last executing test programs:

10m46.002302463s ago: executing program 3 (id=369):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8008, 0xa0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000051}, 0x80)

10m45.300706417s ago: executing program 3 (id=375):
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
migrate_pages(0x0, 0x76f, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x1)
r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x85c3, 0x402)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0xffffbf7f)

10m42.784714159s ago: executing program 3 (id=388):
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={0x0})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

10m42.712310741s ago: executing program 3 (id=389):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)

10m42.456897065s ago: executing program 3 (id=391):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x100bf26, @ipv4={'\x00', '\xff\xff', @loopback}, 0x183}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='team_slave_0\x00', 0x10)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x3ff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x800, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

10m41.547026218s ago: executing program 3 (id=400):
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100)
ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000440))

10m40.13622866s ago: executing program 32 (id=400):
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100)
ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000440))

4m31.887373531s ago: executing program 1 (id=1253):
openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000500)=0x804)

4m30.053653652s ago: executing program 1 (id=1256):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106a05090300000000000109022400010000000109040045440300000009210000000122180009058103"], 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}})
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
r2 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
syz_usb_control_io$hid(r0, 0x0, 0x0)
dup2(r1, r1)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150095ff0904a1"], 0x0}, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
socket$kcm(0x29, 0x2, 0x0)
fallocate(r3, 0x7, 0x103, 0x0)

4m27.184157881s ago: executing program 1 (id=1262):
r0 = socket(0x2, 0x1, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x18, r3}, 0x10)
sendmsg$nl_route(r0, 0x0, 0x20000000)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

4m25.710081484s ago: executing program 1 (id=1266):
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000080)=0x1, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
listen(0xffffffffffffffff, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'})
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000300), &(0x7f0000000340)=0x10)
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='0', 0x1)
write(r1, &(0x7f00000001a0)='1', 0x1)

4m25.546150023s ago: executing program 1 (id=1267):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
inotify_init()
r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be", 0x9c, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})
mkdir(0x0, 0x2c)

4m24.417541451s ago: executing program 1 (id=1268):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xb}]}}, 0x0, 0x26}, 0x28)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))

4m8.406822s ago: executing program 33 (id=1268):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xb}]}}, 0x0, 0x26}, 0x28)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))

4m2.134044161s ago: executing program 5 (id=1289):
signalfd(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xd, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0)
ptrace(0x10, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

4m0.103747391s ago: executing program 5 (id=1292):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x1, 0xb2, 0x5, 0x2}, 0x9c)
gettimeofday(0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x1, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x2)

3m58.813145591s ago: executing program 5 (id=1295):
r0 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8885)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x8, 0x5, 0x3}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000240))
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x1c8}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8})
ioctl$KDSKBMODE(r2, 0x4b45, 0x0)

3m57.40638734s ago: executing program 5 (id=1297):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0)
ftruncate(r2, 0x2)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
rename(&(0x7f0000000000)='./cgroup\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m55.321407349s ago: executing program 5 (id=1301):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)

3m53.753474896s ago: executing program 5 (id=1302):
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a40100001000"], 0x1a4}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3m38.002524418s ago: executing program 34 (id=1302):
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a40100001000"], 0x1a4}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

30.705284834s ago: executing program 2 (id=1534):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x410)
sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x290, 0xffffffff, {0x77359400}, {}, {}, 0x1, @can={{}, 0x4, 0x1, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30)
mkdir(0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40008)
sched_setattr(0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/166, 0xa6)

27.368463393s ago: executing program 2 (id=1536):
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, 0x0, &(0x7f0000000040))
socket$can_j1939(0x1d, 0x2, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r4 = openat(r2, &(0x7f0000000100)='./sys\x00', 0x18e00, 0x0)
write(r4, &(0x7f0000000200)='atkbd', 0x5)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x5, 0x8081, r6, 0x0}])
write(r5, &(0x7f0000000100)='slave-24c02 0x1022', 0x12)
r8 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8], 0x50)
landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r10, 0x4000, r9}, 0x18)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r11, &(0x7f0000000180)='tcpci 0x2', 0x9)

22.840234383s ago: executing program 0 (id=1542):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
close(0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
mlockall(0x2)
r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0xef)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}, 0x8045)
quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0)
r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x5000)
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff)
syz_usb_connect(0x1, 0x2d, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

20.506619326s ago: executing program 2 (id=1544):
syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x16840)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001f80)=@newtfilter={0x58, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1, 0x6}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x8}, {0xc22, 0x7, 0xfffff800, 0xfffffff3}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4000001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240"], 0xcd0}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)}, 0x40085)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="300000000000000029000000040000008402300400000000040200030401", @ANYRES8], 0x30}, 0x40)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000040))
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x2a)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x10000})
r2 = syz_pidfd_open(0x0, 0x0)
setns(r2, 0x24020000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r3, &(0x7f0000000200)="a3", 0x1)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x18, 0x3f, 0x1, 0x70bd2b, 0x4, {0x3}, [@nested={0x4, 0x122}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)

19.863605861s ago: executing program 0 (id=1546):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setresuid(0x0, 0xee01, 0x0)
socket(0xa, 0x3, 0xff)
set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0)
r4 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
socket$rxrpc(0x21, 0x2, 0x2)
listen(r5, 0xa)

16.597299114s ago: executing program 0 (id=1551):
socket(0x10, 0x3, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x400000000000001, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioperm(0x4, 0x8, 0x5)
remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x3f8eda20, 0x2000)
r6 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, 0x0)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0)
poll(0x0, 0x0, 0x60)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r6, 0x40084149, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)

14.501812886s ago: executing program 0 (id=1553):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
socket$netlink(0x10, 0x3, 0xa)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
socket$inet6_sctp(0xa, 0x1, 0x84)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0xa9}, &(0x7f0000000280)=0x9, 0x0, 0x8000, 0x6, 0x84e, 0x2f7, 0x10, 0x712}}], 0x58}, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c)
ftruncate(r5, 0x200004)
sendfile(0xffffffffffffffff, r5, 0x0, 0x80001d00c0d1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()

14.03732857s ago: executing program 4 (id=1554):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r5, 0x0, 0x3, 0x577, &(0x7f0000001400)="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", 0x5})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400400c0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, 0x0)
mlockall(0x0)
socket(0x400000000010, 0x3, 0x0)
sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x0)

11.740715557s ago: executing program 0 (id=1555):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getpid()
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
io_setup(0x5, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000005c0)={0x2, "42fce3753785050006be000000000000000000560000000000000800", <r5=>0xffffffffffffffff})
poll(&(0x7f0000000140)=[{r5, 0xa004}], 0x1, 0x47)
r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r10, 0x4138ae84, 0x0)
r11 = open_tree(0xffffffffffffff9c, 0x0, 0x80800)
renameat2(r7, 0x0, r11, 0x0, 0x5)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)

11.683192291s ago: executing program 4 (id=1556):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
write(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280))
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x80000000})
sendmmsg$inet6(r4, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40)
shutdown(r4, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x20000011}, 0x44040)
mprotect(&(0x7f0000a63000/0x3000)=nil, 0x3000, 0x3)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
wait4(r6, 0x0, 0x8, 0x0)
ptrace$getregset(0x4204, r0, 0x4, &(0x7f0000000100)={0x0})

9.431847604s ago: executing program 0 (id=1557):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioprio_set$pid(0x1, 0x0, 0x2004)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x0, 0x569, 0x80000001, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0xf0, 0x8, 0xc, 0x8})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/185)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r7=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=<r8=>0x0)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x5, 0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
pipe(&(0x7f00000007c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r11, 0x6, 0x1d, 0x0, 0x0)
close(r12)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r13, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2008800}, 0x4000000)
syz_ublk_setup_queues(r10, r8, &(0x7f00000003c0)={0x0, 0x20000, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x1000, 0x2, 0xe3, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29e7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0xe0ffffff, {}, 0x1f, r7, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}})

9.227218452s ago: executing program 4 (id=1558):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xc9c8e702da339b16, 0x4, 0x4, 0xa3, 0x80, 0x3, 0x5, 0xfd, 0x4, 0x7, 0x2, 0x36}, {0xf000, 0xffe, 0xf, 0x80, 0x7, 0x8, 0x6a, 0x0, 0x8, 0xf, 0x12, 0x5}, {0x200000, 0x1, 0x0, 0x3, 0x20, 0x3, 0x40, 0x4, 0x9, 0xa, 0x2, 0xd}, {0x54000, 0xfec00000, 0x1b, 0xe, 0x1, 0x3, 0xb, 0x6, 0x8, 0x4, 0x70, 0x6}, {0x4000, 0x5000, 0xe, 0x4, 0xf, 0xf9, 0x4, 0xa5, 0x7f, 0xdd, 0x2, 0xff}, {0xffe, 0xeeee8000, 0x9, 0x5, 0x7, 0x7, 0xb, 0x0, 0x40, 0x0, 0x4, 0xc5}, {0x1ffe, 0xfec00000, 0x18, 0x9, 0x0, 0xf7, 0x1, 0xa, 0x1, 0x3, 0xd, 0x81}, {0x2, 0x2ffc, 0xb, 0x8, 0x5, 0x3, 0x9, 0x5, 0x3, 0x3, 0x4, 0xfd}, {0x25000, 0x2}, {0x100000, 0x3}, 0x20000000, 0x0, 0xd000, 0x2000, 0x0, 0x800, 0x60000, [0x9, 0x0, 0x8, 0x8]})
mkdirat(0xffffffffffffff9c, &(0x7f0000002200)='./sys/class/net/bonding_masters\x00', 0x1a0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x60000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
gettid()
r2 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
listen(r2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
socket$unix(0x1, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
listen(r2, 0x1)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x4008af12, &(0x7f0000000380))

8.907109599s ago: executing program 2 (id=1559):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="fdff0000000000000000000000000000000000009e30517f82e81224767d2518b6b27033ddfdb199aacb3449bf8f8ea20da899c6338b0420b25a99a5965a48ab973c8db0f56dccb644bc7d73486303e1f72d739586205c04a67291bff6decda2c0b7add3b7be1c6f3b931361a261e717306b886f5c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3})
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
readahead(r1, 0xe, 0xffffffffffffffff)
syz_clone3(&(0x7f0000000140)={0x4000, &(0x7f0000000040), 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6)
shutdown(r3, 0x32ce970513f32900)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ppoll(&(0x7f0000000140)=[{r4, 0xc782}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000540)=0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="270302", 0x3}], 0x1}, 0x4005)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)

5.097413953s ago: executing program 2 (id=1560):
r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$loop(0x0, 0x6b, 0x901)
setitimer(0x3, &(0x7f0000000040)={{}, {0x0, 0xea60}}, &(0x7f0000000380))
r4 = socket$inet6(0xa, 0x802, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, 0x0, 0x0)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000480)='#', 0x1}], 0x1)
r7 = accept4$unix(r5, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x2, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040), 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
timer_create(0x3, 0x0, &(0x7f0000044000))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000002600))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"})
r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r8)

2.68565242s ago: executing program 2 (id=1561):
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000001800)=ANY=[@ANYBLOB="48000000010401040000000000000000000000000500010002000000080003400000000008000440fffffffa08000340f5ffff070a000200000122ff0200000040000000060000001a5542e3356521d8776a0196008df3e337eeccaa3f3d3b0f"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x48)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
close(r1)
r2 = syz_io_uring_setup(0x306c, &(0x7f0000000080)={0x0, 0x3c3d, 0x1000}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0xd8b2, 0x100, 0x1, 0x2db, 0x0, r2}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa564, 0x800, 0x1, 0x31f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6083, 0x2, 0x2, 0x176, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6373, 0x2000, 0x3, 0x216, 0x0, r2}, 0xffffffffffffffff, 0x0, <r6=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa054, 0x800, 0x2, 0x194}}], 0x4, &(0x7f0000001740)={0x2e, 0x66, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x4, 0x501, 0x0, &(0x7f0000000740)=@buf_4k="42d180edb890ef04eb906c8a7781c7b49fa57ef839273de647458525d19cba64126f80d87da96960790c3c214933c977d20bdc99084242e0f8d7eca40ab70032a88417364d64642ffe496764b5cef8b5e90b4a5dea29e802dcef195656deaca5f035c7a636b208ff56ab45b01e0b429c91e93896ff9f5bcae44d044c41fb87383583c9e08ec8f59303ab2cb7220545e5751c33e3d9c0e0db180cc0830d33d4c8ca45736422dea8e22d91ae8e50d43539f08a537a5ddb28bd208aaa1aa9715d07a6fcbb4ac7d9fb16abce0f35ab5366bdde33187bf1594669081344ac91f85c1ce87e67d418c3651cfa1385c1558f7bfe8a5d530ace7285c21ef90479f8e376576b2329ae184d5ca4ab53d1fcc692fec6fcc551060305ef3e235bed8ca19f7d363001eb3734ed719c2ca6bfed8e7a9f75c5294fc39fcd6f8083d42c85eaf672922fb890d86dc4dff736df44e3ae651d9be3814b3f07022fee62e528d8426d11b61dea655d37fcfb0ee11135c26511696c1c07de364cf4d8798a04978a1245ff229b2a4c1ba98def964c4e50beb568a3a11e40d63a1cf00671a00c41d70d5694951869903ab4e7179654c7c6326fcb2e19ddfbfbf6f82202969b26caec7dcc80486eb17a3b083501aaf503ef0948fb7d738a410345f900935db21089909f27d0e4d21fd3e8b8bcecd14b5e9d2a3adca8e3f00a7302e5b25da8a7bbc0ebea24daeec4b11ea7e002402da4b5d89fba7be5f77af5ebee8f2c79c913a1d15cbbed0412e01da3f8997bd379d5c8b570c0d3ebeeb1eb18b95928c50699ae7967462a2db07c747e974e20bd87662b9ceb00b6b4bb953a3be6866ec83a9b2bb6963f685c606d646f04d0f6061a7fce70a0590922b05c9ce39e8574e343546636075f20757cdb9ddf5cdfb6545186c726e1bedbbdd12e78c3545deb6ee86d39f25a76b59b4b263677249e801f04ba0870f7a6060b7ea063c67b639ceaf4856e1d1d111b711e4fa5a231a800215841e0d6e8f7bf691132a7487adb6300e5f8f9503104d033b3f65422910dee949709dfc8ab96e40c45000602aca8989705de0ce1ab5e0fa57329646e96e18e948b39554910bf205dcb79172c7c8209c061b84fd0811117838cf3363fb2c78a42249722d67db021aae246f9999451dfe5db8d1a7446691defd36c18bf317cbf44c0191e6fcff7c228b80ed07e4c09d4e3db816aa494cf770e20dfbfe85333e312738d6d277d293e2f5925be6a7209bf3529756d5b113fd64052b148d4178cf61010e91453c481fe953ba52a607f294e37d825b24c10d7306ded8abf5031183de3a5c8b11ca0c094507ecd71767e26cd6f81eae3e0b364b7bc296805c1fd775fabcb05ba31832f7a878d262edbef26817aac5dd86be82ef6e2043b7ec3f207cbfa4c3348b80599a77151f3cd8e3e81136035a44bb7d6012b7925ae9140b694c02feccca53e50768d28836f255a67b9e32430b10341c7dc4068cc7df35334b184b4b564a758197c8e8a0ecef77b38b35be8f43520b375a480067c0219e151513eb130392a44af231201e0dedf1aa5e3da67ec7bd90a5af3d1b0ed692d775f4f4a018891590a5e10b56e8815cbad787fadac26155fcae26b2d510f77c9b704eedd380bf12bde1ce52ac4f13dca012d3f52fca9be637b99efafaf11af23c2afa0e7d69d04c19e4dc78cec0327c5a5d7a0e1777ed07f475c091df5bde33d7546752de8ee505a843abd866719c64ba446725ba2ff313cc190a3a5f7632a068abba57bd2007383b929c4ebc7107dffd321de76b3678626a32eba34f397886bf12cbfa1181a3d14425ddc0daa1988750da3537eb4b45be9c2506ce7ac772811570367da3b661188ec398645519b74c66d2f98b16aacafb4d85de9b0418162f089882748f3f2d4fdcb4a5ab1c6078305c68aeae943903c1bd6a3bec8852a454d76fb347865a042c5eaca7a519d2a0595a9fa680fabb9d761db1b76934162be557d7503c2d24449ecdc7a0416109708105e08e3d3b8c6256671473ad4fe3109fdfb7eec841216c82e32725c1867bee22e70cc8484c25708a8566dc4d5adcbc21019d9bab35505ecf8fd719a38761b7c4eb07f06ab565d5cab6cc310fdd919619a63313d826b8b148501438f38e09d8e8b86b40adc53f8b3c094915932d852cfce30ec5ec11b7b18a2c763c30bb3c109feea18fa2e2202fe1ec7a6159937121f49738402fe49ba6e8c6cf1cbf375d3a604007d84e187983e7c711a30684a8d1a37b875fa92fe9df567ba72055a02354ff02f0b9c877d973d8bd4cd75d4d67599c3bc5a4a19d50f357b6c4c30e64bf44f9fb42fde59a817a4848cc70ae31d1a1d58ca5b7e1dc41061307a58a901a110593a8d31d0ecb70764fc6181fa0b9312b1e962af469503f2f06a1594593bb5dd1023a3de5953708df0d28925440d05d0eb598dbf17860c53b012076623335ec2967088998667d96a65b6db689eeb48eee433529e5d3fb648893ac851eed5ee17e463c7a2833a2c2aee8f1ff0f23e4a90c0503a269be07a57ba510e5b1d4635001775a6d0ced640ebfb60fed081b8c997fe7f445f45e21d735c8258842d7db2fd5ec490e5e0a5fd7bf7301d1096c2579fda30bfa6f857e2fb1bf8a53605f779c88cee5996ebadf984c4989675a7f8f28aa1411deeacb4a2bbab80e8b0da20ee5feaa6670fd9ffcd31f8f8cbd834dd5e7406a6a31b0a1abfb9a090bd120d5c7f92e08b88620ce8c973c53a8d6308eb830401e2c2b57ac3de8b053046bc33c112161778744c998925400dc70dd35dde66fb2a871ed857bff4b352da9c0476e2370a669554f6cec340e3b58b2d7efa65951d1814e58b5b58ab22564231df7eae8350fe433c36721505dcaffa810226ed06f715dfe2b3279650f45920027b085afd2cbe311dbeaa5e37820010bfd331ca12f810304e618324dc2ce4f8d19809f8d346e5aeff4b0a9c40791fc846698206961497c2f5cd684b301100f873ac49775fe52a60e5c9834b4f95bcb08aff68de4a4997bcdab858072912268bfc59805ab9fc888b59171ccfb7a0d97326fd4a12320da85e2b6a0d23b93cbd65ea96cca9b00578072327fd91b3fe3512aaed7b58e999ca990182f50b86beda80ac92be0a21d2f530ed5f3cf85a1c16d9febc900a36abd9d3d3be666e985bbb7a133ebaa9d3b59adeb6fd31ffd69837dea1a6e793fd556330f0d31392d4a11430e3d77f9c75ef57a646b6771260101fb8c42cea11c1353960f382cb7607f646c48fda3edbca171bb8be3b07982440c6e24647880e2ae8864cf03544b7b1e8950876e2068f8da86998c9d5c85d8e41e3bf60708451e6b879374d5c8ac1e5c9b3e719353e701e7a775e64790895751fa120e966eb94072035658780a9fda309e7ca0ba7469dde61be3d8da98e98f22472255c7d124af1b87ccdea9ffa3942132332f8547bfc0f91d239440b0f0b9eb06ddb76815923498a3638ad1c7edf8dcef6da48b0e5f42076872330ed30ef8f4b5771f5538bb195c313121e9a13deb3069cff8ad9dc7e69215141e2acbe34a091538652481b191dda5c3dfac117f0b87728f5f1ae026626dde0eb93fdbcdd059adca294ecc302a076d21a5bc07a569d65406675f7edfd27d8aeaead8c0cf1b615bd5498edb9a4d7f49f3a9115fafb4b761b63e6bc29bf18917dda42bef8849b6774c38670479cada5bd4e24242e747fe583149fde1e08a2e4fbb66dbf72909d94c434ea3f224568335a59128b0f5989ce40a49bf2c0e8c0c651532332dee180a319a69d3c725896ef910d9f11cd6ac5d71c44be6675e690d7677b19f53b3ab261dc6a9b7a5b1110a653c707ac56401d9fa9e187bff8b90873eb1b023067ce75497e80dab18f2f3db73362db88f45901b6d653cb75ae45ad1d4e6c2a3b69ca7f8d79c3fdd4eb0f8c12807dabf0cf78705df73d1d1ff2cc1e96e18065f753caeeee8ad3e36c06ec00f077e16d8808429be01a883552f6e5d495a6c07997b8d572b43f3e22050124a801ac816c14fba54c718fd19253968d5971d35637c214d1938255bc09ce5026147cc26eae5650cc26af97579b050cbc8b054b03059c378e849e9e47408af0e03edb45ef3939357a86e359540f281bec5d84eb18951924339950b186eb2300ebd14712428868e990c915ac9088a4cc0001ff875be3676e5caca8967db442b75b9e0a0fb4d8a3b620046648f59fd9eb798c8805b8400f41cc60bfbf9347735400da3ed8729cac2d0bd85c138a28204f6e91fcf5c00b6a21e77e74db32d1ddc0a0fd29eb390b2475abdea3bf711878d0faa15f4bc488bbfc6e29de396ebf76433b5654cf8e9ce4d7e099e5c9d384c86127628713a7cf9d78978ef3520fdcc0048ba8e8a7c55a8d766cdb0fb4c918ff846b45fa438f2d2b489b37a0f8e219ae6cb467b6afcd174fb3cd49bc77476b0c357604f567556b6a33566602512b445e08ad335d20a7c47ff2d5f4c405133f2d8718b8ec8af37b452aec8f4437f141c9ccf2e0fcbe7d2e90156faab5b3974315e3197d4e22550080ed84f83dd93201d0407aa6be4eac7f12dced4230bd365cd34b59409ac07d744a3453b5c89b3335c11f54ace6e218444f68cb9aa0635b85085c15c62b91fca47b8daeaff102b1c79b78e55d220994d1d9d4e6be9bb9999846c3507864a5042e475e280cba0d5aec738ae1a1f5265271dffb190ed2bfc12eb72f4bae4170d1bf04b34c291866a38413f89edf96e9ee30c3f7794e64461d858b05b1a9f655d101c358f5fa55d3b19d030f117dc577ef7ffda3b9f92fde15020b7a8b4a493615c56a19a2bbd38f5ab472f835667bd7d5de73adcf37818b867e3a44dd42da1e9a3e7d55658a340328194152301a646df70776ea775d1f15ca45d8562664b352f63f4261a8f10072bd66933bf7963fbdd0ab514d13338f9574370d8dcc80f2c25348b7a0608ce178fdc04cb48a358689f9b6aac4ba360e1dab5b51ad7cd898ff77326883021c4c274e7e86f32d5cd96e1a658d0b57c45b828b56939c79e5e47eedfc3f35818f55186edc50a2615a87187da8e468628e55b0ad34d7ec176aa7ae6761b3ab5bd8ce65063482b8098a87b40c7ded0f8ba93da28fc4d381899ad456f55851aa76ee299717fa452c03db952f61f6766f3798b9c7eb2a6efeb171c88a00aa7b6bcc97329d9d8b4547d1e019d8d3fa9d4ab38884a6132315995bbd7923a673560b3bc28990684682c6edc5eaa07827b4e931753efd1b279eac972b5df39b224f12221756022f78b18cbedd14816945f310ab656947ddc99b0a40edfd95283adfa8b41685bbd9d340bbc02aa09986d33b8c952591f4b72b47656c76bf79053ee19654fe6e005e7428448e7897152d0747d72eb7cfe36a63629f707c7e2e6e9b521103949d8d835b960e42383391feffd82d78b14d8b744228aae2fc1a048dc8dc371d2b2988e66e532b99fe4cc0f3b7c97e46fc3b29eb0e91977f351c8458870b9bbe7dabee6a2b3cb8deaca46928ce2d386811a7c3305ebd95a46781995ea8549e7bf2a614b35eb450a0a6971afbdfa6957a9f56f3cb55bb91f61350eb97d7adea74cbef282a261cb378f1a76853696ad059a009a615f34c3470e31abca13c80aae38648f09b1f37b0295da34c7398c5090b51f66b043bf33dd607142a47d35f96cb7ef4c4fb4fc2d170bbc4d3749be7afdf35a10b3a14171dfd9a483ad70329a016c929b90ef87d787fd1e4b6817c2958f47413394536cb4fa942cb8e557069f0c92e298d4afe9f5936b039"}}, &(0x7f00000017c0))
syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x450, 0xffffffff, 0x3b8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1f0, 0x218, 0x0, {0x100000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0x7ff, 0x298e, 0x1, 0x9, 0x3, 0x81, 0x0, 0x80, 0x20}, {0x6}}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x3, 0x1, 0x4], 0x0, 0x2}, {0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4], 0x3, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
r8 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r10 = dup(r9)
syz_usb_control_io(r8, 0x0, 0x0)
r11 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r12=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r13=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r13, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r12, <r14=>0xffffffffffffffff})
close_range(r11, r14, 0x0)
syz_usb_control_io$rtl8150(r8, 0x0, 0x0)
write$UHID_INPUT(r10, &(0x7f00000005c0)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44381d31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b51df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1010}}, 0x1006)
syz_io_uring_submit(r3, r6, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x112e43}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345})
r15 = syz_io_uring_complete(r3, r4)
write$cgroup_int(r15, &(0x7f0000000300)=0x1ff, 0x12)
close(r15)

2.65535246s ago: executing program 4 (id=1562):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000001)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16)
r5 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f00000003c0)='espintcp', 0x8)
write(r5, &(0x7f00000001c0)="f7", 0x1)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xcecaf306}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.235027237s ago: executing program 4 (id=1563):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/bus/input/handlers\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(0x0, &(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00')
r3 = accept4(r2, 0x0, 0x0, 0x80000)
sendmmsg$alg(r3, &(0x7f0000000c00), 0x0, 0x8040)
syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082)
lsm_set_self_attr(0x65, &(0x7f0000007000)={0x68, 0xffffffffffffffff, 0x37, 0x17, "719253c233c813bb57cc2450c9c8b97d24ecc020f50021"}, 0x37, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}})
syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)

0s ago: executing program 4 (id=1564):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={r3}, 0xc)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x3}, 0x6)
ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f00000000c0)="4f6ac21f9a58b27d799682ac82d6bdb273c49fa20c2616e8368722b7082174d7bd")
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r7 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
preadv2(r8, 0x0, 0x0, 0x0, 0x0, 0x1b)
lseek(r7, 0x2000000008, 0x0)

kernel console output (not intermixed with test programs):

ackets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  190.929715][ T7016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.386373][ T7225] binder: 7223:7225 ioctl c0306201 200000000080 returned -14
[  191.514147][ T7016] hsr_slave_0: entered promiscuous mode
[  191.517882][ T7016] hsr_slave_1: entered promiscuous mode
[  191.533760][ T7016] debugfs: 'hsr0' already exists in 'hsr'
[  191.533786][ T7016] Cannot create hsr debugfs directory
[  193.441989][ T5719] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  193.642824][ T5719] usb 3-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[  193.643845][ T5719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  193.643864][ T5719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  193.643884][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.246346][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  194.246402][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  194.444905][ T7250] netlink: 'syz.4.456': attribute type 39 has an invalid length.
[  194.755775][ T5719] pegasus 3-1:1.0: probe with driver pegasus failed with error -121
[  195.245633][ T5838] usb 3-1: USB disconnect, device number 5
[  197.558996][ T7016] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  197.660424][ T7016] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  197.673994][ T7016] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  197.703176][ T5593] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  197.810963][ T5719] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  197.823130][ T7016] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  197.827133][ T7016] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  197.951535][ T7016] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  197.962474][ T7016] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  197.973646][ T5719] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00
[  197.989847][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  197.989875][ T5719] usb 2-1: Product: syz
[  197.989889][ T5719] usb 2-1: Manufacturer: syz
[  198.057141][ T7016] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  198.429008][ T5593] usb 5-1: unable to get BOS descriptor or descriptor too short
[  198.429048][ T5593] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  198.430134][ T5593] usb 5-1: unable to read config index 0 descriptor/start: -71
[  198.430170][ T5593] usb 5-1: can't read configurations, error -71
[  199.069541][ T5719] scsi host1: uas
[  199.151374][    C0] usb 2-1: stat urb: no pending cmd for uas-tag 78
[  199.508192][    C0] usb 2-1: cmd cmplt err -71
[  199.511035][ T7016] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.602120][ T5719] usb 2-1: USB disconnect, device number 10
[  199.657390][ T7016] 8021q: adding VLAN 0 to HW filter on device team0
[  199.710613][ T5719] scsi 1:0:0:0: tag#8 uas_zap_pending 0 uas-tag 1 inflight: CMD 
[  199.710724][ T5719] scsi 1:0:0:0: tag#8 CDB: Inquiry 12 00 00 00 24 00
[  199.728347][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.728543][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.814495][  T178] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.814660][  T178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.279432][ T7346] kAFS: No cell specified
[  202.196143][ T7347] syz.1.483 (7347) used greatest stack depth: 16712 bytes left
[  202.573261][ T5593] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  202.733384][ T5593] usb 5-1: Using ep0 maxpacket: 8
[  202.810621][ T5593] usb 5-1: unable to get BOS descriptor or descriptor too short
[  202.810679][ T5593] usb 5-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a
[  202.812760][ T5593] usb 5-1: config 10 has an invalid interface number: 91 but max is 0
[  202.812785][ T5593] usb 5-1: config 10 has no interface number 0
[  202.812816][ T5593] usb 5-1: config 10 interface 91 has no altsetting 0
[  202.856616][ T5593] usb 5-1: string descriptor 0 read error: -22
[  202.856758][ T5593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.919045][ T5593] uvcvideo 5-1:10.91: Found Unit with invalid ID 0
[  202.919162][ T5593] uvcvideo 5-1:10.91: Found UVC 0.40 device <unnamed> (097b:61f6)
[  202.919252][ T5593] uvcvideo 5-1:10.91: Entity type for entity Output 32771 was not initialized!
[  202.919844][ T5593] uvcvideo 5-1:10.91: Entity type for entity Media 2 was not initialized!
[  203.694310][   T36] usb 5-1: USB disconnect, device number 9
[  203.744952][ T7016] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.664555][ T7417] clocksource: Switched to clocksource acpi_pm
[  205.671933][ T7417] clocksource: Switched to clocksource tsc
[  206.552048][ T5591] Bluetooth: hci3: command 0x0406 tx timeout
[  206.599832][ T5591] Bluetooth: hci1: command 0x0406 tx timeout
[  206.599868][ T5591] Bluetooth: hci0: command 0x0c3a tx timeout
[  206.600007][ T5591] Bluetooth: hci2: command 0x0406 tx timeout
[  208.909613][ T7016] veth0_vlan: entered promiscuous mode
[  209.082280][ T7016] veth1_vlan: entered promiscuous mode
[  209.329007][ T7433] fuse: fd is not a fuse device
[  209.544324][ T7016] veth0_macvtap: entered promiscuous mode
[  209.550425][ T7016] veth1_macvtap: entered promiscuous mode
[  209.610507][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.639442][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.834997][   T64] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.835357][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.835546][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.835914][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.125034][ T5705] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  211.346073][ T5705] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  211.347367][ T5705] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  211.347384][ T5705] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  211.382658][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.382674][ T5705] usb 5-1: Product: syz
[  211.382682][ T5705] usb 5-1: Manufacturer: syz
[  211.382690][ T5705] usb 5-1: SerialNumber: syz
[  211.851591][ T5705] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  212.131539][ T7443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.141165][ T7443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.382222][ T7461] FAULT_INJECTION: forcing a failure.
[  212.382222][ T7461] name failslab, interval 1, probability 0, space 0, times 0
[  212.382258][ T7461] CPU: 0 UID: 0 PID: 7461 Comm: syz.1.512 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  212.382276][ T7461] Tainted: [L]=SOFTLOCKUP
[  212.382281][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  212.382287][ T7461] Call Trace:
[  212.382293][ T7461]  <TASK>
[  212.382298][ T7461]  dump_stack_lvl+0xe8/0x150
[  212.382319][ T7461]  should_fail_ex+0x46b/0x600
[  212.382337][ T7461]  should_failslab+0xa8/0x100
[  212.382350][ T7461]  __kmalloc_cache_noprof+0xa1/0x680
[  212.382366][ T7461]  ? io_wq_create+0x6b/0x7b0
[  212.382382][ T7461]  ? io_wq_create+0x6b/0x7b0
[  212.382402][ T7461]  io_wq_create+0x6b/0x7b0
[  212.382421][ T7461]  io_uring_alloc_task_context+0x271/0x6c0
[  212.382440][ T7461]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[  212.382453][ T7461]  ? futex_private_hash_put+0x132/0x160
[  212.382475][ T7461]  __io_uring_add_tctx_node+0x48d/0x630
[  212.382496][ T7461]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[  212.382512][ T7461]  ? __fget_files+0x2a/0x420
[  212.382526][ T7461]  ? __fget_files+0x2a/0x420
[  212.382541][ T7461]  __io_uring_add_tctx_node_from_submit+0x90/0x120
[  212.382559][ T7461]  __se_sys_io_uring_enter+0x18c9/0x1bb0
[  212.382579][ T7461]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[  212.382595][ T7461]  ? rcu_is_watching+0x16/0xb0
[  212.382615][ T7461]  ? __x64_sys_io_uring_enter+0x21/0xf0
[  212.382628][ T7461]  do_syscall_64+0x166/0x520
[  212.382640][ T7461]  ? trace_irq_disable+0x3b/0x140
[  212.382654][ T7461]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.382665][ T7461]  ? clear_bhb_loop+0x70/0xc0
[  212.382680][ T7461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.382691][ T7461] RIP: 0033:0x7f1eb2cae159
[  212.382702][ T7461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.382713][ T7461] RSP: 002b:00007f1eb0ee4fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  212.382726][ T7461] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1eb2cae159
[  212.382734][ T7461] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003
[  212.382740][ T7461] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008
[  212.382746][ T7461] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  212.382753][ T7461] R13: 00007f1eb2f36128 R14: 00007f1eb2f36090 R15: 00007ffd065614b8
[  212.382770][ T7461]  </TASK>
[  212.684975][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.684990][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.864871][   T31] usb 5-1: USB disconnect, device number 10
[  212.917926][   T31] usblp0: removed
[  213.482555][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.482578][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.612800][ T5603] Bluetooth: hci2: command 0x0406 tx timeout
[  216.737347][ T7495] FAULT_INJECTION: forcing a failure.
[  216.737347][ T7495] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  216.737374][ T7495] CPU: 0 UID: 0 PID: 7495 Comm: syz.1.525 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  216.737390][ T7495] Tainted: [L]=SOFTLOCKUP
[  216.737394][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  216.737401][ T7495] Call Trace:
[  216.737406][ T7495]  <TASK>
[  216.737412][ T7495]  dump_stack_lvl+0xe8/0x150
[  216.737433][ T7495]  should_fail_ex+0x46b/0x600
[  216.737452][ T7495]  fpu__restore_sig+0x209/0x11f0
[  216.737474][ T7495]  ? __pfx_fpu__restore_sig+0x10/0x10
[  216.737505][ T7495]  __ia32_sys_rt_sigreturn+0x756/0x8c0
[  216.737525][ T7495]  ? __lock_acquire+0x747/0x2de0
[  216.737543][ T7495]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[  216.737574][ T7495]  ? __task_pid_nr_ns+0x28/0x470
[  216.737591][ T7495]  do_syscall_64+0x166/0x520
[  216.737612][ T7495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.737623][ T7495]  ? clear_bhb_loop+0x70/0xc0
[  216.737637][ T7495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.737648][ T7495] RIP: 0033:0x7f1eb2cae159
[  216.737660][ T7495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.737670][ T7495] RSP: 002b:00007f1eb0f06028 EFLAGS: 00000246
[  216.737680][ T7495] RAX: 0000000000000000 RBX: 00007f1eb2f35fa0 RCX: 00007f1eb2cae159
[  216.737688][ T7495] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000
[  216.737695][ T7495] RBP: 00007f1eb2d4506b R08: 0000000000000000 R09: 0000000000000000
[  216.737702][ T7495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.737708][ T7495] R13: 00007f1eb2f36038 R14: 00007f1eb2f35fa0 R15: 00007ffd065614b8
[  216.737725][ T7495]  </TASK>
[  217.074861][ T7498] netlink: 'syz.0.526': attribute type 39 has an invalid length.
[  217.462275][ T5838] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  217.612733][ T5838] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  217.613867][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.613899][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.613922][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  217.613948][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.704284][   T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  217.705692][ T5838] usb 3-1: config 0 descriptor??
[  217.883600][   T10] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  217.886383][   T10] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC
[  217.886414][   T10] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  217.891020][   T10] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  217.891047][   T10] usb 2-1: Manufacturer: syz
[  217.891280][   T10] usb 2-1: SerialNumber: syz
[  218.345507][ T5838] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd
[  218.345764][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  218.345782][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  218.345797][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  218.345812][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  218.345827][ T5838] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  218.464419][   T10] usbhid 2-1:36.0: couldn't find an input interrupt endpoint
[  218.489169][   T10] usb 2-1: USB disconnect, device number 11
[  218.548920][ T5838] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  218.581713][ T5838] usb 3-1: USB disconnect, device number 6
[  219.154230][ T7517] fido_id[7517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  219.766715][ T4899] Bluetooth: hci2: command 0x0406 tx timeout
[  219.942954][   T37] kauditd_printk_skb: 23 callbacks suppressed
[  219.942970][   T37] audit: type=1804 audit(1790779716.931:85): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.532" name="bus" dev="ramfs" ino=15544 res=1 errno=0
[  220.036084][   T37] audit: type=1804 audit(1790779717.141:86): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.532" name="bus" dev="ramfs" ino=15544 res=1 errno=0
[  221.722276][   T36] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  221.880798][   T36] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  221.898343][   T36] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  221.898368][   T36] usb 3-1: config 0 has no interface number 0
[  221.898395][   T36] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  221.898409][   T36] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  221.898433][   T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.016807][   T36] usb 3-1: config 0 descriptor??
[  222.018425][ T7563] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  222.076025][   T36] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  222.652931][    C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[  222.945230][ T5838] usb 3-1: USB disconnect, device number 7
[  226.304473][ T7609] FAULT_INJECTION: forcing a failure.
[  226.304473][ T7609] name failslab, interval 1, probability 0, space 0, times 0
[  226.304503][ T7609] CPU: 0 UID: 0 PID: 7609 Comm: syz.5.557 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  226.304520][ T7609] Tainted: [L]=SOFTLOCKUP
[  226.304525][ T7609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  226.304532][ T7609] Call Trace:
[  226.304538][ T7609]  <TASK>
[  226.304544][ T7609]  dump_stack_lvl+0xe8/0x150
[  226.304567][ T7609]  should_fail_ex+0x46b/0x600
[  226.304585][ T7609]  should_failslab+0xa8/0x100
[  226.304597][ T7609]  ? fcntl_setlk+0xa9/0x1070
[  226.304611][ T7609]  kmem_cache_alloc_noprof+0x9e/0x690
[  226.304627][ T7609]  ? fcntl_setlk+0xa9/0x1070
[  226.304644][ T7609]  fcntl_setlk+0xa9/0x1070
[  226.304664][ T7609]  ? lock_acquire+0x115/0x350
[  226.304682][ T7609]  ? __pfx_fcntl_setlk+0x10/0x10
[  226.304705][ T7609]  do_fcntl+0x981/0x19e0
[  226.304722][ T7609]  ? smack_file_fcntl+0x27c/0x320
[  226.304736][ T7609]  ? __pfx_do_fcntl+0x10/0x10
[  226.304751][ T7609]  ? __pfx_smack_file_fcntl+0x10/0x10
[  226.304768][ T7609]  ? __fget_files+0x2a/0x420
[  226.304784][ T7609]  ? bpf_lsm_file_fcntl+0x9/0x20
[  226.304799][ T7609]  __se_sys_fcntl+0xcb/0x160
[  226.304815][ T7609]  do_syscall_64+0x166/0x520
[  226.304827][ T7609]  ? trace_irq_disable+0x3b/0x140
[  226.304842][ T7609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.304854][ T7609]  ? clear_bhb_loop+0x70/0xc0
[  226.304872][ T7609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.304883][ T7609] RIP: 0033:0x7fea430ee159
[  226.304895][ T7609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.304905][ T7609] RSP: 002b:00007fea41346028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  226.304918][ T7609] RAX: ffffffffffffffda RBX: 00007fea43375fa0 RCX: 00007fea430ee159
[  226.304926][ T7609] RDX: 0000200000000000 RSI: 0000000000000006 RDI: 0000000000000004
[  226.304933][ T7609] RBP: 00007fea4318506b R08: 0000000000000000 R09: 0000000000000000
[  226.304940][ T7609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.304946][ T7609] R13: 00007fea43376038 R14: 00007fea43375fa0 R15: 00007ffe1ef83d48
[  226.304963][ T7609]  </TASK>
[  227.713075][ T7633] FAULT_INJECTION: forcing a failure.
[  227.713075][ T7633] name fail_futex, interval 1, probability 0, space 0, times 0
[  227.713109][ T7633] CPU: 0 UID: 0 PID: 7633 Comm: syz.1.564 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  227.713139][ T7633] Tainted: [L]=SOFTLOCKUP
[  227.713146][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  227.713159][ T7633] Call Trace:
[  227.713167][ T7633]  <TASK>
[  227.713176][ T7633]  dump_stack_lvl+0xe8/0x150
[  227.713212][ T7633]  should_fail_ex+0x46b/0x600
[  227.713237][ T7633]  get_futex_key+0x1b4/0x1580
[  227.713257][ T7633]  ? rt_mutex_slowunlock+0x4ee/0xa30
[  227.713277][ T7633]  ? __pfx_get_futex_key+0x10/0x10
[  227.713300][ T7633]  futex_wake+0x119/0x600
[  227.713315][ T7633]  ? lockdep_hardirqs_on+0x7b/0x110
[  227.713327][ T7633]  ? __pfx_futex_wake+0x10/0x10
[  227.713342][ T7633]  ? __seccomp_filter+0xafb/0x1de0
[  227.713358][ T7633]  do_futex+0x458/0x4e0
[  227.713372][ T7633]  ? __pfx_do_futex+0x10/0x10
[  227.713388][ T7633]  __se_sys_futex+0x3a8/0x450
[  227.713403][ T7633]  ? __pfx___se_sys_futex+0x10/0x10
[  227.713418][ T7633]  ? __seccomp_permit_syscall+0xe7/0x2b0
[  227.713428][ T7633]  ? __x64_sys_futex+0x21/0xf0
[  227.713441][ T7633]  do_syscall_64+0x166/0x520
[  227.713452][ T7633]  ? trace_irq_disable+0x3b/0x140
[  227.713466][ T7633]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.713478][ T7633]  ? clear_bhb_loop+0x70/0xc0
[  227.713491][ T7633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.713505][ T7633] RIP: 0033:0x7f1eb2cae159
[  227.713517][ T7633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.713527][ T7633] RSP: 002b:00007f1eb0f060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  227.713539][ T7633] RAX: ffffffffffffffda RBX: 00007f1eb2f35fa8 RCX: 00007f1eb2cae159
[  227.713547][ T7633] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1eb2f35fac
[  227.713554][ T7633] RBP: 00007f1eb2f35fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  227.713562][ T7633] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  227.713569][ T7633] R13: 00007f1eb2f36038 R14: 00007ffd065613d0 R15: 00007ffd065614b8
[  227.713586][ T7633]  </TASK>
[  228.106434][ T7629] uprobe: syz.4.563:7629 failed to unregister, leaking uprobe
[  228.297140][ T5603] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  228.297160][ T5603] CPU: 1 UID: 0 PID: 5603 Comm: kworker/u9:8 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  228.297176][ T5603] Tainted: [L]=SOFTLOCKUP
[  228.297181][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  228.297188][ T5603] Workqueue: hci3 hci_rx_work
[  228.297207][ T5603] Call Trace:
[  228.297212][ T5603]  <TASK>
[  228.297217][ T5603]  dump_stack_lvl+0xe8/0x150
[  228.297237][ T5603]  sysfs_create_dir_ns+0x271/0x2a0
[  228.297253][ T5603]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  228.297273][ T5603]  ? rt_spin_unlock+0x165/0x200
[  228.297291][ T5603]  kobject_add_internal+0x62c/0xce0
[  228.297310][ T5603]  kobject_add+0x163/0x240
[  228.297322][ T5603]  ? rt_spin_unlock+0x159/0x200
[  228.297340][ T5603]  ? __pfx_kobject_add+0x10/0x10
[  228.297357][ T5603]  ? get_device_parent+0x370/0x3a0
[  228.297376][ T5603]  device_add+0x3fa/0xb80
[  228.297394][ T5603]  hci_conn_add_sysfs+0xd5/0x210
[  228.297410][ T5603]  le_conn_complete_evt+0xfe3/0x16d0
[  228.297425][ T5603]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  228.297438][ T5603]  ? rt_mutex_slowunlock+0x219/0x460
[  228.297453][ T5603]  ? skb_pull_data+0xf0/0x200
[  228.297470][ T5603]  hci_le_enh_conn_complete_evt+0x189/0x490
[  228.297489][ T5603]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  228.297508][ T5603]  hci_event_packet+0x67a/0xf10
[  228.297523][ T5603]  ? reacquire_held_locks+0x117/0x1a0
[  228.297542][ T5603]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  228.297558][ T5603]  ? __pfx_hci_event_packet+0x10/0x10
[  228.297572][ T5603]  ? rt_spin_unlock+0x159/0x200
[  228.297592][ T5603]  ? hci_send_to_monitor+0xe2/0x590
[  228.297606][ T5603]  hci_rx_work+0x3ee/0x1020
[  228.297624][ T5603]  ? process_scheduled_works+0x97a/0x1630
[  228.297640][ T5603]  process_scheduled_works+0xc3d/0x1630
[  228.297672][ T5603]  ? __pfx_process_scheduled_works+0x10/0x10
[  228.297691][ T5603]  ? assign_work+0x3cf/0x5d0
[  228.297708][ T5603]  worker_thread+0xa47/0xfb0
[  228.297740][ T5603]  ? __kthread_parkme+0x71/0x1f0
[  228.297762][ T5603]  kthread+0x38b/0x470
[  228.297773][ T5603]  ? __pfx_worker_thread+0x10/0x10
[  228.297788][ T5603]  ? __pfx_kthread+0x10/0x10
[  228.297800][ T5603]  ret_from_fork+0x514/0xb70
[  228.297814][ T5603]  ? __pfx_ret_from_fork+0x10/0x10
[  228.297826][ T5603]  ? __switch_to+0xc89/0x1420
[  228.297844][ T5603]  ? __pfx_kthread+0x10/0x10
[  228.297856][ T5603]  ret_from_fork_asm+0x1a/0x30
[  228.297876][ T5603]  </TASK>
[  228.297986][ T5603] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  228.298012][ T5603] Bluetooth: hci3: failed to register connection device
[  228.627928][ T7640] mmap: syz.5.567 (7640) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  231.403337][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  232.975823][ T5705] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  233.122718][   T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  233.172961][ T5705] usb 5-1: Using ep0 maxpacket: 32
[  233.177750][ T5705] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  233.181629][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.181644][ T5705] usb 5-1: Product: syz
[  233.181653][ T5705] usb 5-1: Manufacturer: syz
[  233.181661][ T5705] usb 5-1: SerialNumber: syz
[  233.253250][ T5705] usb 5-1: config 0 descriptor??
[  233.291945][   T31] usb 3-1: Using ep0 maxpacket: 32
[  233.292723][   T31] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  233.293955][   T31] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  233.293970][   T31] usb 3-1: config 0 has no interface number 0
[  233.293996][   T31] usb 3-1: config 0 interface 12 has no altsetting 0
[  233.297227][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.297251][   T31] usb 3-1: Product: syz
[  233.297264][   T31] usb 3-1: Manufacturer: syz
[  233.297272][   T31] usb 3-1: SerialNumber: syz
[  233.428077][   T31] usb 3-1: config 0 descriptor??
[  233.448337][ T5705] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  235.541955][   T31] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  235.542002][   T31] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  235.542020][   T31] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  235.542093][   T31] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  235.547094][ T5705] gspca_ov534_9: reg_r err -71
[  235.666329][   T31] usb 3-1: USB disconnect, device number 8
[  235.811938][ T5705] gspca_ov534_9: Unknown sensor 0000
[  235.812053][ T5705] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  235.860555][ T5705] usb 5-1: USB disconnect, device number 11
[  236.027763][   T37] audit: type=1326 audit(1790779733.131:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.0.586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e3fee159 code=0x7ffc0000
[  236.028194][   T37] audit: type=1326 audit(1790779733.131:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.0.586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e3fee159 code=0x7ffc0000
[  236.028449][   T37] audit: type=1326 audit(1790779733.131:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.0.586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f60e3fee159 code=0x7ffc0000
[  236.028475][   T37] audit: type=1326 audit(1790779733.131:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.0.586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e3fee159 code=0x7ffc0000
[  236.028665][   T37] audit: type=1326 audit(1790779733.131:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.0.586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e3fee159 code=0x7ffc0000
[  236.030355][   T37] audit: type=1326 audit(1790779733.131:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.0.586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e3fee159 code=0x7ffc0000
[  236.030797][   T37] audit: type=1326 audit(1790779733.131:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.0.586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e3fee159 code=0x7ffc0000
[  236.031209][   T37] audit: type=1326 audit(1790779733.131:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.0.586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e3fee159 code=0x7ffc0000
[  236.031251][   T37] audit: type=1326 audit(1790779733.131:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.0.586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f60e3fee159 code=0x7ffc0000
[  236.108680][   T37] audit: type=1326 audit(1790779733.211:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.0.586" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e3fee159 code=0x7ffc0000
[  236.446013][ T7709] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  236.446042][ T7709] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  236.495639][ T7709] vhci_hcd vhci_hcd.0: Device attached
[  236.515084][ T7710] usbip_core: unknown command
[  236.515098][ T7710] vhci_hcd: unknown pdu 411736182
[  236.515113][ T7710] usbip_core: unknown command
[  236.731925][   T31] usb 33-1: new high-speed USB device number 2 using vhci_hcd
[  236.981245][ T7711] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  237.028740][ T3120] vhci_hcd vhci_hcd.0: stop threads
[  237.031502][ T3120] vhci_hcd vhci_hcd.0: release socket
[  237.122939][ T3120] vhci_hcd vhci_hcd.0: disconnect device
[  237.283967][ T7724] Invalid logical block size (8192)
[  239.401313][ T7753] serio: Serial port ptm0
[  239.579847][ T7753] serio: Serial port ptm0
[  239.954846][ T5603] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15
[  239.954893][ T5603] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  239.957577][ T7761] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11)
[  239.957605][ T7761] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  239.969314][ T7761] vhci_hcd vhci_hcd.0: Device attached
[  239.991652][ T7767] vhci_hcd: connection closed
[  240.016226][   T12] vhci_hcd vhci_hcd.2: stop threads
[  240.016260][   T12] vhci_hcd vhci_hcd.2: release socket
[  240.016298][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  241.913452][   T31] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  242.579025][ T5603] Bluetooth: hci2: unexpected event for opcode 0x041b
[  244.556153][   T37] kauditd_printk_skb: 17 callbacks suppressed
[  244.556173][   T37] audit: type=1326 audit(1790779741.661:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb2cae159 code=0x7ffc0000
[  244.556216][   T37] audit: type=1326 audit(1790779741.661:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb2cae159 code=0x7ffc0000
[  244.559401][   T37] audit: type=1326 audit(1790779741.661:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb2cae159 code=0x7ffc0000
[  244.559447][   T37] audit: type=1326 audit(1790779741.661:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb2cae159 code=0x7ffc0000
[  244.560412][   T37] audit: type=1326 audit(1790779741.661:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f1eb2cae159 code=0x7ffc0000
[  244.560450][   T37] audit: type=1326 audit(1790779741.661:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb2cae159 code=0x7ffc0000
[  244.560482][   T37] audit: type=1326 audit(1790779741.661:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb2cae159 code=0x7ffc0000
[  244.722163][   T37] audit: type=1326 audit(1790779741.661:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb2cae159 code=0x7ffc0000
[  244.722210][   T37] audit: type=1326 audit(1790779741.831:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb2cae159 code=0x7ffc0000
[  244.828134][   T37] audit: type=1326 audit(1790779741.881:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.621" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb2cae159 code=0x7ffc0000
[  248.690568][   T36] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  248.694521][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[  249.396821][   T36] usb 3-1: device descriptor read/64, error -32
[  249.633821][   T36] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  249.728854][ T7890] FAULT_INJECTION: forcing a failure.
[  249.728854][ T7890] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  249.728898][ T7890] CPU: 1 UID: 0 PID: 7890 Comm: syz.4.642 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  249.728929][ T7890] Tainted: [L]=SOFTLOCKUP
[  249.728938][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  249.728965][ T7890] Call Trace:
[  249.728974][ T7890]  <TASK>
[  249.728983][ T7890]  dump_stack_lvl+0xe8/0x150
[  249.729022][ T7890]  should_fail_ex+0x46b/0x600
[  249.729057][ T7890]  _copy_to_user+0x31/0xb0
[  249.729092][ T7890]  generic_map_lookup_batch+0xab2/0xf20
[  249.729136][ T7890]  ? __pfx_generic_map_lookup_batch+0x10/0x10
[  249.729171][ T7890]  ? __fget_files+0x2a/0x420
[  249.729200][ T7890]  ? __pfx_generic_map_lookup_batch+0x10/0x10
[  249.729229][ T7890]  bpf_map_do_batch+0x288/0x640
[  249.729249][ T7890]  ? bpf_lsm_bpf+0x9/0x20
[  249.729275][ T7890]  ? security_bpf+0x7e/0x2d0
[  249.729307][ T7890]  __sys_bpf+0xa9f/0xd90
[  249.729347][ T7890]  ? __pfx___sys_bpf+0x10/0x10
[  249.729381][ T7890]  ? do_futex+0x3e7/0x4e0
[  249.729432][ T7890]  ? rcu_is_watching+0x16/0xb0
[  249.729471][ T7890]  __x64_sys_bpf+0xba/0xd0
[  249.729502][ T7890]  do_syscall_64+0x166/0x520
[  249.729524][ T7890]  ? trace_irq_disable+0x3b/0x140
[  249.729552][ T7890]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.729574][ T7890]  ? clear_bhb_loop+0x70/0xc0
[  249.729599][ T7890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.729620][ T7890] RIP: 0033:0x7fb62c88e159
[  249.729641][ T7890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  249.729660][ T7890] RSP: 002b:00007fb62aae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  249.729684][ T7890] RAX: ffffffffffffffda RBX: 00007fb62cb15fa0 RCX: 00007fb62c88e159
[  249.729701][ T7890] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018
[  249.729716][ T7890] RBP: 00007fb62c92506b R08: 0000000000000000 R09: 0000000000000000
[  249.729730][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  249.729744][ T7890] R13: 00007fb62cb16038 R14: 00007fb62cb15fa0 R15: 00007ffcd1e99c48
[  249.729778][ T7890]  </TASK>
[  249.991958][   T36] usb 3-1: Using ep0 maxpacket: 32
[  249.995109][   T36] usb 3-1: unable to get BOS descriptor or descriptor too short
[  249.995162][   T36] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=7d.2a
[  249.996941][   T36] usb 3-1: config 4 has an invalid interface number: 17 but max is 0
[  249.996967][   T36] usb 3-1: config 4 has no interface number 0
[  249.996999][   T36] usb 3-1: config 4 interface 17 has no altsetting 0
[  250.045068][   T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.045098][   T36] usb 3-1: Product: syz
[  250.045129][   T36] usb 3-1: Manufacturer: syz
[  250.045144][   T36] usb 3-1: SerialNumber: syz
[  250.051277][ T7892] gretap0: entered promiscuous mode
[  251.350789][   T36] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  251.351255][   T36] gspca_sn9c2028: read1 error -71
[  251.363383][   T36] gspca_sn9c2028: read1 error -71
[  251.363809][   T36] gspca_sn9c2028: read1 error -71
[  251.363893][   T36] sn9c2028 3-1:4.17: probe with driver sn9c2028 failed with error -71
[  251.369871][   T36] usb 3-1: USB disconnect, device number 10
[  251.463724][ T7882] udevd[7882]: setting mode of /dev/bus/usb/003/010 to 020664 failed: No such file or directory
[  251.463897][ T7882] udevd[7882]: setting owner of /dev/bus/usb/003/010 to uid=0, gid=0 failed: No such file or directory
[  251.781926][   T36] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  251.940083][ T7916] fuse: fd is not a fuse device
[  251.961514][   T36] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  251.976360][   T36] usb 3-1: config 0 has no interfaces?
[  251.976397][   T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.999597][   T36] usb 3-1: config 0 descriptor??
[  252.334278][ T5838] usb 3-1: USB disconnect, device number 11
[  252.891913][ T5838] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  253.060464][   T37] kauditd_printk_skb: 50 callbacks suppressed
[  253.060485][   T37] audit: type=1326 audit(1790779750.161:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7941 comm="syz.2.663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97af8e159 code=0x7ffc0000
[  253.061731][   T37] audit: type=1326 audit(1790779750.161:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7941 comm="syz.2.663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97af8e159 code=0x7ffc0000
[  253.061964][ T5838] usb 5-1: Using ep0 maxpacket: 32
[  253.062618][   T37] audit: type=1326 audit(1790779750.171:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7941 comm="syz.2.663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97af8e159 code=0x7ffc0000
[  253.063283][   T37] audit: type=1326 audit(1790779750.171:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7941 comm="syz.2.663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97af8e159 code=0x7ffc0000
[  253.082700][   T37] audit: type=1326 audit(1790779750.171:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7941 comm="syz.2.663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd97af8e159 code=0x7ffc0000
[  253.087476][ T5838] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  253.108892][ T5838] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  253.108928][ T5838] usb 5-1: config 0 has no interface number 0
[  253.108975][ T5838] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  253.109001][ T5838] usb 5-1: config 0 interface 196 has no altsetting 0
[  253.126117][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.126144][ T5838] usb 5-1: Product: syz
[  253.126159][ T5838] usb 5-1: Manufacturer: syz
[  253.126173][ T5838] usb 5-1: SerialNumber: syz
[  253.127909][   T37] audit: type=1326 audit(1790779750.231:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7941 comm="syz.2.663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd97af4e98e code=0x7ffc0000
[  253.131950][   T37] audit: type=1326 audit(1790779750.241:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7941 comm="syz.2.663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd97af4e98e code=0x7ffc0000
[  253.138700][   T37] audit: type=1326 audit(1790779750.241:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7941 comm="syz.2.663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd97af4e98e code=0x7ffc0000
[  253.142147][   T37] audit: type=1326 audit(1790779750.251:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7941 comm="syz.2.663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd97af4e98e code=0x7ffc0000
[  253.147541][   T37] audit: type=1326 audit(1790779750.251:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7941 comm="syz.2.663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd97af4e98e code=0x7ffc0000
[  253.178308][ T5838] usb 5-1: config 0 descriptor??
[  253.179325][ T7935] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  253.644628][ T5838] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  253.644931][ T5838] ipheth 5-1:0.196: probe with driver ipheth failed with error -22
[  253.908108][ T7957] binder: BINDER_SET_CONTEXT_MGR already set
[  253.908130][ T7957] binder: 7955:7957 ioctl 4018620d 200000000100 returned -16
[  253.928729][ T7957] binder: BINDER_SET_CONTEXT_MGR already set
[  253.928745][ T7957] binder: 7955:7957 ioctl 4018620d 200000004a80 returned -16
[  254.063539][ T5719] usb 5-1: USB disconnect, device number 12
[  255.687103][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  255.687151][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  256.109059][ T7991] binder: BINDER_SET_CONTEXT_MGR already set
[  256.109077][ T7991] binder: 7990:7991 ioctl 4018620d 200000000100 returned -16
[  256.165644][ T7991] binder: BINDER_SET_CONTEXT_MGR already set
[  256.165661][ T7991] binder: 7990:7991 ioctl 4018620d 200000000240 returned -16
[  256.178330][ T7991] binder: 7990:7991 ioctl c0306201 200000000380 returned -14
[  256.526486][   T36] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  256.542633][ T8000] netlink: 'syz.2.681': attribute type 2 has an invalid length.
[  256.542665][ T8000] netlink: 'syz.2.681': attribute type 2 has an invalid length.
[  256.681961][   T36] usb 5-1: Using ep0 maxpacket: 16
[  256.682781][   T36] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  256.686357][   T36] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 64, changing to 10
[  256.686389][   T36] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  256.686417][   T36] usb 5-1: config 0 interface 0 has no altsetting 0
[  256.686449][   T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.879929][   T36] usb 5-1: config 0 descriptor??
[  257.691079][   T36] input: HID 05ac:0269 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:0269.0005/input/input8
[  258.268676][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.686'.
[  260.161823][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  260.199118][ T8033] overlayfs: failed to clone lowerpath
[  260.245435][ T8034] overlayfs: failed to clone lowerpath
[  261.170079][   T36] magicmouse 0003:05AC:0269.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.4-1/input0
[  261.223354][   T36] usb 5-1: USB disconnect, device number 13
[  261.535654][ T8040] fido_id[8040]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  264.126668][ T8075] netlink: 'syz.2.701': attribute type 10 has an invalid length.
[  264.155227][ T8075] syz_tun: entered promiscuous mode
[  265.300601][ T8075] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  265.947747][ T8100] FAULT_INJECTION: forcing a failure.
[  265.947747][ T8100] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  265.947788][ T8100] CPU: 0 UID: 0 PID: 8100 Comm: syz.4.705 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  265.947810][ T8100] Tainted: [L]=SOFTLOCKUP
[  265.947814][ T8100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  265.947821][ T8100] Call Trace:
[  265.947827][ T8100]  <TASK>
[  265.947833][ T8100]  dump_stack_lvl+0xe8/0x150
[  265.947856][ T8100]  should_fail_ex+0x46b/0x600
[  265.947874][ T8100]  prepare_alloc_pages+0x223/0x650
[  265.947895][ T8100]  __alloc_frozen_pages_noprof+0x1a1/0x5c0
[  265.947915][ T8100]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  265.947935][ T8100]  ? __pfx_policy_nodemask+0x10/0x10
[  265.947950][ T8100]  ? __lock_acquire+0x747/0x2de0
[  265.947969][ T8100]  alloc_pages_mpol+0xd4/0x280
[  265.947983][ T8100]  folio_alloc_mpol_noprof+0x3b/0x1e0
[  265.947996][ T8100]  vma_alloc_folio_noprof+0xe1/0x1e0
[  265.948009][ T8100]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  265.948020][ T8100]  ? lock_acquire+0x115/0x350
[  265.948040][ T8100]  do_pte_missing+0x835/0x28f0
[  265.948061][ T8100]  ? handle_mm_fault+0xeb/0x28c0
[  265.948078][ T8100]  handle_mm_fault+0xf64/0x28c0
[  265.948095][ T8100]  ? handle_mm_fault+0xeb/0x28c0
[  265.948112][ T8100]  ? follow_page_pte+0x663/0xf20
[  265.948127][ T8100]  ? __pfx_handle_mm_fault+0x10/0x10
[  265.948142][ T8100]  ? follow_page_pte+0x74b/0xf20
[  265.948161][ T8100]  ? __pfx_follow_page_pte+0x10/0x10
[  265.948180][ T8100]  __get_user_pages+0x1676/0x2650
[  265.948210][ T8100]  faultin_page_range+0x26a/0x8f0
[  265.948226][ T8100]  ? blk_start_plug+0x6e/0x1b0
[  265.948239][ T8100]  madvise_do_behavior+0x2e4/0x540
[  265.948253][ T8100]  ? __pfx_madvise_do_behavior+0x10/0x10
[  265.948263][ T8100]  ? down_read+0x156/0x200
[  265.948286][ T8100]  do_madvise+0x26f/0x330
[  265.948306][ T8100]  ? __pfx_do_madvise+0x10/0x10
[  265.948329][ T8100]  ? rcu_is_watching+0x16/0xb0
[  265.948350][ T8100]  __x64_sys_madvise+0xa6/0xc0
[  265.948361][ T8100]  do_syscall_64+0x166/0x520
[  265.948373][ T8100]  ? trace_irq_disable+0x3b/0x140
[  265.948387][ T8100]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.948398][ T8100]  ? clear_bhb_loop+0x70/0xc0
[  265.948412][ T8100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.948424][ T8100] RIP: 0033:0x7fb62c88e159
[  265.948436][ T8100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.948453][ T8100] RSP: 002b:00007fb62aae6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  265.948466][ T8100] RAX: ffffffffffffffda RBX: 00007fb62cb15fa0 RCX: 00007fb62c88e159
[  265.948474][ T8100] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000
[  265.948482][ T8100] RBP: 00007fb62c92506b R08: 0000000000000000 R09: 0000000000000000
[  265.948489][ T8100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  265.948496][ T8100] R13: 00007fb62cb16038 R14: 00007fb62cb15fa0 R15: 00007ffcd1e99c48
[  265.948514][ T8100]  </TASK>
[  268.806374][ T8129] overlayfs: failed to clone lowerpath
[  268.858878][ T8130] overlayfs: failed to clone lowerpath
[  269.581837][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  270.112812][ T8124] FAULT_INJECTION: forcing a failure.
[  270.112812][ T8124] name failslab, interval 1, probability 0, space 0, times 0
[  270.112840][ T8124] CPU: 1 UID: 0 PID: 8124 Comm: syz.5.715 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  270.112857][ T8124] Tainted: [L]=SOFTLOCKUP
[  270.112861][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  270.112869][ T8124] Call Trace:
[  270.112874][ T8124]  <TASK>
[  270.112879][ T8124]  dump_stack_lvl+0xe8/0x150
[  270.112901][ T8124]  should_fail_ex+0x46b/0x600
[  270.112922][ T8124]  should_failslab+0xa8/0x100
[  270.112934][ T8124]  __kmalloc_node_track_caller_noprof+0xfb/0x7b0
[  270.112951][ T8124]  ? __kasan_kmalloc+0x93/0xb0
[  270.112969][ T8124]  ? eventfs_create_dir+0x8e/0x3d0
[  270.112984][ T8124]  ? eventfs_create_dir+0x8e/0x3d0
[  270.113003][ T8124]  kstrdup+0x42/0x100
[  270.113016][ T8124]  eventfs_create_dir+0x8e/0x3d0
[  270.113034][ T8124]  event_create_dir+0x4dd/0xb60
[  270.113055][ T8124]  trace_add_event_call+0x142/0x1e0
[  270.113071][ T8124]  trace_probe_register_event_call+0x397/0x470
[  270.113088][ T8124]  register_trace_uprobe+0x817/0x1320
[  270.113106][ T8124]  ? traceprobe_set_print_fmt+0x78/0xc0
[  270.113121][ T8124]  __trace_uprobe_create+0xc42/0xe50
[  270.113142][ T8124]  ? __pfx___trace_uprobe_create+0x10/0x10
[  270.113157][ T8124]  ? __kmalloc_noprof+0x43e/0x790
[  270.113179][ T8124]  ? argv_split+0x18d/0x400
[  270.113190][ T8124]  ? argv_split+0x18d/0x400
[  270.113204][ T8124]  ? argv_split+0x378/0x400
[  270.113219][ T8124]  trace_probe_create+0xce/0x130
[  270.113233][ T8124]  ? __pfx___trace_uprobe_create+0x10/0x10
[  270.113248][ T8124]  ? __pfx_trace_probe_create+0x10/0x10
[  270.113262][ T8124]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  270.113275][ T8124]  ? mutex_lock_nested+0x152/0x1d0
[  270.113290][ T8124]  ? dyn_event_create+0x2a/0x80
[  270.113303][ T8124]  dyn_event_create+0x59/0x80
[  270.113314][ T8124]  create_or_delete_trace_uprobe+0x65/0xa0
[  270.113330][ T8124]  trace_parse_run_command+0x1f3/0x380
[  270.113347][ T8124]  ? __pfx_create_or_delete_trace_uprobe+0x10/0x10
[  270.113364][ T8124]  ? __pfx_probes_write+0x10/0x10
[  270.113379][ T8124]  vfs_write+0x29f/0xbb0
[  270.113398][ T8124]  ? __pfx_vfs_write+0x10/0x10
[  270.113413][ T8124]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  270.113427][ T8124]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  270.113438][ T8124]  ? mutex_lock_nested+0x152/0x1d0
[  270.113452][ T8124]  ? fdget_pos+0x252/0x320
[  270.113469][ T8124]  ksys_write+0x156/0x270
[  270.113484][ T8124]  ? __pfx_ksys_write+0x10/0x10
[  270.113505][ T8124]  do_syscall_64+0x166/0x520
[  270.113516][ T8124]  ? trace_irq_disable+0x3b/0x140
[  270.113530][ T8124]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.113542][ T8124]  ? clear_bhb_loop+0x70/0xc0
[  270.113556][ T8124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.113567][ T8124] RIP: 0033:0x7fea430ee159
[  270.113578][ T8124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  270.113588][ T8124] RSP: 002b:00007fea41346028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  270.113601][ T8124] RAX: ffffffffffffffda RBX: 00007fea43375fa0 RCX: 00007fea430ee159
[  270.113609][ T8124] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000004
[  270.113616][ T8124] RBP: 00007fea4318506b R08: 0000000000000000 R09: 0000000000000000
[  270.113623][ T8124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.113629][ T8124] R13: 00007fea43376038 R14: 00007fea43375fa0 R15: 00007ffe1ef83d48
[  270.113648][ T8124]  </TASK>
[  270.223517][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  270.429666][ T8124] Failed to create system directory s
[  274.270207][ T8172] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  274.313538][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  280.018094][ T5719] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  280.196241][ T5719] usb 6-1: Using ep0 maxpacket: 16
[  280.196893][ T5719] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  280.198101][ T5719] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  280.198119][ T5719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  280.263190][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.263220][ T5719] usb 6-1: Product: syz
[  280.265668][ T5719] usb 6-1: Manufacturer: syz
[  280.265687][ T5719] usb 6-1: SerialNumber: syz
[  280.318598][ T5719] usb 6-1: config 0 descriptor??
[  280.330936][ T5719] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  280.330956][ T5719] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  280.573007][ T8246] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  280.573329][ T8246] Error validating options; rc = [-22]
[  280.783753][ T8249] fuse: Bad value for 'fd'
[  281.218367][ T5719] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  281.229504][ T5719] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  281.927222][ T5719] em28xx 6-1:0.0: Unknown AC97 audio processor detected!
[  281.928991][ T5719] em28xx 6-1:0.0: couldn't setup AC97 register 2
[  282.549359][ T5719] em28xx 6-1:0.0: couldn't setup AC97 register 4
[  282.549743][ T5719] em28xx 6-1:0.0: couldn't setup AC97 register 6
[  282.550125][ T5719] em28xx 6-1:0.0: couldn't setup AC97 register 54
[  282.550427][ T5719] em28xx 6-1:0.0: couldn't setup AC97 register 56
[  282.606118][ T5719] usb 6-1: USB disconnect, device number 2
[  282.961454][ T8260] overlayfs: failed to clone lowerpath
[  283.012397][ T8261] overlayfs: failed to clone lowerpath
[  285.901768][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  286.101779][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  287.841792][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  288.254392][ T8317] overlayfs: failed to clone lowerpath
[  288.304387][ T8318] overlayfs: failed to clone lowerpath
[  290.134062][ T8340] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  290.785500][ T8342] fuse: Bad value for 'fd'
[  291.535281][ T8356] netlink: 'syz.4.783': attribute type 2 has an invalid length.
[  291.535301][ T8356] netlink: 'syz.4.783': attribute type 2 has an invalid length.
[  294.531798][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  295.608590][ T8366] input: syz0 as /devices/virtual/input/input9
[  296.380325][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'.
[  297.055502][ T8379] vlan3: entered promiscuous mode
[  297.055519][ T8379] hsr0: entered promiscuous mode
[  297.288326][ T8380] hsr_slave_0: left promiscuous mode
[  297.348810][ T8380] hsr_slave_1: left promiscuous mode
[  297.980040][   T37] kauditd_printk_skb: 233 callbacks suppressed
[  297.980061][   T37] audit: type=1800 audit(1790779794.871:417): pid=8391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.795" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  300.727259][ T8428] bond2: entered allmulticast mode
[  300.727775][ T8428] 8021q: adding VLAN 0 to HW filter on device bond2
[  300.802170][ T8428] netlink: 14 bytes leftover after parsing attributes in process `syz.0.804'.
[  300.831628][ T8433] fuse: fd is not a fuse device
[  301.382173][   T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  301.572838][   T10] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  301.574782][   T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  301.574801][   T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  301.574814][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  301.574827][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  301.574848][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.648932][ T8438] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  301.649048][ T8438] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  301.680820][   T10] pl2303 5-1:1.0: pl2303 converter detected
[  301.702393][   T10] usb 5-1: pl2303 converter now attached to ttyUSB0
[  302.033621][ T8428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.110832][ T8438] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  302.128341][ T8438] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  302.128746][ T8438] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  302.129331][ T8438] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  302.129388][ T8438] pl2303 ttyUSB0: failed to submit interrupt urb: -90
[  302.134969][   T31] usb 5-1: USB disconnect, device number 14
[  302.167105][ T5838] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  302.199465][ T8428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  302.246921][ T8428] bond0 (unregistering): Released all slaves
[  302.290736][   T31] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  302.310225][   T31] pl2303 5-1:1.0: device disconnected
[  302.342377][ T5838] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  302.343535][ T5838] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  302.343559][ T5838] usb 6-1: config 0 has no interface number 0
[  302.343602][ T5838] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  302.343950][ T5838] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  302.344120][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.433404][ T5838] usb 6-1: config 0 descriptor??
[  302.434855][ T8444] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  302.514254][ T5838] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  302.791059][   T31] usb 6-1: USB disconnect, device number 3
[  304.683529][ T5603] Bluetooth: hci4: command 0x0406 tx timeout
[  308.784229][ T8512] fuse: fd is not a fuse device
[  309.125319][ T8520] jffs2: notice: (8520) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  317.153505][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  317.153564][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  318.333598][   T37] audit: type=1800 audit(1790779815.441:418): pid=8600 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.856" name=08 dev="sda1" ino=2050 res=0 errno=0
[  319.886883][ T8621] overlayfs: failed to clone lowerpath
[  319.947306][ T8622] overlayfs: failed to clone lowerpath
[  326.366910][ T8674] fuse: fd is not a fuse device
[  331.108395][ T8745] bond1: entered allmulticast mode
[  331.108938][ T8745] 8021q: adding VLAN 0 to HW filter on device bond1
[  332.530733][   T37] audit: type=1326 audit(1790779829.631:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.2.901" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97af8e159 code=0x7ffc0000
[  332.537064][   T37] audit: type=1326 audit(1790779829.631:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.2.901" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97af8e159 code=0x7ffc0000
[  332.538884][   T37] audit: type=1326 audit(1790779829.641:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.2.901" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97af8e159 code=0x7ffc0000
[  332.539297][   T37] audit: type=1326 audit(1790779829.641:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.2.901" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd97af8e159 code=0x7ffc0000
[  332.539338][   T37] audit: type=1326 audit(1790779829.641:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.2.901" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97af8e159 code=0x7ffc0000
[  332.539898][   T37] audit: type=1326 audit(1790779829.641:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.2.901" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97af8e159 code=0x7ffc0000
[  332.540399][   T37] audit: type=1326 audit(1790779829.641:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.2.901" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97af8e159 code=0x7ffc0000
[  332.540659][   T37] audit: type=1326 audit(1790779829.641:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.2.901" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97af8e159 code=0x7ffc0000
[  332.540917][   T37] audit: type=1326 audit(1790779829.641:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.2.901" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd97af8e159 code=0x7ffc0000
[  332.550420][   T37] audit: type=1326 audit(1790779829.651:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.2.901" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97af8e159 code=0x7ffc0000
[  333.957757][ T8788] tipc: Started in network mode
[  333.957784][ T8788] tipc: Node identity 4, cluster identity 4711
[  333.957798][ T8788] tipc: Node number set to 4
[  338.305693][ T8833] fuse: fd is not a fuse device
[  341.794595][   T36] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  341.943370][   T36] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  341.975355][   T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.975385][   T36] usb 3-1: Product: syz
[  341.975399][   T36] usb 3-1: Manufacturer: syz
[  341.975414][   T36] usb 3-1: SerialNumber: syz
[  342.449819][   T36] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  342.449896][   T36] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  343.142802][ T8893] netlink: 'syz.1.932': attribute type 1 has an invalid length.
[  343.191673][ T8893] bond2: entered promiscuous mode
[  343.198650][ T8893] 8021q: adding VLAN 0 to HW filter on device bond2
[  343.431073][ T8891] FAULT_INJECTION: forcing a failure.
[  343.431073][ T8891] name failslab, interval 1, probability 0, space 0, times 0
[  343.431116][ T8891] CPU: 0 UID: 0 PID: 8891 Comm: syz.4.941 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  343.431149][ T8891] Tainted: [L]=SOFTLOCKUP
[  343.431157][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  343.431170][ T8891] Call Trace:
[  343.431178][ T8891]  <TASK>
[  343.431187][ T8891]  dump_stack_lvl+0xe8/0x150
[  343.431224][ T8891]  should_fail_ex+0x46b/0x600
[  343.431262][ T8891]  should_failslab+0xa8/0x100
[  343.431286][ T8891]  __kmalloc_node_track_caller_noprof+0xfb/0x7b0
[  343.431319][ T8891]  ? __kthread_create_on_node+0x1b3/0x3d0
[  343.431349][ T8891]  ? __kthread_create_on_node+0x1b3/0x3d0
[  343.431388][ T8891]  kvasprintf+0xeb/0x1a0
[  343.431424][ T8891]  ? __pfx_kvasprintf+0x10/0x10
[  343.431456][ T8891]  ? __kmalloc_cache_noprof+0x3d5/0x680
[  343.431486][ T8891]  ? __kthread_create_on_node+0x115/0x3d0
[  343.431516][ T8891]  ? __kthread_create_on_node+0x115/0x3d0
[  343.431555][ T8891]  __kthread_create_on_node+0x1b3/0x3d0
[  343.431589][ T8891]  ? __pfx___kthread_create_on_node+0x10/0x10
[  343.431634][ T8891]  ? __pfx_cryptomgr_probe+0x10/0x10
[  343.431659][ T8891]  ? __pfx_cryptomgr_probe+0x10/0x10
[  343.431684][ T8891]  kthread_create_on_node+0xeb/0x140
[  343.431730][ T8891]  ? __pfx_kthread_create_on_node+0x10/0x10
[  343.431762][ T8891]  ? __kmalloc_cache_noprof+0x3d5/0x680
[  343.431792][ T8891]  ? cryptomgr_notify+0x85/0x920
[  343.431812][ T8891]  ? cryptomgr_notify+0x85/0x920
[  343.431832][ T8891]  ? cryptomgr_notify+0x3fb/0x920
[  343.431859][ T8891]  cryptomgr_notify+0x75e/0x920
[  343.431888][ T8891]  notifier_call_chain+0x1a5/0x3d0
[  343.431918][ T8891]  blocking_notifier_call_chain+0x6a/0x90
[  343.431943][ T8891]  crypto_alg_mod_lookup+0x390/0x5d0
[  343.431977][ T8891]  crypto_alloc_tfm_node+0x135/0x3e0
[  343.432007][ T8891]  tls_set_sw_offload+0xb1a/0x1910
[  343.432050][ T8891]  tls_setsockopt+0x10c5/0x1710
[  343.432086][ T8891]  ? __pfx_tls_setsockopt+0x10/0x10
[  343.432125][ T8891]  ? __fget_files+0x2a/0x420
[  343.432151][ T8891]  ? sock_common_setsockopt+0x36/0xc0
[  343.432181][ T8891]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  343.432211][ T8891]  do_sock_setsockopt+0x17c/0x1b0
[  343.432239][ T8891]  __x64_sys_setsockopt+0x143/0x1b0
[  343.432268][ T8891]  do_syscall_64+0x166/0x520
[  343.432290][ T8891]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.432312][ T8891]  ? clear_bhb_loop+0x70/0xc0
[  343.432337][ T8891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.432358][ T8891] RIP: 0033:0x7fb62c88e159
[  343.432378][ T8891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  343.432396][ T8891] RSP: 002b:00007fb62aae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  343.432419][ T8891] RAX: ffffffffffffffda RBX: 00007fb62cb15fa0 RCX: 00007fb62c88e159
[  343.432436][ T8891] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000005
[  343.432450][ T8891] RBP: 00007fb62c92506b R08: 0000000000000028 R09: 0000000000000000
[  343.432464][ T8891] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[  343.432478][ T8891] R13: 00007fb62cb16038 R14: 00007fb62cb15fa0 R15: 00007ffcd1e99c48
[  343.432513][ T8891]  </TASK>
[  343.459037][ T8896] bond2: (slave bridge1): making interface the new active one
[  343.459061][ T8896] bridge1: entered promiscuous mode
[  343.739771][ T8896] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  343.756930][   T36] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  343.992789][ T8903] binder: BINDER_SET_CONTEXT_MGR already set
[  343.992807][ T8903] binder: 8900:8903 ioctl 4018620d 200000000100 returned -16
[  343.999420][ T8903] binder: BINDER_SET_CONTEXT_MGR already set
[  343.999436][ T8903] binder: 8900:8903 ioctl 4018620d 200000004a80 returned -16
[  345.427205][   T36] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO
[  345.428910][   T36] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  345.428969][   T36] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  345.489960][   T36] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  345.717938][   T36] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  345.754625][   T36] usb 3-1: USB disconnect, device number 12
[  345.879430][ T8924] 9p: Bad value for 'wfdno'
[  348.841924][ T8966] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  348.841924][ T8966] The task syz.0.963 (8966) triggered the difference, watch for misbehavior.
[  351.183954][ T8986] block nbd2: not configured, cannot reconfigure
[  354.794790][ T9026] FAULT_INJECTION: forcing a failure.
[  354.794790][ T9026] name failslab, interval 1, probability 0, space 0, times 0
[  354.794830][ T9026] CPU: 1 UID: 0 PID: 9026 Comm: syz.4.980 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  354.794861][ T9026] Tainted: [L]=SOFTLOCKUP
[  354.794870][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  354.794884][ T9026] Call Trace:
[  354.794892][ T9026]  <TASK>
[  354.794901][ T9026]  dump_stack_lvl+0xe8/0x150
[  354.794938][ T9026]  should_fail_ex+0x46b/0x600
[  354.794975][ T9026]  should_failslab+0xa8/0x100
[  354.795004][ T9026]  ? __seq_open_private+0x7d/0x1a0
[  354.795026][ T9026]  kmem_cache_alloc_noprof+0x9e/0x690
[  354.795057][ T9026]  ? __seq_open_private+0x7d/0x1a0
[  354.795085][ T9026]  __seq_open_private+0x7d/0x1a0
[  354.795110][ T9026]  seq_open_net+0x146/0x220
[  354.795147][ T9026]  proc_reg_open+0x24d/0x540
[  354.795179][ T9026]  ? __pfx_proc_reg_open+0x10/0x10
[  354.795208][ T9026]  do_dentry_open+0x849/0x1420
[  354.795252][ T9026]  vfs_open+0x3b/0x350
[  354.795269][ T9026]  ? path_openat+0x142d/0x1d60
[  354.795300][ T9026]  path_openat+0x1448/0x1d60
[  354.795348][ T9026]  do_file_open+0x23e/0x4a0
[  354.795381][ T9026]  ? __pfx_do_file_open+0x10/0x10
[  354.795424][ T9026]  ? __pfx_kfree_link+0x10/0x10
[  354.795461][ T9026]  ? alloc_fd+0x654/0x6d0
[  354.795494][ T9026]  do_sys_openat2+0x115/0x200
[  354.795516][ T9026]  ? __se_sys_futex+0x3a8/0x450
[  354.795540][ T9026]  ? __pfx_do_sys_openat2+0x10/0x10
[  354.795567][ T9026]  ? rcu_is_watching+0x16/0xb0
[  354.795605][ T9026]  __x64_sys_openat+0x138/0x170
[  354.795632][ T9026]  do_syscall_64+0x166/0x520
[  354.795654][ T9026]  ? trace_irq_disable+0x3b/0x140
[  354.795682][ T9026]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.795704][ T9026]  ? clear_bhb_loop+0x70/0xc0
[  354.795730][ T9026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.795751][ T9026] RIP: 0033:0x7fb62c84e98e
[  354.795771][ T9026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  354.795790][ T9026] RSP: 002b:00007fb62aae5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  354.795814][ T9026] RAX: ffffffffffffffda RBX: 00007fb62aae66c0 RCX: 00007fb62c84e98e
[  354.795831][ T9026] RDX: 0000000000000000 RSI: 00007fb62aae5f90 RDI: ffffffffffffff9c
[  354.795847][ T9026] RBP: 00007fb62c92506b R08: 0000000000000000 R09: 0000000000000000
[  354.795861][ T9026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  354.795874][ T9026] R13: 00007fb62cb16038 R14: 00007fb62cb15fa0 R15: 00007ffcd1e99c48
[  354.795908][ T9026]  </TASK>
[  355.180669][ T9028] fuse: fd is not a fuse device
[  357.547669][ T9048] overlayfs: failed to clone lowerpath
[  357.561588][ T5686] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  357.601486][ T9050] overlayfs: failed to clone lowerpath
[  357.728184][ T5686] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=ed.00
[  357.756830][ T5686] usb 3-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0
[  357.756861][ T5686] usb 3-1: Manufacturer: syz
[  358.169204][ T5686] net1080 3-1:1.0: probe with driver net1080 failed with error -71
[  359.392903][ T5686] usb 3-1: USB disconnect, device number 13
[  361.587091][ T1238] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  362.635276][ T1238] usb 5-1: Using ep0 maxpacket: 8
[  362.798518][ T1238] usb 5-1: device descriptor read/all, error -71
[  363.066450][ T9089] fuse: fd is not a fuse device
[  363.673832][ T5603] Bluetooth: hci4: command 0x0406 tx timeout
[  366.392025][ T5686] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  366.752713][ T5686] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  366.754150][ T5686] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  366.754179][ T5686] usb 6-1: config 0 has no interface number 0
[  366.757338][ T5686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.757364][ T5686] usb 6-1: Product: syz
[  366.757379][ T5686] usb 6-1: Manufacturer: syz
[  366.757395][ T5686] usb 6-1: SerialNumber: syz
[  367.765923][ T5686] usb 6-1: config 0 descriptor??
[  370.204378][ T5686] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  370.204410][ T5686] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  370.204712][ T5686] asix 6-1:0.251: probe with driver asix failed with error -5
[  370.291738][ T5686] usb 6-1: USB disconnect, device number 4
[  371.197639][   T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.416855][   T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.063403][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  379.063475][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  379.645913][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.182464][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.196549][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.241411][   T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.393414][ T5593] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  381.535373][ T5593] usb 5-1: Using ep0 maxpacket: 16
[  381.544740][ T5593] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  381.546228][ T5593] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  381.546251][ T5593] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  381.562315][ T5593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.562340][ T5593] usb 5-1: Product: syz
[  381.562355][ T5593] usb 5-1: Manufacturer: syz
[  381.562369][ T5593] usb 5-1: SerialNumber: syz
[  381.809802][ T5593] usb 5-1: 0:2 : does not exist
[  382.000129][ T5593] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  382.304576][ T9249] netlink: 'syz.5.1044': attribute type 13 has an invalid length.
[  382.304600][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1044'.
[  383.492446][ T9254] overlayfs: failed to clone lowerpath
[  383.542751][ T9256] overlayfs: failed to clone lowerpath
[  383.772705][   T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.001059][ T5593] usb 5-1: USB disconnect, device number 17
[  384.046056][ T9249] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  386.271316][ T9283] 9p: Bad value for 'rfdno'
[  386.529429][ T9285] fuse: fd is not a fuse device
[  387.850752][ T9234] udevd[9234]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  395.655222][   T64] bridge_slave_1: left allmulticast mode
[  395.655461][   T64] bridge_slave_1: left promiscuous mode
[  395.733420][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.159296][ T9362] netdevsim netdevsim5: Direct firmware load for ~ failed with error -2
[  399.159322][ T9362] netdevsim netdevsim5: Falling back to sysfs fallback for: ~
[  401.544423][   T64] bridge_slave_0: left allmulticast mode
[  401.544460][   T64] bridge_slave_0: left promiscuous mode
[  401.544715][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.589108][ T9452] fuse: fd is not a fuse device
[  422.141018][ T9479] netlink: 'syz.4.1098': attribute type 1 has an invalid length.
[  422.402435][   T64] bond1 (unregistering): (slave geneve2): Releasing active interface
[  422.948189][   T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.074869][   T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.958836][   T64] bond0 (unregistering): Released all slaves
[  424.388344][   T64] bond1 (unregistering): Released all slaves
[  425.575105][ T5245] 8021q: adding VLAN 0 to HW filter on device eth1
[  425.577203][ T9479] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  425.920087][ T9480] veth3: entered allmulticast mode
[  426.656563][ T9502] tipc: Failed to remove unknown binding: 66,0,0/0:2611945564/2611945566
[  426.656601][ T9502] tipc: Failed to remove unknown binding: 66,0,0/0:2611945564/2611945565
[  426.657962][ T9502] tipc: Failed to remove unknown binding: 66,0,0/0:2611945564/2611945566
[  426.657996][ T9502] tipc: Failed to remove unknown binding: 66,0,0/0:2611945564/2611945565
[  429.020090][ T9536] kernel profiling enabled (shift: 7)
[  431.054854][ T5245] 8021q: adding VLAN 0 to HW filter on device eth2
[  431.408864][ T9548] FAULT_INJECTION: forcing a failure.
[  431.408864][ T9548] name failslab, interval 1, probability 0, space 0, times 0
[  431.408921][ T9548] CPU: 0 UID: 0 PID: 9548 Comm: syz.4.1123 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  431.408953][ T9548] Tainted: [L]=SOFTLOCKUP
[  431.408961][ T9548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  431.408978][ T9548] Call Trace:
[  431.408987][ T9548]  <TASK>
[  431.408997][ T9548]  dump_stack_lvl+0xe8/0x150
[  431.409037][ T9548]  should_fail_ex+0x46b/0x600
[  431.409077][ T9548]  should_failslab+0xa8/0x100
[  431.409101][ T9548]  __kmalloc_node_track_caller_noprof+0xfb/0x7b0
[  431.409134][ T9548]  ? __kthread_create_on_node+0x1b3/0x3d0
[  431.409166][ T9548]  ? __kthread_create_on_node+0x1b3/0x3d0
[  431.409204][ T9548]  kvasprintf+0xeb/0x1a0
[  431.409239][ T9548]  ? __pfx_kvasprintf+0x10/0x10
[  431.409272][ T9548]  ? __kmalloc_cache_noprof+0x3d5/0x680
[  431.409302][ T9548]  ? __kthread_create_on_node+0x115/0x3d0
[  431.409331][ T9548]  ? __kthread_create_on_node+0x115/0x3d0
[  431.409370][ T9548]  __kthread_create_on_node+0x1b3/0x3d0
[  431.409404][ T9548]  ? __pfx___kthread_create_on_node+0x10/0x10
[  431.409450][ T9548]  ? __pfx_cryptomgr_probe+0x10/0x10
[  431.409474][ T9548]  ? __pfx_cryptomgr_probe+0x10/0x10
[  431.409499][ T9548]  kthread_create_on_node+0xeb/0x140
[  431.409532][ T9548]  ? rcu_is_watching+0x16/0xb0
[  431.409566][ T9548]  ? __pfx_kthread_create_on_node+0x10/0x10
[  431.409595][ T9548]  ? __kasan_kmalloc+0x93/0xb0
[  431.409627][ T9548]  ? __kmalloc_cache_noprof+0x3d5/0x680
[  431.409658][ T9548]  ? cryptomgr_notify+0x85/0x920
[  431.409681][ T9548]  ? cryptomgr_notify+0x3fb/0x920
[  431.409717][ T9548]  cryptomgr_notify+0x75e/0x920
[  431.409748][ T9548]  notifier_call_chain+0x1a5/0x3d0
[  431.409779][ T9548]  blocking_notifier_call_chain+0x6a/0x90
[  431.409805][ T9548]  crypto_alg_mod_lookup+0x390/0x5d0
[  431.409842][ T9548]  crypto_alloc_tfm_node+0x135/0x3e0
[  431.409872][ T9548]  esp_init_state+0x615/0x1220
[  431.409893][ T9548]  ? do_syscall_64+0x166/0x520
[  431.409916][ T9548]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.409952][ T9548]  ? __pfx_esp_init_state+0x10/0x10
[  431.409995][ T9548]  ? lock_acquire+0x115/0x350
[  431.410037][ T9548]  ? __xfrm_init_state+0x745/0x1320
[  431.410067][ T9548]  __xfrm_init_state+0x9dd/0x1320
[  431.410091][ T9548]  ? __xfrm_init_state+0x745/0x1320
[  431.410117][ T9548]  xfrm_add_sa+0x2f3f/0x40a0
[  431.410151][ T9548]  ? __pfx_xfrm_add_sa+0x10/0x10
[  431.410180][ T9548]  ? __nla_parse+0x40/0x60
[  431.410205][ T9548]  xfrm_user_rcv_msg+0x7a8/0xf30
[  431.410235][ T9548]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  431.410296][ T9548]  ? __lock_acquire+0x747/0x2de0
[  431.410330][ T9548]  ? __pfx_ref_tracker_free+0x10/0x10
[  431.410368][ T9548]  netlink_rcv_skb+0x226/0x4a0
[  431.410396][ T9548]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  431.410420][ T9548]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  431.410465][ T9548]  ? mutex_lock_nested+0x152/0x1d0
[  431.410492][ T9548]  ? xfrm_netlink_rcv+0x6a/0x90
[  431.410518][ T9548]  xfrm_netlink_rcv+0x79/0x90
[  431.410541][ T9548]  netlink_unicast+0x7f5/0x990
[  431.410578][ T9548]  netlink_sendmsg+0x813/0xb40
[  431.410616][ T9548]  ? __pfx_netlink_sendmsg+0x10/0x10
[  431.410646][ T9548]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  431.410695][ T9548]  ? __pfx_netlink_sendmsg+0x10/0x10
[  431.410722][ T9548]  sock_sendmsg_nosec+0x13a/0x180
[  431.410756][ T9548]  ____sys_sendmsg+0x565/0x870
[  431.410789][ T9548]  ? __pfx_____sys_sendmsg+0x10/0x10
[  431.410824][ T9548]  ? import_iovec+0x73/0xa0
[  431.410859][ T9548]  ___sys_sendmsg+0x2a5/0x360
[  431.410882][ T9548]  ? __lock_acquire+0x747/0x2de0
[  431.410915][ T9548]  ? __pfx____sys_sendmsg+0x10/0x10
[  431.410945][ T9548]  ? futex_wait+0x2a2/0x390
[  431.411004][ T9548]  ? __fget_files+0x2a/0x420
[  431.411027][ T9548]  ? __fget_files+0x3a8/0x420
[  431.411062][ T9548]  __x64_sys_sendmsg+0x1b7/0x290
[  431.411091][ T9548]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  431.411139][ T9548]  do_syscall_64+0x166/0x520
[  431.411161][ T9548]  ? trace_irq_disable+0x3b/0x140
[  431.411188][ T9548]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.411211][ T9548]  ? clear_bhb_loop+0x70/0xc0
[  431.411237][ T9548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.411265][ T9548] RIP: 0033:0x7fb62c88e159
[  431.411287][ T9548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.411306][ T9548] RSP: 002b:00007fb62aae6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  431.411330][ T9548] RAX: ffffffffffffffda RBX: 00007fb62cb15fa0 RCX: 00007fb62c88e159
[  431.411347][ T9548] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004
[  431.411361][ T9548] RBP: 00007fb62c92506b R08: 0000000000000000 R09: 0000000000000000
[  431.411375][ T9548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  431.411388][ T9548] R13: 00007fb62cb16038 R14: 00007fb62cb15fa0 R15: 00007ffcd1e99c48
[  431.411424][ T9548]  </TASK>
[  432.263494][ T9562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1118'.
[  432.263597][ T9562] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  434.358292][ T9575] MTD: Couldn't look up './dev/mtdblock0': -2
[  439.708652][   T64] hsr_slave_0: left promiscuous mode
[  439.743628][   T64] hsr_slave_1: left promiscuous mode
[  439.749572][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  439.749727][   T64] batman_adv: batadv0: Removing interface: batadv_slave_0
[  439.816932][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  439.816962][   T64] batman_adv: batadv0: Removing interface: batadv_slave_1
[  439.995066][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  439.995136][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  441.603888][   T64] veth1_macvtap: left promiscuous mode
[  441.604255][   T64] veth0_macvtap: left promiscuous mode
[  441.604579][   T64] veth1_vlan: left promiscuous mode
[  442.654741][   T64] veth0_vlan: left promiscuous mode
[  446.424935][ T9643] block nbd4: shutting down sockets
[  446.570406][ T9639] kvm [9638]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800000000000
[  446.743069][ T4899] Bluetooth: hci0: unexpected event for opcode 0x0419
[  446.845490][   T64] team0 (unregistering): Port device team_slave_1 removed
[  446.922675][   T64] team0 (unregistering): Port device team_slave_0 removed
[  447.317703][ T5245] 8021q: adding VLAN 0 to HW filter on device eth3
[  451.163163][ T4899] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  451.178640][ T4899] Bluetooth: hci0: Injecting HCI hardware error event
[  451.191277][ T5603] Bluetooth: hci0: hardware error 0x00
[  452.854140][ T9692] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:0": -EINTR
[  454.098295][ T5603] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  456.543401][ T5245] 8021q: adding VLAN 0 to HW filter on device eth4
[  460.592657][   T64] IPVS: stop unused estimator thread 0...
[  460.920875][ T9739] binder: BINDER_SET_CONTEXT_MGR already set
[  460.920893][ T9739] binder: 9738:9739 ioctl 4018620d 200000000100 returned -16
[  461.107809][ T9739] binder: BINDER_SET_CONTEXT_MGR already set
[  461.107827][ T9739] binder: 9738:9739 ioctl 4018620d 200000000240 returned -16
[  462.096014][ T9745] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  463.056215][ T5730] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  463.231869][ T5730] usb 6-1: Using ep0 maxpacket: 32
[  463.233697][ T5730] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40
[  463.240458][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.240485][ T5730] usb 6-1: Product: syz
[  463.240501][ T5730] usb 6-1: Manufacturer: syz
[  463.240516][ T5730] usb 6-1: SerialNumber: syz
[  465.772098][ T9757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.772714][ T9757] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  467.910823][ T4899] Bluetooth: hci1: Invalid handle: 0xed88 > 0x0eff
[  467.996979][ T9781] batman_adv: batadv0: Adding interface: syzkaller0
[  467.996999][ T9781] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  467.997034][ T9781] batman_adv: batadv0: Interface activated: syzkaller0
[  470.309572][ T5730] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  470.627072][ T9781] batman_adv: batadv0: Interface deactivated: syzkaller0
[  472.062621][ T9781] batman_adv: batadv0: Removing interface: syzkaller0
[  472.154598][ T5730] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2
[  472.158137][ T5730] usb 6-1: USB disconnect, device number 5
[  472.265882][ T9773] udevd[9773]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  472.713179][ T9799] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  485.773034][ T9877] Invalid option length (65058) for dns_resolver key
[  486.948397][ T9880] tipc: Started in network mode
[  486.948429][ T9880] tipc: Node identity 1001001, cluster identity 4711
[  486.948437][ T9880] tipc: Node number set to 16781313
[  487.045960][ T9882] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  495.416514][ T9917] fuse: fd is not a fuse device
[  498.389980][ T9939] ALSA: mixer_oss: invalid OSS volume ''
[  501.528637][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  501.528782][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  508.742728][ T9987] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1207'.
[  521.515171][T10059] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.040674][T10069] program syz.2.1231 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  523.041747][T10069] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  543.811365][T10140] kvm [10139]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800000000000
[  543.882709][T10149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1247'.
[  543.882738][T10149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1247'.
[  545.012260][T10144] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1247'.
[  545.012285][T10144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1247'.
[  549.626805][T10177] binder: BINDER_SET_CONTEXT_MGR already set
[  549.626824][T10177] binder: 10175:10177 ioctl 4018620d 200000000100 returned -16
[  550.653140][T10177] binder: BINDER_SET_CONTEXT_MGR already set
[  550.653158][T10177] binder: 10175:10177 ioctl 4018620d 200000001000 returned -16
[  552.235358][ T2075] IPVS: starting estimator thread 0...
[  553.351883][T10205] IPVS: using max 15 ests per chain, 36000 per kthread
[  563.173072][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  563.173374][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  571.697783][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  571.738840][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  571.755228][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  571.768578][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  571.772605][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  573.922056][ T4899] Bluetooth: hci5: command tx timeout
[  575.992870][ T4899] Bluetooth: hci5: command tx timeout
[  578.824370][ T4899] Bluetooth: hci5: command tx timeout
[  580.300229][ T1026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.315574][T10330] capability: warning: `syz.0.1296' uses 32-bit capabilities (legacy support in use)
[  581.766494][ T4899] Bluetooth: hci5: command tx timeout
[  584.215729][ T1026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.672467][   T31] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  588.058169][   T31] usb 5-1: device descriptor read/all, error -71
[  588.061143][ T5730] wiimote 0005:057E:0306.0006: unbalanced collection at end of report description
[  588.104003][ T5730] wiimote 0005:057E:0306.0006: HID parse failed
[  588.104392][ T5730] wiimote 0005:057E:0306.0006: probe with driver wiimote failed with error -22
[  594.445347][ T1026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.544551][ T1026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.948177][ T4899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  601.968115][ T4899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  601.980683][ T4899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  602.044301][T10441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1321'.
[  602.046502][ T4899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  602.050210][ T4899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  602.934192][T10458] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  605.693353][ T5603] Bluetooth: hci0: command tx timeout
[  605.809385][T10395] tipc: Resetting bearer <eth:syz_tun>
[  606.223769][T10395] tipc: Disabling bearer <eth:syz_tun>
[  606.443259][ T5593] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  606.601749][ T5593] usb 5-1: Using ep0 maxpacket: 8
[  606.602695][ T5593] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  606.604011][ T5593] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  606.604066][ T5593] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  606.604088][ T5593] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  606.604113][ T5593] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  606.604137][ T5593] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  606.604179][ T5593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.933981][ T5593] usb 5-1: GET_CAPABILITIES returned 0
[  606.934033][ T5593] usbtmc 5-1:16.0: can't read capabilities
[  607.230233][ T9494] usb 5-1: USB disconnect, device number 20
[  607.311515][T10277] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.319096][T10277] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.319267][T10277] bridge_slave_0: entered allmulticast mode
[  607.343415][T10277] bridge_slave_0: entered promiscuous mode
[  607.346560][T10277] bridge0: port 2(bridge_slave_1) entered blocking state
[  607.346791][T10277] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.346959][T10277] bridge_slave_1: entered allmulticast mode
[  607.376347][T10277] bridge_slave_1: entered promiscuous mode
[  607.527105][ T1026] bridge_slave_1: left allmulticast mode
[  607.527142][ T1026] bridge_slave_1: left promiscuous mode
[  607.549728][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.753789][ T5603] Bluetooth: hci0: command tx timeout
[  609.832008][ T5603] Bluetooth: hci0: command tx timeout
[  610.223975][ T1026] bridge_slave_0: left allmulticast mode
[  610.224084][ T1026] bridge_slave_0: left promiscuous mode
[  610.274918][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.911834][ T5603] Bluetooth: hci0: command tx timeout
[  617.763822][ T1026] bond1 (unregistering): (slave geneve2): Releasing active interface
[  619.393034][ T1026] bond2 (unregistering): (slave bridge1): Releasing backup interface
[  619.393064][ T1026] bridge1 (unregistering): left promiscuous mode
[  622.604869][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  623.564711][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  623.618783][ T1026] bond0 (unregistering): Released all slaves
[  623.636352][ T1026] bond1 (unregistering): Released all slaves
[  623.710039][ T1026] bond2 (unregistering): Released all slaves
[  624.052174][T10277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  625.029320][T10277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  625.939186][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  625.939246][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  627.149731][ T1026] ovs-dp0: left promiscuous mode
[  627.354486][T10605] Bluetooth: MGMT ver 1.23
[  629.832843][T10277] team0: Port device team_slave_0 added
[  629.901380][ T5245] 8021q: adding VLAN 0 to HW filter on device eth5
[  631.708318][ T4899] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  631.776860][ T4899] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  631.861913][ T4899] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  631.863016][ T4899] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  631.868884][ T4899] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  632.605555][T10637] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  632.605597][T10637] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  632.605618][T10637] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  633.216460][T10635] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1350'.
[  633.737421][ T5245] 8021q: adding VLAN 0 to HW filter on device eth6
[  633.999516][ T5603] Bluetooth: hci4: command tx timeout
[  634.622957][T10690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1358'.
[  636.133487][T10702] o2cb: This node has not been configured.
[  636.133499][T10702] o2cb: Cluster check failed. Fix errors before retrying.
[  636.133553][T10702] (syz.0.1359,10702,0):user_dlm_register:674 ERROR: status = -22
[  636.133569][T10702] (syz.0.1359,10702,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[  636.838042][ T5603] Bluetooth: hci4: command tx timeout
[  638.142193][ T5245] 8021q: adding VLAN 0 to HW filter on device eth7
[  638.872653][ T5603] Bluetooth: hci4: command tx timeout
[  638.872841][ T1026] hsr_slave_0: left promiscuous mode
[  638.892581][ T1026] hsr_slave_1: left promiscuous mode
[  638.894396][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  638.894421][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  638.964380][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  638.964408][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  639.091721][ T5686] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  639.243188][ T5686] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  639.244363][ T5686] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  639.244390][ T5686] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  639.244430][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.604860][ T1026] veth1_macvtap: left promiscuous mode
[  639.604967][ T1026] veth0_macvtap: left promiscuous mode
[  639.605222][ T1026] veth1_vlan: left promiscuous mode
[  639.605406][ T1026] veth0_vlan: left promiscuous mode
[  641.731053][ T5603] Bluetooth: hci4: command tx timeout
[  643.308547][ T9494] usb 5-1: USB disconnect, device number 21
[  650.772711][ T1026] team0 (unregistering): Port device team_slave_1 removed
[  650.902398][ T1026] team0 (unregistering): Port device team_slave_0 removed
[  653.633396][T10440] bridge0: port 1(bridge_slave_0) entered blocking state
[  653.633492][T10440] bridge0: port 1(bridge_slave_0) entered disabled state
[  653.633627][T10440] bridge_slave_0: entered allmulticast mode
[  653.635960][T10440] bridge_slave_0: entered promiscuous mode
[  653.844059][T10440] bridge0: port 2(bridge_slave_1) entered blocking state
[  653.844167][T10440] bridge0: port 2(bridge_slave_1) entered disabled state
[  653.844289][T10440] bridge_slave_1: entered allmulticast mode
[  653.881759][T10440] bridge_slave_1: entered promiscuous mode
[  654.326351][T10440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  654.412271][T10440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  654.674221][T10440] team0: Port device team_slave_0 added
[  654.727402][T10440] team0: Port device team_slave_1 added
[  654.783255][T10829] syz.0.1380 (10829): attempted to duplicate a private mapping with mremap.  This is not supported.
[  654.885487][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.928384][T10440] batman_adv: batadv0: Adding interface: batadv_slave_0
[  654.928401][T10440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  654.928427][T10440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  655.501830][T10440] batman_adv: batadv0: Adding interface: batadv_slave_1
[  655.501848][T10440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.501875][T10440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  655.963447][T10440] hsr_slave_0: entered promiscuous mode
[  655.966250][T10440] hsr_slave_1: entered promiscuous mode
[  656.565601][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.533574][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.326345][ T5245] 8021q: adding VLAN 0 to HW filter on device eth8
[  659.327981][T10623] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.328181][T10623] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.328354][T10623] bridge_slave_0: entered allmulticast mode
[  659.355104][T10623] bridge_slave_0: entered promiscuous mode
[  659.369732][T10623] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.372196][T10623] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.372367][T10623] bridge_slave_1: entered allmulticast mode
[  659.380791][T10623] bridge_slave_1: entered promiscuous mode
[  659.589343][T10623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  659.615469][T10623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  665.070176][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  665.560051][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  665.731423][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  665.944918][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  665.945766][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  666.084956][T10623] team0: Port device team_slave_0 added
[  666.277373][T10623] team0: Port device team_slave_1 added
[  667.860771][T10927] kvm [10925]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80000000ccff
[  667.873674][T10927] kvm [10925]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80000000ccff
[  667.904535][T10927] kvm [10925]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3fff
[  667.922259][T10927] kvm [10925]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xccff
[  667.953618][T10927] kvm [10925]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x22ff
[  667.953698][T10927] kvm [10925]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  668.152949][ T5603] Bluetooth: hci5: command tx timeout
[  670.792827][ T5603] Bluetooth: hci5: command tx timeout
[  672.743601][ T1026] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.811161][T10623] batman_adv: batadv0: Adding interface: batadv_slave_0
[  672.811180][T10623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  672.811208][T10623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  672.851197][T10623] batman_adv: batadv0: Adding interface: batadv_slave_1
[  672.851215][T10623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  672.851241][T10623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  672.871663][ T5603] Bluetooth: hci5: command tx timeout
[  674.987211][ T5603] Bluetooth: hci5: command tx timeout
[  676.365281][T10974] 9p: Bad value for 'rfdno'
[  676.731848][ T1026] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.915414][T10623] hsr_slave_0: entered promiscuous mode
[  676.924619][T10623] hsr_slave_1: entered promiscuous mode
[  676.927031][T10623] debugfs: 'hsr0' already exists in 'hsr'
[  676.927055][T10623] Cannot create hsr debugfs directory
[  677.590852][T10993] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5583] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10993]
[  677.693535][ T5603] Bluetooth: Frame is too long (len 16, expected len 4)
[  679.885020][ T1026] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.890731][T10999] kvm [10998]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  683.420616][T11034] kAFS: unable to lookup cell 'ÿ'
[  685.027933][ T1026] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  685.603983][T11064] fuse: Unknown parameter '0x0000000000000003'
[  689.719009][T11084] input: syz0 as /devices/virtual/input/input10
[  690.964136][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  690.964355][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  692.596585][ T4899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  693.647241][ T4899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  693.678662][ T4899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  693.679820][ T4899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  693.680589][ T4899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  695.832571][ T5603] Bluetooth: hci0: command tx timeout
[  697.911681][ T5603] Bluetooth: hci0: command tx timeout
[  698.062814][T11143] Bluetooth: ISO socket layer initialized
[  698.111035][T11119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  700.619044][ T5603] Bluetooth: hci0: command tx timeout
[  701.394440][ T1026] bridge_slave_1: left allmulticast mode
[  701.394475][ T1026] bridge_slave_1: left promiscuous mode
[  701.394742][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.588428][ T1026] bridge_slave_0: left allmulticast mode
[  701.588464][ T1026] bridge_slave_0: left promiscuous mode
[  701.588739][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.902114][ T1026] bridge_slave_1: left allmulticast mode
[  701.902150][ T1026] bridge_slave_1: left promiscuous mode
[  701.902396][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state
[  702.064393][ T1026] bridge_slave_0: left allmulticast mode
[  702.064429][ T1026] bridge_slave_0: left promiscuous mode
[  702.064661][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.469675][ T5603] Bluetooth: hci0: command tx timeout
[  704.742633][T11192] fuse: Bad value for 'fd'
[  705.420500][T11200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1443'.
[  706.565431][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  707.668488][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  708.846249][ T1026] bond0 (unregistering): Released all slaves
[  711.042589][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  711.143754][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  711.186034][ T1026] bond0 (unregistering): Released all slaves
[  711.197258][ T1026] bond1 (unregistering): Released all slaves
[  711.420474][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9
[  711.570725][T10909] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.570796][T10909] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.570936][T10909] bridge_slave_0: entered allmulticast mode
[  711.573775][T10909] bridge_slave_0: entered promiscuous mode
[  711.614396][T10909] bridge0: port 2(bridge_slave_1) entered blocking state
[  711.614590][T10909] bridge0: port 2(bridge_slave_1) entered disabled state
[  711.614757][T10909] bridge_slave_1: entered allmulticast mode
[  711.617036][T10909] bridge_slave_1: entered promiscuous mode
[  711.738382][T10909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  711.803745][T10909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  711.853859][T11242] IPv6: NLM_F_CREATE should be specified when creating new route
[  712.713335][T10909] team0: Port device team_slave_0 added
[  715.861246][T10909] team0: Port device team_slave_1 added
[  715.884424][ T1026] tipc: Left network mode
[  716.001266][T10909] batman_adv: batadv0: Adding interface: batadv_slave_0
[  716.001292][T10909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  716.001318][T10909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  716.050944][T10909] batman_adv: batadv0: Adding interface: batadv_slave_1
[  716.050961][T10909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  716.050988][T10909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  720.330402][T10909] hsr_slave_0: entered promiscuous mode
[  720.338159][T10909] hsr_slave_1: entered promiscuous mode
[  720.340616][T10909] debugfs: 'hsr0' already exists in 'hsr'
[  720.340642][T10909] Cannot create hsr debugfs directory
[  723.159866][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'.
[  725.526679][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'.
[  725.922228][ T5245] 8021q: adding VLAN 0 to HW filter on device eth10
[  726.200319][ T4899] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  726.251902][ T4899] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  726.258785][ T4899] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  726.269147][ T4899] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  726.300487][ T4899] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  728.551790][ T4899] Bluetooth: hci4: command tx timeout
[  729.308788][T11374] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  729.308848][T11374] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  730.631832][ T4899] Bluetooth: hci4: command tx timeout
[  732.711813][ T4899] Bluetooth: hci4: command tx timeout
[  732.735906][T11096] bridge0: port 1(bridge_slave_0) entered blocking state
[  732.737735][T11096] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.738015][T11096] bridge_slave_0: entered allmulticast mode
[  732.784098][T11096] bridge_slave_0: entered promiscuous mode
[  735.107073][ T4899] Bluetooth: hci4: command tx timeout
[  735.350505][T11096] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.350614][T11096] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.350793][T11096] bridge_slave_1: entered allmulticast mode
[  735.375274][T11096] bridge_slave_1: entered promiscuous mode
[  736.406097][ T1026] hsr_slave_0: left promiscuous mode
[  736.446994][ T1026] hsr_slave_1: left promiscuous mode
[  736.471954][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  736.472034][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  736.531304][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  736.531335][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  738.086675][ T1026] veth1_macvtap: left promiscuous mode
[  738.086787][ T1026] veth0_macvtap: left promiscuous mode
[  738.087050][ T1026] veth1_vlan: left promiscuous mode
[  738.087231][ T1026] veth0_vlan: left promiscuous mode
[  740.203351][ T1026] team0 (unregistering): Port device team_slave_0 removed
[  746.338813][T11469] sctp: [Deprecated]: syz.2.1489 (pid 11469) Use of struct sctp_assoc_value in delayed_ack socket option.
[  746.338813][T11469] Use struct sctp_sack_info instead
[  748.176167][ T1026] team0 (unregistering): Port device team_slave_1 removed
[  748.213386][ T1026] team0 (unregistering): Port device team_slave_0 removed
[  749.230173][T11487] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  749.230195][T11487] overlayfs: missing 'lowerdir'
[  750.220134][T11096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  750.485023][   T37] kauditd_printk_skb: 36 callbacks suppressed
[  750.485049][   T37] audit: type=1804 audit(1790780245.561:465): pid=11492 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1494" name="/newroot/281/file0" dev="tmpfs" ino=1580 res=1 errno=0
[  750.517283][T11096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  750.770863][T11096] team0: Port device team_slave_0 added
[  750.774411][T11096] team0: Port device team_slave_1 added
[  750.964791][T11096] batman_adv: batadv0: Adding interface: batadv_slave_0
[  750.964803][T11096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  750.964818][T11096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  751.097578][T11096] batman_adv: batadv0: Adding interface: batadv_slave_1
[  751.097591][T11096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  751.097606][T11096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  751.334073][T11492] FAULT_INJECTION: forcing a failure.
[  751.334073][T11492] name failslab, interval 1, probability 0, space 0, times 0
[  751.334126][T11492] CPU: 0 UID: 0 PID: 11492 Comm: syz.4.1494 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  751.334153][T11492] Tainted: [L]=SOFTLOCKUP
[  751.334159][T11492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  751.334171][T11492] Call Trace:
[  751.334179][T11492]  <TASK>
[  751.334188][T11492]  dump_stack_lvl+0xe8/0x150
[  751.334224][T11492]  should_fail_ex+0x46b/0x600
[  751.334257][T11492]  should_failslab+0xa8/0x100
[  751.334279][T11492]  __kmalloc_noprof+0xfb/0x790
[  751.334307][T11492]  ? udpv6_init_sock+0x1a9/0x3c0
[  751.334329][T11492]  ? udpv6_init_sock+0x1a9/0x3c0
[  751.334358][T11492]  udpv6_init_sock+0x1a9/0x3c0
[  751.334386][T11492]  inet6_create+0xf0b/0x1280
[  751.334406][T11492]  ? inet6_create+0x80/0x1280
[  751.334430][T11492]  __sock_create+0x4b3/0x9d0
[  751.334468][T11492]  __sys_socket+0xd6/0x1b0
[  751.334500][T11492]  __x64_sys_socket+0x7a/0x90
[  751.334530][T11492]  do_syscall_64+0x166/0x520
[  751.334550][T11492]  ? trace_irq_disable+0x3b/0x140
[  751.334586][T11492]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.334606][T11492]  ? clear_bhb_loop+0x70/0xc0
[  751.334631][T11492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.334652][T11492] RIP: 0033:0x7fb62c88e159
[  751.334672][T11492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  751.334690][T11492] RSP: 002b:00007fb62aae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  751.334714][T11492] RAX: ffffffffffffffda RBX: 00007fb62cb15fa0 RCX: 00007fb62c88e159
[  751.334729][T11492] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a
[  751.334742][T11492] RBP: 00007fb62c92506b R08: 0000000000000000 R09: 0000000000000000
[  751.334755][T11492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  751.334767][T11492] R13: 00007fb62cb16038 R14: 00007fb62cb15fa0 R15: 00007ffcd1e99c48
[  751.334800][T11492]  </TASK>
[  751.399273][T11096] hsr_slave_0: entered promiscuous mode
[  751.400686][T11096] hsr_slave_1: entered promiscuous mode
[  751.402863][T11096] debugfs: 'hsr0' already exists in 'hsr'
[  751.402888][T11096] Cannot create hsr debugfs directory
[  752.167957][ T4899] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  752.743119][ T4899] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  752.870049][ T4899] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  752.891723][ T4899] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  752.976866][T10279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  753.147449][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  753.147522][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  756.116738][ T5603] Bluetooth: hci5: command tx timeout
[  756.162159][   T37] audit: type=1326 audit(1790780251.271:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11527 comm="syz.2.1498" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd97af8e159 code=0x0
[  757.237512][ T5245] 8021q: adding VLAN 0 to HW filter on device eth11
[  758.251452][ T5603] Bluetooth: hci5: command tx timeout
[  759.655116][T11329] bridge0: port 1(bridge_slave_0) entered blocking state
[  759.655316][T11329] bridge0: port 1(bridge_slave_0) entered disabled state
[  759.655491][T11329] bridge_slave_0: entered allmulticast mode
[  759.658258][T11329] bridge_slave_0: entered promiscuous mode
[  759.768003][T11329] bridge0: port 2(bridge_slave_1) entered blocking state
[  759.768161][T11329] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.768374][T11329] bridge_slave_1: entered allmulticast mode
[  759.770277][T11329] bridge_slave_1: entered promiscuous mode
[  760.229431][T11329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  760.321453][T10279] Bluetooth: hci5: command tx timeout
[  760.715859][T11329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  763.177231][T10279] Bluetooth: hci5: command tx timeout
[  763.314130][T11329] team0: Port device team_slave_0 added
[  763.337544][T11329] team0: Port device team_slave_1 added
[  763.606411][ T1026] IPVS: stop unused estimator thread 0...
[  763.731246][T11329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  763.731264][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  763.731290][T11329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  763.748286][T11329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  763.748302][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  763.748322][T11329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  763.860540][T11588] input: syz0 as /devices/virtual/input/input11
[  763.971195][T11329] hsr_slave_0: entered promiscuous mode
[  763.979918][T11329] hsr_slave_1: entered promiscuous mode
[  763.980828][T11329] debugfs: 'hsr0' already exists in 'hsr'
[  763.980852][T11329] Cannot create hsr debugfs directory
[  764.511188][T11596] overlayfs: missing 'lowerdir'
[  765.887685][T11608] sctp: [Deprecated]: syz.2.1506 (pid 11608) Use of int in max_burst socket option.
[  765.887685][T11608] Use struct sctp_assoc_value instead
[  767.017790][ T5245] 8021q: adding VLAN 0 to HW filter on device eth12
[  767.320196][T11506] bridge0: port 1(bridge_slave_0) entered blocking state
[  767.490252][T11506] bridge0: port 1(bridge_slave_0) entered disabled state
[  767.490820][T11506] bridge_slave_0: entered allmulticast mode
[  767.519527][T11506] bridge_slave_0: entered promiscuous mode
[  767.575794][T11506] bridge0: port 2(bridge_slave_1) entered blocking state
[  767.575918][T11506] bridge0: port 2(bridge_slave_1) entered disabled state
[  767.576102][T11506] bridge_slave_1: entered allmulticast mode
[  769.377634][T11506] bridge_slave_1: entered promiscuous mode
[  771.786976][T11636] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5585] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11636]
[  773.570842][T11642] tipc: Failed to remove unknown binding: 66,0,0/0:3207965707/3207965708
[  774.563845][T11506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  774.573763][T11506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  775.157506][T11506] team0: Port device team_slave_0 added
[  775.170151][T11506] team0: Port device team_slave_1 added
[  775.227971][T11651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  775.229022][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1521'.
[  781.301202][T11675] overlayfs: failed to resolve './bus': -2
[  781.325471][T11506] batman_adv: batadv0: Adding interface: batadv_slave_0
[  781.325488][T11506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  781.325514][T11506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  781.340176][T11506] batman_adv: batadv0: Adding interface: batadv_slave_1
[  781.340191][T11506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  781.340216][T11506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  781.590825][T11506] hsr_slave_0: entered promiscuous mode
[  781.599574][T11506] hsr_slave_1: entered promiscuous mode
[  781.626583][T11506] debugfs: 'hsr0' already exists in 'hsr'
[  781.626615][T11506] Cannot create hsr debugfs directory
[  784.250937][T10279] Bluetooth: hci1: unexpected event for opcode 0x0c5a
[  785.931174][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  786.004249][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  786.082336][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  786.110197][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  786.127781][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  788.804798][ T5603] Bluetooth: hci0: command tx timeout
[  791.783421][T10279] Bluetooth: hci0: command tx timeout
[  793.868143][T11750] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5583] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11750]
[  793.868277][T10279] Bluetooth: hci0: command tx timeout
[  793.885409][T10279] Bluetooth: Frame is too long (len 16, expected len 4)
[  794.117901][T11753] block device autoloading is deprecated and will be removed.
[  794.267485][ T1026] bridge_slave_1: left allmulticast mode
[  794.267515][ T1026] bridge_slave_1: left promiscuous mode
[  794.267727][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state
[  794.505362][ T1026] bridge_slave_0: left allmulticast mode
[  794.505386][ T1026] bridge_slave_0: left promiscuous mode
[  794.505593][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.185074][ T1026] bridge_slave_1: left allmulticast mode
[  795.185106][ T1026] bridge_slave_1: left promiscuous mode
[  795.185328][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state
[  795.696759][ T1026] bridge_slave_0: left allmulticast mode
[  795.696784][ T1026] bridge_slave_0: left promiscuous mode
[  795.696933][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.744730][T11762] tcpci 0-0002: probe with driver tcpci failed with error -5
[  795.764001][T11762] i2c i2c-0: new_device: Instantiated device tcpci at 0x02
[  795.839986][   T37] audit: type=1800 audit(1790780290.941:467): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1542" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  795.926387][T10279] Bluetooth: hci0: command tx timeout
[  796.005617][T11786] comedi comedi0: No hardware detected at I/O base 0x300
[  797.341293][ T1026] bridge_slave_1: left allmulticast mode
[  797.341319][ T1026] bridge_slave_1: left promiscuous mode
[  797.363135][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state
[  797.482519][ T1026] bridge_slave_0: left allmulticast mode
[  797.482545][ T1026] bridge_slave_0: left promiscuous mode
[  797.482706][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state
[  797.535953][T11790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  797.732238][ T1026] bridge_slave_1: left allmulticast mode
[  797.732271][ T1026] bridge_slave_1: left promiscuous mode
[  797.732487][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state
[  797.832729][ T1026] bridge_slave_0: left allmulticast mode
[  797.832753][ T1026] bridge_slave_0: left promiscuous mode
[  797.832900][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state
[  799.162336][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  799.324839][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  799.723551][ T1026] bond0 (unregistering): Released all slaves
[  799.964085][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  800.042446][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  800.255387][ T1026] bond0 (unregistering): Released all slaves
[  800.792574][   T37] audit: type=1800 audit(1790780295.531:468): pid=11812 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1549" name=08 dev="sda1" ino=2050 res=0 errno=0
[  802.575223][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  803.772281][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  804.044900][ T1026] bond0 (unregistering): Released all slaves
[  805.153946][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  805.280424][T11832] atomic_op ffff888026d3e260 conn xmit_atomic 0000000000000000
[  805.862588][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  805.949040][ T1026] bond0 (unregistering): Released all slaves
[  814.177394][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[  814.177464][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  814.378630][ T1026] hsr_slave_0: left promiscuous mode
[  814.399890][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  814.467045][ T1026] hsr_slave_1: left promiscuous mode
[  814.467746][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  814.468052][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  814.520943][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  814.534472][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  814.535048][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  814.708749][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  814.951798][ T1026] hsr_slave_0: left promiscuous mode
[  815.055229][ T1026] hsr_slave_1: left promiscuous mode
[  815.056413][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  815.135831][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  816.441763][ T5719] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  816.602113][ T1026] hsr_slave_0: left promiscuous mode
[  816.711626][T10279] Bluetooth: hci4: command tx timeout
[  816.735271][ T5719] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  816.736977][ T5719] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  816.737001][ T5719] usb 3-1: config 0 has no interface number 0
[  816.737044][ T5719] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  816.737070][ T5719] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  816.737097][ T5719] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  816.739574][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  816.739598][ T5719] usb 3-1: Product: syz
[  816.739612][ T5719] usb 3-1: SerialNumber: syz
[  817.046776][T11896] 9p: Bad value for 'rfdno'
[  817.716047][ T5719] usb 3-1: config 0 descriptor??
[  817.719316][ T5719] cm109 3-1:0.8: invalid payload size 0, expected 4
[  817.721341][ T5719] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input12
[  817.739072][ T1026] hsr_slave_1: left promiscuous mode
[  817.740235][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  817.903748][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  818.219555][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  818.529172][T11901] ==================================================================
[  818.529191][T11901] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0
[  818.529224][T11901] Read of size 1 at addr ffff8880263e5040 by task syz.4.1564/11901
[  818.529242][T11901] 
[  818.529257][T11901] CPU: 1 UID: 0 PID: 11901 Comm: syz.4.1564 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  818.529287][T11901] Tainted: [L]=SOFTLOCKUP
[  818.529295][T11901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  818.529308][T11901] Call Trace:
[  818.529316][T11901]  <TASK>
[  818.529326][T11901]  dump_stack_lvl+0xe8/0x150
[  818.529357][T11901]  print_address_description+0x55/0x1e0
[  818.529387][T11901]  ? string+0x216/0x2d0
[  818.529412][T11901]  print_report+0x58/0x70
[  818.529438][T11901]  kasan_report+0x117/0x150
[  818.529460][T11901]  ? string+0x216/0x2d0
[  818.529490][T11901]  string+0x216/0x2d0
[  818.529519][T11901]  vsnprintf+0x74a/0xef0
[  818.529551][T11901]  seq_printf+0x188/0x290
[  818.529586][T11901]  ? __pfx_seq_printf+0x10/0x10
[  818.529615][T11901]  ? seq_put_decimal_ull_width+0x290/0x370
[  818.529640][T11901]  irq_seq_show+0x5f3/0x860
[  818.529662][T11901]  traverse+0x229/0x620
[  818.529696][T11901]  seq_lseek+0x137/0x260
[  818.529726][T11901]  proc_reg_llseek+0x1c5/0x2a0
[  818.529758][T11901]  __x64_sys_lseek+0x155/0x1f0
[  818.529782][T11901]  do_syscall_64+0x166/0x520
[  818.529803][T11901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.529824][T11901]  ? clear_bhb_loop+0x70/0xc0
[  818.529847][T11901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.529867][T11901] RIP: 0033:0x7fb62c88e159
[  818.529886][T11901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  818.529905][T11901] RSP: 002b:00007fb62aaa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008
[  818.529928][T11901] RAX: ffffffffffffffda RBX: 00007fb62cb16180 RCX: 00007fb62c88e159
[  818.529944][T11901] RDX: 0000000000000000 RSI: 0000002000000008 RDI: 0000000000000008
[  818.529958][T11901] RBP: 00007fb62c92506b R08: 0000000000000000 R09: 0000000000000000
[  818.529972][T11901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  818.529985][T11901] R13: 00007fb62cb16218 R14: 00007fb62cb16180 R15: 00007ffcd1e99c48
[  818.530010][T11901]  </TASK>
[  818.530018][T11901] 
[  818.530030][T11901] Allocated by task 11517:
[  818.530040][T11901]  kasan_save_track+0x3e/0x80
[  818.530074][T11901]  __kasan_kmalloc+0x93/0xb0
[  818.530100][T11901]  __kmalloc_node_track_caller_noprof+0x56e/0x7b0
[  818.530139][T11901]  kmemdup_noprof+0x2b/0x70
[  818.530157][T11901]  smack_inode_init_security+0x459/0x600
[  818.530179][T11901]  security_inode_init_security+0x208/0x3e0
[  818.530199][T11901]  shmem_symlink+0xe0/0x4d0
[  818.530216][T11901]  vfs_symlink+0x18b/0x330
[  818.530243][T11901]  filename_symlinkat+0x1cd/0x420
[  818.530271][T11901]  __se_sys_symlinkat+0x4e/0x2b0
[  818.530298][T11901]  do_syscall_64+0x166/0x520
[  818.530317][T11901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.530336][T11901] 
[  818.530341][T11901] Freed by task 11517:
[  818.530350][T11901]  kasan_save_track+0x3e/0x80
[  818.530375][T11901]  kasan_save_free_info+0x40/0x50
[  818.530396][T11901]  __kasan_slab_free+0x5c/0x80
[  818.530422][T11901]  kfree+0x1c5/0x6d0
[  818.530443][T11901]  security_inode_init_security+0x32d/0x3e0
[  818.530463][T11901]  shmem_symlink+0xe0/0x4d0
[  818.530479][T11901]  vfs_symlink+0x18b/0x330
[  818.530505][T11901]  filename_symlinkat+0x1cd/0x420
[  818.530533][T11901]  __se_sys_symlinkat+0x4e/0x2b0
[  818.530559][T11901]  do_syscall_64+0x166/0x520
[  818.530578][T11901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.530597][T11901] 
[  818.530602][T11901] The buggy address belongs to the object at ffff8880263e5040
[  818.530602][T11901]  which belongs to the cache kmalloc-8 of size 8
[  818.530618][T11901] The buggy address is located 0 bytes inside of
[  818.530618][T11901]  freed 8-byte region [ffff8880263e5040, ffff8880263e5048)
[  818.530639][T11901] 
[  818.530645][T11901] The buggy address belongs to the physical page:
[  818.530663][T11901] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880263e5940 pfn:0x263e5
[  818.530683][T11901] flags: 0x80000000000200(workingset|node=0|zone=1)
[  818.530700][T11901] page_type: f5(slab)
[  818.530720][T11901] raw: 0080000000000200 ffff88813ffbd500 ffffea0001779610 ffffea0000acfad0
[  818.530738][T11901] raw: ffff8880263e5940 0000000000800079 00000000f5000000 0000000000000000
[  818.530749][T11901] page dumped because: kasan: bad access detected
[  818.530765][T11901] page_owner tracks the page as allocated
[  818.530773][T11901] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6039520764
[  818.530806][T11901]  post_alloc_hook+0x1f9/0x250
[  818.530830][T11901]  get_page_from_freelist+0x2591/0x2600
[  818.530859][T11901]  __alloc_frozen_pages_noprof+0x230/0x5c0
[  818.530887][T11901]  allocate_slab+0x7d/0x620
[  818.530906][T11901]  refill_objects+0x2d8/0x350
[  818.530926][T11901]  __pcs_replace_empty_main+0x339/0x690
[  818.530946][T11901]  __kmalloc_node_track_caller_noprof+0x61e/0x7b0
[  818.530974][T11901]  kstrdup+0x42/0x100
[  818.530990][T11901]  __kernfs_new_node+0xac/0xa70
[  818.531014][T11901]  kernfs_create_dir_ns+0xfe/0x230
[  818.531039][T11901]  sysfs_create_dir_ns+0x12f/0x2a0
[  818.531060][T11901]  kobject_add_internal+0x62c/0xce0
[  818.531084][T11901]  kobject_add+0x163/0x240
[  818.531110][T11901]  device_add+0x3fa/0xb80
[  818.531137][T11901]  tty_register_device_attr+0x425/0x990
[  818.531163][T11901]  tty_register_driver+0x868/0xe50
[  818.531188][T11901] page last free pid 178 tgid 178 ts 6039120200 stack trace:
[  818.531202][T11901]  __free_frozen_pages+0xf8e/0x1070
[  818.531227][T11901]  __kasan_populate_vmalloc+0x1a8/0x1c0
[  818.531251][T11901]  alloc_vmap_area+0xd1a/0x1420
[  818.531273][T11901]  __get_vm_area_node+0x200/0x2f0
[  818.531295][T11901]  __vmalloc_node_range_noprof+0x343/0x1540
[  818.531319][T11901]  __vmalloc_node_noprof+0xc2/0x100
[  818.531342][T11901]  dup_task_struct+0x2c6/0xa00
[  818.531366][T11901]  copy_process+0x7e0/0x4410
[  818.531389][T11901]  kernel_clone+0x2d2/0x8d0
[  818.531414][T11901]  user_mode_thread+0x115/0x180
[  818.531439][T11901]  call_usermodehelper_exec_work+0x5c/0x230
[  818.531465][T11901]  process_scheduled_works+0xc3d/0x1630
[  818.531486][T11901]  worker_thread+0xa47/0xfb0
[  818.531510][T11901]  kthread+0x38b/0x470
[  818.531528][T11901]  ret_from_fork+0x514/0xb70
[  818.531546][T11901]  ret_from_fork_asm+0x1a/0x30
[  818.531563][T11901] 
[  818.531568][T11901] Memory state around the buggy address:
[  818.531579][T11901]  ffff8880263e4f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  818.531593][T11901]  ffff8880263e4f80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  818.531606][T11901] >ffff8880263e5000: 05 fc fc fc 05 fc fc fc fa fc fc fc 05 fc fc fc
[  818.531617][T11901]                                            ^
[  818.531628][T11901]  ffff8880263e5080: 05 fc fc fc 00 fc fc fc 05 fc fc fc 00 fc fc fc
[  818.531641][T11901]  ffff8880263e5100: 05 fc fc fc fa fc fc fc 04 fc fc fc 00 fc fc fc
[  818.531651][T11901] ==================================================================
[  818.531674][T11901] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  819.230143][T11901] CPU: 1 UID: 0 PID: 11901 Comm: syz.4.1564 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  819.241641][T11901] Tainted: [L]=SOFTLOCKUP
[  819.245979][T11901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  819.256047][T11901] Call Trace:
[  819.259341][T11901]  <TASK>
[  819.262280][T11901]  vpanic+0x56d/0xa60
[  819.266283][T11901]  ? __pfx_vpanic+0x10/0x10
[  819.270805][T11901]  panic+0xc5/0xd0
[  819.274535][T11901]  ? __pfx_panic+0x10/0x10
[  819.278962][T11901]  ? string+0x216/0x2d0
[  819.283133][T11901]  ? rcu_is_watching+0x16/0xb0
[  819.287926][T11901]  ? string+0x216/0x2d0
[  819.292106][T11901]  ? string+0x216/0x2d0
[  819.296283][T11901]  check_panic_on_warn+0x89/0xb0
[  819.301240][T11901]  ? string+0x216/0x2d0
[  819.305535][T11901]  end_report+0x73/0x170
[  819.309794][T11901]  ? string+0x216/0x2d0
[  819.313981][T11901]  kasan_report+0x128/0x150
[  819.318501][T11901]  ? string+0x216/0x2d0
[  819.322691][T11901]  string+0x216/0x2d0
[  819.326700][T11901]  vsnprintf+0x74a/0xef0
[  819.331068][T11901]  seq_printf+0x188/0x290
[  819.335428][T11901]  ? __pfx_seq_printf+0x10/0x10
[  819.340319][T11901]  ? seq_put_decimal_ull_width+0x290/0x370
[  819.346146][T11901]  irq_seq_show+0x5f3/0x860
[  819.350669][T11901]  traverse+0x229/0x620
[  819.354859][T11901]  seq_lseek+0x137/0x260
[  819.359124][T11901]  proc_reg_llseek+0x1c5/0x2a0
[  819.363914][T11901]  __x64_sys_lseek+0x155/0x1f0
[  819.368705][T11901]  do_syscall_64+0x166/0x520
[  819.373315][T11901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.379390][T11901]  ? clear_bhb_loop+0x70/0xc0
[  819.384087][T11901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.389994][T11901] RIP: 0033:0x7fb62c88e159
[  819.394427][T11901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  819.414827][T11901] RSP: 002b:00007fb62aaa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008
[  819.423262][T11901] RAX: ffffffffffffffda RBX: 00007fb62cb16180 RCX: 00007fb62c88e159
[  819.431247][T11901] RDX: 0000000000000000 RSI: 0000002000000008 RDI: 0000000000000008
[  819.439232][T11901] RBP: 00007fb62c92506b R08: 0000000000000000 R09: 0000000000000000
[  819.447214][T11901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  819.455189][T11901] R13: 00007fb62cb16218 R14: 00007fb62cb16180 R15: 00007ffcd1e99c48
[  819.463182][T11901]  </TASK>
[  819.466480][T11901] Kernel Offset: disabled
[  819.470817][T11901] Rebooting in 86400 seconds..