vm_rw+0x10/0x10
[ 1809.255481][T25224]  ? futex_wait+0x2a2/0x390
[ 1809.255598][T25224]  ? rcu_is_watching+0x16/0xb0
[ 1809.255634][T25224]  __x64_sys_process_vm_writev+0xe0/0x100
[ 1809.255674][T25224]  do_syscall_64+0x166/0x520
[ 1809.255704][T25224]  ? trace_irq_disable+0x3b/0x140
[ 1809.255727][T25224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1809.255751][T25224]  ? clear_bhb_loop+0x70/0xc0
[ 1809.255781][T25224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1809.255804][T25224] RIP: 0033:0x7f7b6ccce0d9
[ 1809.255826][T25224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1809.255846][T25224] RSP: 002b:00007f7b6af05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[ 1809.255871][T25224] RAX: ffffffffffffffda RBX: 00007f7b6cf56090 RCX: 00007f7b6ccce0d9
[ 1809.255889][T25224] RDX: 0000000000000310 RSI: 0000200000c22000 RDI: 00000000000001e6
[ 1809.255902][T25224] RBP: 00007f7b6cd65024 R08: 0000000000000001 R09: 0000000000000000
[ 1809.255916][T25224] R10: 0000200000c22fa0 R11: 0000000000000246 R12: 0000000000000000
[ 1809.255931][T25224] R13: 00007f7b6cf56128 R14: 00007f7b6cf56090 R15: 00007ffc8420bcb8
[ 1809.255967][T25224]  </TASK>
[ 1809.640630][T25230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5393'.
[ 1809.673487][T25220] kernel profiling enabled (shift: 9)
[ 1810.091104][T25114] team0: Port device team_slave_0 added
[ 1810.104843][T17594] Bluetooth: hci0: command tx timeout
[ 1810.205409][T25114] team0: Port device team_slave_1 added
[ 1810.428810][T25114] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1810.428827][T25114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1810.428852][T25114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1810.543140][T25243] FAULT_INJECTION: forcing a failure.
[ 1810.543140][T25243] name failslab, interval 1, probability 0, space 0, times 0
[ 1810.543175][T25243] CPU: 1 UID: 0 PID: 25243 Comm: syz.3.5399 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1810.543202][T25243] Tainted: [L]=SOFTLOCKUP
[ 1810.543209][T25243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1810.543221][T25243] Call Trace:
[ 1810.543230][T25243]  <TASK>
[ 1810.543238][T25243]  dump_stack_lvl+0xe8/0x150
[ 1810.543272][T25243]  should_fail_ex+0x46b/0x600
[ 1810.543300][T25243]  should_failslab+0xa8/0x100
[ 1810.543325][T25243]  __kmalloc_noprof+0xfe/0x780
[ 1810.543346][T25243]  ? bpf_test_init+0x9f/0x150
[ 1810.543365][T25243]  ? bpf_test_init+0x9f/0x150
[ 1810.543390][T25243]  bpf_test_init+0x9f/0x150
[ 1810.543415][T25243]  bpf_prog_test_run_skb+0x31e/0x2230
[ 1810.543456][T25243]  ? __fget_files+0x3a8/0x420
[ 1810.543480][T25243]  ? __fget_files+0x2a/0x420
[ 1810.543510][T25243]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[ 1810.543532][T25243]  bpf_prog_test_run+0x2cb/0x340
[ 1810.543561][T25243]  __sys_bpf+0xa22/0xd90
[ 1810.543591][T25243]  ? __pfx___sys_bpf+0x10/0x10
[ 1810.543616][T25243]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1810.543646][T25243]  ? rt_mutex_slowunlock+0x219/0x460
[ 1810.543684][T25243]  ? ksys_write+0x248/0x270
[ 1810.543713][T25243]  ? __pfx_ksys_write+0x10/0x10
[ 1810.543745][T25243]  __x64_sys_bpf+0xba/0xd0
[ 1810.543768][T25243]  do_syscall_64+0x166/0x520
[ 1810.543808][T25243]  ? trace_irq_disable+0x3b/0x140
[ 1810.543840][T25243]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1810.543862][T25243]  ? clear_bhb_loop+0x70/0xc0
[ 1810.543888][T25243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1810.543909][T25243] RIP: 0033:0x7f50b92de0d9
[ 1810.543927][T25243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1810.543946][T25243] RSP: 002b:00007f50b7536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1810.543970][T25243] RAX: ffffffffffffffda RBX: 00007f50b9565fa0 RCX: 00007f50b92de0d9
[ 1810.543986][T25243] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[ 1810.544001][T25243] RBP: 00007f50b7536090 R08: 0000000000000000 R09: 0000000000000000
[ 1810.544014][T25243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1810.544027][T25243] R13: 00007f50b9566038 R14: 00007f50b9565fa0 R15: 00007ffd92510038
[ 1810.544077][T25243]  </TASK>
[ 1810.588411][T25114] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1810.588428][T25114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1810.588457][T25114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1811.071109][T25114] hsr_slave_0: entered promiscuous mode
[ 1811.074069][T25114] hsr_slave_1: entered promiscuous mode
[ 1811.092021][T25114] debugfs: 'hsr0' already exists in 'hsr'
[ 1811.092044][T25114] Cannot create hsr debugfs directory
[ 1811.123441][T25253] FAULT_INJECTION: forcing a failure.
[ 1811.123441][T25253] name failslab, interval 1, probability 0, space 0, times 0
[ 1811.123475][T25253] CPU: 1 UID: 0 PID: 25253 Comm: syz.3.5402 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1811.123503][T25253] Tainted: [L]=SOFTLOCKUP
[ 1811.123511][T25253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1811.123523][T25253] Call Trace:
[ 1811.123531][T25253]  <TASK>
[ 1811.123540][T25253]  dump_stack_lvl+0xe8/0x150
[ 1811.123575][T25253]  should_fail_ex+0x46b/0x600
[ 1811.123603][T25253]  should_failslab+0xa8/0x100
[ 1811.123629][T25253]  __kmalloc_cache_node_noprof+0xa9/0x6b0
[ 1811.123654][T25253]  ? __get_vm_area_node+0x155/0x2f0
[ 1811.123682][T25253]  ? __get_vm_area_node+0x155/0x2f0
[ 1811.123718][T25253]  __get_vm_area_node+0x155/0x2f0
[ 1811.123747][T25253]  ? __lock_acquire+0x683/0x2ce0
[ 1811.123775][T25253]  __vmalloc_node_range_noprof+0x34e/0x1560
[ 1811.123808][T25253]  ? bpf_prog_alloc_no_stats+0x47/0x560
[ 1811.123850][T25253]  ? __lock_acquire+0x683/0x2ce0
[ 1811.123880][T25253]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1811.123913][T25253]  ? kernel_text_address+0xa5/0xe0
[ 1811.123939][T25253]  ? bpf_prog_alloc_no_stats+0x47/0x560
[ 1811.123962][T25253]  __vmalloc_noprof+0xd2/0x120
[ 1811.123993][T25253]  ? bpf_prog_alloc_no_stats+0x47/0x560
[ 1811.124036][T25253]  bpf_prog_alloc_no_stats+0x47/0x560
[ 1811.124087][T25253]  ? bpf_prog_alloc+0x2a/0x1a0
[ 1811.124115][T25253]  bpf_prog_alloc+0x3c/0x1a0
[ 1811.124143][T25253]  bpf_prog_load+0x7f8/0x1c20
[ 1811.124183][T25253]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1811.124237][T25253]  __sys_bpf+0xd0d/0xd90
[ 1811.124279][T25253]  ? __pfx___sys_bpf+0x10/0x10
[ 1811.124315][T25253]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1811.124350][T25253]  ? rt_mutex_slowunlock+0x219/0x460
[ 1811.124393][T25253]  ? ksys_write+0x248/0x270
[ 1811.124427][T25253]  ? __pfx_ksys_write+0x10/0x10
[ 1811.124466][T25253]  __x64_sys_bpf+0xba/0xd0
[ 1811.124493][T25253]  do_syscall_64+0x166/0x520
[ 1811.124522][T25253]  ? trace_irq_disable+0x3b/0x140
[ 1811.124545][T25253]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1811.124569][T25253]  ? clear_bhb_loop+0x70/0xc0
[ 1811.124596][T25253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1811.124619][T25253] RIP: 0033:0x7f50b92de0d9
[ 1811.124640][T25253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1811.124659][T25253] RSP: 002b:00007f50b7536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1811.124683][T25253] RAX: ffffffffffffffda RBX: 00007f50b9565fa0 RCX: 00007f50b92de0d9
[ 1811.124701][T25253] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[ 1811.124716][T25253] RBP: 00007f50b7536090 R08: 0000000000000000 R09: 0000000000000000
[ 1811.124731][T25253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1811.124745][T25253] R13: 00007f50b9566038 R14: 00007f50b9565fa0 R15: 00007ffd92510038
[ 1811.124780][T25253]  </TASK>
[ 1812.767120][T25263] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5405'.
[ 1812.802291][T25262] binder: BINDER_SET_CONTEXT_MGR already set
[ 1812.802305][T25262] binder: 25260:25262 ioctl 4018620d 200000000100 returned -16
[ 1812.821537][T25263] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5405'.
[ 1813.481530][T25273] Mass Storage Function, version: 2009/09/11
[ 1813.481805][T25273] LUN: removable file: (no medium)
[ 1815.037267][T25256] FAULT_INJECTION: forcing a failure.
[ 1815.037267][T25256] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1815.037303][T25256] CPU: 0 UID: 0 PID: 25256 Comm: syz.1.5391 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1815.037332][T25256] Tainted: [L]=SOFTLOCKUP
[ 1815.037339][T25256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1815.037350][T25256] Call Trace:
[ 1815.037358][T25256]  <TASK>
[ 1815.037368][T25256]  dump_stack_lvl+0xe8/0x150
[ 1815.037403][T25256]  should_fail_ex+0x46b/0x600
[ 1815.037429][T25256]  _copy_to_user+0x31/0xb0
[ 1815.037455][T25256]  simple_read_from_buffer+0xe1/0x170
[ 1815.037502][T25256]  proc_fail_nth_read+0x1be/0x230
[ 1815.037540][T25256]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1815.037577][T25256]  ? rw_verify_area+0x250/0x4d0
[ 1815.037608][T25256]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1815.037640][T25256]  vfs_read+0x219/0xa90
[ 1815.037678][T25256]  ? __pfx_vfs_read+0x10/0x10
[ 1815.037713][T25256]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1815.037745][T25256]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1815.037775][T25256]  ? mutex_lock_nested+0x152/0x1d0
[ 1815.037809][T25256]  ? fdget_pos+0x252/0x320
[ 1815.037848][T25256]  ksys_read+0x156/0x270
[ 1815.037883][T25256]  ? __pfx_ksys_read+0x10/0x10
[ 1815.037927][T25256]  do_syscall_64+0x166/0x520
[ 1815.037956][T25256]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1815.037980][T25256]  ? clear_bhb_loop+0x70/0xc0
[ 1815.038010][T25256]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1815.038034][T25256] RIP: 0033:0x7f714ed5e90e
[ 1815.038055][T25256] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1815.038074][T25256] RSP: 002b:00007f714cfd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1815.038097][T25256] RAX: ffffffffffffffda RBX: 00007f714cfd56c0 RCX: 00007f714ed5e90e
[ 1815.038114][T25256] RDX: 000000000000000f RSI: 00007f714cfd50a0 RDI: 0000000000000005
[ 1815.038129][T25256] RBP: 00007f714cfd5090 R08: 0000000000000000 R09: 0000000000000000
[ 1815.038144][T25256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1815.038158][T25256] R13: 00007f714f026128 R14: 00007f714f026090 R15: 00007ffcdfc202b8
[ 1815.038195][T25256]  </TASK>
[ 1817.964838][T25291] FAULT_INJECTION: forcing a failure.
[ 1817.964838][T25291] name failslab, interval 1, probability 0, space 0, times 0
[ 1817.964866][T25291] CPU: 0 UID: 0 PID: 25291 Comm: syz.3.5413 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1817.964886][T25291] Tainted: [L]=SOFTLOCKUP
[ 1817.964892][T25291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1817.964901][T25291] Call Trace:
[ 1817.964907][T25291]  <TASK>
[ 1817.964914][T25291]  dump_stack_lvl+0xe8/0x150
[ 1817.964940][T25291]  should_fail_ex+0x46b/0x600
[ 1817.964960][T25291]  should_failslab+0xa8/0x100
[ 1817.964979][T25291]  __kmalloc_noprof+0xfe/0x780
[ 1817.964993][T25291]  ? rcu_is_watching+0x16/0xb0
[ 1817.965012][T25291]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1817.965028][T25291]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1817.965049][T25291]  tomoyo_realpath_from_path+0xef/0x640
[ 1817.965071][T25291]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1817.965093][T25291]  tomoyo_path_number_perm+0x246/0x5f0
[ 1817.965117][T25291]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1817.965138][T25291]  ? __lock_acquire+0x683/0x2ce0
[ 1817.965164][T25291]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1817.965183][T25291]  ? hook_file_ioctl+0x1f3/0x600
[ 1817.965251][T25291]  ? __fget_files+0x2a/0x420
[ 1817.965273][T25291]  ? __fget_files+0x2a/0x420
[ 1817.965290][T25291]  ? __fget_files+0x3a8/0x420
[ 1817.965307][T25291]  ? __fget_files+0x2a/0x420
[ 1817.965328][T25291]  security_file_ioctl+0xc3/0x2a0
[ 1817.965352][T25291]  __se_sys_ioctl+0x47/0x170
[ 1817.965377][T25291]  do_syscall_64+0x166/0x520
[ 1817.965394][T25291]  ? trace_irq_disable+0x3b/0x140
[ 1817.965410][T25291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1817.965425][T25291]  ? clear_bhb_loop+0x70/0xc0
[ 1817.965442][T25291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1817.965457][T25291] RIP: 0033:0x7f50b92de0d9
[ 1817.965473][T25291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1817.965485][T25291] RSP: 002b:00007f50b74f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1817.965501][T25291] RAX: ffffffffffffffda RBX: 00007f50b9566180 RCX: 00007f50b92de0d9
[ 1817.965529][T25291] RDX: 0000200000000180 RSI: 000000004020565a RDI: 0000000000000008
[ 1817.965544][T25291] RBP: 00007f50b74f4090 R08: 0000000000000000 R09: 0000000000000000
[ 1817.965576][T25291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1817.965590][T25291] R13: 00007f50b9566218 R14: 00007f50b9566180 R15: 00007ffd92510038
[ 1817.965626][T25291]  </TASK>
[ 1817.965794][T25291] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1818.878013][ T5715] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1819.142042][ T5715] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[ 1819.244444][ T5715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1819.706228][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1819.706255][ T5715] usb 5-1: Product: syz
[ 1819.706270][ T5715] usb 5-1: Manufacturer: syz
[ 1819.706284][ T5715] usb 5-1: SerialNumber: syz
[ 1820.892963][T25295] tmpfs: Bad value for 'nr_inodes'
[ 1820.947682][ T5715] usb 5-1: Not enough endpoints found in device, aborting!
[ 1820.999528][T25299] FAULT_INJECTION: forcing a failure.
[ 1820.999528][T25299] name failslab, interval 1, probability 0, space 0, times 0
[ 1820.999572][T25299] CPU: 1 UID: 0 PID: 25299 Comm: syz.1.5409 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1820.999601][T25299] Tainted: [L]=SOFTLOCKUP
[ 1820.999610][T25299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1820.999623][T25299] Call Trace:
[ 1820.999631][T25299]  <TASK>
[ 1820.999640][T25299]  dump_stack_lvl+0xe8/0x150
[ 1820.999676][T25299]  should_fail_ex+0x46b/0x600
[ 1820.999705][T25299]  should_failslab+0xa8/0x100
[ 1820.999732][T25299]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1820.999766][T25299]  ? __alloc_skb+0x1db/0x7a0
[ 1820.999795][T25299]  ? __alloc_skb+0x1db/0x7a0
[ 1820.999830][T25299]  __alloc_skb+0x1db/0x7a0
[ 1820.999865][T25299]  netlink_sendmsg+0x5d4/0xb40
[ 1820.999898][T25299]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1820.999934][T25299]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1820.999959][T25299]  ? __kernel_text_address+0xd/0x30
[ 1820.999978][T25299]  ? unwind_get_return_address+0x4d/0x90
[ 1821.000001][T25299]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1821.000022][T25299]  sock_sendmsg_nosec+0x13a/0x180
[ 1821.000051][T25299]  ____sys_sendmsg+0x565/0x870
[ 1821.000071][T25299]  ? __might_fault+0xaf/0x130
[ 1821.000096][T25299]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1821.000125][T25299]  ? import_iovec+0x73/0xa0
[ 1821.000151][T25299]  ___sys_sendmsg+0x2a5/0x360
[ 1821.000170][T25299]  ? __lock_acquire+0x683/0x2ce0
[ 1821.000196][T25299]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1821.000248][T25299]  ? __fget_files+0x2a/0x420
[ 1821.000272][T25299]  ? __fget_files+0x3a8/0x420
[ 1821.000306][T25299]  __x64_sys_sendmsg+0x1b7/0x290
[ 1821.000329][T25299]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1821.000369][T25299]  do_syscall_64+0x166/0x520
[ 1821.000394][T25299]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1821.000415][T25299]  ? clear_bhb_loop+0x70/0xc0
[ 1821.000439][T25299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1821.000476][T25299] RIP: 0033:0x7f714ed9e0d9
[ 1821.000494][T25299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1821.000530][T25299] RSP: 002b:00007f714cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1821.000562][T25299] RAX: ffffffffffffffda RBX: 00007f714f025fa0 RCX: 00007f714ed9e0d9
[ 1821.000579][T25299] RDX: 0000000004008000 RSI: 0000200000000380 RDI: 0000000000000005
[ 1821.000595][T25299] RBP: 00007f714cff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1821.000609][T25299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1821.000623][T25299] R13: 00007f714f026038 R14: 00007f714f025fa0 R15: 00007ffcdfc202b8
[ 1821.000659][T25299]  </TASK>
[ 1823.251122][ T5715] usb 5-1: USB disconnect, device number 106
[ 1823.574033][T25309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5417'.
[ 1824.939412][T25305] netlink: 'syz.3.5417': attribute type 4 has an invalid length.
[ 1824.940905][T25307] netlink: 'syz.1.5419': attribute type 211 has an invalid length.
[ 1825.376977][ T5889] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1825.489541][T25339] FAULT_INJECTION: forcing a failure.
[ 1825.489541][T25339] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1825.489618][T25339] CPU: 1 UID: 0 PID: 25339 Comm: syz.1.5423 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1825.489648][T25339] Tainted: [L]=SOFTLOCKUP
[ 1825.489655][T25339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1825.489676][T25339] Call Trace:
[ 1825.489684][T25339]  <TASK>
[ 1825.489693][T25339]  dump_stack_lvl+0xe8/0x150
[ 1825.489730][T25339]  should_fail_ex+0x46b/0x600
[ 1825.489759][T25339]  _copy_from_user+0x2d/0xb0
[ 1825.489787][T25339]  __copy_msghdr+0x390/0x590
[ 1825.489816][T25339]  ___sys_sendmsg+0x213/0x360
[ 1825.489837][T25339]  ? __lock_acquire+0x683/0x2ce0
[ 1825.489865][T25339]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1825.489894][T25339]  ? perf_cgroup_switch+0xe6/0x920
[ 1825.489937][T25339]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1825.490000][T25339]  __sys_sendmmsg+0x279/0x4d0
[ 1825.490026][T25339]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1825.490072][T25339]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1825.490107][T25339]  ? ksys_write+0x248/0x270
[ 1825.490139][T25339]  ? rcu_is_watching+0x16/0xb0
[ 1825.490172][T25339]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1825.490197][T25339]  do_syscall_64+0x166/0x520
[ 1825.490244][T25339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1825.490266][T25339]  ? clear_bhb_loop+0x70/0xc0
[ 1825.490312][T25339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1825.490336][T25339] RIP: 0033:0x7f714ed9e0d9
[ 1825.490358][T25339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1825.490380][T25339] RSP: 002b:00007f714cfb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1825.490405][T25339] RAX: ffffffffffffffda RBX: 00007f714f026180 RCX: 00007f714ed9e0d9
[ 1825.490423][T25339] RDX: 17fd147c801ae9af RSI: 0000200000000ac0 RDI: 0000000000000005
[ 1825.490440][T25339] RBP: 00007f714cfb4090 R08: 0000000000000000 R09: 0000000000000000
[ 1825.490454][T25339] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000001
[ 1825.490469][T25339] R13: 00007f714f026218 R14: 00007f714f026180 R15: 00007ffcdfc202b8
[ 1825.490504][T25339]  </TASK>
[ 1826.150211][ T5889] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[ 1826.152820][ T5889] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1826.161654][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1826.161764][ T5889] usb 5-1: Product: syz
[ 1826.161781][ T5889] usb 5-1: Manufacturer: syz
[ 1826.161796][ T5889] usb 5-1: SerialNumber: syz
[ 1826.422571][ T5889] usb 5-1: Not enough endpoints found in device, aborting!
[ 1828.689231][   T10] usb 5-1: USB disconnect, device number 107
[ 1828.871406][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xd351 instead
[ 1828.871438][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x6875 instead
[ 1828.871455][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0739 instead
[ 1828.871470][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x02a9 instead
[ 1828.871486][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xb83a instead
[ 1828.871502][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x32a6 instead
[ 1828.871518][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xd88f instead
[ 1828.871535][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x0a21 instead
[ 1828.871551][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x6d6e instead
[ 1828.871567][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x2011 instead
[ 1828.871583][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.871922][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x9511 instead
[ 1828.871941][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x6578 instead
[ 1828.871956][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x0a30 instead
[ 1828.871972][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x926d instead
[ 1828.871988][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xa9c1 instead
[ 1828.872004][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xbb9f instead
[ 1828.872020][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x06ff instead
[ 1828.872034][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x609b instead
[ 1828.872050][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x7656 instead
[ 1828.872066][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x2925 instead
[ 1828.872081][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.874234][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xb800 instead
[ 1828.874260][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x9058 instead
[ 1828.874279][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0xc7f6 instead
[ 1828.874298][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x82ea instead
[ 1828.874322][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x026e instead
[ 1828.874340][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x788e instead
[ 1828.874359][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x4265 instead
[ 1828.874377][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x5c79 instead
[ 1828.874396][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0xff12 instead
[ 1828.874415][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xf5dc instead
[ 1828.874441][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.874847][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xf4e4 instead
[ 1828.874868][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xc590 instead
[ 1828.874888][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x78d6 instead
[ 1828.874907][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xba85 instead
[ 1828.874925][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0xdd00 instead
[ 1828.874944][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0xa3fb instead
[ 1828.874963][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xb3fe instead
[ 1828.874981][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xb6c5 instead
[ 1828.875001][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x2ccc instead
[ 1828.875020][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x4746 instead
[ 1828.875038][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.875451][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x03ba instead
[ 1828.875473][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0xa65b instead
[ 1828.875492][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xe044 instead
[ 1828.875511][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x08b9 instead
[ 1828.875530][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x9158 instead
[ 1828.875549][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0xbada instead
[ 1828.875567][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf0de instead
[ 1828.875585][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x21d7 instead
[ 1828.875603][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x59b1 instead
[ 1828.875621][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x2c36 instead
[ 1828.875638][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.878881][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xeb1a instead
[ 1828.878933][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x2da7 instead
[ 1828.878974][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x61b8 instead
[ 1828.878997][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x6a08 instead
[ 1828.879036][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x1512 instead
[ 1828.879076][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0xf2cb instead
[ 1828.879093][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xb5f1 instead
[ 1828.879109][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0xf294 instead
[ 1828.879150][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x51c6 instead
[ 1828.879206][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xa3e8 instead
[ 1828.879257][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.881963][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0xbff5 instead
[ 1828.882044][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0xbc7b instead
[ 1828.882101][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0xb687 instead
[ 1828.882133][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xee74 instead
[ 1828.882165][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0xc45f instead
[ 1828.882192][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x0f91 instead
[ 1828.882242][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x23d4 instead
[ 1828.882290][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x2e5a instead
[ 1828.882339][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x0361 instead
[ 1828.882387][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x78e9 instead
[ 1828.882437][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.885045][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x7201 instead
[ 1828.885090][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xeb13 instead
[ 1828.885129][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x7b2d instead
[ 1828.885166][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xc2b4 instead
[ 1828.885202][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0xbd93 instead
[ 1828.885239][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x056a instead
[ 1828.885281][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x753a instead
[ 1828.885313][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x02b5 instead
[ 1828.885349][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xa302 instead
[ 1828.885388][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x7b94 instead
[ 1828.885426][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.891474][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xd0fd instead
[ 1828.891524][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xbce7 instead
[ 1828.891569][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0xffb7 instead
[ 1828.891608][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x2017 instead
[ 1828.891647][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x0a9c instead
[ 1828.891692][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x3d27 instead
[ 1828.891731][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x34e7 instead
[ 1828.891770][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xe4f2 instead
[ 1828.891810][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x9e06 instead
[ 1828.891850][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x5681 instead
[ 1828.891890][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.897882][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x418c instead
[ 1828.897927][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x038c instead
[ 1828.897979][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0xce09 instead
[ 1828.898019][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xf894 instead
[ 1828.898064][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x961e instead
[ 1828.898103][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x3696 instead
[ 1828.898142][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x3911 instead
[ 1828.898182][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x3150 instead
[ 1828.898221][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x7462 instead
[ 1828.898266][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xd515 instead
[ 1828.898304][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.899054][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0xe701 instead
[ 1828.899099][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x2807 instead
[ 1828.899135][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xfc02 instead
[ 1828.899174][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xc379 instead
[ 1828.899211][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xbace instead
[ 1828.899249][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xa85a instead
[ 1828.903281][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xd164 instead
[ 1828.903339][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x3bba instead
[ 1828.903380][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xd2aa instead
[ 1828.903433][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0xa9ab instead
[ 1828.903480][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.904332][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x7254 instead
[ 1828.904378][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xa515 instead
[ 1828.904425][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x9a46 instead
[ 1828.904465][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0xd0d7 instead
[ 1828.904519][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0xf06c instead
[ 1828.904558][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x31ad instead
[ 1828.904597][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8b30 instead
[ 1828.904637][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0xfe74 instead
[ 1828.908998][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x2fd5 instead
[ 1828.909046][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x2325 instead
[ 1828.909097][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.909914][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x7c3a instead
[ 1828.909955][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0648 instead
[ 1828.910003][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xf2e4 instead
[ 1828.910043][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0xb594 instead
[ 1828.910084][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x1108 instead
[ 1828.910124][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x6c78 instead
[ 1828.910165][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x6c07 instead
[ 1828.910205][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x46be instead
[ 1828.910247][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x540d instead
[ 1828.910288][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xf810 instead
[ 1828.910357][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.918982][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0xb5e5 instead
[ 1828.919029][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xf298 instead
[ 1828.919068][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x64fa instead
[ 1828.919105][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x460e instead
[ 1828.919149][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xe738 instead
[ 1828.919218][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x7351 instead
[ 1828.919258][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x57e0 instead
[ 1828.919299][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x7543 instead
[ 1828.919337][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x8fc0 instead
[ 1828.919384][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x12bf instead
[ 1828.919424][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.931047][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xf90d instead
[ 1828.931098][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0xa513 instead
[ 1828.931135][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x28ee instead
[ 1828.931173][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x820d instead
[ 1828.931210][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x13f9 instead
[ 1828.931247][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0xda9a instead
[ 1828.931285][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xa7cf instead
[ 1828.931330][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x249f instead
[ 1828.931367][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x3c27 instead
[ 1828.931404][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x3af7 instead
[ 1828.931448][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.936757][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xdba4 instead
[ 1828.959469][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x55bf instead
[ 1828.959528][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0xaccc instead
[ 1828.959545][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x4ef8 instead
[ 1828.959579][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xf147 instead
[ 1828.959642][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xd8c8 instead
[ 1828.959699][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x3baa instead
[ 1828.959742][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x881c instead
[ 1828.959779][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0xe42c instead
[ 1828.959816][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x2007 instead
[ 1828.959852][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.976544][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x3498 instead
[ 1828.976607][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x5d3d instead
[ 1828.976651][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0xc81f instead
[ 1828.976703][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x29b0 instead
[ 1828.976768][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0xd66f instead
[ 1828.977040][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x6f21 instead
[ 1828.977059][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x8f33 instead
[ 1828.977074][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x542c instead
[ 1828.977090][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x001a instead
[ 1828.977105][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0x0cca instead
[ 1828.977120][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.977471][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x3b98 instead
[ 1828.977489][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x01ca instead
[ 1828.977505][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x82dc instead
[ 1828.977521][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0x1a85 instead
[ 1828.977537][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0x191b instead
[ 1828.977553][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0xd456 instead
[ 1828.977569][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xddb0 instead
[ 1828.977602][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0xb9fd instead
[ 1828.977726][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x5f65 instead
[ 1828.977745][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x76ba instead
[ 1828.977762][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.982505][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0xd077 instead
[ 1828.982545][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0xf9df instead
[ 1828.982594][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0xa32a instead
[ 1828.982651][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x8128 instead
[ 1828.982713][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0xb149 instead
[ 1828.982766][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0x8dc9 instead
[ 1828.982811][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x6e18 instead
[ 1828.982854][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0xf2c8 instead
[ 1828.982909][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x493f instead
[ 1828.982967][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0xe16e instead
[ 1828.983010][T25357] jffs2: Further such events for this erase block will not be printed
[ 1828.989046][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x1fe6 instead
[ 1828.989099][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x38a8 instead
[ 1828.989151][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x3fac instead
[ 1828.989206][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x1ec5 instead
[ 1828.989243][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0xb2d6 instead
[ 1828.989286][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x35e0 instead
[ 1828.989323][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xc34f instead
[ 1828.989361][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0xc607 instead
[ 1828.989397][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0xd703 instead
[ 1828.989450][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x4b6f instead
[ 1828.989480][T25357] jffs2: Further such events for this erase block will not be printed
[ 1829.004338][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x5728 instead
[ 1829.004381][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x002e instead
[ 1829.004426][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x0051 instead
[ 1829.004457][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x8ffd instead
[ 1829.004495][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x4bf0 instead
[ 1829.004530][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0xa010 instead
[ 1829.004573][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xccf8 instead
[ 1829.004610][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x0c3c instead
[ 1829.004648][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0xb136 instead
[ 1829.004684][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x6fa3 instead
[ 1829.004720][T25357] jffs2: Further such events for this erase block will not be printed
[ 1829.018843][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x3a96 instead
[ 1829.018900][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0xac59 instead
[ 1829.019360][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x1958 instead
[ 1829.019428][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x709a instead
[ 1829.019471][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x8bd5 instead
[ 1829.019513][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x3b85 instead
[ 1829.019562][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x40a3 instead
[ 1829.019616][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x9e24 instead
[ 1829.019655][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x3de6 instead
[ 1829.019703][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0xc574 instead
[ 1829.019736][T25357] jffs2: Further such events for this erase block will not be printed
[ 1829.028919][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x93fb instead
[ 1829.028966][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0xc003 instead
[ 1829.029021][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0xdec3 instead
[ 1829.029054][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x7072 instead
[ 1829.029070][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0xd396 instead
[ 1829.029086][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x6ab8 instead
[ 1829.029471][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x8469 instead
[ 1829.029515][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x290a instead
[ 1829.029548][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x9a34 instead
[ 1829.029564][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x1402 instead
[ 1829.029604][T25357] jffs2: Further such events for this erase block will not be printed
[ 1829.036979][T25360] FAULT_INJECTION: forcing a failure.
[ 1829.036979][T25360] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1829.037011][T25360] CPU: 1 UID: 0 PID: 25360 Comm: syz.1.5427 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1829.037038][T25360] Tainted: [L]=SOFTLOCKUP
[ 1829.037045][T25360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1829.037057][T25360] Call Trace:
[ 1829.037065][T25360]  <TASK>
[ 1829.037073][T25360]  dump_stack_lvl+0xe8/0x150
[ 1829.037105][T25360]  should_fail_ex+0x46b/0x600
[ 1829.037131][T25360]  strncpy_from_user+0x36/0x2c0
[ 1829.037155][T25360]  do_getname+0x77/0x250
[ 1829.037179][T25360]  do_sys_openat2+0xcc/0x200
[ 1829.037203][T25360]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1829.037226][T25360]  ? ksys_write+0x248/0x270
[ 1829.037249][T25360]  ? __pfx_ksys_write+0x10/0x10
[ 1829.037272][T25360]  __x64_sys_openat+0x138/0x170
[ 1829.037298][T25360]  do_syscall_64+0x166/0x520
[ 1829.037324][T25360]  ? trace_irq_disable+0x3b/0x140
[ 1829.037343][T25360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1829.037363][T25360]  ? clear_bhb_loop+0x70/0xc0
[ 1829.037387][T25360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1829.037406][T25360] RIP: 0033:0x7f714ed9e0d9
[ 1829.037425][T25360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1829.037442][T25360] RSP: 002b:00007f714cfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1829.037461][T25360] RAX: ffffffffffffffda RBX: 00007f714f026090 RCX: 00007f714ed9e0d9
[ 1829.037475][T25360] RDX: 0000000000000042 RSI: 0000200000000280 RDI: ffffffffffffff9c
[ 1829.037490][T25360] RBP: 00007f714cfd5090 R08: 0000000000000000 R09: 0000000000000000
[ 1829.037502][T25360] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001
[ 1829.037514][T25360] R13: 00007f714f026128 R14: 00007f714f026090 R15: 00007ffcdfc202b8
[ 1829.037544][T25360]  </TASK>
[ 1829.039076][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x1521 instead
[ 1829.039128][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0xa35d instead
[ 1829.039145][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0xf9c0 instead
[ 1829.039161][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x221d instead
[ 1829.039207][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x857f instead
[ 1829.039224][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0xc98d instead
[ 1829.039241][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xfc04 instead
[ 1829.039258][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x1b33 instead
[ 1829.039282][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0x431f instead
[ 1829.039771][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x86b9 instead
[ 1829.039825][T25357] jffs2: Further such events for this erase block will not be printed
[ 1830.337513][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x6993 instead
[ 1830.337590][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x6dc8 instead
[ 1830.337649][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x4b66 instead
[ 1830.337689][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0xf18b instead
[ 1830.337728][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x7dc9 instead
[ 1830.337785][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x5034 instead
[ 1830.337820][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xff02 instead
[ 1830.337870][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0xcb6f instead
[ 1830.337888][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x40a5 instead
[ 1830.337943][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x2df2 instead
[ 1830.338044][T25357] jffs2: Further such events for this erase block will not be printed
[ 1830.357444][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x7627 instead
[ 1830.357499][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x3b07 instead
[ 1830.357553][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0xc1ba instead
[ 1830.357595][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0xec86 instead
[ 1830.357620][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0xd3ac instead
[ 1830.357647][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0xecd2 instead
[ 1830.357687][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x0c77 instead
[ 1830.357751][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x40a8 instead
[ 1830.357788][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0x5ee2 instead
[ 1830.357824][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0x1987 instead
[ 1830.357866][T25357] jffs2: Further such events for this erase block will not be printed
[ 1830.373994][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0xf668 instead
[ 1830.374062][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x69ab instead
[ 1830.374104][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0xa096 instead
[ 1830.374137][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x8761 instead
[ 1830.374187][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x0c5c instead
[ 1830.374231][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x3ab7 instead
[ 1830.374279][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x2149 instead
[ 1830.374339][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x60e3 instead
[ 1830.374380][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0xd2b4 instead
[ 1830.374422][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x08ba instead
[ 1830.374471][T25357] jffs2: Further such events for this erase block will not be printed
[ 1830.394633][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x5703 instead
[ 1830.394692][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x2a4e instead
[ 1830.394732][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x511c instead
[ 1830.394763][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0xe9f0 instead
[ 1830.394795][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x929f instead
[ 1830.394833][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x7f1a instead
[ 1830.394874][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x7720 instead
[ 1830.394911][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x5398 instead
[ 1830.394947][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0xe729 instead
[ 1830.394984][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xa77c instead
[ 1830.395020][T25357] jffs2: Further such events for this erase block will not be printed
[ 1830.425620][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0xc239 instead
[ 1830.425682][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x97f7 instead
[ 1830.425727][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0xd939 instead
[ 1830.425780][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x8738 instead
[ 1830.425828][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0xbf70 instead
[ 1830.425880][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0xb3ad instead
[ 1830.425923][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x19d4 instead
[ 1830.425966][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x3cd1 instead
[ 1830.426009][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0x75eb instead
[ 1830.426059][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0x1ecd instead
[ 1830.426102][T25357] jffs2: Further such events for this erase block will not be printed
[ 1830.444206][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0xae71 instead
[ 1830.444253][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x29f8 instead
[ 1830.444285][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0xe394 instead
[ 1830.444325][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x025d instead
[ 1830.444368][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x7ab0 instead
[ 1830.444405][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x7def instead
[ 1830.444441][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x9bcf instead
[ 1830.444478][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0xfaae instead
[ 1830.444515][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x2988 instead
[ 1830.444565][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0xcf65 instead
[ 1830.444611][T25357] jffs2: Further such events for this erase block will not be printed
[ 1830.471282][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x78a1 instead
[ 1830.471335][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0xef0e instead
[ 1830.471390][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xfd8d instead
[ 1830.471434][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0xc3fa instead
[ 1830.471471][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x2774 instead
[ 1830.471508][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0xef68 instead
[ 1830.471545][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xdd89 instead
[ 1830.471583][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x3d74 instead
[ 1830.471620][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0xc149 instead
[ 1830.471659][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0xc043 instead
[ 1830.471695][T25357] jffs2: Further such events for this erase block will not be printed
[ 1830.472076][T25357] jffs2: Old JFFS2 bitmask found at 0x0001e854
[ 1830.472102][T25357] jffs2: You cannot use older JFFS2 filesystems with newer kernels
[ 1830.472500][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0xef8b instead
[ 1830.472540][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x98a5 instead
[ 1830.490184][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0xf300 instead
[ 1830.490235][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x85a6 instead
[ 1830.490281][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x6eb7 instead
[ 1830.490328][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0xd801 instead
[ 1830.490367][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xa208 instead
[ 1830.490413][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0xc275 instead
[ 1830.490451][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x274c instead
[ 1830.490862][T25357] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0xd656 instead
[ 1830.490893][T25357] jffs2: Further such events for this erase block will not be printed
[ 1830.491670][T25357] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 1830.491691][T25357] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[ 1833.239201][T25372] loop5: detected capacity change from 0 to 7
[ 1833.278571][T25372] Dev loop5: unable to read RDB block 7
[ 1833.278618][T25372]  loop5: unable to read partition table
[ 1833.278805][T25372] loop5: partition table beyond EOD, truncated
[ 1833.278839][T25372] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1833.784129][T25385] FAULT_INJECTION: forcing a failure.
[ 1833.784129][T25385] name failslab, interval 1, probability 0, space 0, times 0
[ 1833.784167][T25385] CPU: 1 UID: 0 PID: 25385 Comm: syz.3.5431 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1833.784196][T25385] Tainted: [L]=SOFTLOCKUP
[ 1833.784204][T25385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1833.784217][T25385] Call Trace:
[ 1833.784226][T25385]  <TASK>
[ 1833.784234][T25385]  dump_stack_lvl+0xe8/0x150
[ 1833.784283][T25385]  should_fail_ex+0x46b/0x600
[ 1833.784312][T25385]  should_failslab+0xa8/0x100
[ 1833.784337][T25385]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1833.784370][T25385]  ? dup_task_struct+0x52/0xa20
[ 1833.784393][T25385]  ? dup_task_struct+0x52/0xa20
[ 1833.784421][T25385]  dup_task_struct+0x52/0xa20
[ 1833.784445][T25385]  ? rt_spin_unlock+0x165/0x200
[ 1833.784468][T25385]  copy_process+0x820/0x43f0
[ 1833.784495][T25385]  ? __lock_acquire+0x683/0x2ce0
[ 1833.784526][T25385]  ? __might_fault+0xaf/0x130
[ 1833.784559][T25385]  ? __pfx_copy_process+0x10/0x10
[ 1833.784585][T25385]  ? __asan_memset+0x22/0x50
[ 1833.784619][T25385]  kernel_clone+0x2d2/0x8d0
[ 1833.784645][T25385]  ? __pfx_kernel_clone+0x10/0x10
[ 1833.784679][T25385]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1833.784713][T25385]  __se_sys_clone3+0x33c/0x360
[ 1833.784740][T25385]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1833.784788][T25385]  ? __pfx_ksys_write+0x10/0x10
[ 1833.784842][T25385]  do_syscall_64+0x166/0x520
[ 1833.784867][T25385]  ? trace_irq_disable+0x3b/0x140
[ 1833.784887][T25385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1833.784909][T25385]  ? clear_bhb_loop+0x70/0xc0
[ 1833.784934][T25385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1833.784965][T25385] RIP: 0033:0x7f50b92de0d9
[ 1833.784984][T25385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1833.785001][T25385] RSP: 002b:00007f50b7514ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[ 1833.785023][T25385] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f50b92de0d9
[ 1833.785036][T25385] RDX: 00007f50b7514f10 RSI: 0000000000000058 RDI: 00007f50b7514f10
[ 1833.785058][T25385] RBP: 00007f50b7515090 R08: 0000000000000000 R09: 0000000000000058
[ 1833.785071][T25385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1833.785082][T25385] R13: 00007f50b9566128 R14: 00007f50b9566090 R15: 00007ffd92510038
[ 1833.785111][T25385]  </TASK>
[ 1834.775017][   T37] audit: type=1326 audit(1787360234.355:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25405 comm="syz.4.5428" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1834.776410][   T37] audit: type=1326 audit(1787360234.355:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25405 comm="syz.4.5428" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1834.837341][   T37] audit: type=1326 audit(1787360234.415:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25405 comm="syz.4.5428" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1834.840917][   T37] audit: type=1326 audit(1787360234.425:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25405 comm="syz.4.5428" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1834.846087][   T37] audit: type=1326 audit(1787360234.425:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25405 comm="syz.4.5428" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1834.846149][   T37] audit: type=1326 audit(1787360234.425:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25405 comm="syz.4.5428" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1834.846513][   T37] audit: type=1326 audit(1787360234.425:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25405 comm="syz.4.5428" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1834.878995][   T37] audit: type=1326 audit(1787360234.455:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25405 comm="syz.4.5428" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1834.879805][   T37] audit: type=1326 audit(1787360234.465:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25405 comm="syz.4.5428" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1834.908116][   T37] audit: type=1326 audit(1787360234.485:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25405 comm="syz.4.5428" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1835.055611][T25403] gadgetfs: bound to dummy_udc driver
[ 1835.471578][T25417] netlink: 1976 bytes leftover after parsing attributes in process `syz.2.5439'.
[ 1835.676917][T20003] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1836.530173][T25433] FAULT_INJECTION: forcing a failure.
[ 1836.530173][T25433] name failslab, interval 1, probability 0, space 0, times 0
[ 1836.530212][T25433] CPU: 1 UID: 0 PID: 25433 Comm: syz.4.5441 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1836.530243][T25433] Tainted: [L]=SOFTLOCKUP
[ 1836.530252][T25433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1836.530266][T25433] Call Trace:
[ 1836.530275][T25433]  <TASK>
[ 1836.530285][T25433]  dump_stack_lvl+0xe8/0x150
[ 1836.530328][T25433]  should_fail_ex+0x46b/0x600
[ 1836.530360][T25433]  should_failslab+0xa8/0x100
[ 1836.530389][T25433]  __kmalloc_cache_noprof+0xa0/0x6b0
[ 1836.530414][T25433]  ? tomoyo_init_log+0x195/0x1fa0
[ 1836.530438][T25433]  ? tomoyo_init_log+0x195/0x1fa0
[ 1836.530463][T25433]  ? widen_string+0x3b/0x2a0
[ 1836.530491][T25433]  tomoyo_init_log+0x195/0x1fa0
[ 1836.530519][T25433]  ? __pfx_ip6_addr_string+0x10/0x10
[ 1836.530553][T25433]  ? format_decode+0xdc/0xda0
[ 1836.530575][T25433]  ? widen_string+0x3b/0x2a0
[ 1836.530597][T25433]  ? string+0x28a/0x2d0
[ 1836.530622][T25433]  ? __pfx_tomoyo_init_log+0x10/0x10
[ 1836.530648][T25433]  ? tomoyo_profile+0x11/0x50
[ 1836.530682][T25433]  ? tomoyo_domain_quota_is_ok+0x422/0x570
[ 1836.530717][T25433]  tomoyo_supervisor+0x35f/0x1560
[ 1836.530753][T25433]  ? __pfx_tomoyo_supervisor+0x10/0x10
[ 1836.530786][T25433]  ? snprintf+0xe8/0x140
[ 1836.530813][T25433]  ? __pfx_snprintf+0x10/0x10
[ 1836.530844][T25433]  ? tomoyo_check_acl+0x386/0x400
[ 1836.530879][T25433]  tomoyo_check_inet_address+0x5e5/0x930
[ 1836.530902][T25433]  ? kstrtouint+0x6e/0xe0
[ 1836.530938][T25433]  ? tomoyo_check_inet_address+0x27f/0x930
[ 1836.530961][T25433]  ? __pfx_tomoyo_check_inet_address+0x10/0x10
[ 1836.530992][T25433]  ? __lock_acquire+0x683/0x2ce0
[ 1836.531045][T25433]  ? __might_fault+0xaf/0x130
[ 1836.531074][T25433]  tomoyo_socket_bind_permission+0x1e6/0x290
[ 1836.531106][T25433]  security_socket_bind+0xc0/0x280
[ 1836.531136][T25433]  __sys_bind+0x276/0x410
[ 1836.531168][T25433]  ? __pfx___sys_bind+0x10/0x10
[ 1836.531206][T25433]  ? __pfx_ksys_write+0x10/0x10
[ 1836.531241][T25433]  __x64_sys_bind+0x7a/0x90
[ 1836.531269][T25433]  do_syscall_64+0x166/0x520
[ 1836.531293][T25433]  ? trace_irq_disable+0x3b/0x140
[ 1836.531313][T25433]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1836.531333][T25433]  ? clear_bhb_loop+0x70/0xc0
[ 1836.531358][T25433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1836.531377][T25433] RIP: 0033:0x7f7b6ccce0d9
[ 1836.531395][T25433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1836.531412][T25433] RSP: 002b:00007f7b6af26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 1836.531433][T25433] RAX: ffffffffffffffda RBX: 00007f7b6cf55fa0 RCX: 00007f7b6ccce0d9
[ 1836.531449][T25433] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003
[ 1836.531462][T25433] RBP: 00007f7b6af26090 R08: 0000000000000000 R09: 0000000000000000
[ 1836.531474][T25433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1836.531486][T25433] R13: 00007f7b6cf56038 R14: 00007f7b6cf55fa0 R15: 00007ffc8420bcb8
[ 1836.531517][T25433]  </TASK>
[ 1836.935935][T20003] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[ 1836.949691][T20003] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1836.957251][T20003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1836.957275][T20003] usb 4-1: Product: syz
[ 1836.957290][T20003] usb 4-1: Manufacturer: syz
[ 1836.957305][T20003] usb 4-1: SerialNumber: syz
[ 1837.227502][T20003] usb 4-1: Not enough endpoints found in device, aborting!
[ 1837.519119][T25441] FAULT_INJECTION: forcing a failure.
[ 1837.519119][T25441] name failslab, interval 1, probability 0, space 0, times 0
[ 1837.519153][T25441] CPU: 1 UID: 0 PID: 25441 Comm: syz.4.5442 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1837.519181][T25441] Tainted: [L]=SOFTLOCKUP
[ 1837.519188][T25441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1837.519200][T25441] Call Trace:
[ 1837.519208][T25441]  <TASK>
[ 1837.519216][T25441]  dump_stack_lvl+0xe8/0x150
[ 1837.519251][T25441]  should_fail_ex+0x46b/0x600
[ 1837.519278][T25441]  should_failslab+0xa8/0x100
[ 1837.519303][T25441]  kmem_cache_alloc_noprof+0xa4/0x660
[ 1837.519334][T25441]  ? dst_alloc+0x105/0x170
[ 1837.519357][T25441]  ? dst_alloc+0x105/0x170
[ 1837.519380][T25441]  ? fib_lookup+0x76/0x440
[ 1837.519412][T25441]  dst_alloc+0x105/0x170
[ 1837.519438][T25441]  ip_route_output_key_hash_rcu+0x14ac/0x2720
[ 1837.519467][T25441]  ? ip_route_output_key_hash+0xd8/0x2a0
[ 1837.519489][T25441]  ip_route_output_key_hash+0x18d/0x2a0
[ 1837.519512][T25441]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[ 1837.519549][T25441]  ip_route_output_flow+0x2a/0x150
[ 1837.519577][T25441]  ? security_sk_classify_flow+0x6d/0x150
[ 1837.519609][T25441]  udp_sendmsg+0x144a/0x2140
[ 1837.519641][T25441]  ? is_bpf_text_address+0x26/0x2b0
[ 1837.519672][T25441]  ? __pfx_udp_sendmsg+0x10/0x10
[ 1837.519727][T25441]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1837.519779][T25441]  udpv6_sendmsg+0x915/0x2610
[ 1837.519809][T25441]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1837.519847][T25441]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1837.519872][T25441]  ? __pfx_udpv6_sendmsg+0x10/0x10
[ 1837.519930][T25441]  ? __asan_memset+0x22/0x50
[ 1837.519966][T25441]  ? inet_send_prepare+0x5b/0x260
[ 1837.519989][T25441]  ? inet6_sendmsg+0xe4/0x120
[ 1837.520016][T25441]  ? __pfx_inet6_sendmsg+0x10/0x10
[ 1837.520041][T25441]  sock_sendmsg_nosec+0x90/0x180
[ 1837.520070][T25441]  ____sys_sendmsg+0x565/0x870
[ 1837.520090][T25441]  ? __might_fault+0xaf/0x130
[ 1837.520116][T25441]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1837.520145][T25441]  ? import_iovec+0x73/0xa0
[ 1837.520173][T25441]  ___sys_sendmsg+0x2a5/0x360
[ 1837.520192][T25441]  ? __lock_acquire+0x683/0x2ce0
[ 1837.520217][T25441]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1837.520244][T25441]  ? kstrtouint+0x6e/0xe0
[ 1837.520298][T25441]  ? __fget_files+0x2a/0x420
[ 1837.520323][T25441]  ? __fget_files+0x3a8/0x420
[ 1837.520358][T25441]  __sys_sendmmsg+0x279/0x4d0
[ 1837.520385][T25441]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1837.520415][T25441]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1837.520448][T25441]  ? ksys_write+0x248/0x270
[ 1837.520478][T25441]  ? __pfx_ksys_write+0x10/0x10
[ 1837.520512][T25441]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1837.520535][T25441]  do_syscall_64+0x166/0x520
[ 1837.520560][T25441]  ? trace_irq_disable+0x3b/0x140
[ 1837.520580][T25441]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1837.520600][T25441]  ? clear_bhb_loop+0x70/0xc0
[ 1837.520625][T25441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1837.520645][T25441] RIP: 0033:0x7f7b6ccce0d9
[ 1837.520664][T25441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1837.520681][T25441] RSP: 002b:00007f7b6af26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1837.520702][T25441] RAX: ffffffffffffffda RBX: 00007f7b6cf55fa0 RCX: 00007f7b6ccce0d9
[ 1837.520717][T25441] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000003
[ 1837.520729][T25441] RBP: 00007f7b6af26090 R08: 0000000000000000 R09: 0000000000000000
[ 1837.520747][T25441] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001
[ 1837.520760][T25441] R13: 00007f7b6cf56038 R14: 00007f7b6cf55fa0 R15: 00007ffc8420bcb8
[ 1837.520790][T25441]  </TASK>
[ 1838.520598][T25447] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1838.699397][T25445] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[ 1838.699425][T25445] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1838.838265][T25447] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9)
[ 1838.838292][T25447] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1838.838515][T25447] vhci_hcd vhci_hcd.0: Device attached
[ 1838.949928][T25445] vhci_hcd vhci_hcd.0: Device attached
[ 1838.952109][T25454] vhci_hcd: connection closed
[ 1838.962718][T25459] vhci_hcd: connection closed
[ 1839.151730][T13330] usb 37-1: new high-speed USB device number 2 using vhci_hcd
[ 1839.885633][T25456] vhci_hcd: sendmsg failed!, ret=-32 for 48
[ 1839.980570][T25470] binder: BINDER_SET_CONTEXT_MGR already set
[ 1839.980584][T25470] binder: 25467:25470 ioctl 4018620d 200000000100 returned -16
[ 1842.103768][ T5685] usb 4-1: USB disconnect, device number 93
[ 1842.117233][T24851] vhci_hcd vhci_hcd.2: stop threads
[ 1842.118548][T24851] vhci_hcd vhci_hcd.2: release socket
[ 1842.199028][T25479] openvswitch: netlink: Missing key (keys=c0, expected=100)
[ 1842.285319][T24851] vhci_hcd vhci_hcd.2: disconnect device
[ 1842.336141][T24851] vhci_hcd vhci_hcd.2: stop threads
[ 1842.336162][T24851] vhci_hcd vhci_hcd.2: release socket
[ 1842.336228][T24851] vhci_hcd vhci_hcd.2: disconnect device
[ 1842.763792][T25495] binder: 25493:25495 ioctl 4018620d 0 returned -22
[ 1843.277102][ T5685] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1843.699129][ T5685] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 1843.934937][ T5685] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1843.934987][ T5685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1845.472756][T13330] vhci_hcd vhci_hcd.2: vhci_device speed not set
[ 1845.891450][ T5685] usbhid 5-1:1.0: can't add hid device: -71
[ 1845.891557][ T5685] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[ 1845.938675][ T5685] usb 5-1: USB disconnect, device number 108
[ 1846.143358][   T37] kauditd_printk_skb: 168 callbacks suppressed
[ 1846.143376][   T37] audit: type=1800 audit(1787360245.725:1374): pid=25536 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5462" name="max_speed" dev="configfs" ino=100873 res=0 errno=0
[ 1846.457912][T25532] netlink: 452 bytes leftover after parsing attributes in process `syz.3.5462'.
[ 1846.938270][T25556] FAULT_INJECTION: forcing a failure.
[ 1846.938270][T25556] name failslab, interval 1, probability 0, space 0, times 0
[ 1846.938312][T25556] CPU: 0 UID: 0 PID: 25556 Comm: syz.3.5470 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1846.938343][T25556] Tainted: [L]=SOFTLOCKUP
[ 1846.938352][T25556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1846.938365][T25556] Call Trace:
[ 1846.938374][T25556]  <TASK>
[ 1846.938384][T25556]  dump_stack_lvl+0xe8/0x150
[ 1846.938422][T25556]  should_fail_ex+0x46b/0x600
[ 1846.938452][T25556]  should_failslab+0xa8/0x100
[ 1846.938480][T25556]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1846.938524][T25556]  ? __alloc_skb+0x1db/0x7a0
[ 1846.938554][T25556]  ? __alloc_skb+0x1db/0x7a0
[ 1846.938592][T25556]  __alloc_skb+0x1db/0x7a0
[ 1846.938639][T25556]  netlink_sendmsg+0x5d4/0xb40
[ 1846.938672][T25556]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1846.938698][T25556]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1846.938725][T25556]  ? __kernel_text_address+0xd/0x30
[ 1846.938746][T25556]  ? unwind_get_return_address+0x4d/0x90
[ 1846.938772][T25556]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1846.938794][T25556]  sock_sendmsg_nosec+0x13a/0x180
[ 1846.938825][T25556]  ____sys_sendmsg+0x565/0x870
[ 1846.938846][T25556]  ? __might_fault+0xaf/0x130
[ 1846.938872][T25556]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1846.938903][T25556]  ? import_iovec+0x73/0xa0
[ 1846.938931][T25556]  ___sys_sendmsg+0x2a5/0x360
[ 1846.938952][T25556]  ? __lock_acquire+0x683/0x2ce0
[ 1846.938982][T25556]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1846.939036][T25556]  ? __fget_files+0x2a/0x420
[ 1846.939063][T25556]  ? __fget_files+0x3a8/0x420
[ 1846.939099][T25556]  __x64_sys_sendmsg+0x1b7/0x290
[ 1846.939125][T25556]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1846.939167][T25556]  do_syscall_64+0x166/0x520
[ 1846.939193][T25556]  ? trace_irq_disable+0x3b/0x140
[ 1846.939214][T25556]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1846.939236][T25556]  ? clear_bhb_loop+0x70/0xc0
[ 1846.939262][T25556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1846.939283][T25556] RIP: 0033:0x7f50b92de0d9
[ 1846.939302][T25556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1846.939322][T25556] RSP: 002b:00007f50b7536028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1846.939345][T25556] RAX: ffffffffffffffda RBX: 00007f50b9565fa0 RCX: 00007f50b92de0d9
[ 1846.939360][T25556] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000003
[ 1846.939374][T25556] RBP: 00007f50b7536090 R08: 0000000000000000 R09: 0000000000000000
[ 1846.939387][T25556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1846.939400][T25556] R13: 00007f50b9566038 R14: 00007f50b9565fa0 R15: 00007ffd92510038
[ 1846.939432][T25556]  </TASK>
[ 1847.164331][T25558] CIFS mount error: No usable UNC path provided in device string!
[ 1847.164331][T25558] 
[ 1847.175426][T25558] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1847.394197][T25569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5472'.
[ 1847.423072][T25114] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1848.244543][T25114] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1848.273595][T25114] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1848.390731][T25578] FAULT_INJECTION: forcing a failure.
[ 1848.390731][T25578] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1848.390763][T25578] CPU: 0 UID: 0 PID: 25578 Comm: syz.2.5474 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1848.390786][T25578] Tainted: [L]=SOFTLOCKUP
[ 1848.390792][T25578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1848.390801][T25578] Call Trace:
[ 1848.390808][T25578]  <TASK>
[ 1848.390815][T25578]  dump_stack_lvl+0xe8/0x150
[ 1848.390850][T25578]  should_fail_ex+0x46b/0x600
[ 1848.390874][T25578]  _copy_from_iter+0x1d3/0x1660
[ 1848.390893][T25578]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1848.390934][T25578]  ? __pfx_policy_nodemask+0x10/0x10
[ 1848.390954][T25578]  ? unwind_next_frame+0x8f/0x2550
[ 1848.390974][T25578]  ? __pfx__copy_from_iter+0x10/0x10
[ 1848.390994][T25578]  ? alloc_pages_mpol+0x11b/0x280
[ 1848.391021][T25578]  copy_page_from_iter+0x219/0x2d0
[ 1848.391042][T25578]  tun_get_user+0x1c16/0x44e0
[ 1848.391070][T25578]  ? is_bpf_text_address+0x292/0x2b0
[ 1848.391094][T25578]  ? tun_get_user+0x70a/0x44e0
[ 1848.391132][T25578]  ? __lock_acquire+0x683/0x2ce0
[ 1848.391153][T25578]  ? __pfx_tun_get_user+0x10/0x10
[ 1848.391181][T25578]  ? __lock_acquire+0x683/0x2ce0
[ 1848.391216][T25578]  ? ref_tracker_alloc+0x353/0x4c0
[ 1848.391237][T25578]  ? get_pid_task+0x20/0x1f0
[ 1848.391265][T25578]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1848.391284][T25578]  ? tun_get+0x1c/0x2f0
[ 1848.391306][T25578]  ? tun_get+0x1c/0x2f0
[ 1848.391331][T25578]  ? tun_get+0x1c/0x2f0
[ 1848.391353][T25578]  ? tun_get+0x1c/0x2f0
[ 1848.391377][T25578]  tun_chr_write_iter+0x119/0x200
[ 1848.391402][T25578]  vfs_write+0x61e/0xbb0
[ 1848.391434][T25578]  ? __pfx_vfs_write+0x10/0x10
[ 1848.391463][T25578]  ? __fget_files+0x2a/0x420
[ 1848.391489][T25578]  ksys_write+0x156/0x270
[ 1848.391512][T25578]  ? __pfx_ksys_write+0x10/0x10
[ 1848.391567][T25578]  do_syscall_64+0x166/0x520
[ 1848.391589][T25578]  ? trace_irq_disable+0x3b/0x140
[ 1848.391606][T25578]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1848.391622][T25578]  ? clear_bhb_loop+0x70/0xc0
[ 1848.391642][T25578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1848.391658][T25578] RIP: 0033:0x7f5984ace90e
[ 1848.391674][T25578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1848.391689][T25578] RSP: 002b:00007f5982d65fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1848.391708][T25578] RAX: ffffffffffffffda RBX: 00007f5982d666c0 RCX: 00007f5984ace90e
[ 1848.391720][T25578] RDX: 000000000000002a RSI: 0000200000000100 RDI: 00000000000000c8
[ 1848.391731][T25578] RBP: 00007f5982d66090 R08: 0000000000000000 R09: 0000000000000000
[ 1848.391742][T25578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1848.391752][T25578] R13: 00007f5984d96038 R14: 00007f5984d95fa0 R15: 00007ffcb9b773a8
[ 1848.391779][T25578]  </TASK>
[ 1848.508090][T25114] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1848.740962][T25114] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1848.858568][T25114] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1848.885594][T25114] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1849.098369][T25114] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1851.654471][T25616] FAULT_INJECTION: forcing a failure.
[ 1851.654471][T25616] name failslab, interval 1, probability 0, space 0, times 0
[ 1851.654506][T25616] CPU: 0 UID: 0 PID: 25616 Comm: syz.4.5480 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1851.654533][T25616] Tainted: [L]=SOFTLOCKUP
[ 1851.654540][T25616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1851.654552][T25616] Call Trace:
[ 1851.654560][T25616]  <TASK>
[ 1851.654568][T25616]  dump_stack_lvl+0xe8/0x150
[ 1851.654602][T25616]  should_fail_ex+0x46b/0x600
[ 1851.654628][T25616]  should_failslab+0xa8/0x100
[ 1851.654652][T25616]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1851.654686][T25616]  ? __alloc_skb+0x1db/0x7a0
[ 1851.654714][T25616]  ? __alloc_skb+0x1db/0x7a0
[ 1851.654746][T25616]  __alloc_skb+0x1db/0x7a0
[ 1851.654778][T25616]  netlink_sendmsg+0x5d4/0xb40
[ 1851.654808][T25616]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1851.654831][T25616]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1851.654855][T25616]  ? __kernel_text_address+0xd/0x30
[ 1851.654874][T25616]  ? unwind_get_return_address+0x4d/0x90
[ 1851.654897][T25616]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1851.654921][T25616]  sock_sendmsg_nosec+0x13a/0x180
[ 1851.654949][T25616]  ____sys_sendmsg+0x565/0x870
[ 1851.654968][T25616]  ? __might_fault+0xaf/0x130
[ 1851.654992][T25616]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1851.655021][T25616]  ? import_iovec+0x73/0xa0
[ 1851.655048][T25616]  ___sys_sendmsg+0x2a5/0x360
[ 1851.655067][T25616]  ? __lock_acquire+0x683/0x2ce0
[ 1851.655092][T25616]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1851.655142][T25616]  ? __fget_files+0x2a/0x420
[ 1851.655166][T25616]  ? __fget_files+0x3a8/0x420
[ 1851.655206][T25616]  __x64_sys_sendmsg+0x1b7/0x290
[ 1851.655229][T25616]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1851.655269][T25616]  do_syscall_64+0x166/0x520
[ 1851.655293][T25616]  ? trace_irq_disable+0x3b/0x140
[ 1851.655314][T25616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1851.655334][T25616]  ? clear_bhb_loop+0x70/0xc0
[ 1851.655358][T25616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1851.655378][T25616] RIP: 0033:0x7f7b6ccce0d9
[ 1851.655397][T25616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1851.655414][T25616] RSP: 002b:00007f7b6af26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1851.655436][T25616] RAX: ffffffffffffffda RBX: 00007f7b6cf55fa0 RCX: 00007f7b6ccce0d9
[ 1851.655451][T25616] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000004
[ 1851.655464][T25616] RBP: 00007f7b6af26090 R08: 0000000000000000 R09: 0000000000000000
[ 1851.655476][T25616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1851.655488][T25616] R13: 00007f7b6cf56038 R14: 00007f7b6cf55fa0 R15: 00007ffc8420bcb8
[ 1851.655518][T25616]  </TASK>
[ 1852.191429][T25624] FAULT_INJECTION: forcing a failure.
[ 1852.191429][T25624] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1852.191466][T25624] CPU: 1 UID: 0 PID: 25624 Comm: syz.1.5484 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1852.191493][T25624] Tainted: [L]=SOFTLOCKUP
[ 1852.191501][T25624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1852.191513][T25624] Call Trace:
[ 1852.191521][T25624]  <TASK>
[ 1852.191530][T25624]  dump_stack_lvl+0xe8/0x150
[ 1852.191564][T25624]  should_fail_ex+0x46b/0x600
[ 1852.191592][T25624]  _copy_from_iter+0x1d3/0x1660
[ 1852.191631][T25624]  ? rcu_is_watching+0x16/0xb0
[ 1852.191659][T25624]  ? __pfx__copy_from_iter+0x10/0x10
[ 1852.191678][T25624]  ? __kasan_kmalloc+0x93/0xb0
[ 1852.191701][T25624]  ? __kmalloc_cache_noprof+0x3da/0x6b0
[ 1852.191722][T25624]  ? configfs_write_iter+0xf2/0x430
[ 1852.191787][T25624]  ? configfs_write_iter+0xf2/0x430
[ 1852.191822][T25624]  configfs_write_iter+0x12f/0x430
[ 1852.191856][T25624]  vfs_write+0x61e/0xbb0
[ 1852.191891][T25624]  ? __pfx_vfs_write+0x10/0x10
[ 1852.191921][T25624]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1852.191952][T25624]  ? mutex_lock_nested+0x152/0x1d0
[ 1852.191980][T25624]  ? fdget_pos+0x252/0x320
[ 1852.192013][T25624]  ksys_write+0x156/0x270
[ 1852.192043][T25624]  ? __pfx_ksys_write+0x10/0x10
[ 1852.192081][T25624]  do_syscall_64+0x166/0x520
[ 1852.192105][T25624]  ? trace_irq_disable+0x3b/0x140
[ 1852.192125][T25624]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1852.192147][T25624]  ? clear_bhb_loop+0x70/0xc0
[ 1852.192168][T25624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1852.192183][T25624] RIP: 0033:0x7f714ed9e0d9
[ 1852.192198][T25624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1852.192212][T25624] RSP: 002b:00007f714cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1852.192229][T25624] RAX: ffffffffffffffda RBX: 00007f714f025fa0 RCX: 00007f714ed9e0d9
[ 1852.192240][T25624] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003
[ 1852.192249][T25624] RBP: 00007f714cff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1852.192258][T25624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1852.192267][T25624] R13: 00007f714f026038 R14: 00007f714f025fa0 R15: 00007ffcdfc202b8
[ 1852.192294][T25624]  </TASK>
[ 1852.688925][T25114] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1852.749479][T25114] 8021q: adding VLAN 0 to HW filter on device team0
[ 1852.774521][T24857] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1852.774658][T24857] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1852.817245][T24862] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1852.817373][T24862] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1852.910290][T25639] overlayfs: missing 'workdir'
[ 1853.027166][T25640] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1853.223936][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.223989][ T1331] ieee802154 phy1 wpan1: encryption failed: -22
[ 1854.027036][T16437] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1854.178133][T16437] usb 5-1: Using ep0 maxpacket: 32
[ 1854.181191][T16437] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice=10.00
[ 1854.184886][T16437] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30
[ 1854.184935][T16437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1854.184972][T16437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1854.184997][T16437] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126
[ 1855.878174][T16437] usb 5-1: New USB device strings: Mfr=0, Product=31, SerialNumber=0
[ 1855.878253][T16437] usb 5-1: Product: syz
[ 1855.943860][T16437] usb 5-1: config 0 descriptor??
[ 1856.653545][T25114] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1856.685454][T16437] hid_parser_main: 813 callbacks suppressed
[ 1856.685478][T16437] monterey 0003:0566:3004.001C: unknown main item tag 0x0
[ 1856.685512][T16437] monterey 0003:0566:3004.001C: unknown main item tag 0x0
[ 1856.685556][T16437] monterey 0003:0566:3004.001C: unknown main item tag 0x6
[ 1856.685601][T16437] monterey 0003:0566:3004.001C: unknown main item tag 0x0
[ 1856.689278][T16437] monterey 0003:0566:3004.001C: unknown main item tag 0x0
[ 1856.689347][T16437] monterey 0003:0566:3004.001C: unknown main item tag 0x0
[ 1856.689426][T16437] monterey 0003:0566:3004.001C: unknown main item tag 0x0
[ 1856.689483][T16437] monterey 0003:0566:3004.001C: unknown main item tag 0x0
[ 1856.689543][T16437] monterey 0003:0566:3004.001C: unknown main item tag 0x0
[ 1856.689599][T16437] monterey 0003:0566:3004.001C: unknown main item tag 0x0
[ 1856.881019][T16437] monterey 0003:0566:3004.001C: hidraw0: USB HID v5.40 Device [syz] on usb-dummy_hcd.4-1/input0
[ 1857.783201][T25706] FAULT_INJECTION: forcing a failure.
[ 1857.783201][T25706] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1857.783237][T25706] CPU: 1 UID: 0 PID: 25706 Comm: syz.1.5498 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1857.783265][T25706] Tainted: [L]=SOFTLOCKUP
[ 1857.783273][T25706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1857.783284][T25706] Call Trace:
[ 1857.783292][T25706]  <TASK>
[ 1857.783300][T25706]  dump_stack_lvl+0xe8/0x150
[ 1857.783333][T25706]  should_fail_ex+0x46b/0x600
[ 1857.783361][T25706]  _copy_from_user+0x2d/0xb0
[ 1857.783385][T25706]  ___sys_sendmsg+0x1c6/0x360
[ 1857.783407][T25706]  ? __lock_acquire+0x683/0x2ce0
[ 1857.783433][T25706]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1857.783484][T25706]  ? __fget_files+0x2a/0x420
[ 1857.783509][T25706]  ? __fget_files+0x3a8/0x420
[ 1857.783544][T25706]  __x64_sys_sendmsg+0x1b7/0x290
[ 1857.783566][T25706]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1857.783606][T25706]  do_syscall_64+0x166/0x520
[ 1857.783631][T25706]  ? trace_irq_disable+0x3b/0x140
[ 1857.783650][T25706]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1857.783670][T25706]  ? clear_bhb_loop+0x70/0xc0
[ 1857.783693][T25706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1857.783713][T25706] RIP: 0033:0x7f714ed9e0d9
[ 1857.783731][T25706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1857.783753][T25706] RSP: 002b:00007f714cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1857.783774][T25706] RAX: ffffffffffffffda RBX: 00007f714f025fa0 RCX: 00007f714ed9e0d9
[ 1857.783788][T25706] RDX: 0000000000008080 RSI: 0000200000000280 RDI: 0000000000000003
[ 1857.783801][T25706] RBP: 00007f714cff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1857.783814][T25706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1857.783826][T25706] R13: 00007f714f026038 R14: 00007f714f025fa0 R15: 00007ffcdfc202b8
[ 1857.783856][T25706]  </TASK>
[ 1858.097317][ T5715] usb 5-1: USB disconnect, device number 109
[ 1859.419185][T25114] veth0_vlan: entered promiscuous mode
[ 1859.464731][T25114] veth1_vlan: entered promiscuous mode
[ 1861.235691][T19947] IPVS: starting estimator thread 0...
[ 1861.266696][T25114] veth0_macvtap: entered promiscuous mode
[ 1861.339190][T25741] IPVS: using max 12 ests per chain, 28800 per kthread
[ 1861.341971][T25114] veth1_macvtap: entered promiscuous mode
[ 1861.502176][T25731] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1861.502203][T25731] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1861.502698][T25731] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1861.502719][T25731] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[ 1861.603635][   T37] audit: type=1326 audit(1787360261.185:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25746 comm="syz.4.5507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1861.603686][   T37] audit: type=1326 audit(1787360261.185:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25746 comm="syz.4.5507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1861.603896][   T37] audit: type=1326 audit(1787360261.185:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25746 comm="syz.4.5507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1861.604587][   T37] audit: type=1326 audit(1787360261.185:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25746 comm="syz.4.5507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1861.604632][   T37] audit: type=1326 audit(1787360261.185:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25746 comm="syz.4.5507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1861.604674][   T37] audit: type=1326 audit(1787360261.185:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25746 comm="syz.4.5507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1861.604715][   T37] audit: type=1326 audit(1787360261.185:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25746 comm="syz.4.5507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1861.604907][   T37] audit: type=1326 audit(1787360261.185:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25746 comm="syz.4.5507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1861.651320][   T37] audit: type=1326 audit(1787360261.185:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25746 comm="syz.4.5507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1861.651381][   T37] audit: type=1326 audit(1787360261.185:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25746 comm="syz.4.5507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1864.577513][T25761] overlayfs: overlapping lowerdir path
[ 1865.294403][T23329] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1865.346188][T23329] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1865.392103][T23329] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1865.399226][T23329] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1865.469001][T23329] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1866.201025][T25775] netlink: 'syz.3.5511': attribute type 83 has an invalid length.
[ 1868.507785][T17594] Bluetooth: hci6: command tx timeout
[ 1869.254793][T25804] FAULT_INJECTION: forcing a failure.
[ 1869.254793][T25804] name failslab, interval 1, probability 0, space 0, times 0
[ 1869.254827][T25804] CPU: 1 UID: 0 PID: 25804 Comm: syz.1.5517 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1869.254863][T25804] Tainted: [L]=SOFTLOCKUP
[ 1869.254870][T25804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1869.254882][T25804] Call Trace:
[ 1869.254890][T25804]  <TASK>
[ 1869.254898][T25804]  dump_stack_lvl+0xe8/0x150
[ 1869.254933][T25804]  should_fail_ex+0x46b/0x600
[ 1869.254960][T25804]  should_failslab+0xa8/0x100
[ 1869.254986][T25804]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1869.255018][T25804]  ? __alloc_skb+0x1db/0x7a0
[ 1869.255047][T25804]  ? __alloc_skb+0x1db/0x7a0
[ 1869.255081][T25804]  __alloc_skb+0x1db/0x7a0
[ 1869.255113][T25804]  sock_wmalloc+0xb2/0x130
[ 1869.255137][T25804]  l2tp_ip_sendmsg+0x1c3/0x1630
[ 1869.255273][T25804]  ? sock_rps_record_flow+0x19/0x350
[ 1869.255296][T25804]  ? inet_sendmsg+0x298/0x320
[ 1869.255318][T25804]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1869.255336][T25804]  sock_sendmsg_nosec+0x10e/0x180
[ 1869.255364][T25804]  ____sys_sendmsg+0x565/0x870
[ 1869.255384][T25804]  ? __might_fault+0xaf/0x130
[ 1869.255411][T25804]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1869.255440][T25804]  ? import_iovec+0x73/0xa0
[ 1869.255466][T25804]  ___sys_sendmsg+0x2a5/0x360
[ 1869.255486][T25804]  ? __lock_acquire+0x683/0x2ce0
[ 1869.255513][T25804]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1869.255556][T25804]  ? kstrtouint+0x6e/0xe0
[ 1869.255635][T25804]  ? __fget_files+0x2a/0x420
[ 1869.255664][T25804]  ? __fget_files+0x3a8/0x420
[ 1869.255708][T25804]  __sys_sendmmsg+0x279/0x4d0
[ 1869.255739][T25804]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1869.255775][T25804]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1869.255816][T25804]  ? ksys_write+0x248/0x270
[ 1869.255851][T25804]  ? __pfx_ksys_write+0x10/0x10
[ 1869.255899][T25804]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1869.255926][T25804]  do_syscall_64+0x166/0x520
[ 1869.255956][T25804]  ? trace_irq_disable+0x3b/0x140
[ 1869.255979][T25804]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1869.256004][T25804]  ? clear_bhb_loop+0x70/0xc0
[ 1869.256033][T25804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1869.256057][T25804] RIP: 0033:0x7f714ed9e0d9
[ 1869.256079][T25804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1869.256100][T25804] RSP: 002b:00007f714cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1869.256125][T25804] RAX: ffffffffffffffda RBX: 00007f714f025fa0 RCX: 00007f714ed9e0d9
[ 1869.256143][T25804] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000003
[ 1869.256159][T25804] RBP: 00007f714cff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1869.256173][T25804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1869.256188][T25804] R13: 00007f714f026038 R14: 00007f714f025fa0 R15: 00007ffcdfc202b8
[ 1869.256225][T25804]  </TASK>
[ 1870.522650][   T37] kauditd_printk_skb: 158 callbacks suppressed
[ 1870.522681][   T37] audit: type=1326 audit(1787360270.095:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25822 comm="syz.4.5510" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1870.522729][   T37] audit: type=1326 audit(1787360270.095:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25822 comm="syz.4.5510" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1870.524306][   T37] audit: type=1326 audit(1787360270.105:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25822 comm="syz.4.5510" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1870.524934][   T37] audit: type=1326 audit(1787360270.105:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25822 comm="syz.4.5510" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7b6ccce0d9 code=0x7ffc0000
[ 1870.576923][T23329] Bluetooth: hci6: command tx timeout
[ 1870.657091][T23329] Bluetooth: hci5: command 0x0406 tx timeout
[ 1871.486934][T20003] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 1871.651919][T20003] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[ 1871.653327][T20003] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[ 1871.653352][T20003] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1871.653373][T20003] usb 5-1: config 0 has no interfaces?
[ 1871.653402][T20003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1871.671014][T20003] usb 5-1: config 0 descriptor??
[ 1871.809512][   T37] audit: type=1326 audit(1787360271.365:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25833 comm="syz.1.5525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714ed9e0d9 code=0x7fc00000
[ 1872.050795][T25853] MTD: Couldn't look up '/dev/sg0': -15
[ 1872.503334][T16437] usb 5-1: USB disconnect, device number 110
[ 1872.780052][T25862] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5533'.
[ 1872.780208][T25863] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5533'.
[ 1873.393960][T17594] Bluetooth: hci6: command tx timeout
[ 1873.396176][T25878] program syz.1.5532 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1874.190220][T25904] netlink: 632 bytes leftover after parsing attributes in process `syz.1.5538'.
[ 1875.475149][T17594] Bluetooth: hci6: command tx timeout
[ 1875.584729][T25764] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1875.584848][T25764] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1875.585007][T25764] bridge_slave_0: entered allmulticast mode
[ 1875.609866][T25764] bridge_slave_0: entered promiscuous mode
[ 1875.612775][T25764] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1875.612901][T25764] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1875.613077][T25764] bridge_slave_1: entered allmulticast mode
[ 1875.615598][T25764] bridge_slave_1: entered promiscuous mode
[ 1876.025068][T25764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1877.238249][T25764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1877.544610][T25945] binder: 25944:25945 ioctl 4018620d 0 returned -22
[ 1877.610512][T25946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1877.611097][T25946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1877.761314][T25764] team0: Port device team_slave_0 added
[ 1877.763860][T25764] team0: Port device team_slave_1 added
[ 1877.804031][T25764] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1877.804044][T25764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1877.804065][T25764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1877.805910][T25764] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1877.805921][T25764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1877.805941][T25764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1877.943059][T25764] hsr_slave_0: entered promiscuous mode
[ 1877.943913][T25764] hsr_slave_1: entered promiscuous mode
[ 1877.944513][T25764] debugfs: 'hsr0' already exists in 'hsr'
[ 1877.944529][T25764] Cannot create hsr debugfs directory
[ 1878.607483][T23644] bridge_slave_1: left allmulticast mode
[ 1878.607516][T23644] bridge_slave_1: left promiscuous mode
[ 1878.607798][T23644] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1878.778644][T23644] bridge_slave_0: left allmulticast mode
[ 1878.778679][T23644] bridge_slave_0: left promiscuous mode
[ 1878.778950][T23644] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1879.719332][T23644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1879.797409][T23644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1879.820607][T23644] bond0 (unregistering): Released all slaves
[ 1879.966577][ T5244] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1880.470298][T23644] hsr_slave_0: left promiscuous mode
[ 1880.508778][T23644] hsr_slave_1: left promiscuous mode
[ 1880.509917][T23644] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1880.547730][T23644] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1880.628161][T23644] veth1_macvtap: left promiscuous mode
[ 1880.628229][T23644] veth0_macvtap: left promiscuous mode
[ 1880.628437][T23644] veth1_vlan: left promiscuous mode
[ 1880.628569][T23644] veth0_vlan: left promiscuous mode
[ 1881.268029][T23644] team0 (unregistering): Port device team_slave_1 removed
[ 1881.327641][T23644] team0 (unregistering): Port device team_slave_0 removed
[ 1883.607919][T25764] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1883.643103][T25764] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1883.648368][T25764] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1883.692659][T25764] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1883.695153][T25764] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1883.755719][T25764] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1883.774845][T25764] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1883.822654][T25764] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1883.974222][T25764] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1883.998315][T25764] 8021q: adding VLAN 0 to HW filter on device team0
[ 1884.006444][T24857] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1884.006583][T24857] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1884.054653][T24847] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1884.056720][T24847] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1884.584915][T25764] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1884.843041][T25764] veth0_vlan: entered promiscuous mode
[ 1884.854278][T25764] veth1_vlan: entered promiscuous mode
[ 1884.890632][T25764] veth0_macvtap: entered promiscuous mode
[ 1884.937174][T25764] veth1_macvtap: entered promiscuous mode
[ 1884.957637][T25764] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1884.965555][T25764] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1885.791412][T24857] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1885.837193][T23644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1885.837209][T23644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1885.988529][T24849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1885.988550][T24849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1885.988666][T24857] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1886.002936][T24857] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1886.043389][T23644] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1886.527051][ T5715] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1886.679623][ T5715] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1886.679677][ T5715] usb 10-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[ 1886.680772][ T5715] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1886.682596][ T5715] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1886.682637][ T5715] usb 10-1: Product: syz
[ 1886.682652][ T5715] usb 10-1: Manufacturer: syz
[ 1886.744014][ T5715] uvcvideo 10-1:1.0: Found UVC 1.00 device syz (8086:0ad2)
[ 1886.744078][ T5715] uvcvideo 10-1:1.0: No streaming interface found for terminal 32770.
[ 1886.944062][ T5853] usb 10-1: USB disconnect, device number 2
[ 1894.178044][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1914.661940][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.662006][ T1331] ieee802154 phy1 wpan1: encryption failed: -22
[ 1930.657388][   T38] INFO: task syz.6.5319:24995 blocked for more than 143 seconds.
[ 1930.657415][   T38]       Tainted: G             L      syzkaller #0
[ 1930.657427][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1930.657437][   T38] task:syz.6.5319      state:D stack:27680 pid:24995 tgid:24994 ppid:19222  task_flags:0x400140 flags:0x00080002
[ 1930.657503][   T38] Call Trace:
[ 1930.657511][   T38]  <TASK>
[ 1930.657526][   T38]  __schedule+0x16d9/0x5700
[ 1930.657558][   T38]  ? __lock_acquire+0x683/0x2ce0
[ 1930.657606][   T38]  ? __pfx___schedule+0x10/0x10
[ 1930.657640][   T38]  ? schedule+0x90/0x2b0
[ 1930.657667][   T38]  schedule+0x164/0x2b0
[ 1930.657692][   T38]  cgroup_lock_and_drain_offline+0x51a/0x650
[ 1930.657739][   T38]  ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10
[ 1930.657772][   T38]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1930.657803][   T38]  ? safesetid_security_capable+0xa9/0x1a0
[ 1930.657837][   T38]  ? bpf_lsm_capable+0x9/0x20
[ 1930.657856][   T38]  ? security_capable+0x7e/0x2c0
[ 1930.657885][   T38]  cgroup1_get_tree+0x9d/0x890
[ 1930.657912][   T38]  ? cap_capable+0x123/0x460
[ 1930.657941][   T38]  ? safesetid_security_capable+0xa9/0x1a0
[ 1930.657974][   T38]  ? bpf_lsm_capable+0x9/0x20
[ 1930.657994][   T38]  vfs_get_tree+0x92/0x2a0
[ 1930.658029][   T38]  do_new_mount+0x319/0xdc0
[ 1930.658055][   T38]  ? cap_capable+0x123/0x460
[ 1930.658088][   T38]  ? __pfx_do_new_mount+0x10/0x10
[ 1930.658125][   T38]  ? ns_capable+0x89/0xe0
[ 1930.658152][   T38]  ? path_mount+0x647/0x1050
[ 1930.658182][   T38]  ? user_path_at+0xd4/0x160
[ 1930.658214][   T38]  __se_sys_mount+0x31d/0x420
[ 1930.658247][   T38]  ? __pfx___se_sys_mount+0x10/0x10
[ 1930.658280][   T38]  ? __x64_sys_mount+0x20/0xc0
[ 1930.658309][   T38]  do_syscall_64+0x166/0x520
[ 1930.658336][   T38]  ? trace_irq_disable+0x3b/0x140
[ 1930.658359][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1930.658390][   T38]  ? clear_bhb_loop+0x70/0xc0
[ 1930.658415][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1930.658436][   T38] RIP: 0033:0x7f0baaf2e0d9
[ 1930.658454][   T38] RSP: 002b:00007f0ba9186028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1930.658475][   T38] RAX: ffffffffffffffda RBX: 00007f0bab1b5fa0 RCX: 00007f0baaf2e0d9
[ 1930.658489][   T38] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000
[ 1930.658504][   T38] RBP: 00007f0baafc5024 R08: 0000200000000900 R09: 0000000000000000
[ 1930.658518][   T38] R10: 0000000002010042 R11: 0000000000000246 R12: 0000000000000000
[ 1930.658531][   T38] R13: 00007f0bab1b6038 R14: 00007f0bab1b5fa0 R15: 00007ffda4d21ae8
[ 1930.658562][   T38]  </TASK>
[ 1930.658584][   T38] 
[ 1930.658584][   T38] Showing all locks held in the system:
[ 1930.658601][   T38] locks held by khungtaskd/38: 1, last CPU#0:
[ 1930.660305][   T38]  #0: ffffffff8e1c3740 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1930.660406][   T38] locks held by getty/5337: 2, on CPU#0:
[ 1930.660662][   T38]  #0: ffff8880367010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1930.660721][   T38]  #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[ 1930.660786][   T38] locks held by kworker/u8:22/24847: 5, last CPU#0:
[ 1930.660797][   T38]  #0: ffff8880330bf938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1930.660832][   T38]  #1: ffffc900058bfc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1930.660866][   T38]  #2: ffffffff8e059280 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 1930.660899][   T38]  #3: ffffffff8e1c3740 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 1930.660932][   T38]  #4: ffffffff8e1c3740 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400
[ 1930.660968][   T38] 
[ 1930.660971][   T38] =============================================
[ 1930.660971][   T38] 
[ 1930.660984][   T38] NMI backtrace for cpu 0
[ 1930.660997][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1930.661022][   T38] Tainted: [L]=SOFTLOCKUP
[ 1930.661029][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1930.661039][   T38] Call Trace:
[ 1930.661047][   T38]  <TASK>
[ 1930.661056][   T38]  dump_stack_lvl+0xe8/0x150
[ 1930.661106][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[ 1930.661122][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1930.661146][   T38]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[ 1930.661163][   T38]  sys_info+0x135/0x170
[ 1930.661184][   T38]  watchdog+0xfd7/0x1030
[ 1930.661204][   T38]  ? watchdog+0x1c7/0x1030
[ 1930.661223][   T38]  kthread+0x38b/0x470
[ 1930.661245][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1930.661258][   T38]  ? __pfx_kthread+0x10/0x10
[ 1930.661280][   T38]  ret_from_fork+0x514/0xb70
[ 1930.661304][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1930.661324][   T38]  ? __switch_to+0xc89/0x1420
[ 1930.661345][   T38]  ? __pfx_kthread+0x10/0x10
[ 1930.661366][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1930.661399][   T38]  </TASK>
[ 1930.661404][   T38] Sending NMI from CPU 0 to CPUs 1:
[ 1930.661442][    C1] NMI backtrace for cpu 1
[ 1930.661462][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1930.661485][    C1] Tainted: [L]=SOFTLOCKUP
[ 1930.661491][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1930.661501][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1930.661524][    C1] Code: 2c 68 02 e9 53 d5 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ca 1a 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1930.661539][    C1] RSP: 0018:ffffc900001d7e40 EFLAGS: 00000246
[ 1930.661553][    C1] RAX: 0000000001568999 RBX: ffffffff819a01d0 RCX: 8000000000000001
[ 1930.661566][    C1] RDX: 0000000000000001 RSI: ffffffff8d8b5e64 RDI: ffffffff8bcb9e80
[ 1930.661578][    C1] RBP: ffffc900001d7f10 R08: ffff8880b8733d5b R09: 1ffff110170e67ab
[ 1930.661590][    C1] R10: dffffc0000000000 R11: ffffed10170e67ac R12: 0000000000000000
[ 1930.661621][    C1] R13: 1ffff110039db000 R14: 1ffff9200003afd0 R15: dffffc0000000000
[ 1930.661633][    C1] FS:  0000000000000000(0000) GS:ffff888125d06000(0000) knlGS:0000000000000000
[ 1930.661646][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1930.661657][    C1] CR2: 00005570206e8168 CR3: 000000000dfb0000 CR4: 00000000003526f0
[ 1930.661671][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1930.661680][    C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1930.661690][    C1] Call Trace:
[ 1930.661696][    C1]  <TASK>
[ 1930.661702][    C1]  default_idle+0x9/0x20
[ 1930.661722][    C1]  default_idle_call+0x72/0xb0
[ 1930.661743][    C1]  do_idle+0x2e0/0x540
[ 1930.661762][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1930.661782][    C1]  cpu_startup_entry+0x43/0x60
[ 1930.661799][    C1]  start_secondary+0x101/0x110
[ 1930.661819][    C1]  common_startup_64+0x13e/0x157
[ 1930.661844][    C1]  </TASK>
[ 1930.663986][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 1930.664001][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(lazy)} 
[ 1930.664022][   T38] Tainted: [L]=SOFTLOCKUP
[ 1930.664029][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1930.664038][   T38] Call Trace:
[ 1930.664045][   T38]  <TASK>
[ 1930.664051][   T38]  vpanic+0x56d/0xa60
[ 1930.664077][   T38]  ? __pfx___schedule+0x10/0x10
[ 1930.664101][   T38]  ? __pfx_vpanic+0x10/0x10
[ 1930.664132][   T38]  panic+0xc5/0xd0
[ 1930.664156][   T38]  ? __pfx_panic+0x10/0x10
[ 1930.664179][   T38]  ? preempt_schedule_common+0x7f/0xd0
[ 1930.664198][   T38]  ? preempt_schedule_thunk+0x16/0x40
[ 1930.664218][   T38]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[ 1930.664237][   T38]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[ 1930.664257][   T38]  watchdog+0x1030/0x1030
[ 1930.664279][   T38]  ? watchdog+0x1c7/0x1030
[ 1930.664300][   T38]  kthread+0x38b/0x470
[ 1930.664324][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1930.664339][   T38]  ? __pfx_kthread+0x10/0x10
[ 1930.664364][   T38]  ret_from_fork+0x514/0xb70
[ 1930.664389][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1930.664413][   T38]  ? __switch_to+0xc89/0x1420
[ 1930.664435][   T38]  ? __pfx_kthread+0x10/0x10
[ 1930.664460][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1930.664496][   T38]  </TASK>
[ 1930.665105][   T38] Kernel Offset: disabled