last executing test programs:

8m51.169270418s ago: executing program 2 (id=5185):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r0}, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

8m50.888518201s ago: executing program 2 (id=5190):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000340))

8m50.703384737s ago: executing program 2 (id=5194):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
io_setup(0x1, &(0x7f0000000680)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000bc0)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x8}])

8m50.294603941s ago: executing program 2 (id=5205):
r0 = socket$kcm(0x21, 0x2, 0x2)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
open_by_handle_at(r0, &(0x7f0000000180)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x6, 0x4, 0x1, 0xffffffff}}, 0x24181)

8m50.031981222s ago: executing program 2 (id=5211):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./sys/kernel/config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)

8m49.5308197s ago: executing program 2 (id=5218):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x103000, 0x100)

8m34.358738458s ago: executing program 32 (id=5218):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x103000, 0x100)

4m9.937361504s ago: executing program 1 (id=9057):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001380)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x0)

4m9.840371845s ago: executing program 1 (id=9059):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

4m9.726225511s ago: executing program 1 (id=9062):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd30, 0x25dfdbfe, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c840}, 0x4000010)

4m9.381045782s ago: executing program 1 (id=9067):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2b05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

4m9.342049881s ago: executing program 1 (id=9069):
mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500), 0xfa0)
pread64(r0, &(0x7f0000000440)=""/4096, 0x1000, 0x8)

4m6.192612863s ago: executing program 1 (id=9115):
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)})
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

4m5.808479648s ago: executing program 33 (id=9115):
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)})
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

3m44.099640782s ago: executing program 3 (id=9383):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

3m43.780438246s ago: executing program 3 (id=9389):
setns(0xc9, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x1000000, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)

3m43.331206879s ago: executing program 3 (id=9397):
r0 = epoll_create1(0x80000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x4, <r3=>r1, 0x1})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140)={0xa000201e})

3m42.756302091s ago: executing program 3 (id=9405):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00')

3m42.420454564s ago: executing program 3 (id=9410):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e0000001800028014001d"], 0x48}}, 0x0)

3m39.71248632s ago: executing program 3 (id=9448):
r0 = semget$private(0x0, 0x6, 0x1b5)
setresgid(0x0, 0xee01, 0x0)
setgroups(0x0, 0x0)
setuid(0xee01)
semop(r0, &(0x7f00000000c0)=[{0x1, 0x0, 0x800}], 0x1)

3m39.230999771s ago: executing program 34 (id=9448):
r0 = semget$private(0x0, 0x6, 0x1b5)
setresgid(0x0, 0xee01, 0x0)
setgroups(0x0, 0x0)
setuid(0xee01)
semop(r0, &(0x7f00000000c0)=[{0x1, 0x0, 0x800}], 0x1)

3m38.892250384s ago: executing program 6 (id=9458):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r1, r0, &(0x7f0000000080)=0x2, 0x7ff)

3m38.442609106s ago: executing program 6 (id=9461):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x80000000)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10)

3m37.5092937s ago: executing program 6 (id=9469):
r0 = socket$kcm(0x29, 0x2, 0x0)
close(r0)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11)
close(r0)

3m37.263781559s ago: executing program 6 (id=9473):
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', 0x0)

3m36.983804558s ago: executing program 6 (id=9475):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000020c0)="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", 0x2000, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
ppoll(&(0x7f0000000100)=[{r0, 0x4490}], 0x1, 0x0, 0x0, 0x0)

3m35.81249449s ago: executing program 6 (id=9490):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040)=0x3, 0x4)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f00000016c0)=0xfffffff4, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

3m35.482670297s ago: executing program 35 (id=9490):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040)=0x3, 0x4)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f00000016c0)=0xfffffff4, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

1m12.431961102s ago: executing program 4 (id=10966):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000c00)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)

1m9.188591925s ago: executing program 4 (id=10996):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x3, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x24000000)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0x4, 0x4)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0xc3}, 0xdb30}], 0x1, 0x40002042, 0x0)

1m8.866831242s ago: executing program 4 (id=11000):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4604a55e", 0x4}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x44}], 0x1, 0x4040)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}])

1m8.450598804s ago: executing program 4 (id=11003):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)

1m8.076944616s ago: executing program 4 (id=11007):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300"], 0x94}}, 0x0)

1m4.652998658s ago: executing program 4 (id=11028):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r2, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x0)

1m3.844560948s ago: executing program 36 (id=11028):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r2, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x0)

9.160211767s ago: executing program 7 (id=11448):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/183, 0x0, 0x9000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)

7.753989944s ago: executing program 5 (id=11467):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000bc7a007b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000040)=0x2008009, 0x4)

7.591169136s ago: executing program 9 (id=11469):
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000007c0))
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x80, 0x4f}, {0x0, 0xfffffffffffffffc, 0x0, 0xcfc, 0x7}, {0xfffffffffffffffa, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d5, 0x2b}, 0x0, @in=@local, 0x0, 0x3}}, 0xe8)
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4040040)

7.117405913s ago: executing program 5 (id=11473):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
inotify_init()
unshare(0xa020480)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f0000000580)={<r1=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
tee(r1, r2, 0xfffffffffffffc01, 0x0)

6.997733297s ago: executing program 9 (id=11475):
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0xfffffffd, {0xa, 0x78, 0x18, 0xfe, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0xb, 0x58, 0x7}}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x40}}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x400c840)

6.184444459s ago: executing program 7 (id=11481):
socket(0x10, 0x3, 0x0)
syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5842)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=ANY=[@ANYBLOB, @ANYBLOB], 0x2c}}, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x9800, &(0x7f0000000040)={0x100002, 0x70}, 0x20)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x3c5}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
syz_ublk_setup_queues(r1, r6, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2e, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

6.126817496s ago: executing program 8 (id=11483):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x2, 0x2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)

5.162076508s ago: executing program 5 (id=11486):
userfaultfd(0x80001)
socket(0x11, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r0=>0x0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x4044010)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

4.962250803s ago: executing program 8 (id=11488):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r1=>0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', <r3=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="1c", 0x1, 0x200080c0, 0x0, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x170bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3972d, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002)

4.95662959s ago: executing program 7 (id=11489):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000008e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008d40)={0x130, 0x0, 0x80000000, {0xfffffffffffff28e, 0x3, 0x0, '\x00', {0x7ff, 0x69ab20d5, 0x9a, 0x1000, 0x0, 0x0, 0xa000, '\x00', 0x4, 0x10, 0x2, 0x1000, {0x140000000000, 0x8452}, {0x3, 0x4}, {0x9, 0x10000}, {0x8000000000000001, 0x7}, 0x1, 0x1ff, 0x80000001, 0x6}}}})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.128106819s ago: executing program 9 (id=11494):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3.977025371s ago: executing program 5 (id=11496):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = epoll_create(0x2)
r2 = memfd_secret(0x0)
mmap$IORING_OFF_CQ_RING(0x0, 0x2000, 0x2000000, 0x12, r2, 0x8000000)
unshare(0x8040480)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
r3 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newqdisc={0x88, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb}, {0x0, 0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x9, [0x0, 0xd, 0x10, 0x10, 0x2, 0x1d, 0x10, 0x5, 0xa, 0xe, 0x7, 0xc, 0x7, 0xf, 0xf, 0xf], 0x1, [0x5, 0x6, 0xa47, 0x2, 0x8, 0x9, 0x3, 0x12, 0x400, 0x7, 0xdb2, 0x1, 0x6, 0x6, 0x3, 0x4], [0x7, 0xfcdc, 0x9, 0x7, 0x8000, 0xfff, 0x6a, 0x6, 0x0, 0x3, 0x9, 0x7f, 0x240, 0xfff7, 0x4, 0x1000]}}}}]}, 0x88}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0)
epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, &(0x7f0000000100), &(0x7f0000000140)={[0xc]}, 0x8)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)

3.172682627s ago: executing program 8 (id=11501):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x0)

3.158940656s ago: executing program 9 (id=11502):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7)
close(r0)
socket$inet6(0xa, 0x1, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2.650570918s ago: executing program 5 (id=11505):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c000180140003000000000000000000000000000000000014000400fe8800000000000000000000000000010c0002800500010000000000060003400002000008000740000000"], 0xa0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000030000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000040000080007400000040018000680140004"], 0xb4}}, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4)
syz_usb_connect$cdc_ncm(0x0, 0xb3, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010003020000082505a1a44000010203010902a10002010860800904000001020d0000052406000105240008000d240f01ae0900000b00df000704241a00"], &(0x7f00000000c0)={0x0, 0x0, 0x5})
sysfs$1(0x1, &(0x7f0000000040)='hfsplus\x00')
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x80000000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7fffffff}], 0x1c)
mmap$IORING_OFF_SQES(0x0, 0x7bee, 0x2, 0x80013, r1, 0x10000000)

2.432945183s ago: executing program 7 (id=11508):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

2.07615969s ago: executing program 8 (id=11510):
r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='proto\x00', &(0x7f0000000180)='tcp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='mountaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='mountproto\x00', &(0x7f0000000280)='tcp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='timeo\x00', &(0x7f0000000300)='1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='retrans\x00', &(0x7f0000000380)='1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='retry\x00', &(0x7f0000000400)='0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='port\x00', &(0x7f0000000480)='2049\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='mountport\x00', &(0x7f0000000500)='2049\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

1.721242801s ago: executing program 0 (id=11511):
ioprio_set$pid(0x1, 0x0, 0x6000)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048890)
syz_open_procfs(0x0, 0x0)
r0 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x200a})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0xfc5d, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x84, 0x2, 0x3, 0x10007f, 0x20000003, 0x53, 0x8, 0x3, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x1003, 0xfffffffb, 0x5, 0x3b, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x0, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x7fffffff, 0x0, 0x3, 0x4000000e, 0x8, 0x800080ee, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x1, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x40001, 0x40], [0x10000007, 0x9, 0x80000130, 0x7, 0xffff8001, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x6, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x7, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x10000006, 0x40000400, 0x100401, 0x6, 0x1, 0xff, 0x5, 0x1af5, 0x5f31, 0xd, 0x4004e0, 0x1, 0x4, 0x9, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xf, 0x5, 0xc, 0x7, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x77, 0x6, 0x5, 0x0, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x1, 0x6d03, 0x90f, 0x7, 0x371, 0x81, 0x80, 0x3, 0x4, 0x2950bfb0, 0xfffffff8, 0xc2, 0x8, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x2, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0xbb33, 0x80000001, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xec, 0xce9, 0x1ff, 0x5, 0x57, 0x4, 0x3, 0x4246, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0xc, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x6, 0xa04, 0xc8, 0x5, 0xfffff003, 0x10080, 0x4, 0x7e, 0x100, 0x6, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x4, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x927, 0xb1e, 0xffffffff, 0x200, 0xffff2441, 0x1003]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

1.685635425s ago: executing program 8 (id=11512):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x27, &(0x7f0000000640)=""/4096, &(0x7f00000000c0)=0x1000)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000140)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1.351965146s ago: executing program 0 (id=11513):
socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0)
ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, 0x0)

1.234325752s ago: executing program 0 (id=11514):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/4096, 0x1000}, 0x20ff}], 0x1, 0x40010102, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80)

967.324921ms ago: executing program 0 (id=11515):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x20004881}, 0x0)
setsockopt(0xffffffffffffffff, 0x86, 0x80, &(0x7f0000000080)="f7", 0x1)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x900, 0x0)
close(r2)
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=[@mark={{0x18, 0x1, 0x24, 0x8}}], 0x18}}], 0x1, 0x20000055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x3c3, 0x0)
ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000140)=""/145)

908.944293ms ago: executing program 5 (id=11516):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x401, 0x70bd29, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5a4}}, 0x20}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a00000200000024"], 0x64}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x4000000000000, 0x7f, 0x100000, 0x0, 0x2004c8, 0x7, 0x0, 0x0, 0x7, 0x0, 0x5, 0x20000003, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

808.899208ms ago: executing program 7 (id=11517):
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2000000, 0x2172, 0xffffffffffffffff, 0xffffe000)
munmap(&(0x7f0000004000/0x1000)=nil, 0x1000)
futex(&(0x7f0000004000)=0x2, 0x8d, 0x1, 0x0, 0x0, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x24, 0x0, &(0x7f0000000740))
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TCFLSH(r3, 0x40087101, 0x20001100)
listen(r2, 0x5)

699.230621ms ago: executing program 0 (id=11518):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)

418.470767ms ago: executing program 9 (id=11519):
fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"})

285.796431ms ago: executing program 7 (id=11520):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r1, 0x118, 0x27, 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x80100, 0x0)

208.792624ms ago: executing program 0 (id=11521):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

138.625483ms ago: executing program 8 (id=11522):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, &(0x7f0000000400)='\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/times\x00', 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='N\x00', 0x1)
write(r1, &(0x7f0000000100)='10\x00', 0x2)
write(r2, &(0x7f0000000100)='100\x00', 0x3)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x605, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3e8}}}}]}, 0x134}}, 0x0)

0s ago: executing program 9 (id=11523):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f)

kernel console output (not intermixed with test programs):

 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  765.166685][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  765.166716][ T5741] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  765.166733][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  765.262659][  T200] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  765.304570][  T200] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  765.306437][  T200] quatech2 6-1:0.51: device disconnected
[  765.307251][ T5741] usb 4-1: config 0 descriptor??
[  765.307870][T25459] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  765.737517][  T200] usb 4-1: USB disconnect, device number 43
[  766.022351][T25500] loop2: detected capacity change from 0 to 7
[  766.066145][T25500] Dev loop2: unable to read RDB block 7
[  766.066185][T25500]  loop2: AHDI p1 p2 p3 p4
[  766.066205][T25500] loop2: partition table partially beyond EOD, truncated
[  766.066520][T25500] loop2: p1 start 1601398130 is beyond EOD, truncated
[  766.066543][T25500] loop2: p2 start 1702059890 is beyond EOD, truncated
[  766.438487][   T36] kauditd_printk_skb: 200 callbacks suppressed
[  766.438507][   T36] audit: type=1400 audit(1785777229.742:670): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=25511 comm="syz.3.8949" daddr=::ffff:172.20.20.187
[  766.921067][T25534] netlink: 'syz.4.8958': attribute type 5 has an invalid length.
[  766.921090][T25534] netlink: 'syz.4.8958': attribute type 9 has an invalid length.
[  766.921105][T25534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8958'.
[  768.419967][   T36] audit: type=1400 audit(1785777231.722:671): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=25594 comm="syz.5.8988" daddr=::ffff:172.20.20.63 dest=19972
[  768.817548][   T36] audit: type=1400 audit(1785777232.122:672): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=25605 comm="syz.3.8994" daddr=::ffff:172.20.20.0
[  768.897862][T25603] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8991'.
[  769.130428][T25617] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8997'.
[  770.212310][T25662] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.9019'.
[  771.843260][T25734] bridge0: port 2(bridge_slave_1) entered disabled state
[  772.173188][    T9] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  772.345360][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  772.345392][    T9] usb 4-1: config 0 has no interfaces?
[  772.345424][    T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  772.345450][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.371675][    T9] usb 4-1: config 0 descriptor??
[  772.583641][    T9] usb 4-1: USB disconnect, device number 44
[  772.809286][T25774] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  773.219234][   T36] audit: type=1400 audit(1785777492.519:673): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=25784 comm="syz.5.9077" dest=20004
[  773.487278][T25794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9081'.
[  775.062514][T13015] bridge0: port 4(syz_tun) entered disabled state
[  775.187684][T13015] syz_tun (unregistering): left allmulticast mode
[  775.187720][T13015] syz_tun (unregistering): left promiscuous mode
[  775.198556][T13015] bridge0: port 4(syz_tun) entered disabled state
[  775.293261][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  775.443269][    T9] usb 6-1: Using ep0 maxpacket: 32
[  775.445172][    T9] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  775.445200][    T9] usb 6-1: config 0 has no interface number 0
[  775.445249][    T9] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  775.447649][    T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  775.447678][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.447700][    T9] usb 6-1: Product: syz
[  775.447715][    T9] usb 6-1: Manufacturer: syz
[  775.447732][    T9] usb 6-1: SerialNumber: syz
[  775.518599][    T9] usb 6-1: config 0 descriptor??
[  775.519426][T25843] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  775.734459][T25843] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  776.351937][    T9] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  776.352229][    T9] asix 6-1:0.188: probe with driver asix failed with error -71
[  776.420399][    T9] usb 6-1: USB disconnect, device number 18
[  776.961458][T20820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  777.009106][T20820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  777.022785][T20820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  777.060023][T20820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  777.086356][T20820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  777.222220][T25896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9130'.
[  778.353860][T25934] netlink: 'syz.4.9143': attribute type 3 has an invalid length.
[  778.909442][   T36] audit: type=1400 audit(1785777498.209:674): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=25951 comm="syz.3.9151" daddr=::ffff:0.0.0.0 dest=20002
[  779.255305][ T4918] Bluetooth: hci2: command tx timeout
[  780.117648][T25891] bridge0: port 1(bridge_slave_0) entered blocking state
[  780.117874][T25891] bridge0: port 1(bridge_slave_0) entered disabled state
[  780.118423][T25891] bridge_slave_0: entered allmulticast mode
[  780.121316][T25891] bridge_slave_0: entered promiscuous mode
[  780.141279][T25891] bridge0: port 2(bridge_slave_1) entered blocking state
[  780.141595][T25891] bridge0: port 2(bridge_slave_1) entered disabled state
[  780.150801][T25891] bridge_slave_1: entered allmulticast mode
[  780.172777][T25891] bridge_slave_1: entered promiscuous mode
[  780.451227][T25891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  780.474244][T25891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  780.787287][T25891] team0: Port device team_slave_0 added
[  780.858291][T25891] team0: Port device team_slave_1 added
[  781.076726][T25891] batman_adv: batadv0: Adding interface: batadv_slave_0
[  781.076745][T25891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  781.076775][T25891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  781.218039][T25891] batman_adv: batadv0: Adding interface: batadv_slave_1
[  781.218054][T25891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  781.218075][T25891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  781.334517][ T4918] Bluetooth: hci2: command tx timeout
[  781.457455][T25891] hsr_slave_0: entered promiscuous mode
[  781.471614][T25891] hsr_slave_1: entered promiscuous mode
[  781.472683][T25891] debugfs: 'hsr0' already exists in 'hsr'
[  781.472708][T25891] Cannot create hsr debugfs directory
[  781.693417][T26030] netlink: 'syz.4.9183': attribute type 4 has an invalid length.
[  781.869160][T26034] netlink: 'syz.5.9185': attribute type 1 has an invalid length.
[  781.974848][T26036] netlink: 'syz.4.9186': attribute type 1 has an invalid length.
[  782.499517][   T36] audit: type=1400 audit(1785777501.799:675): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=26056 comm="syz.4.9195" dest=20000
[  783.416850][ T4918] Bluetooth: hci2: command tx timeout
[  784.005235][T26102] netlink: 3072 bytes leftover after parsing attributes in process `syz.5.9215'.
[  784.005257][T26102] netlink: 198664 bytes leftover after parsing attributes in process `syz.5.9215'.
[  785.307003][T25891] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  785.368882][T25891] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  785.370046][T25891] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  785.427620][T25891] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  785.484481][T25891] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  785.508925][ T4918] Bluetooth: hci2: command tx timeout
[  785.808794][T25891] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  785.812185][T25891] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  786.046231][T25891] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  786.831312][T25891] 8021q: adding VLAN 0 to HW filter on device bond0
[  786.972389][T25891] 8021q: adding VLAN 0 to HW filter on device team0
[  787.119260][T26202] loop4: detected capacity change from 0 to 7
[  787.159637][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state
[  787.159782][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  787.257303][T26202] Dev loop4: unable to read RDB block 7
[  787.257351][T26202]  loop4: AHDI p1 p2 p3
[  787.257374][T26202] loop4: partition table partially beyond EOD, truncated
[  787.260977][T26202] loop4: p1 start 1601398130 is beyond EOD, truncated
[  787.261000][T26202] loop4: p2 start 1702059890 is beyond EOD, truncated
[  787.616784][   T36] audit: type=1326 audit(1785777506.919:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26212 comm="syz.4.9264" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64da2ce019 code=0x0
[  787.659051][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  787.659191][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  788.664790][T26249] input: syz0 as /devices/virtual/input/input37
[  788.793260][ T5707] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  788.953113][ T5707] usb 6-1: Using ep0 maxpacket: 32
[  788.958180][ T5707] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  788.958213][ T5707] usb 6-1: config 0 has no interface number 0
[  788.962819][ T5707] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  788.962848][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.962867][ T5707] usb 6-1: Product: syz
[  788.962880][ T5707] usb 6-1: Manufacturer: syz
[  788.962894][ T5707] usb 6-1: SerialNumber: syz
[  789.096900][ T5707] usb 6-1: config 0 descriptor??
[  789.102346][ T5707] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  789.377245][ T5707] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  789.464031][ T5707] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  789.692503][T25891] 8021q: adding VLAN 0 to HW filter on device batadv0
[  789.728353][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  789.729624][ T5707] usb 6-1: USB disconnect, device number 19
[  789.767280][ T5707] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  789.795372][ T5707] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  789.796378][ T5707] quatech2 6-1:0.51: device disconnected
[  790.221023][T26287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9291'.
[  790.757973][T25891] veth0_vlan: entered promiscuous mode
[  791.008944][T25891] veth1_vlan: entered promiscuous mode
[  791.097513][T25891] veth0_macvtap: entered promiscuous mode
[  791.193573][T25891] veth1_macvtap: entered promiscuous mode
[  791.210562][T26320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9305'.
[  791.295839][T25891] batman_adv: batadv0: Interface activated: batadv_slave_0
[  791.360987][T25891] batman_adv: batadv0: Interface activated: batadv_slave_1
[  791.774632][ T2342] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  792.188400][ T2342] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  792.345150][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  792.350689][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  793.729824][   T36] audit: type=1400 audit(1785777513.029:677): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=26374 comm="syz.5.9329" dest=20001
[  793.806456][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.806479][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  794.003424][ T5856] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  794.165153][ T5856] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  794.165186][ T5856] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  794.165208][ T5856] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  794.165262][ T5856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64
[  794.239224][ T5856] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  794.239261][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  794.239285][ T5856] usb 4-1: Product: syz
[  794.239300][ T5856] usb 4-1: Manufacturer: syz
[  794.294488][ T5856] cdc_wdm 4-1:1.0: skipping garbage
[  794.294512][ T5856] cdc_wdm 4-1:1.0: skipping garbage
[  794.297086][ T5856] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  794.297151][ T5856] cdc_wdm 4-1:1.0: Unknown control protocol
[  794.706686][    C1] cdc_wdm 4-1:1.0: Unexpected error -71
[  794.713280][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  794.713476][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  794.713711][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  794.713731][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  794.715378][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  794.715404][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  794.721808][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  794.721835][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  794.722071][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  794.722091][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  794.722324][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  794.722344][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  794.722571][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  794.722591][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  794.722818][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  794.722838][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  794.723216][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  794.723239][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  794.723466][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  794.723487][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  794.934990][ T5707] usb 4-1: USB disconnect, device number 45
[  794.935075][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  795.000102][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  795.000127][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  796.044498][T26432] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9356'.
[  796.499534][T26448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9363'.
[  796.499598][T26448] bond0: ARP target 1.4.0.0 is already present
[  796.499621][T26448] bond0: option arp_ip_target: invalid value (1025)
[  797.612727][T26484] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.9380'.
[  797.612759][T26484] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.9380'.
[  798.605759][T26516] netlink: 'syz.6.9395': attribute type 3 has an invalid length.
[  799.096401][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  799.151018][T26510] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  799.181267][T26510] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  800.147415][T26510] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  800.170736][T26510] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  800.544047][T26510] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  800.544185][T26510] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  800.790621][T26510] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  800.790760][T26510] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  800.948735][T26510] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  802.221487][ T4918] Bluetooth: hci1: command 0x0406 tx timeout
[  802.613225][ T4918] Bluetooth: hci5: command 0x040f tx timeout
[  802.858128][ T4918] Bluetooth: hci2: command 0x0c1a tx timeout
[  803.322169][T20820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  803.395500][T20820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  803.425458][T20820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  803.514208][T20820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  803.536580][T20820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  804.087231][T26663] loop8: detected capacity change from 0 to 8
[  804.225434][T26663] Dev loop8: unable to read RDB block 8
[  804.225483][T26663]  loop8: unable to read partition table
[  804.225693][T26663] loop8: partition table beyond EOD, truncated
[  804.225739][T26663] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  804.306613][T20820] Bluetooth: hci1: command 0x0406 tx timeout
[  804.702088][T20820] Bluetooth: hci5: command 0x040f tx timeout
[  804.938613][T20820] Bluetooth: hci2: command 0x0c1a tx timeout
[  804.962779][T26668] syz.5.9467 (26668) used greatest stack depth: 17472 bytes left
[  805.086885][T15103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  805.814252][T20820] Bluetooth: hci3: command tx timeout
[  805.899577][T26699] gre0: entered promiscuous mode
[  805.899607][T26699] gre0: entered allmulticast mode
[  806.334273][T15103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.812181][T26725] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  807.162455][ T4918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  807.228564][ T4918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  807.232018][ T4918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  807.328249][ T4918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  807.329242][ T4918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  807.428884][T15103] bond0: (slave netdevsim1): Releasing backup interface
[  807.893512][ T4918] Bluetooth: hci3: command tx timeout
[  807.985167][T15103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.323718][  T200] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  808.563312][  T200] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  808.563343][  T200] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  808.563400][  T200] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  808.572707][  T200] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  808.572742][  T200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.572765][  T200] usb 6-1: Product: syz
[  808.572781][  T200] usb 6-1: Manufacturer: syz
[  808.572797][  T200] usb 6-1: SerialNumber: syz
[  808.598394][  T200] cdc_ncm 6-1:1.0: skipping garbage
[  808.598428][  T200] cdc_ncm 6-1:1.0: invalid descriptor buffer length
[  808.598494][  T200] usb 6-1: selecting invalid altsetting 1
[  808.979906][T15103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  809.209275][  T200] usb 6-1: selecting invalid altsetting 1
[  809.209355][  T200] cdc_ncm 6-1:1.0: bind() failure
[  809.353292][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[  809.417165][  T200] usb 6-1: USB disconnect, device number 20
[  809.573496][ T4918] Bluetooth: hci2: command tx timeout
[  809.974278][ T4918] Bluetooth: hci3: command tx timeout
[  811.202388][T26840] random: crng reseeded on system resumption
[  811.583118][T26851] netlink: 'syz.4.9545': attribute type 20 has an invalid length.
[  811.583139][T26851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9545'.
[  811.640839][T26853] netlink: 'syz.4.9545': attribute type 20 has an invalid length.
[  811.640864][T26853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9545'.
[  811.659209][ T4918] Bluetooth: hci2: command tx timeout
[  812.053461][ T4918] Bluetooth: hci3: command tx timeout
[  812.449354][T15103] dummy0: left allmulticast mode
[  812.572221][T15103] bridge0: port 3(dummy0) entered disabled state
[  812.858498][T15103] bridge0: port 2(bridge_slave_1) entered disabled state
[  813.070820][T15103] bridge_slave_0: left allmulticast mode
[  813.070857][T15103] bridge_slave_0: left promiscuous mode
[  813.071117][T15103] bridge0: port 1(bridge_slave_0) entered disabled state
[  813.262815][ T5856] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  813.293659][T15103] pimreg: left allmulticast mode
[  813.293889][T15103] ip6tnl0: left allmulticast mode
[  813.425554][ T5856] usb 6-1: Using ep0 maxpacket: 32
[  813.440749][ T5856] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  813.440782][ T5856] usb 6-1: config 0 has no interface number 0
[  813.440831][ T5856] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  813.476916][ T5856] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  813.476951][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.476973][ T5856] usb 6-1: Product: syz
[  813.476989][ T5856] usb 6-1: Manufacturer: syz
[  813.477005][ T5856] usb 6-1: SerialNumber: syz
[  813.524465][ T5856] usb 6-1: config 0 descriptor??
[  813.554672][ T5856] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  813.554751][ T5856] em28xx 6-1:0.132: Video interface 132 found:
[  813.735008][ T4918] Bluetooth: hci2: command tx timeout
[  813.950480][ T5856] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  814.353047][ T5856] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  814.353161][ T5856] em28xx 6-1:0.132: board has no eeprom
[  814.473089][ T5856] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  814.473230][ T5856] em28xx 6-1:0.132: analog set to bulk mode.
[  814.511769][T15404] em28xx 6-1:0.132: Registering V4L2 extension
[  814.523944][ T5856] usb 6-1: USB disconnect, device number 21
[  814.591365][ T5856] em28xx 6-1:0.132: Disconnecting em28xx
[  814.902362][T15404] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  814.902390][T15404] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  814.902405][T15404] em28xx 6-1:0.132: No AC97 audio processor
[  815.038055][T15404] usb 6-1: Decoder not found
[  815.038078][T15404] em28xx 6-1:0.132: failed to create media graph
[  815.038207][T15404] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  815.316883][T15404] em28xx 6-1:0.132: Remote control support is not available for this card.
[  815.343766][ T5856] em28xx 6-1:0.132: Closing input extension
[  815.818323][ T4918] Bluetooth: hci2: command tx timeout
[  815.897916][ T5856] em28xx 6-1:0.132: Freeing device
[  817.507944][T15103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  817.584034][T15103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  817.605649][T27017] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9622'.
[  817.629472][T15103] bond0 (unregistering): Released all slaves
[  817.652666][T15103] bond1 (unregistering): Released all slaves
[  817.677262][T15103] bond2 (unregistering): Released all slaves
[  818.403237][T15103] tipc: Left network mode
[  818.542792][T26644] bridge0: port 1(bridge_slave_0) entered blocking state
[  818.542907][T26644] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.544562][T26644] bridge_slave_0: entered allmulticast mode
[  818.555934][T26644] bridge_slave_0: entered promiscuous mode
[  818.634172][   T13] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0
[  818.639209][T26644] bridge0: port 2(bridge_slave_1) entered blocking state
[  818.639433][T26644] bridge0: port 2(bridge_slave_1) entered disabled state
[  818.639703][T26644] bridge_slave_1: entered allmulticast mode
[  818.671295][T26644] bridge_slave_1: entered promiscuous mode
[  819.016359][T26644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  819.192152][T26644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  819.362426][T26644] team0: Port device team_slave_0 added
[  819.396044][T15103] IPVS: stopping master sync thread 13198 ...
[  819.437978][T26644] team0: Port device team_slave_1 added
[  820.000829][T26729] bridge0: port 1(bridge_slave_0) entered blocking state
[  820.001051][T26729] bridge0: port 1(bridge_slave_0) entered disabled state
[  820.001326][T26729] bridge_slave_0: entered allmulticast mode
[  820.014608][T26729] bridge_slave_0: entered promiscuous mode
[  820.176006][T26729] bridge0: port 2(bridge_slave_1) entered blocking state
[  820.176177][T26729] bridge0: port 2(bridge_slave_1) entered disabled state
[  820.176397][T26729] bridge_slave_1: entered allmulticast mode
[  820.179361][T26729] bridge_slave_1: entered promiscuous mode
[  820.194371][T26644] batman_adv: batadv0: Adding interface: batadv_slave_0
[  820.194428][T26644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  820.194490][T26644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  820.594252][T27096] loop7: detected capacity change from 0 to 16384
[  820.721902][T26644] batman_adv: batadv0: Adding interface: batadv_slave_1
[  820.721917][T26644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  820.721939][T26644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  820.786099][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5
[  820.942735][T26729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  821.102349][T26729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  822.058425][T26644] hsr_slave_0: entered promiscuous mode
[  822.059873][T26644] hsr_slave_1: entered promiscuous mode
[  822.060884][T26644] debugfs: 'hsr0' already exists in 'hsr'
[  822.060911][T26644] Cannot create hsr debugfs directory
[  822.300583][T26729] team0: Port device team_slave_0 added
[  822.307861][T26729] team0: Port device team_slave_1 added
[  823.170781][T27144] netlink: 'syz.5.9670': attribute type 2 has an invalid length.
[  823.289294][T27164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9676'.
[  823.289322][T27164] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9676'.
[  823.411694][T26729] batman_adv: batadv0: Adding interface: batadv_slave_0
[  823.411713][T26729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  823.411747][T26729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  823.531582][T26729] batman_adv: batadv0: Adding interface: batadv_slave_1
[  823.531602][T26729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  823.531634][T26729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  823.762304][T27172] ip6erspan0: entered allmulticast mode
[  823.830619][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6
[  824.103346][T15103] hsr_slave_0: left promiscuous mode
[  824.124280][T15103] hsr_slave_1: left promiscuous mode
[  824.390162][T15103] veth1_macvtap: left promiscuous mode
[  824.390290][T15103] veth0_macvtap: left promiscuous mode
[  824.390892][T15103] veth1_vlan: left promiscuous mode
[  825.016163][T27217] loop5: detected capacity change from 0 to 7
[  825.018093][T27217] Dev loop5: unable to read RDB block 7
[  825.018132][T27217]  loop5: unable to read partition table
[  825.018302][T27217] loop5: partition table beyond EOD, truncated
[  825.019211][T27217] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  825.250347][T27217] Dev loop5: unable to read RDB block 7
[  825.250402][T27217]  loop5: unable to read partition table
[  825.250711][T27217] loop5: partition table beyond EOD, truncated
[  825.250734][T27217] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  825.395808][T27223] loop2: detected capacity change from 0 to 7
[  825.427392][T27223] Dev loop2: unable to read RDB block 7
[  825.427429][T27223]  loop2: AHDI p1 p2 p3
[  825.427453][T27223] loop2: partition table partially beyond EOD, truncated
[  825.432519][T27223] loop2: p1 start 4177526783 is beyond EOD, truncated
[  825.432548][T27223] loop2: p2 start 1702059890 is beyond EOD, truncated
[  825.799003][T27233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9708'.
[  825.799041][T27233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9708'.
[  826.880160][T15103] team_slave_1 (unregistering): left allmulticast mode
[  826.899704][T15103] team0 (unregistering): Port device team_slave_1 removed
[  827.045522][T15103] team_slave_0 (unregistering): left allmulticast mode
[  827.084072][T15103] team0 (unregistering): Port device team_slave_0 removed
[  828.218879][T26729] hsr_slave_0: entered promiscuous mode
[  828.219997][T26729] hsr_slave_1: entered promiscuous mode
[  828.336647][T27307] netlink: 'syz.5.9745': attribute type 10 has an invalid length.
[  828.594147][T27307] 8021q: adding VLAN 0 to HW filter on device batadv0
[  828.629519][T27307] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  831.363906][ T5264] 8021q: adding VLAN 0 to HW filter on device eth7
[  831.448745][ T2342] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0
[  831.510159][   T13] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0
[  831.543491][ T1142] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0
[  832.148632][T15103] IPVS: stop unused estimator thread 0...
[  832.173629][T26644] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  832.221072][T26644] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  832.273330][T26644] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  832.507265][T27392] CacheFiles: Failed to register: -95
[  832.538613][T26644] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  833.195247][T26644] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  833.239626][T26644] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  833.241294][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8
[  833.277683][T26644] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  833.375237][T26644] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  834.760708][T15103] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  835.987496][T15103] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  836.062587][   T36] audit: type=1400 audit(1785777811.362:678): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=27495 comm="syz.5.9815" daddr=::ffff:255.255.255.255 dest=20003
[  836.135844][T26729] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  836.293841][T26729] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  836.309234][T26729] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  836.477345][T26729] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  836.759683][T15103] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  836.941505][T26729] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  837.009917][T26729] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  837.052747][T26729] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  837.185424][T26729] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  837.738891][T15103] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  838.517555][T26644] 8021q: adding VLAN 0 to HW filter on device bond0
[  838.822835][T26644] 8021q: adding VLAN 0 to HW filter on device team0
[  838.876686][  T170] bridge0: port 1(bridge_slave_0) entered blocking state
[  838.879601][  T170] bridge0: port 1(bridge_slave_0) entered forwarding state
[  839.065920][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  839.066100][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  839.211852][T26729] 8021q: adding VLAN 0 to HW filter on device bond0
[  839.375161][T26729] 8021q: adding VLAN 0 to HW filter on device team0
[  839.481983][ T2216] bridge0: port 1(bridge_slave_0) entered blocking state
[  839.482109][ T2216] bridge0: port 1(bridge_slave_0) entered forwarding state
[  839.604494][T15110] bridge0: port 2(bridge_slave_1) entered blocking state
[  839.604704][T15110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  840.673195][T15110] netdevsim netdevsim6 eth9: set [1, 0] type 2 family 0 port 6081 - 0
[  842.224652][T15110] netdevsim netdevsim6 eth11: set [1, 0] type 2 family 0 port 6081 - 0
[  842.225663][T15110] netdevsim netdevsim6 eth10: set [1, 0] type 2 family 0 port 6081 - 0
[  842.416127][T15103] bridge_slave_1: left allmulticast mode
[  842.416164][T15103] bridge_slave_1: left promiscuous mode
[  842.416450][T15103] bridge0: port 2(bridge_slave_1) entered disabled state
[  842.739695][T15103] bridge_slave_0: left allmulticast mode
[  842.739724][T15103] bridge_slave_0: left promiscuous mode
[  842.739991][T15103] bridge0: port 1(bridge_slave_0) entered disabled state
[  843.881377][   T36] audit: type=1400 audit(1785777819.182:679): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=27706 comm="syz.5.9895" daddr=::ffff:127.0.0.1
[  844.913917][T15103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  844.995962][T15103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  845.047994][T15103] bond0 (unregistering): Released all slaves
[  845.519837][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9
[  845.803449][ T2216] netdevsim netdevsim6 eth12: set [1, 0] type 2 family 0 port 6081 - 0
[  846.108137][T26644] 8021q: adding VLAN 0 to HW filter on device batadv0
[  848.198859][T26729] 8021q: adding VLAN 0 to HW filter on device batadv0
[  849.119472][T15103] hsr_slave_0: left promiscuous mode
[  849.153245][T15103] hsr_slave_1: left promiscuous mode
[  849.156063][T15103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  849.156092][T15103] batman_adv: batadv0: Removing interface: batadv_slave_0
[  849.220437][T15103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  849.220469][T15103] batman_adv: batadv0: Removing interface: batadv_slave_1
[  849.371862][T27857] loop0: detected capacity change from 0 to 7
[  849.459387][T27857]  loop0: [CUMANA/ADFS] p1 [ADFS] p1
[  849.459497][T27857] loop0: partition table partially beyond EOD, truncated
[  849.460432][T27857] loop0: p1 size 1040187392 extends beyond EOD, truncated
[  849.728493][T15103] veth1_macvtap: left promiscuous mode
[  849.728625][T15103] veth0_macvtap: left promiscuous mode
[  849.728887][T15103] veth1_vlan: left promiscuous mode
[  849.743147][T15103] veth0_vlan: left promiscuous mode
[  849.895847][T18316] udevd[18316]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  851.435747][T27902] netlink: 'syz.5.9970': attribute type 1 has an invalid length.
[  852.154141][T15103] team0 (unregistering): Port device team_slave_1 removed
[  852.234992][T15103] team0 (unregistering): Port device team_slave_0 removed
[  852.692889][ T5264] 8021q: adding VLAN 0 to HW filter on device eth10
[  852.705341][T27902] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  853.089240][T26644] veth0_vlan: entered promiscuous mode
[  853.430202][T27952] ip6erspan0: entered allmulticast mode
[  853.457890][T26644] veth1_vlan: entered promiscuous mode
[  854.327297][T26729] veth0_vlan: entered promiscuous mode
[  854.383483][T26644] veth0_macvtap: entered promiscuous mode
[  854.428617][T26644] veth1_macvtap: entered promiscuous mode
[  854.638315][T26729] veth1_vlan: entered promiscuous mode
[  854.768044][T26644] batman_adv: batadv0: Interface activated: batadv_slave_0
[  855.090450][T27998] size and base must be multiples of 4 kiB
[  855.090478][T27998] CPU: 0 UID: 0 PID: 27998 Comm: syz.4.10004 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  855.090515][T27998] Tainted: [L]=SOFTLOCKUP
[  855.090524][T27998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  855.090538][T27998] Call Trace:
[  855.090547][T27998]  <TASK>
[  855.090557][T27998]  dump_stack_lvl+0xe8/0x150
[  855.090604][T27998]  mtrr_add+0xd5/0x100
[  855.090640][T27998]  mtrr_ioctl+0xca4/0x13c0
[  855.090672][T27998]  ? smk_tskacc+0x2fb/0x370
[  855.090711][T27998]  ? __pfx_mtrr_ioctl+0x10/0x10
[  855.090741][T27998]  ? smack_file_ioctl+0x263/0x360
[  855.090782][T27998]  ? __fget_files+0x2a/0x420
[  855.090807][T27998]  ? __fget_files+0x3a8/0x420
[  855.090831][T27998]  ? __fget_files+0x2a/0x420
[  855.090854][T27998]  ? __pfx_mtrr_ioctl+0x10/0x10
[  855.090888][T27998]  proc_reg_unlocked_ioctl+0x1df/0x2d0
[  855.090918][T27998]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[  855.090949][T27998]  __se_sys_ioctl+0xff/0x170
[  855.090980][T27998]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.091012][T27998]  do_syscall_64+0x174/0x580
[  855.091044][T27998]  ? trace_irq_disable+0x3b/0x140
[  855.091068][T27998]  ? clear_bhb_loop+0x40/0x90
[  855.091095][T27998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.091119][T27998] RIP: 0033:0x7f64da2ce019
[  855.091142][T27998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  855.091162][T27998] RSP: 002b:00007f64d8526028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  855.091187][T27998] RAX: ffffffffffffffda RBX: 00007f64da555fa0 RCX: 00007f64da2ce019
[  855.091203][T27998] RDX: 0000200000000040 RSI: 0000000040104d01 RDI: 0000000000000004
[  855.091220][T27998] RBP: 00007f64da36500c R08: 0000000000000000 R09: 0000000000000000
[  855.091234][T27998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  855.091248][T27998] R13: 00007f64da556038 R14: 00007f64da555fa0 R15: 00007fff19d9f258
[  855.091284][T27998]  </TASK>
[  855.126050][T26644] batman_adv: batadv0: Interface activated: batadv_slave_1
[  855.661403][ T5264] 8021q: adding VLAN 0 to HW filter on device eth11
[  856.011970][T26729] veth0_macvtap: entered promiscuous mode
[  856.154437][T28013] cgroup: Unknown subsys name 'cpuset'
[  856.311577][T26729] veth1_macvtap: entered promiscuous mode
[  857.617587][T26729] batman_adv: batadv0: Interface activated: batadv_slave_0
[  857.894877][T28037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10021'.
[  858.112541][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  858.112562][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  858.526737][T26729] batman_adv: batadv0: Interface activated: batadv_slave_1
[  859.532671][T15103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  859.532691][T15103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  859.997979][  T170] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  860.007935][   T42] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  860.011994][  T157] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  860.012073][  T157] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  860.012115][  T157] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  860.012155][  T157] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  860.012214][  T157] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  860.012298][  T157] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  860.709440][   T36] audit: type=1400 audit(1785777835.982:680): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=28096 comm="syz.4.10042" dest=20002
[  860.913766][ T5264] 8021q: adding VLAN 0 to HW filter on device eth12
[  862.115760][T26351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  862.115781][T26351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  863.079012][ T2216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  863.079035][ T2216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  863.909757][T28150] input: syz1 as /devices/virtual/input/input38
[  867.563295][T28263] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10097'.
[  868.245446][   T36] audit: type=1400 audit(1785777843.552:681): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=28278 comm="syz.7.10103" daddr=::ffff:172.20.20.187
[  868.872702][   T36] audit: type=1326 audit(1785777844.172:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.5.10108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  868.876888][   T36] audit: type=1326 audit(1785777844.172:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.5.10108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  868.928597][   T36] audit: type=1326 audit(1785777844.212:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.5.10108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  868.928663][   T36] audit: type=1326 audit(1785777844.232:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.5.10108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  868.959240][   T36] audit: type=1326 audit(1785777844.232:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.5.10108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  868.959431][   T36] audit: type=1326 audit(1785777844.262:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.5.10108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  868.959551][   T36] audit: type=1326 audit(1785777844.262:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.5.10108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  869.038645][   T36] audit: type=1326 audit(1785777844.302:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.5.10108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  869.038796][   T36] audit: type=1326 audit(1785777844.342:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28293 comm="syz.5.10108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  869.453212][T28307] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  869.572838][T28311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10112'.
[  869.586810][T28307] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  870.515541][T28339] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10123'.
[  870.776379][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[  871.783248][T28384] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10138'.
[  875.859139][T28509] netlink: 48 bytes leftover after parsing attributes in process `syz.8.10189'.
[  877.888362][T28555] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  880.886451][T28646] bridge0: port 3(dummy0) entered blocking state
[  880.888654][T28646] bridge0: port 3(dummy0) entered disabled state
[  880.888923][T28646] dummy0: entered allmulticast mode
[  881.090785][T28646] bridge0: port 3(dummy0) entered blocking state
[  881.090929][T28646] bridge0: port 3(dummy0) entered forwarding state
[  883.162878][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10270'.
[  883.162906][T28716] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10270'.
[  883.426859][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10270'.
[  883.426886][T28716] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10270'.
[  884.140272][   T36] kauditd_printk_skb: 25 callbacks suppressed
[  884.140291][   T36] audit: type=1400 audit(1785777859.442:716): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=28743 comm="syz.4.10280" daddr=::ffff:172.20.20.170 dest=20003
[  885.019399][T28773] netlink: 'syz.8.10287': attribute type 10 has an invalid length.
[  885.244881][T28773] syz_tun: entered promiscuous mode
[  885.320381][T28773] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  885.577761][T28787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10294'.
[  887.916136][   T36] audit: type=1400 audit(1785777863.222:717): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=28856 comm="syz.5.10317" dest=20001
[  888.618533][T20820] Bluetooth: hci4: command 0x1003 tx timeout
[  888.678365][ T4918] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  889.963168][  T200] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  890.126378][  T200] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  890.126413][  T200] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  890.126468][  T200] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  890.126490][  T200] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.134305][  T200] usb 6-1: config 0 descriptor??
[  890.242243][  T200] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  890.242291][  T200] dvb-usb: bulk message failed: -22 (3/0)
[  890.461334][  T200] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  890.518342][  T200] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  890.518403][  T200] usb 6-1: media controller created
[  890.642541][  T200] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  890.835606][  T200] dvb-usb: bulk message failed: -22 (6/0)
[  890.835694][  T200] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  890.865381][  T200] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input39
[  891.003185][T28933] binder: 28932:28933 ioctl c0306201 200000000080 returned -14
[  891.098072][  T200] dvb-usb: schedule remote query interval to 150 msecs.
[  891.098095][  T200] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  891.275410][ T5808] dvb-usb: bulk message failed: -22 (1/0)
[  891.275445][ T5808] dvb-usb: error while querying for an remote control event.
[  891.291120][  T200] usb 6-1: USB disconnect, device number 22
[  891.931693][  T200] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  893.285139][T28973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10362'.
[  893.285167][T28973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10362'.
[  893.285195][T28973] netlink: 'syz.4.10362': attribute type 6 has an invalid length.
[  893.518286][T28973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10362'.
[  893.518312][T28973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10362'.
[  893.518340][T28973] netlink: 'syz.4.10362': attribute type 6 has an invalid length.
[  894.147080][T28995] bpf: Bad value for 'mode'
[  894.426747][   T36] audit: type=1400 audit(1785777869.732:718): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=29004 comm="syz.7.10377" daddr=::ffff:0.0.0.0 dest=20002
[  895.235245][   T36] audit: type=1326 audit(1785777870.542:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29030 comm="syz.7.10387" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944422e019 code=0x7ffc0000
[  895.235386][   T36] audit: type=1326 audit(1785777870.542:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29030 comm="syz.7.10387" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944422e019 code=0x7ffc0000
[  895.238316][   T36] audit: type=1326 audit(1785777870.542:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29030 comm="syz.7.10387" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944422e019 code=0x7ffc0000
[  895.238742][   T36] audit: type=1326 audit(1785777870.542:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29030 comm="syz.7.10387" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944422e019 code=0x7ffc0000
[  895.240099][   T36] audit: type=1326 audit(1785777870.542:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29030 comm="syz.7.10387" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f944422e019 code=0x7ffc0000
[  895.492402][   T36] audit: type=1326 audit(1785777870.542:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29030 comm="syz.7.10387" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944422e019 code=0x7ffc0000
[  895.492456][   T36] audit: type=1326 audit(1785777870.592:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29030 comm="syz.7.10387" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944422e019 code=0x7ffc0000
[  895.492494][   T36] audit: type=1326 audit(1785777870.592:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29030 comm="syz.7.10387" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944422e019 code=0x7ffc0000
[  895.492532][   T36] audit: type=1326 audit(1785777870.592:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29030 comm="syz.7.10387" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944422e019 code=0x7ffc0000
[  897.541326][T29102] netlink: 'syz.5.10421': attribute type 2 has an invalid length.
[  897.553329][T25357] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  897.704979][T25357] usb 8-1: Using ep0 maxpacket: 8
[  897.706981][T25357] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  897.707037][T25357] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  897.707063][T25357] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  897.765481][T25357] usb 8-1: config 0 descriptor??
[  897.789517][T25357] gspca_main: vc032x-2.14.0 probing 046d:0892
[  898.996538][T25357] gspca_vc032x: reg_w err -71
[  898.996715][T25357] vc032x 8-1:0.0: probe with driver vc032x failed with error -71
[  899.025179][T25357] usb 8-1: USB disconnect, device number 2
[  899.915392][ T4918] Bluetooth: hci2: link tx timeout
[  899.931149][ T4918] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  900.195933][T29171] use of bytesused == 0 is deprecated and will be removed in the future,
[  900.195949][T29171] use the actual size instead.
[  900.243859][T29169] pim6reg1: entered promiscuous mode
[  900.243889][T29169] pim6reg1: entered allmulticast mode
[  900.811242][T29183] syz_tun: entered allmulticast mode
[  900.912638][T29181] syz_tun: left allmulticast mode
[  901.424452][T29202] sg_write: data in/out 475100/136 bytes for SCSI command 0x0-- guessing data in;
[  901.424452][T29202]    program syz.4.10463 not setting count and/or reply_len properly
[  902.053145][ T4918] Bluetooth: hci2: command 0x0406 tx timeout
[  902.808776][T20820] Bluetooth: hci1: unexpected cc 0x2029 length: 100 > 1
[  902.808831][T20820] Bluetooth: hci1: unexpected event for opcode 0x2029
[  902.844354][T29245] trusted_key: syz.5.10482 sent an empty control message without MSG_MORE.
[  902.997906][T29250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10485'.
[  903.386407][T20820] Bluetooth: hci2: unexpected event for opcode 0x1005
[  904.162253][   T36] kauditd_printk_skb: 26 callbacks suppressed
[  904.162272][   T36] audit: type=1400 audit(1785777879.462:754): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=29285 comm="syz.5.10500" daddr=::ffff:172.20.20.170
[  909.790705][T29459] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10576'.
[  909.891719][T29459] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10576'.
[  911.040404][T29504] netlink: 264 bytes leftover after parsing attributes in process `syz.4.10594'.
[  911.040434][T29504] netlink: 264 bytes leftover after parsing attributes in process `syz.4.10594'.
[  911.396180][T29503] lo: entered promiscuous mode
[  911.433209][T29503] tunl0: entered promiscuous mode
[  911.441197][T29503] gre0: left allmulticast mode
[  911.533575][T29521] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10602'.
[  911.618646][T29503] gretap0: entered promiscuous mode
[  911.684688][T29503] erspan0: entered promiscuous mode
[  911.928493][T29503] ip_vti0: entered promiscuous mode
[  911.961136][T29503] ip6_vti0: entered promiscuous mode
[  912.014103][T29503] sit0: entered promiscuous mode
[  912.122410][T29503] ip6tnl0: entered promiscuous mode
[  912.142353][T29503] ip6gre0: entered promiscuous mode
[  912.202259][T29503] syz_tun: entered promiscuous mode
[  912.326582][T29503] ip6gretap0: entered promiscuous mode
[  912.452925][T29503] bridge0: port 3(dummy0) entered disabled state
[  912.453560][T29503] bridge0: port 1(bridge_slave_0) entered disabled state
[  912.525380][T29503] bridge0: entered promiscuous mode
[  912.630187][T29503] vcan0: entered promiscuous mode
[  912.765490][T29503] bond0: entered promiscuous mode
[  912.765514][T29503] bond_slave_0: entered promiscuous mode
[  912.765778][T29503] bond_slave_1: entered promiscuous mode
[  912.766010][T29503] batadv0: entered promiscuous mode
[  912.891420][T29503] team0: entered promiscuous mode
[  912.891443][T29503] team_slave_0: entered promiscuous mode
[  912.891699][T29503] team_slave_1: entered promiscuous mode
[  913.174439][T29503] nlmon0: entered promiscuous mode
[  913.180898][T29503] vxcan0: entered promiscuous mode
[  913.190673][T29503] vxcan1: entered promiscuous mode
[  913.204038][T29503] veth0: entered promiscuous mode
[  913.251482][T29503] veth1: entered promiscuous mode
[  913.346654][T29503] wg0: entered promiscuous mode
[  913.413516][T29503] wg1: entered promiscuous mode
[  913.453873][T29503] wg2: entered promiscuous mode
[  913.458316][T29503] veth0_to_bridge: entered promiscuous mode
[  913.588035][T29503] veth1_to_bridge: entered promiscuous mode
[  913.612088][T29566] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer.
[  913.637335][T29503] veth0_to_bond: entered promiscuous mode
[  913.651496][T29503] veth1_to_bond: entered promiscuous mode
[  913.719377][T29503] veth0_to_team: entered promiscuous mode
[  913.805987][T29503] veth1_to_team: entered promiscuous mode
[  913.856993][T29503] veth0_to_batadv: entered promiscuous mode
[  913.881093][T29503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  913.932857][T29503] batadv_slave_0: entered promiscuous mode
[  913.949835][T29503] veth1_to_batadv: entered promiscuous mode
[  913.984672][T29503] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  913.984773][T29503] batadv_slave_1: entered promiscuous mode
[  913.990855][T29503] xfrm0: entered promiscuous mode
[  914.017186][T29503] veth0_to_hsr: entered promiscuous mode
[  914.045559][T29503] veth1_to_hsr: entered promiscuous mode
[  914.068674][T29503] hsr0: entered promiscuous mode
[  914.089432][T29503] veth1_virt_wifi: entered promiscuous mode
[  914.100802][T29503] veth0_virt_wifi: entered promiscuous mode
[  914.113245][T29503] virt_wifi0: entered promiscuous mode
[  914.134799][T29503] vlan0: entered promiscuous mode
[  914.151467][T29503] vlan1: entered promiscuous mode
[  914.263676][T29503] macvlan0: entered promiscuous mode
[  914.354593][T29503] macvlan1: entered promiscuous mode
[  914.434959][T29503] ipvlan0: entered promiscuous mode
[  914.435198][T29503] ipvlan1: entered promiscuous mode
[  914.471381][T29588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10631'.
[  914.471413][T29588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10631'.
[  914.564594][T29503] macvtap0: entered promiscuous mode
[  914.589804][T29503] macsec0: entered promiscuous mode
[  914.598313][T29503] geneve0: entered promiscuous mode
[  914.611448][T29503] geneve1: entered promiscuous mode
[  914.686327][T29503] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  914.795247][T29503] netdevsim netdevsim5 netdevsim1: entered promiscuous mode
[  914.893412][T29503] netdevsim netdevsim5 netdevsim2: entered promiscuous mode
[  915.014154][T29503] netdevsim netdevsim5 netdevsim3: entered promiscuous mode
[  915.156011][T29503] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[  915.318491][T29503] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  915.332436][T29503] ip6tnl1: entered promiscuous mode
[  915.332617][T29503] macvlan2: entered promiscuous mode
[  915.332830][T29503] vsockmon0: entered promiscuous mode
[  915.350789][T29503] nicvf0: entered promiscuous mode
[  915.374035][T29503] @: entered promiscuous mode
[  915.424365][T29503] ip6erspan0: entered promiscuous mode
[  915.424424][T29503] ip6erspan0: left allmulticast mode
[  915.424689][T29503] gre1: entered promiscuous mode
[  915.598085][T29588] gretap0: entered promiscuous mode
[  915.598308][T29588] macvlan2: entered allmulticast mode
[  915.598325][T29588] gretap0: entered allmulticast mode
[  916.023293][   T13] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  916.023333][   T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  916.026544][   T12] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  916.026583][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  916.026651][   T12] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  916.026681][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  916.026721][   T12] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  916.026750][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  916.358126][T29643] syz_tun: left promiscuous mode
[  916.381210][T29643] syz_tun: entered promiscuous mode
[  916.398190][T29643] team0: Port device syz_tun added
[  917.543456][T25357] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  917.770382][T25357] usb 6-1: unable to get BOS descriptor or descriptor too short
[  917.771629][T25357] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  917.771656][T25357] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  917.771708][T25357] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  917.771752][T25357] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  917.771806][T25357] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  917.771840][T25357] usb 6-1: config 1 interface 1 has no altsetting 0
[  917.867496][T25357] usb 6-1: string descriptor 0 read error: -22
[  917.867657][T25357] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  917.867684][T25357] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.383059][T25357] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[  918.383094][T25357] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  918.383114][T25357] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[  918.759554][   T36] audit: type=1400 audit(1785777894.062:755): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=29703 comm="syz.4.10683" daddr=::ffff:172.20.20.170
[  918.965922][T25357] usb 6-1: 2:0: failed to get current value for ch 1 (-71)
[  919.073303][T25357] usb 6-1: USB disconnect, device number 23
[  919.110099][T28573] bond0: (slave syz_tun): Releasing backup interface
[  920.096185][T29734] CIFS: Attempting to mount //127.0.0.1/share
[  920.450313][ T4918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  920.506974][ T4918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  920.540510][ T4918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  920.618603][ T4918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  920.620512][ T4918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  921.116819][T29734] CIFS: VFS: Error connecting to socket. Aborting operation.
[  921.117238][T29734] CIFS: VFS: cifs_mount failed w/return code = -4
[  921.874700][   T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  923.013289][T20820] Bluetooth: hci2: command tx timeout
[  923.438465][T29789] gadgetfs: bound to dummy_udc driver
[  923.480012][   T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  925.102490][T20820] Bluetooth: hci2: command tx timeout
[  925.602504][   T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.685867][    C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank
[  927.173135][T20820] Bluetooth: hci2: command tx timeout
[  927.494961][   T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  927.501001][T29891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10761'.
[  927.572237][T29892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10761'.
[  927.706407][T29891] erspan0: entered promiscuous mode
[  927.707304][T29891] macvtap2: entered promiscuous mode
[  927.727146][T29891] macvtap2: entered allmulticast mode
[  927.727172][T29891] erspan0: entered allmulticast mode
[  927.729622][T29892] macvtap2: left promiscuous mode
[  927.729833][T29892] macvtap2: left allmulticast mode
[  927.729849][T29892] erspan0: left allmulticast mode
[  929.181880][T20820] Bluetooth: hci3: command 0x0406 tx timeout
[  929.257819][T20820] Bluetooth: hci2: command tx timeout
[  929.273193][T29925] ./file0: Can't open blockdev
[  929.964966][   T36] audit: type=1326 audit(1785777905.272:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.5.10779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  929.965027][   T36] audit: type=1326 audit(1785777905.272:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.5.10779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  929.970001][   T36] audit: type=1326 audit(1785777905.272:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.5.10779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  929.970181][   T36] audit: type=1326 audit(1785777905.272:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.5.10779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  929.970358][   T36] audit: type=1326 audit(1785777905.272:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.5.10779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  929.970543][   T36] audit: type=1326 audit(1785777905.272:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.5.10779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  929.970805][   T36] audit: type=1326 audit(1785777905.272:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.5.10779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  929.972852][   T36] audit: type=1326 audit(1785777905.272:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.5.10779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  929.986759][   T36] audit: type=1326 audit(1785777905.272:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.5.10779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  929.986908][   T36] audit: type=1326 audit(1785777905.282:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.5.10779" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fcb7ad6e019 code=0x7ffc0000
[  930.963377][ T1142] netdevsim netdevsim8 eth13: set [1, 0] type 2 family 0 port 6081 - 0
[  931.296934][T29963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10791'.
[  931.673142][ T5740] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  931.788762][T29963] bond4: entered promiscuous mode
[  931.800844][T29963] 8021q: adding VLAN 0 to HW filter on device bond4
[  931.825034][ T5740] usb 8-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config
[  931.825124][ T5740] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  931.826887][ T5740] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00
[  931.826917][ T5740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  931.826939][ T5740] usb 8-1: Product: syz
[  931.826954][ T5740] usb 8-1: Manufacturer: syz
[  932.216479][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[  932.242032][T29968] 8021q: adding VLAN 0 to HW filter on device bond4
[  932.260336][T29968] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address
[  932.261474][T29968] bond4: (slave xfrm1): Error -95 calling set_mac_address
[  932.903272][ T5741] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  933.070247][ T5741] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  933.070280][ T5741] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  933.070302][ T5741] usb 6-1: config 220 has no interface number 2
[  933.070375][ T5741] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  933.070407][ T5741] usb 6-1: config 220 interface 0 has no altsetting 0
[  933.070426][ T5741] usb 6-1: config 220 interface 76 has no altsetting 0
[  933.070446][ T5741] usb 6-1: config 220 interface 1 has no altsetting 0
[  933.096189][ T5741] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  933.096222][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.096283][ T5741] usb 6-1: Product: syz
[  933.096339][ T5741] usb 6-1: Manufacturer: syz
[  933.096356][ T5741] usb 6-1: SerialNumber: syz
[  933.170597][ T5740] speedtch 8-1:1.0: speedtch_bind: setting interface to  1 failed (-71)!
[  933.170691][ T5740] speedtch 8-1:1.0: usbatm_usb_probe: bind failed: -71!
[  933.170755][ T5740] speedtch 8-1:1.0: probe with driver speedtch failed with error -71
[  933.318347][ T5740] speedtch 8-1:1.1: speedtch_bind: setting interface to  1 failed (-71)!
[  933.321145][ T5740] speedtch 8-1:1.1: usbatm_usb_probe: bind failed: -71!
[  933.321219][ T5740] speedtch 8-1:1.1: probe with driver speedtch failed with error -71
[  933.362901][ T5740] usb 8-1: USB disconnect, device number 3
[  933.550426][ T5741] uvcvideo 6-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[  933.550508][ T5741] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  933.550537][ T5741] uvcvideo 6-1:220.0: No valid video chain found.
[  933.550598][ T5741] usb 6-1: selecting invalid altsetting 0
[  933.575918][ T5741] usb 6-1: selecting invalid altsetting 0
[  933.575957][ T5741] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  933.591727][ T5741] usb 6-1: USB disconnect, device number 24
[  934.098458][T29739] bridge0: port 1(bridge_slave_0) entered blocking state
[  934.098623][T29739] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.098871][T29739] bridge_slave_0: entered allmulticast mode
[  934.102781][T29739] bridge_slave_0: entered promiscuous mode
[  934.222324][T29739] bridge0: port 2(bridge_slave_1) entered blocking state
[  934.222584][T29739] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.222855][T29739] bridge_slave_1: entered allmulticast mode
[  934.264909][T29739] bridge_slave_1: entered promiscuous mode
[  934.278344][T15103] netdevsim netdevsim8 eth14: set [1, 0] type 2 family 0 port 6081 - 0
[  934.282280][ T1142] netdevsim netdevsim8 eth15: set [1, 0] type 2 family 0 port 6081 - 0
[  934.282405][ T1142] netdevsim netdevsim8 eth16: set [1, 0] type 2 family 0 port 6081 - 0
[  934.443266][   T12] bridge_slave_1: left allmulticast mode
[  934.443304][   T12] bridge_slave_1: left promiscuous mode
[  934.443578][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.848008][   T12] bridge_slave_0: left allmulticast mode
[  934.848050][   T12] bridge_slave_0: left promiscuous mode
[  934.848304][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  935.127117][T30058] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10827'.
[  937.217700][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  937.348658][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  937.400391][   T12] bond0 (unregistering): Released all slaves
[  937.655308][T30058] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10827'.
[  937.706228][ T5264] 8021q: adding VLAN 0 to HW filter on device eth13
[  938.394480][T29739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  938.518020][ T4918] Bluetooth: hci5: connection err: -111
[  939.047698][T30128] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2
[  939.047730][T30128] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0
[  939.084949][T29739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  939.524774][T29739] team0: Port device team_slave_0 added
[  939.538007][T29739] team0: Port device team_slave_1 added
[  939.717736][   T66] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  939.717790][   T66] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  939.717830][   T66] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  939.717870][   T66] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  939.823223][T29739] batman_adv: batadv0: Adding interface: batadv_slave_0
[  939.823242][T29739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  939.823272][T29739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  939.847236][T29739] batman_adv: batadv0: Adding interface: batadv_slave_1
[  939.847288][T29739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  939.847361][T29739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  941.773124][T29739] hsr_slave_0: entered promiscuous mode
[  941.778767][T29739] hsr_slave_1: entered promiscuous mode
[  941.798901][T29739] debugfs: 'hsr0' already exists in 'hsr'
[  941.798926][T29739] Cannot create hsr debugfs directory
[  941.921084][ T5264] 8021q: adding VLAN 0 to HW filter on device eth14
[  942.005133][T30221] IPVS: Scheduler module ip_vs_ not found
[  942.042305][T30226] loop5: detected capacity change from 0 to 7
[  942.083575][T30228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10894'.
[  942.263786][T30226] Dev loop5: unable to read RDB block 7
[  942.263833][T30226]  loop5: unable to read partition table
[  942.264047][T30226] loop5: partition table beyond EOD, truncated
[  942.264067][T30226] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  942.370800][T30228] 8021q: adding VLAN 0 to HW filter on device bond1
[  942.542438][ T4969] Dev loop5: unable to read RDB block 7
[  942.542483][ T4969]  loop5: unable to read partition table
[  942.542763][ T4969] loop5: partition table beyond EOD, truncated
[  942.701170][   T12] hsr_slave_0: left promiscuous mode
[  942.733486][   T12] hsr_slave_1: left promiscuous mode
[  942.734828][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  942.734857][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  942.854017][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  942.854048][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  942.913933][T25357] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  943.030275][T30251] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10904'.
[  943.086742][   T12] veth1_macvtap: left promiscuous mode
[  943.086852][   T12] veth0_macvtap: left promiscuous mode
[  943.087120][   T12] veth1_vlan: left promiscuous mode
[  943.087310][   T12] veth0_vlan: left promiscuous mode
[  943.103469][T25357] usb 6-1: Using ep0 maxpacket: 32
[  943.105515][T25357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  943.105554][T25357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  943.105598][T25357] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  943.105625][T25357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  943.175333][T25357] usb 6-1: config 0 descriptor??
[  943.179540][T25357] hub 6-1:0.0: USB hub found
[  943.386937][T25357] hub 6-1:0.0: 1 port detected
[  944.012180][T25357] hub 6-1:0.0: activate --> -90
[  944.622310][ T5741] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[  944.623778][  T200] usb 6-1: USB disconnect, device number 25
[  944.638091][ T5741] usb 6-1-port1: cannot reset (err = -71)
[  944.647644][ T5741] usb 6-1-port1: Cannot enable. Maybe the USB cable is bad?
[  944.648269][ T5741] usb 6-1-port1: attempt power cycle
[  945.624334][   T12] team0 (unregistering): Port device team_slave_1 removed
[  945.705427][   T12] team0 (unregistering): Port device team_slave_0 removed
[  946.643984][T30322] bond1: entered promiscuous mode
[  946.648146][T30322] 8021q: adding VLAN 0 to HW filter on device bond1
[  946.828393][   T36] kauditd_printk_skb: 14 callbacks suppressed
[  946.828413][   T36] audit: type=1400 audit(1785777922.132:780): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=30344 comm="syz.7.10950" daddr=::ffff:172.20.20.0
[  948.659360][   T36] audit: type=1400 audit(1785777923.962:781): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=30377 comm="syz.4.10961" daddr=::ffff:172.20.20.170
[  948.914021][T30382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10963'.
[  950.109225][T29739] netdevsim netdevsim8 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  950.904188][ T5264] 8021q: adding VLAN 0 to HW filter on device eth15
[  952.175524][T29739] netdevsim netdevsim8 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  952.691515][T30467] netlink: 'syz.5.10995': attribute type 2 has an invalid length.
[  952.691542][T30467] netlink: 1279 bytes leftover after parsing attributes in process `syz.5.10995'.
[  953.903208][ T5707] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  953.912860][T29739] netdevsim netdevsim8 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  954.054150][ T5707] usb 6-1: Using ep0 maxpacket: 16
[  954.057559][ T5707] usb 6-1: config 0 interface 0 altsetting 88 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  954.057595][ T5707] usb 6-1: config 0 interface 0 altsetting 88 endpoint 0x81 has invalid wMaxPacketSize 0
[  954.057622][ T5707] usb 6-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  954.057652][ T5707] usb 6-1: config 0 interface 0 has no altsetting 0
[  954.057688][ T5707] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  954.057714][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.129664][ T5707] usb 6-1: config 0 descriptor??
[  954.303194][T30503] netlink: 'syz.7.11009': attribute type 10 has an invalid length.
[  954.303235][T30503] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0)
[  954.566052][ T5707] kovaplus 0003:1E7D:2D50.002F: unknown main item tag 0x0
[  954.566093][ T5707] kovaplus 0003:1E7D:2D50.002F: unknown main item tag 0x0
[  954.566122][ T5707] kovaplus 0003:1E7D:2D50.002F: unknown main item tag 0x0
[  954.566150][ T5707] kovaplus 0003:1E7D:2D50.002F: unknown main item tag 0x0
[  954.566177][ T5707] kovaplus 0003:1E7D:2D50.002F: unknown main item tag 0x0
[  954.566204][ T5707] kovaplus 0003:1E7D:2D50.002F: unknown main item tag 0x0
[  954.566230][ T5707] kovaplus 0003:1E7D:2D50.002F: unknown main item tag 0x0
[  954.566257][ T5707] kovaplus 0003:1E7D:2D50.002F: unknown main item tag 0x0
[  954.566283][ T5707] kovaplus 0003:1E7D:2D50.002F: unknown main item tag 0x0
[  954.566309][ T5707] kovaplus 0003:1E7D:2D50.002F: unknown main item tag 0x0
[  954.701112][ T5707] kovaplus 0003:1E7D:2D50.002F: hidraw0: USB HID v0.81 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0
[  955.123207][T25357] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  955.282925][T25357] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  955.283145][T25357] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  955.283236][T25357] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  955.283266][T25357] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  955.285953][T25357] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  955.285984][T25357] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  955.286066][T25357] usb 8-1: Product: syz
[  955.286083][T25357] usb 8-1: Manufacturer: syz
[  955.286100][T25357] usb 8-1: SerialNumber: syz
[  955.462014][T25357] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  955.462043][T25357] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  955.462098][T25357] usbserial_generic 8-1:1.0: generic converter detected
[  955.623500][ T5707] kovaplus 0003:1E7D:2D50.002F: couldn't init struct kovaplus_device
[  955.623561][ T5707] kovaplus 0003:1E7D:2D50.002F: couldn't install mouse
[  955.667987][ T5707] kovaplus 0003:1E7D:2D50.002F: probe with driver kovaplus failed with error -71
[  955.674436][T25357] usb 8-1: generic converter now attached to ttyUSB0
[  955.845190][T25357] usb 8-1: USB disconnect, device number 4
[  955.845583][ T5707] usb 6-1: USB disconnect, device number 30
[  956.288455][T25357] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  956.290208][T25357] usbserial_generic 8-1:1.0: device disconnected
[  956.498219][T29739] netdevsim netdevsim8 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  958.553224][ T5741] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  958.713365][ T5741] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  958.713399][ T5741] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  958.713421][ T5741] usb 8-1: Product: syz
[  958.713436][ T5741] usb 8-1: Manufacturer: syz
[  958.713452][ T5741] usb 8-1: SerialNumber: syz
[  958.915414][T20820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  959.040577][T20820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  959.086778][T20820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  959.112307][T20820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  959.134205][T20820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  959.392224][T30612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  959.455086][T30609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  960.353765][ T5741] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  960.353826][ T5741] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  960.353848][ T5741] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  960.534414][ T5741] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71
[  960.634775][ T5741] usb 8-1: USB disconnect, device number 5
[  961.466682][   T36] audit: type=1400 audit(1785777936.772:782): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=30644 comm="syz.7.11047" daddr=::ffff:172.20.20.170
[  961.768741][T29739] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  961.963272][T29739] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  961.977104][T29739] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  962.123601][T29739] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  962.133646][ T4918] Bluetooth: hci1: command tx timeout
[  962.191035][T29739] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  962.218141][T29739] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  962.330493][T29739] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  962.385307][T29739] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  962.795872][   T36] audit: type=1400 audit(1785777938.102:783): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=30684 comm="syz.7.11059" dest=20000
[  963.721866][T29739] 8021q: adding VLAN 0 to HW filter on device bond0
[  964.118119][T29739] 8021q: adding VLAN 0 to HW filter on device team0
[  964.173461][T30715] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11070'.
[  964.198662][T30715] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11070'.
[  964.217979][ T4918] Bluetooth: hci1: command tx timeout
[  964.458554][  T157] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.458792][  T157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  964.531436][T30595] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.531573][T30595] bridge0: port 1(bridge_slave_0) entered disabled state
[  964.531839][T30595] bridge_slave_0: entered allmulticast mode
[  964.567069][T30595] bridge_slave_0: entered promiscuous mode
[  964.590125][T30595] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.590262][T30595] bridge0: port 2(bridge_slave_1) entered disabled state
[  964.590527][T30595] bridge_slave_1: entered allmulticast mode
[  964.615507][T30595] bridge_slave_1: entered promiscuous mode
[  964.824697][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.824908][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  965.034766][T30595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  965.092365][T30595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  965.412881][T30595] team0: Port device team_slave_0 added
[  965.482076][T30595] team0: Port device team_slave_1 added
[  965.833811][T30595] batman_adv: batadv0: Adding interface: batadv_slave_0
[  965.833830][T30595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  965.833862][T30595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  965.841356][T30595] batman_adv: batadv0: Adding interface: batadv_slave_1
[  965.841375][T30595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  965.841407][T30595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  966.303268][ T4918] Bluetooth: hci1: command tx timeout
[  966.478393][T30595] hsr_slave_0: entered promiscuous mode
[  966.479855][T30595] hsr_slave_1: entered promiscuous mode
[  967.879517][ T5856] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  968.043229][ T5856] usb 8-1: Using ep0 maxpacket: 8
[  968.047835][ T5856] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  968.047869][ T5856] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.047892][ T5856] usb 8-1: Product: syz
[  968.047907][ T5856] usb 8-1: Manufacturer: syz
[  968.047923][ T5856] usb 8-1: SerialNumber: syz
[  968.124114][ T5856] usb 8-1: config 0 descriptor??
[  968.327827][ T5856] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  968.383382][ T4918] Bluetooth: hci1: command tx timeout
[  968.787112][ T5856] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  968.813237][ T5856] usb 8-1: USB disconnect, device number 6
[  969.239873][T29739] 8021q: adding VLAN 0 to HW filter on device batadv0
[  969.504398][T30595] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  969.657117][T30595] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  969.660834][T30595] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  969.874211][T30595] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  969.881975][T30595] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  970.078863][T30595] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  970.082320][T30595] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  970.133648][T30595] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  970.247180][T28104] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  970.409520][T28104] usb 8-1: Using ep0 maxpacket: 16
[  970.411348][T28104] usb 8-1: config 0 interface 0 altsetting 88 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  970.411374][T28104] usb 8-1: config 0 interface 0 altsetting 88 endpoint 0x81 has invalid wMaxPacketSize 0
[  970.411391][T28104] usb 8-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  970.411412][T28104] usb 8-1: config 0 interface 0 has no altsetting 0
[  970.411436][T28104] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  970.411453][T28104] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  970.486194][T28104] usb 8-1: config 0 descriptor??
[  970.978310][T28104] hid_parser_main: 34 callbacks suppressed
[  970.978333][T28104] kovaplus 0003:1E7D:2D50.0030: unknown main item tag 0x0
[  970.978362][T28104] kovaplus 0003:1E7D:2D50.0030: unknown main item tag 0x0
[  970.978386][T28104] kovaplus 0003:1E7D:2D50.0030: unknown main item tag 0x0
[  970.978409][T28104] kovaplus 0003:1E7D:2D50.0030: unknown main item tag 0x0
[  970.978435][T28104] kovaplus 0003:1E7D:2D50.0030: unknown main item tag 0x0
[  970.978463][T28104] kovaplus 0003:1E7D:2D50.0030: unknown main item tag 0x0
[  970.978489][T28104] kovaplus 0003:1E7D:2D50.0030: unknown main item tag 0x0
[  970.978516][T28104] kovaplus 0003:1E7D:2D50.0030: unknown main item tag 0x0
[  970.978543][T28104] kovaplus 0003:1E7D:2D50.0030: unknown main item tag 0x0
[  970.978570][T28104] kovaplus 0003:1E7D:2D50.0030: unknown main item tag 0x0
[  971.075699][T28104] kovaplus 0003:1E7D:2D50.0030: hidraw0: USB HID v0.81 Device [HID 1e7d:2d50] on usb-dummy_hcd.7-1/input0
[  971.557730][T29739] veth0_vlan: entered promiscuous mode
[  971.699181][T30595] 8021q: adding VLAN 0 to HW filter on device bond0
[  971.919414][T29739] veth1_vlan: entered promiscuous mode
[  971.979057][T28104] kovaplus 0003:1E7D:2D50.0030: couldn't init struct kovaplus_device
[  971.979121][T28104] kovaplus 0003:1E7D:2D50.0030: couldn't install mouse
[  971.982399][T28104] kovaplus 0003:1E7D:2D50.0030: probe with driver kovaplus failed with error -71
[  972.013308][T28104] usb 8-1: USB disconnect, device number 7
[  972.241072][T30595] 8021q: adding VLAN 0 to HW filter on device team0
[  972.348366][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  972.348504][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  972.409684][T26350] bridge0: port 2(bridge_slave_1) entered blocking state
[  972.409835][T26350] bridge0: port 2(bridge_slave_1) entered forwarding state
[  972.552134][T29739] veth0_macvtap: entered promiscuous mode
[  972.641758][T29739] veth1_macvtap: entered promiscuous mode
[  973.072427][T29739] batman_adv: batadv0: Interface activated: batadv_slave_0
[  973.147687][T29739] batman_adv: batadv0: Interface activated: batadv_slave_1
[  974.129369][ T5808] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  974.341456][ T5808] usb 8-1: Using ep0 maxpacket: 32
[  974.352275][ T5808] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  974.352333][ T5808] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  974.352362][ T5808] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  974.352390][ T5808] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  974.356250][ T5808] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  974.356282][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.356302][ T5808] usb 8-1: Product: syz
[  974.356317][ T5808] usb 8-1: Manufacturer: syz
[  974.356331][ T5808] usb 8-1: SerialNumber: syz
[  974.530203][    C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  975.066025][ T5808] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input40
[  975.608262][ T5808] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  975.608286][ T5808]  (id 0x00)
[  975.666364][T26350] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  975.667593][T26350] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  975.667844][T26350] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  975.893083][ T5808] rc_core: IR keymap rc-imon-pad not found
[  975.893104][ T5808] Registered IR keymap rc-empty
[  975.893201][ T5808] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  975.893231][ T5808] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  976.022188][ T5808] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0
[  976.023139][T25357] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  976.138649][ T5808] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input41
[  976.181324][ T5808] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:8> initialized
[  976.221618][T25357] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  976.221642][T25357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  976.258301][T30937] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  976.375884][T25357] usb 6-1: config 0 descriptor??
[  976.434630][T25357] cp210x 6-1:0.0: cp210x converter detected
[  976.605187][ T2342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  976.605211][ T2342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  977.052304][T25357] cp210x 6-1:0.0: GPIO initialisation failed: -524
[  977.182121][T30595] 8021q: adding VLAN 0 to HW filter on device batadv0
[  977.251019][T25357] usb 6-1: cp210x converter now attached to ttyUSB0
[  977.299893][T28104] usb 8-1: USB disconnect, device number 8
[  977.478887][T26911] usb 6-1: USB disconnect, device number 31
[  977.758886][T26911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  977.773688][T26911] cp210x 6-1:0.0: device disconnected
[  977.899216][T26350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  977.899240][T26350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  978.807828][T30595] veth0_vlan: entered promiscuous mode
[  978.907384][T30595] veth1_vlan: entered promiscuous mode
[  979.243910][T30595] veth0_macvtap: entered promiscuous mode
[  979.250790][T30595] veth1_macvtap: entered promiscuous mode
[  979.410455][T30595] batman_adv: batadv0: Interface activated: batadv_slave_0
[  979.476980][T30595] batman_adv: batadv0: Interface activated: batadv_slave_1
[  979.508270][T26911] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  979.553065][ T2216] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  979.697449][T26911] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  979.697515][T26911] usb 8-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00
[  979.697541][T26911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.706284][T30940] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  979.709606][T26350] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  979.709714][T26350] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  979.769532][T26911] usb 8-1: config 0 descriptor??
[  979.801912][T26911] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  981.014795][T31060] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  981.338958][ T1247] usb 8-1: USB disconnect, device number 9
[  982.786272][ T1297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  982.786296][ T1297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  983.296552][T30938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  983.296577][T30938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  983.947764][T31110] netlink: 76 bytes leftover after parsing attributes in process `syz.5.11214'.
[  984.715233][ T4918] Bluetooth: hci1: Malformed MSFT vendor event: 0x02
[  985.721040][   T36] audit: type=1804 audit(1785777961.022:784): pid=31133 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.11221" name="/newroot/4/file0" dev="tmpfs" ino=38 res=1 errno=0
[  989.119344][   T36] audit: type=1400 audit(1785777964.422:785): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=31222 comm="syz.5.11253" dest=20004
[  989.553093][ T5707] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[  989.712164][ T5707] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  989.712200][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.712225][ T5707] usb 6-1: Product: syz
[  989.712241][ T5707] usb 6-1: Manufacturer: syz
[  989.712258][ T5707] usb 6-1: SerialNumber: syz
[  989.762560][ T5707] usb 6-1: config 0 descriptor??
[  990.003040][ T5707] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  990.354111][   T36] audit: type=1326 audit(1785777965.662:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31246 comm="syz.9.11264" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e827ce019 code=0x7ffc0000
[  990.355033][   T36] audit: type=1326 audit(1785777965.662:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31246 comm="syz.9.11264" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e827ce019 code=0x7ffc0000
[  990.356181][   T36] audit: type=1326 audit(1785777965.662:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31246 comm="syz.9.11264" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f2e827ce019 code=0x7ffc0000
[  990.357000][   T36] audit: type=1326 audit(1785777965.662:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31246 comm="syz.9.11264" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e827ce019 code=0x7ffc0000
[  990.358345][   T36] audit: type=1326 audit(1785777965.662:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31246 comm="syz.9.11264" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e827ce019 code=0x7ffc0000
[  990.453590][ T5707] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  990.541900][ T5707] usb 6-1: USB disconnect, device number 32
[  991.401563][   T36] audit: type=1400 audit(1785777966.702:791): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=31266 comm="syz.5.11273" daddr=::ffff:0.0.0.0 dest=20002
[  993.183012][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  993.203067][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  993.213040][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  993.223009][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  993.233006][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  993.243010][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  993.253011][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  993.661461][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[  993.801439][T31317] netlink: 'syz.9.11294': attribute type 2 has an invalid length.
[  996.090329][T31347] evm: overlay not supported
[  999.878925][T31418] binder: 31417:31418 ioctl c0306201 200000000680 returned -14
[  999.979180][T31422] syz_tun: entered allmulticast mode
[ 1000.042027][T31421] syz_tun: left allmulticast mode
[ 1000.640570][T31438] kvm: kvm [31437]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff
[ 1001.783193][T31462] hsr_slave_0: left promiscuous mode
[ 1001.818824][T31462] hsr_slave_1: left promiscuous mode
[ 1002.378352][T31473] bond0: entered promiscuous mode
[ 1002.378379][T31473] bond_slave_0: entered promiscuous mode
[ 1002.380234][T31473] bond_slave_1: entered promiscuous mode
[ 1002.420467][T31473] gretap0: entered promiscuous mode
[ 1002.462580][T31473] dummy0: entered promiscuous mode
[ 1002.652714][T31473] debugfs: 'hsr0' already exists in 'hsr'
[ 1002.652741][T31473] Cannot create hsr debugfs directory
[ 1003.143071][ T1247] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1003.294237][ T1247] usb 6-1: Using ep0 maxpacket: 16
[ 1003.296294][ T1247] usb 6-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1003.296325][ T1247] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[ 1003.296349][ T1247] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[ 1003.296370][ T1247] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[ 1003.296392][ T1247] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1003.296414][ T1247] usb 6-1: config 0 has no interface number 0
[ 1003.296463][ T1247] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1003.296503][ T1247] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1003.296529][ T1247] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1003.296566][ T1247] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1003.296596][ T1247] usb 6-1: config 0 interface 125 has no altsetting 0
[ 1003.296615][ T1247] usb 6-1: config 0 interface 125 has no altsetting 2
[ 1003.298769][ T1247] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1003.298797][ T1247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1003.298818][ T1247] usb 6-1: Product: syz
[ 1003.298832][ T1247] usb 6-1: Manufacturer: syz
[ 1003.298848][ T1247] usb 6-1: SerialNumber: syz
[ 1003.304568][ T1247] usb 6-1: config 0 descriptor??
[ 1003.491512][ T1247] usb 6-1: selecting invalid altsetting 2
[ 1003.650809][T31493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1003.677463][T31493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1003.755187][   T36] audit: type=1326 audit(1785777979.052:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31513 comm="syz.9.11371" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e827ce019 code=0x0
[ 1003.760203][    C0] usb 6-1: async_complete: urb error -71
[ 1003.760476][    C0] usb 6-1: async_complete: urb error -71
[ 1003.760536][    C0] usb 6-1: async_complete: urb error -71
[ 1003.760594][    C0] usb 6-1: async_complete: urb error -71
[ 1003.765971][ T1247] get_1284_register: usb error -71
[ 1003.980339][ T1247] usb 6-1: USB disconnect, device number 33
[ 1004.419534][   T36] audit: type=1400 audit(1785777979.722:793): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=31523 comm="syz.7.11375" daddr=::ffff:172.20.20.59
[ 1005.215120][ T4918] Bluetooth: hci2: Unable to find connection for big 0x72
[ 1005.445089][T31563] kvm: emulating exchange as write
[ 1006.994666][T31594] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11404'.
[ 1007.123880][T31602] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11404'.
[ 1007.333146][ T5740] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[ 1007.536185][T31602] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1007.563077][ T5740] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1007.563105][ T5740] usb 6-1: config 0 has no interfaces?
[ 1007.563138][ T5740] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1007.563164][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1007.571370][ T5740] usb 6-1: config 0 descriptor??
[ 1007.703617][T31602] bond2: (slave bond3): Enslaving as an active interface with an up link
[ 1008.610968][T31643] futex_wake_op: syz.8.11423 tries to shift op by 144; fix this program
[ 1009.053124][ T5740] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1009.204189][ T5740] usb 10-1: Using ep0 maxpacket: 16
[ 1009.206181][ T5740] usb 10-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config
[ 1009.206211][ T5740] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1009.208656][ T5740] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1009.208689][ T5740] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1009.208712][ T5740] usb 10-1: Product: syz
[ 1009.208728][ T5740] usb 10-1: Manufacturer: syz
[ 1009.208743][ T5740] usb 10-1: SerialNumber: syz
[ 1009.315927][ T5740] usb 10-1: 0:2 : does not exist
[ 1010.802998][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[ 1011.162283][ T5740] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[ 1011.276952][ T5740] usb 10-1: USB disconnect, device number 2
[ 1011.391186][T18316] udevd[18316]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1011.440375][ T5856] usb 6-1: USB disconnect, device number 34
[ 1011.858250][T31670] syzkaller0: entered promiscuous mode
[ 1011.858285][T31670] syzkaller0: entered allmulticast mode
[ 1012.874625][T31685] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11440'.
[ 1013.060947][T31685] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1013.252155][T31703] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1013.252821][T31703] bond1: (slave ip6_vti0): The slave device specified does not support setting the MAC address
[ 1013.253602][ T5808] usb 9-1: new low-speed USB device number 2 using dummy_hcd
[ 1013.285470][T31703] bond1: (slave ip6_vti0): Error -95 calling set_mac_address
[ 1013.405001][ T5808] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[ 1013.405033][ T5808] usb 9-1: config 179 has no interface number 0
[ 1013.405092][ T5808] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[ 1013.405122][ T5808] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1013.405148][ T5808] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 12336, setting to 8
[ 1013.405177][ T5808] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1013.405222][ T5808] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1013.405248][ T5808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1013.498741][T31716] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1013.556562][ T5808] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1013.562389][ T5808] xpad 9-1:179.65: probe with driver xpad failed with error -90
[ 1013.727509][ T5808] usb 9-1: USB disconnect, device number 2
[ 1016.034502][T15103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1016.034544][T15103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1017.172374][T31803] macvtap1: entered promiscuous mode
[ 1017.172403][T31803] macvtap1: entered allmulticast mode
[ 1017.172861][T31803] veth1_to_bridge: entered promiscuous mode
[ 1017.172881][T31803] veth1_to_bridge: entered allmulticast mode
[ 1017.241799][T31803] team0: Device macvtap1 failed to register rx_handler
[ 1017.522290][T31803] veth1_to_bridge: left allmulticast mode
[ 1017.522610][T31803] veth1_to_bridge: left promiscuous mode
[ 1019.320199][T31840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11505'.
[ 1019.783494][ T5707] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1019.943512][ T5707] usb 6-1: Using ep0 maxpacket: 8
[ 1019.947633][ T5707] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1019.947663][ T5707] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1019.947714][ T5707] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1019.950159][ T5707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1019.950191][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.950214][ T5707] usb 6-1: Product: syz
[ 1019.950230][ T5707] usb 6-1: Manufacturer: syz
[ 1019.950246][ T5707] usb 6-1: SerialNumber: syz
[ 1020.268330][ T5707] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[ 1020.268381][ T5707] cdc_ncm 6-1:1.0: bind() failure
[ 1020.420135][ T5707] usb 6-1: USB disconnect, device number 35
[ 1020.656907][T15103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1020.656948][T15103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1021.160506][T31870] GUP no longer grows the stack in syz.7.11517 (31870): 200000005000-200000008000 (200000004000)
[ 1021.161263][T31870] CPU: 1 UID: 0 PID: 31870 Comm: syz.7.11517 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1021.161297][T31870] Tainted: [L]=SOFTLOCKUP
[ 1021.161305][T31870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1021.161318][T31870] Call Trace:
[ 1021.161326][T31870]  <TASK>
[ 1021.161336][T31870]  dump_stack_lvl+0xe8/0x150
[ 1021.161379][T31870]  fixup_user_fault+0x637/0x6f0
[ 1021.161422][T31870]  fault_in_user_writeable+0x71/0xd0
[ 1021.161450][T31870]  futex_lock_pi+0x7bc/0xac0
[ 1021.161479][T31870]  ? futex_unqueue+0x211/0x240
[ 1021.161516][T31870]  ? __pfx_futex_lock_pi+0x10/0x10
[ 1021.161580][T31870]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1021.161630][T31870]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[ 1021.161668][T31870]  do_futex+0x330/0x4e0
[ 1021.161702][T31870]  ? __pfx_do_futex+0x10/0x10
[ 1021.161732][T31870]  ? __vm_munmap+0x2fe/0x3e0
[ 1021.161782][T31870]  __se_sys_futex+0x3a8/0x450
[ 1021.161820][T31870]  ? __pfx___se_sys_futex+0x10/0x10
[ 1021.161850][T31870]  ? rcu_is_watching+0x15/0xb0
[ 1021.161888][T31870]  ? __x64_sys_futex+0x21/0xf0
[ 1021.161918][T31870]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1021.161944][T31870]  do_syscall_64+0x174/0x580
[ 1021.161975][T31870]  ? trace_irq_disable+0x3b/0x140
[ 1021.162003][T31870]  ? clear_bhb_loop+0x40/0x90
[ 1021.162033][T31870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1021.162057][T31870] RIP: 0033:0x7f944422e019
[ 1021.162079][T31870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1021.162097][T31870] RSP: 002b:00007f9442486028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1021.162121][T31870] RAX: ffffffffffffffda RBX: 00007f94444b5fa0 RCX: 00007f944422e019
[ 1021.162137][T31870] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000
[ 1021.162151][T31870] RBP: 00007f94442c500c R08: 0000000000000000 R09: 0000000000000001
[ 1021.162165][T31870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1021.162177][T31870] R13: 00007f94444b6038 R14: 00007f94444b5fa0 R15: 00007ffcd1c73518
[ 1021.162214][T31870]  </TASK>
[ 1021.626934][T31878] binder: BINDER_SET_CONTEXT_MGR already set
[ 1021.626952][T31878] binder: 31876:31878 ioctl 4018620d 200000001000 returned -16
[ 1021.898015][T31884] FAULT_INJECTION: forcing a failure.
[ 1021.898015][T3188[ 1021.898015][T31884] FAULT_INJECTION: forcing a failure.
[ 1021.898015][T31884] name failslab, interval 1, probability 100, space 0, times 10
[ 1021.898073][T31884] CPU: 0 UID: 0 PID: 31884 Comm: syz.8.11522 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1021.898109][T31884] Tainted: [L]=SOFTLOCKUP
[ 1021.898116][T31884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1021.898129][T31884] Call Trace:
[ 1021.898137][T31884]  <TASK>
[ 1021.898146][T31884]  dump_stack_lvl+0xe8/0x150
[ 1021.898185][T31884]  should_fail_ex+0x467/0x600
[ 1021.898226][T31884]  should_failslab+0xa8/0x100
[ 1021.898255][T31884]  kmem_cache_alloc_noprof+0xa4/0x650
[ 1021.898279][T31884]  ? jbd2__journal_start+0x145/0x5c0
[ 1021.898310][T31884]  ? jbd2__journal_start+0x145/0x5c0
[ 1021.898350][T31884]  jbd2__journal_start+0x145/0x5c0
[ 1021.898387][T31884]  __ext4_journal_start_sb+0x203/0x5d0
[ 1021.898429][T31884]  ext4_dirty_inode+0x93/0x110
[ 1021.898466][T31884]  ? __pfx_ext4_dirty_inode+0x10/0x10
[ 1021.898500][T31884]  __mark_inode_dirty+0x3a8/0x13b0
[ 1021.898540][T31884]  file_update_time_flags+0x3f4/0x4b0
[ 1021.898576][T31884]  ext4_page_mkwrite+0x225/0x1150
[ 1021.898624][T31884]  ? __pfx_filemap_fault+0x10/0x10
[ 1021.898664][T31884]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[ 1021.898698][T31884]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1021.898757][T31884]  ? __pte_offset_map+0x29/0x200
[ 1021.898796][T31884]  do_page_mkwrite+0x14a/0x310
[ 1021.898831][T31884]  do_pte_missing+0x734/0x28f0
[ 1021.898869][T31884]  ? handle_mm_fault+0xe8/0x13f0
[ 1021.898897][T31884]  handle_mm_fault+0xd28/0x13f0
[ 1021.898930][T31884]  ? handle_mm_fault+0xe8/0x13f0
[ 1021.898956][T31884]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1021.898977][T31884]  ? lock_vma_under_rcu+0x45a/0x500
[ 1021.898996][T30945] FAULT_INJECTION: forcing a failure.
[ 1021.898996][T30945] name failslab, interval 1, probability 100, space 0, times 5
[ 1021.899004][T31884]  ? __pfx_do_futex+0x10/0x10
[ 1021.899055][T31884]  do_user_addr_fault+0xa4d/0x1340
[ 1021.899091][T31884]  ? trace_page_fault_user+0x84/0x1e0
[ 1021.899114][T31884]  exc_page_fault+0x6a/0xc0
[ 1021.899141][T31884]  asm_exc_page_fault+0x26/0x30
[ 1021.899161][T31884] RIP: 0033:0x7fd5b5352e52
[ 1021.899179][T31884] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 d3 8b fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b
[ 1021.899196][T31884] RSP: 002b:00007ffe222de170 EFLAGS: 00010202
[ 1021.899214][T31884] RAX: 0000000000006008 RBX: 00007fd5b6235720 RCX: 0000000000000000
[ 1021.899227][T31884] RDX: 0000001b2f51e000 RSI: 0000000000000008 RDI: 00007fd5b6235720
[ 1021.899240][T31884] RBP: 000000000000004c R08: 00007fd5b56f0000 R09: 00007fd5b5706038
[ 1021.899253][T31884] R10: 0000000000000003 R11: 0000000000000007 R12: ffffffff823ccfdf
[ 1021.899265][T31884] R13: 00007fd5b5706038 R14: 0000000000000041 R15: ffffffffffffa000
[ 1021.899281][T31884]  ? vfs_write+0x20f/0xbb0
[ 1021.899318][T31884]  </TASK>
[ 1021.899333][T30945] CPU: 1 UID: 0 PID: 30945 Comm: kworker/u8:18 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1021.899363][T30945] Tainted: [L]=SOFTLOCKUP
[ 1021.899371][T30945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1021.899385][T30945] Workqueue: events_unbound nsim_dev_trap_report_work
[ 1021.899419][T30945] Call Trace:
[ 1021.899429][T30945]  <TASK>
[ 1021.899434][T31883] FAULT_INJECTION: forcing a failure.
[ 1021.899434][T31883] name failslab, interval 1, probability 100, space 0, times 4
[ 1021.899439][T30945]  dump_stack_lvl+0xe8/0x150
[ 1021.899476][T30945]  should_fail_ex+0x467/0x600
[ 1021.899511][T30945]  should_failslab+0xa8/0x100
[ 1021.899537][T30945]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1021.899560][T30945]  ? __alloc_skb+0x1d7/0x7a0
[ 1021.899590][T30945]  ? __alloc_skb+0x1d7/0x7a0
[ 1021.899619][T30945]  __alloc_skb+0x1d7/0x7a0
[ 1021.899646][T30945]  nsim_dev_trap_report_work+0x2b1/0xcb0
[ 1021.899687][T30945]  ? process_scheduled_works+0xa20/0x14e0
[ 1021.899712][T30945]  process_scheduled_works+0xa8e/0x14e0
[ 1021.899764][T30945]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1021.899795][T30945]  ? assign_work+0x3cf/0x5d0
[ 1021.899824][T30945]  worker_thread+0xa47/0xfb0
[ 1021.899863][T30945]  ? __kthread_parkme+0x71/0x1f0
[ 1021.899900][T30945]  kthread+0x388/0x470
[ 1021.899930][T30945]  ? __pfx_worker_thread+0x10/0x10
[ 1021.899953][T30945]  ? __pfx_kthread+0x10/0x10
[ 1021.899984][T30945]  ret_from_fork+0x514/0xb70
[ 1021.900017][T30945]  ? __pfx_ret_from_fork+0x10/0x10
[ 1021.900047][T30945]  ? __switch_to+0xc89/0x1420
[ 1021.900077][T30945]  ? __pfx_kthread+0x10/0x10
[ 1021.900109][T30945]  ret_from_fork_asm+0x1a/0x30
[ 1021.900145][T30945]  </TASK>
[ 1021.900161][T30945] FAULT_INJECTION: forcing a failure.
[ 1021.900161][T30945] name failslab, interval 1, probability 100, space 0, times 3
[ 1021.900161][T31883] CPU: 0 UID: 0 PID: 31883 Comm: syz.7.11520 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1021.900195][T31883] Tainted: [L]=SOFTLOCKUP
[ 1021.900202][T31883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1021.900214][T31883] Call Trace:
[ 1021.900221][T31883]  <TASK>
[ 1021.900229][T31883]  dump_stack_lvl+0xe8/0x150
[ 1021.900261][T31883]  should_fail_ex+0x467/0x600
[ 1021.900297][T31883]  should_failslab+0xa8/0x100
[ 1021.900322][T31883]  kmem_cache_alloc_noprof+0xa4/0x650
[ 1021.900342][T31883]  ? do_getname+0x2e/0x250
[ 1021.900371][T31883]  ? do_getname+0x2e/0x250
[ 1021.900401][T31883]  ? ktime_get+0x45/0x220
[ 1021.900423][T31883]  do_getname+0x2e/0x250
[ 1021.900451][T31883]  ? getname_flags+0x11/0x20
[ 1021.900483][T31883]  do_sys_openat2+0xcc/0x200
[ 1021.900507][T31883]  ? lapic_next_event+0x11/0x20
[ 1021.900532][T31883]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1021.900568][T31883]  __x64_sys_openat+0x138/0x170
[ 1021.900596][T31883]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1021.900622][T31883]  do_syscall_64+0x174/0x580
[ 1021.900654][T31883]  ? clear_bhb_loop+0x40/0x90
[ 1021.900661][ T5727] FAULT_INJECTION: forcing a failure.
[ 1021.900661][ T5727] name failslab, interval 1, probability 100, space 0, times 3
[ 1021.900684][T31883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1021.900704][T31883] RIP: 0033:0x7f94441ee84e
[ 1021.900722][T31883] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1021.900739][T31883] RSP: 002b:00007f9442485f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1021.900759][T31883] RAX: ffffffffffffffda RBX: 00007f94424866c0 RCX: 00007f94441ee84e
[ 1021.900774][T31883] RDX: 0000000000000000 RSI: 00007f94442c4747 RDI: ffffffffffffff9c
[ 1021.900788][T31883] RBP: 00007f94442c500c R08: 0000000000000000 R09: 0000000000000000
[ 1021.900800][T31883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1021.900812][T31883] R13: 00007f94444b6038 R14: 00007f94444b5fa0 R15: 00007ffcd1c73518
[ 1021.900842][T31883]  </TASK>
[ 1021.900857][ T5727] CPU: 1 UID: 0 PID: 5727 Comm: kworker/1:4 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1021.900889][ T5727] Tainted: [L]=SOFTLOCKUP
[ 1021.900897][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1021.900920][ T5727] Workqueue: events vidtv_mux_tick
[ 1021.900950][ T5727] Call Trace:
[ 1021.900959][ T5727]  <TASK>
[ 1021.900967][ T5727]  dump_stack_lvl+0xe8/0x150
[ 1021.901002][ T5727]  should_fail_ex+0x467/0x600
[ 1021.901043][ T5727]  should_failslab+0xa8/0x100
[ 1021.901071][ T5727]  __kmalloc_cache_noprof+0xa0/0x6b0
[ 1021.901097][ T5727]  ? vidtv_s302m_encode+0x356/0x1840
[ 1021.901125][ T5727]  ? vidtv_s302m_encode+0x356/0x1840
[ 1021.901161][ T5727]  vidtv_s302m_encode+0x356/0x1840
[ 1021.901199][ T5727]  ? ktime_get+0x45/0x220
[ 1021.901222][ T5727]  ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10
[ 1021.901232][T31881] FAULT_INJECTION: forcing a failure.
[ 1021.901232][T31881] name failslab, interval 1, probability 100, space 0, times 2
[ 1021.901260][ T5727]  ? __pfx_hrtimer_wakeup+0x10/0x10
[ 1021.901290][ T5727]  ? seqcount_lockdep_reader_access+0xa9/0x100
[ 1021.901310][ T5727]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1021.901336][ T5727]  ? __pfx_vidtv_s302m_encode+0x10/0x10
[ 1021.901360][ T5727]  ? ktime_get+0x1f5/0x220
[ 1021.901377][ T5727]  ? usleep_range_state+0x95/0x180
[ 1021.901403][ T5727]  ? usleep_range_state+0x13a/0x180
[ 1021.901432][ T5727]  vidtv_mux_tick+0x135c/0x24b0
[ 1021.901496][ T5727]  ? __pfx_vidtv_mux_tick+0x10/0x10
[ 1021.901536][ T5727]  ? look_up_lock_class+0x57/0x110
[ 1021.901575][ T5727]  ? trace_hrtimer_start+0x82/0x200
[ 1021.901623][ T5727]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1021.901655][ T5727]  ? process_scheduled_works+0xa20/0x14e0
[ 1021.901690][ T5727]  ? rcu_is_watching+0x15/0xb0
[ 1021.901717][ T5727]  ? process_scheduled_works+0xa20/0x14e0
[ 1021.901740][ T5727]  process_scheduled_works+0xa8e/0x14e0
[ 1021.901791][ T5727]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1021.901821][ T5727]  ? assign_work+0x3cf/0x5d0
[ 1021.901849][ T5727]  worker_thread+0xa47/0xfb0
[ 1021.901886][ T5727]  ? __kthread_parkme+0x71/0x1f0
[ 1021.901923][ T5727]  kthread+0x388/0x470
[ 1021.901952][ T5727]  ? __pfx_worker_thread+0x10/0x10
[ 1021.901973][ T5727]  ? __pfx_kthread+0x10/0x10
[ 1021.902004][ T5727]  ret_from_fork+0x514/0xb70
[ 1021.902037][ T5727]  ? __pfx_ret_from_fork+0x10/0x10
[ 1021.902071][ T5727]  ? __switch_to+0xc89/0x1420
[ 1021.902102][ T5727]  ? __pfx_kthread+0x10/0x10
[ 1021.902132][ T5727]  ret_from_fork_asm+0x1a/0x30
[ 1021.902168][ T5727]  </TASK>
[ 1021.902183][T31881] CPU: 0 UID: 0 PID: 31881 Comm: sed Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1021.902214][T31881] Tainted: [L]=SOFTLOCKUP
[ 1021.902223][T31881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1021.902236][T31881] Call Trace:
[ 1021.902243][T31881]  <TASK>
[ 1021.902252][T31881]  dump_stack_lvl+0xe8/0x150
[ 1021.902289][T31881]  should_fail_ex+0x467/0x600
[ 1021.902328][T31881]  should_failslab+0xa8/0x100
[ 1021.902356][T31881]  kmem_cache_alloc_noprof+0xa4/0x650
[ 1021.902379][T31881]  ? vm_area_alloc+0x24/0x140
[ 1021.902407][T31881]  ? vm_area_alloc+0x24/0x140
[ 1021.902440][T31881]  vm_area_alloc+0x24/0x140
[ 1021.902469][T31881]  mmap_region+0x1263/0x2310
[ 1021.902512][T31881]  ? __lock_acquire+0x683/0x2ce0
[ 1021.902540][T31881]  ? __lock_acquire+0x683/0x2ce0
[ 1021.902563][T31881]  ? __pfx_mmap_region+0x10/0x10
[ 1021.902594][T31881]  ? __lock_acquire+0x683/0x2ce0
[ 1021.902654][T31881]  ? mas_prev_slot+0xb79/0xc00
[ 1021.902804][T31881]  ? cap_mmap_addr+0xaf/0x100
[ 1021.902832][T31881]  ? bpf_lsm_mmap_addr+0x9/0x50
[ 1021.902853][T31881]  ? security_mmap_addr+0x71/0x240
[ 1021.902887][T31881]  do_mmap+0xc1e/0x10b0
[ 1021.902931][T31881]  ? __pfx_do_mmap+0x10/0x10
[ 1021.902964][T31881]  ? rwbase_write_lock+0x550/0x720
[ 1021.903010][T31881]  vm_mmap_pgoff+0x275/0x4e0
[ 1021.903051][T31881]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1021.903084][T31881]  ? fput_close_sync+0x1f8/0x240
[ 1021.903105][T31881]  ? __pfx_fput_close_sync+0x10/0x10
[ 1021.903135][T31881]  ? __x64_sys_mmap+0x7f/0x140
[ 1021.903155][T31881]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1021.903177][T31881]  do_syscall_64+0x174/0x580
[ 1021.903203][T31881]  ? trace_irq_disable+0x3b/0x140
[ 1021.903223][T31881]  ? clear_bhb_loop+0x40/0x90
[ 1021.903247][T31881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1021.903267][T31881] RIP: 0033:0x7fb3a7d48242
[ 1021.903285][T31881] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00
[ 1021.903302][T31881] RSP: 002b:00007fffd1e8bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1021.903322][T31881] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb3a7d48242
[ 1021.903336][T31881] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 0000000000000000
[ 1021.903347][T31881] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000
[ 1021.903360][T31881] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000002000
[ 1021.903372][T31881] R13: 0000000000000000 R14: 00007fb3a7d1c0c0 R15: 00007fb3a7c6155b
[ 1021.903402][T31881]  </TASK>
[ 1021.903418][T30945] CPU: 1 UID: 0 PID: 30945 Comm: kworker/u8:18 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1021.903449][T30945] Tainted: [L]=SOFTLOCKUP
[ 1021.903457][T30945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1021.903473][T30945] Workqueue: events_unbound nsim_dev_trap_report_work
[ 1021.903507][T30945] Call Trace:
[ 1021.903515][T30945]  <TASK>
[ 1021.903524][T30945]  dump_stack_lvl+0xe8/0x150
[ 1021.903559][T30945]  should_fail_ex+0x467/0x600
[ 1021.903609][T30945]  should_failslab+0xa8/0x100
[ 1021.903640][T30945]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1021.903666][T30945]  ? __alloc_skb+0x1d7/0x7a0
[ 1021.903698][T30945]  ? __alloc_skb+0x1d7/0x7a0
[ 1021.903734][T30945]  __alloc_skb+0x1d7/0x7a0
[ 1021.903767][T30945]  nsim_dev_trap_report_work+0x2b1/0xcb0
[ 1021.903817][T30945]  ? process_scheduled_works+0xa20/0x14e0
[ 1021.903845][T30945]  process_scheduled_works+0xa8e/0x14e0
[ 1021.903909][T30945]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1021.903946][T30945]  ? assign_work+0x3cf/0x5d0
[ 1021.903983][T30945]  worker_thread+0xa47/0xfb0
[ 1021.904030][T30945]  ? __kthread_parkme+0x71/0x1f0
[ 1021.904075][T30945]  kthread+0x388/0x470
[ 1021.904110][T30945]  ? __pfx_worker_thread+0x10/0x10
[ 1021.904137][T30945]  ? __pfx_kthread+0x10/0x10
[ 1021.904173][T30945]  ret_from_fork+0x514/0xb70
[ 1021.904211][T30945]  ? __pfx_ret_from_fork+0x10/0x10
[ 1021.904248][T30945]  ? __switch_to+0xc89/0x1420
[ 1021.904283][T30945]  ? __pfx_kthread+0x10/0x10
[ 1021.904319][T30945]  ret_from_fork_asm+0x1a/0x30
[ 1021.904363][T30945]  </TASK>
[ 1021.904539][ T5727] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[ 1021.904562][ T5727] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 1021.904593][ T5727] CPU: 1 UID: 0 PID: 5727 Comm: kworker/1:4 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1021.904624][ T5727] Tainted: [L]=SOFTLOCKUP
[ 1021.904632][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1021.904645][ T5727] Workqueue: events vidtv_mux_tick
[ 1021.904673][ T5727] RIP: 0010:vidtv_s302m_encode+0x517/0x1840
[ 1021.904700][ T5727] Code: eb 0a e8 ac 52 f0 f9 48 8b 5c 24 10 48 8b 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 23 c6 59 fa 4c 8b 33 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 6c 12 00 00 41 c7 06 5b 04 00 00 48 8b
[ 1021.904720][ T5727] RSP: 0018:ffffc90005b774a0 EFLAGS: 00010246
[ 1021.904738][ T5727] RAX: 0000000000000000 RBX: ffff8880357f9b28 RCX: ffff8880391e9f00
[ 1021.904754][ T5727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1021.904768][ T5727] RBP: ffffc90005b77630 R08: 0000000000000dc0 R09: 00000000ffffffff
[ 1021.904783][ T5727] R10: dffffc0000000000 R11: fffffbfff1c6134f R12: dffffc0000000000
[ 1021.904800][ T5727] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880357f9b68
[ 1021.904815][ T5727] FS:  0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000
[ 1021.904833][ T5727] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1021.904848][ T5727] CR2: 00007f2e835856c8 CR3: 0000000063a70000 CR4: 00000000003526f0
[ 1021.904869][ T5727] Call Trace:
[ 1021.904877][ T5727]  <TASK>
[ 1021.904888][ T5727]  ? ktime_get+0x45/0x220
[ 1021.904910][ T5727]  ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10
[ 1021.904942][ T5727]  ? __pfx_hrtimer_wakeup+0x10/0x10
[ 1021.904975][ T5727]  ? seqcount_lockdep_reader_access+0xa9/0x100
[ 1021.904998][ T5727]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1021.905027][ T5727]  ? __pfx_vidtv_s302m_encode+0x10/0x10
[ 1021.905053][ T5727]  ? ktime_get+0x1f5/0x220
[ 1021.905072][ T5727]  ? usleep_range_state+0x95/0x180
[ 1021.905100][ T5727]  ? usleep_range_state+0x13a/0x180
[ 1021.905131][ T5727]  vidtv_mux_tick+0x135c/0x24b0
[ 1021.905182][ T5727]  ? __pfx_vidtv_mux_tick+0x10/0x10
[ 1021.905219][ T5727]  ? look_up_lock_class+0x57/0x110
[ 1021.905255][ T5727]  ? trace_hrtimer_start+0x82/0x200
[ 1021.905295][ T5727]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1021.905330][ T5727]  ? process_scheduled_works+0xa20/0x14e0
[ 1021.905361][ T5727]  ? rcu_is_watching+0x15/0xb0
[ 1021.905389][ T5727]  ? process_scheduled_works+0xa20/0x14e0
[ 1021.905416][ T5727]  process_scheduled_works+0xa8e/0x14e0
[ 1021.905459][ T5727]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1021.905490][ T5727]  ? assign_work+0x3cf/0x5d0
[ 1021.905519][ T5727]  worker_thread+0xa47/0xfb0
[ 1021.905554][ T5727]  ? __kthread_parkme+0x71/0x1f0
[ 1021.905598][ T5727]  kthread+0x388/0x470
[ 1021.905630][ T5727]  ? __pfx_worker_thread+0x10/0x10
[ 1021.905656][ T5727]  ? __pfx_kthread+0x10/0x10
[ 1021.905689][ T5727]  ret_from_fork+0x514/0xb70
[ 1021.905724][ T5727]  ? __pfx_ret_from_fork+0x10/0x10
[ 1021.905757][ T5727]  ? __switch_to+0xc89/0x1420
[ 1021.905788][ T5727]  ? __pfx_kthread+0x10/0x10
[ 1021.905822][ T5727]  ret_from_fork_asm+0x1a/0x30
[ 1021.905853][ T5727]  </TASK>
[ 1021.905869][ T5727] Modules linked in:
[ 1021.905889][ T5727] ---[ end trace 0000000000000000 ]---
[ 1021.905906][ T5727] RIP: 0010:vidtv_s302m_encode+0x517/0x1840
[ 1021.905934][ T5727] Code: eb 0a e8 ac 52 f0 f9 48 8b 5c 24 10 48 8b 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 23 c6 59 fa 4c 8b 33 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 6c 12 00 00 41 c7 06 5b 04 00 00 48 8b
[ 1021.905954][ T5727] RSP: 0018:ffffc90005b774a0 EFLAGS: 00010246
[ 1021.905971][ T5727] RAX: 0000000000000000 RBX: ffff8880357f9b28 RCX: ffff8880391e9f00
[ 1021.905986][ T5727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1021.906001][ T5727] RBP: ffffc90005b77630 R08: 0000000000000dc0 R09: 00000000ffffffff
[ 1021.912675][ T5727] R10: dffffc0000000000 R11: fffffbfff1c6134f R12: dffffc0000000000
[ 1021.912738][ T5727] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880357f9b68
[ 1021.912787][ T5727] FS:  0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000
[ 1021.912838][ T5727] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1021.912880][ T5727] CR2: 00007f2e835856c8 CR3: 0000000037d98000 CR4: 00000000003526f0
[ 1021.913588][ T5727] Kernel panic - not syncing: Fatal exception
[ 1021.914218][ T5727] Kernel Offset: disabled