last executing test programs:

2m34.347130704s ago: executing program 0 (id=934):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0800}]})
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

2m33.948911412s ago: executing program 0 (id=936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000fe08000007"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)

2m33.80813092s ago: executing program 0 (id=937):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4, 0x0, 0xd, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e22, 0x808b, @dev={0xfe, 0x80, '\x00', 0x3e}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}]}, 0x70}}, 0x0)

2m33.547651588s ago: executing program 0 (id=940):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10040012}, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r3, 0x0, 0x40)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0)

2m32.759223649s ago: executing program 0 (id=948):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00', 0x6}, 0x1c)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0)

2m32.500705798s ago: executing program 0 (id=954):
socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='3', 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)

2m21.418549718s ago: executing program 3 (id=1020):
mkdir(&(0x7f00000002c0)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0xaf6a052206d2be5a)
r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES16, @ANYBLOB='\x00'/27], 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x0, 0x32, 0x0, 0x0)
mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05})
io_setup(0x6, &(0x7f0000000540))
setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0])
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='1', 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
epoll_create1(0x80000)
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r3 = syz_ublk_setup_io_uring(0x52f4, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x154}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r0, r7, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0)

2m16.338154467s ago: executing program 32 (id=954):
socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='3', 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)

2m16.28149821s ago: executing program 3 (id=1033):
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x0, 0x0, 0x0})

2m15.983596178s ago: executing program 3 (id=1035):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x14881}, 0x800)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x8010, r2, 0x93dde000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000)
r5 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
setsockopt$sock_int(r3, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu\x0e\x00\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r8, 0x404c4701, &(0x7f0000000040)={0x1, 0xffffffff, 0x0, 0xd, 0x13, "ccd800000000eeff00001000000000008000"})
ioctl$TIOCVHANGUP(r8, 0x5437, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0x63, 0x5, 0x2, 0x1})
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x3, 0x1000, 0x5c31fe481b8d4bba, 0x2, 0x1, 0x0, [{0x5, 0x8e, 0x6, '\x00', 0x300a}]})

2m14.986353368s ago: executing program 3 (id=1038):
mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff)
acct(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xffff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2m13.116328259s ago: executing program 3 (id=1039):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r2], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x658080, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000006c0)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/export_features\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x4, 0x4, 0x568, 0xffffffff, 0x220, 0x220, 0x220, 0xfeffffff, 0xffffffff, 0x498, 0x498, 0x498, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x84d3], 0x0, 0xa, 0x2}}, @common=@ipv6header={{0x28}, {0x4c, 0x53, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private0, @local, [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xffffffff], 'dvmrp1\x00', 'dummy0\x00', {}, {0xff}, 0x87, 0xf, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a82b", 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfffd}}}, {{@uncond, 0x0, 0x230, 0x278, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [0xffffff00, 0xffffffff, 0xffffff, 0xff000000], @ipv4=@private=0xa010102, [0x0, 0xffffff00, 0xff000000, 0xffffff00], 0x4d5, 0x3502, 0x3b, 0x0, 0x1a, 0x2}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0xff, 0xffffffff, 0xff000000, 0xffffffff], 0x4d6, 0x3501, 0x0, 0x1, 0x8, 0x5}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0xffffff00, 0xffffffff], @ipv4=@remote, [0xffffff, 0xff000000, 0xff, 0xff000000], 0x4d5, 0x3504, 0x2e, 0x0, 0x4, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0x0, 0xff, 0xff000000], @ipv6=@rand_addr=' \x01\x00', [0xffffff00, 0xffffff00, 0xff], 0x4d4, 0x3505, 0x4, 0x1, 0xf, 0x4}], 0xb}}, @common=@ah={{0x30}, {[0x4d2, 0x4d5], 0x0, 0x3}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100"/19], 0xc4}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000010000000940000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000280)={0x2, 0x0, 0x6, {0xffff8001, 0xe7fffffc, 0xe44, 0xf}})
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100f0ff00080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, 0x0, 0x4004080)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000180)=0x2000000)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0xa, 0x4e26, 0x84000, @empty, 0xfffffffd}, 0xfecb, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES64=r4], 0x6e}, 0x10048084)

2m9.682989642s ago: executing program 3 (id=1045):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)

1m54.412077866s ago: executing program 33 (id=1045):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)

1m21.951635025s ago: executing program 1 (id=1169):
socket(0x10, 0x3, 0x0)
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket(0x10, 0x80002, 0x0)
ioctl$SNDCTL_TMR_START(r2, 0x5402)
r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x21c, 0x24, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@TCA_STAB={0x1a8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x85, 0x4, 0x3, 0x3, 0x1, 0x1b, 0x8, 0x5}}, {0xe, 0x2, [0x6, 0x401, 0xa800, 0xa000, 0x0]}}, {{0x1c, 0x1, {0x6, 0x81, 0x100, 0x5, 0x0, 0x1, 0xd, 0x3}}, {0xa, 0x2, [0x57a, 0x6, 0xfff]}}, {{0x1c, 0x1, {0x0, 0x1, 0x7, 0xfffff77e, 0x2, 0x7, 0x6, 0x5}}, {0xe, 0x2, [0x1, 0xff, 0x8001, 0x4, 0xfff4]}}, {{0x1c, 0x1, {0x3, 0x40, 0xfffa, 0x1, 0x2, 0x61, 0x2, 0x8}}, {0x14, 0x2, [0x8, 0x9, 0xfff8, 0x8, 0x42ae, 0x9, 0x0, 0x7]}}, {{0x1c, 0x1, {0x8, 0x3, 0x1e4b, 0x8, 0x2, 0x101, 0x3, 0x4}}, {0xc, 0x2, [0x1ff, 0x8f0, 0x42, 0x91e]}}, {{0x1c, 0x1, {0x25, 0x5, 0x4, 0x0, 0x2, 0x9, 0x40, 0x5}}, {0xe, 0x2, [0x0, 0x4, 0x0, 0x100, 0xcc6c]}}, {{0x1c, 0x1, {0x9, 0xf, 0x81, 0x84, 0x1, 0xffff8000, 0xfff, 0x5}}, {0xe, 0x2, [0x7f, 0x2020, 0x9, 0x6, 0x26]}}, {{0x1c, 0x1, {0x8, 0xb, 0x4, 0xffffffff, 0x0, 0x9, 0xa, 0x6}}, {0x10, 0x2, [0x3000, 0x3, 0x400, 0xa, 0x6, 0x5]}}, {{0x1c, 0x1, {0x8, 0x8, 0x0, 0x6, 0x0, 0x5, 0x9, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x32, 0x1, 0x2, 0x63, 0x0, 0xfffffff8, 0x2d, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x5, 0x913, 0x1ff, 0x2, 0xfffff502}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x2, 0x2, 0xfffffffb, 0x2, 0x3, 0x3, 0x5}}, {0xe, 0x2, [0x9, 0x200, 0x6, 0x2, 0xa]}}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, 0x0, 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0xa)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r5, 0x890b, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x20)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6)
fcntl$notify(r7, 0x402, 0x8000001c)
fcntl$notify(r6, 0x402, 0x100000020)
connect$x25(r5, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x21)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r9, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0)

1m20.528019845s ago: executing program 1 (id=1172):
r0 = socket$inet6(0xa, 0x3, 0xff)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}}, 0x0)

1m19.795135239s ago: executing program 1 (id=1174):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket(0x400000000010, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r5, &(0x7f0000000180)='1', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f)
write(r6, &(0x7f0000000200)='1', 0x1)
write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

1m18.715889543s ago: executing program 1 (id=1178):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x2, 0x3}, 0x0)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r1, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x400000, 0x0, 0x4}}, 0x2e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000000)={0x1})
ioctl$VHOST_NET_SET_BACKEND(r7, 0xaf02, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
socket$kcm(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)

1m17.556261473s ago: executing program 1 (id=1180):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r2], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x658080, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000006c0)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/export_features\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x4, 0x4, 0x568, 0xffffffff, 0x220, 0x220, 0x220, 0xfeffffff, 0xffffffff, 0x498, 0x498, 0x498, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x84d3], 0x0, 0xa, 0x2}}, @common=@ipv6header={{0x28}, {0x4c, 0x53, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private0, @local, [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xffffffff], 'dvmrp1\x00', 'dummy0\x00', {}, {0xff}, 0x87, 0xf, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a82b", 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfffd}}}, {{@uncond, 0x0, 0x230, 0x278, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [0xffffff00, 0xffffffff, 0xffffff, 0xff000000], @ipv4=@private=0xa010102, [0x0, 0xffffff00, 0xff000000, 0xffffff00], 0x4d5, 0x3502, 0x3b, 0x0, 0x1a, 0x2}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0xff, 0xffffffff, 0xff000000, 0xffffffff], 0x4d6, 0x3501, 0x0, 0x1, 0x8, 0x5}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0xffffff00, 0xffffffff], @ipv4=@remote, [0xffffff, 0xff000000, 0xff, 0xff000000], 0x4d5, 0x3504, 0x2e, 0x0, 0x4, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0x0, 0xff, 0xff000000], @ipv6=@rand_addr=' \x01\x00', [0xffffff00, 0xffffff00, 0xff], 0x4d4, 0x3505, 0x4, 0x1, 0xf, 0x4}], 0xb}}, @common=@ah={{0x30}, {[0x4d2, 0x4d5], 0x0, 0x3}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100"/19], 0xc4}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000010000000940000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000280)={0x2, 0x0, 0x6, {0xffff8001, 0xe7fffffc, 0xe44, 0xf}})
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100f0ff00080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, 0x0, 0x4004080)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000180)=0x2000000)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0xa, 0x4e26, 0x84000, @empty, 0xfffffffd}, 0xfecb, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES64=r4], 0x6e}, 0x10048084)

1m15.647527809s ago: executing program 1 (id=1182):
r0 = gettid()
timer_create(0x6, &(0x7f0000000340)={0x0, 0x3, 0x4, @thr={&(0x7f0000000200)="23301ecadf2fa968f89ef4e422f9f0bd66636d1d46332b04a1cb9ff3cb9a8bf2101dcf913b976a5fa84aaff6b8d39da9900cf80b9bfecfb8cf2033da76fbcf29527a6c026c2998718c1342cec5ca11ddfb7beac1ca0586358656bb2ae565f8001ce1806960962e653fb445f6d5ff30cdaaa24fa96f4f26c3d47dbca505736f0448869b07dad18501dac6fea537771a433dda3a8446dfde10b6e37769dcb1b6", &(0x7f00000002c0)="db8dd8c96f9f64cdc8021e032270c6a0848a5534431d81ab6b4016bc87d239029084cc1840732b50c24554495bafcda7b376731868e474e5a7f343c5915dd957cc28005b733f1535c063667b9a55c2b524becb2a1b2471fcdc07dc1635b3607a3c"}}, &(0x7f0000000380))
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f00000003c0), 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0xa1ff, &(0x7f0000001740)={&(0x7f0000000040)={0x14, r6, 0x30b, 0x0, 0x0, {0x26}}, 0x14}}, 0x0)
getrusage(0x1, &(0x7f00000000c0))
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r7 = epoll_create1(0x0)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_pwait(r7, &(0x7f0000000140)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
syz_socket_connect_nvme_tcp()

1m7.955644366s ago: executing program 5 (id=1197):
r0 = socket$inet6(0xa, 0x3, 0xff)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}}, 0x0)

1m6.70366875s ago: executing program 5 (id=1199):
mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff)
acct(0x0)
socket(0x15, 0x80005, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xffff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5})
r7 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)

1m5.288346752s ago: executing program 5 (id=1203):
r0 = syz_open_dev$vim2m(&(0x7f0000002600), 0x8, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000026c0)={0x2, @pix={0x9, 0x9, 0x32315659, 0x0, 0x3, 0x9, 0x9, 0x97, 0x0, 0x4, 0x1, 0x2}})
syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffc01, 0x200)

1m3.751796984s ago: executing program 5 (id=1209):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000040)='hpfs\x00', 0x100004, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x2001)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
readv(r2, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1)
mount$nfs4(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)

1m2.770339973s ago: executing program 5 (id=1210):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r2], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x658080, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000006c0)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/export_features\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x4, 0x4, 0x568, 0xffffffff, 0x220, 0x220, 0x220, 0xfeffffff, 0xffffffff, 0x498, 0x498, 0x498, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x84d3], 0x0, 0xa, 0x2}}, @common=@ipv6header={{0x28}, {0x4c, 0x53, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private0, @local, [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xffffffff], 'dvmrp1\x00', 'dummy0\x00', {}, {0xff}, 0x87, 0xf, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a82b", 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfffd}}}, {{@uncond, 0x0, 0x230, 0x278, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [0xffffff00, 0xffffffff, 0xffffff, 0xff000000], @ipv4=@private=0xa010102, [0x0, 0xffffff00, 0xff000000, 0xffffff00], 0x4d5, 0x3502, 0x3b, 0x0, 0x1a, 0x2}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0xff, 0xffffffff, 0xff000000, 0xffffffff], 0x4d6, 0x3501, 0x0, 0x1, 0x8, 0x5}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0xffffff00, 0xffffffff], @ipv4=@remote, [0xffffff, 0xff000000, 0xff, 0xff000000], 0x4d5, 0x3504, 0x2e, 0x0, 0x4, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0x0, 0xff, 0xff000000], @ipv6=@rand_addr=' \x01\x00', [0xffffff00, 0xffffff00, 0xff], 0x4d4, 0x3505, 0x4, 0x1, 0xf, 0x4}], 0xb}}, @common=@ah={{0x30}, {[0x4d2, 0x4d5], 0x0, 0x3}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100"/19], 0xc4}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000010000000940000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000280)={0x2, 0x0, 0x6, {0xffff8001, 0xe7fffffc, 0xe44, 0xf}})
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100f0ff00080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, 0x0, 0x4004080)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000180)=0x2000000)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0xa, 0x4e26, 0x84000, @empty, 0xfffffffd}, 0xfecb, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES64=r4], 0x6e}, 0x10048084)

58.75673758s ago: executing program 34 (id=1182):
r0 = gettid()
timer_create(0x6, &(0x7f0000000340)={0x0, 0x3, 0x4, @thr={&(0x7f0000000200)="23301ecadf2fa968f89ef4e422f9f0bd66636d1d46332b04a1cb9ff3cb9a8bf2101dcf913b976a5fa84aaff6b8d39da9900cf80b9bfecfb8cf2033da76fbcf29527a6c026c2998718c1342cec5ca11ddfb7beac1ca0586358656bb2ae565f8001ce1806960962e653fb445f6d5ff30cdaaa24fa96f4f26c3d47dbca505736f0448869b07dad18501dac6fea537771a433dda3a8446dfde10b6e37769dcb1b6", &(0x7f00000002c0)="db8dd8c96f9f64cdc8021e032270c6a0848a5534431d81ab6b4016bc87d239029084cc1840732b50c24554495bafcda7b376731868e474e5a7f343c5915dd957cc28005b733f1535c063667b9a55c2b524becb2a1b2471fcdc07dc1635b3607a3c"}}, &(0x7f0000000380))
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f00000003c0), 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0xa1ff, &(0x7f0000001740)={&(0x7f0000000040)={0x14, r6, 0x30b, 0x0, 0x0, {0x26}}, 0x14}}, 0x0)
getrusage(0x1, &(0x7f00000000c0))
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r7 = epoll_create1(0x0)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_pwait(r7, &(0x7f0000000140)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
syz_socket_connect_nvme_tcp()

58.745783255s ago: executing program 5 (id=1214):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket(0x400000000010, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r5, &(0x7f0000000180)='1', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='0', 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

43.569583058s ago: executing program 35 (id=1214):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket(0x400000000010, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r5, &(0x7f0000000180)='1', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='0', 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

24.32692754s ago: executing program 4 (id=1295):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x1a9502, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e17})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1d)

24.299058972s ago: executing program 8 (id=1252):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r2], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x658080, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000006c0)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/export_features\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x4, 0x4, 0x568, 0xffffffff, 0x220, 0x220, 0x220, 0xfeffffff, 0xffffffff, 0x498, 0x498, 0x498, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x84d3], 0x0, 0xa, 0x2}}, @common=@ipv6header={{0x28}, {0x4c, 0x53, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private0, @local, [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xffffffff], 'dvmrp1\x00', 'dummy0\x00', {}, {0xff}, 0x87, 0xf, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a82b", 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfffd}}}, {{@uncond, 0x0, 0x230, 0x278, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [0xffffff00, 0xffffffff, 0xffffff, 0xff000000], @ipv4=@private=0xa010102, [0x0, 0xffffff00, 0xff000000, 0xffffff00], 0x4d5, 0x3502, 0x3b, 0x0, 0x1a, 0x2}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0xff, 0xffffffff, 0xff000000, 0xffffffff], 0x4d6, 0x3501, 0x0, 0x1, 0x8, 0x5}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0xffffff00, 0xffffffff], @ipv4=@remote, [0xffffff, 0xff000000, 0xff, 0xff000000], 0x4d5, 0x3504, 0x2e, 0x0, 0x4, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0x0, 0xff, 0xff000000], @ipv6=@rand_addr=' \x01\x00', [0xffffff00, 0xffffff00, 0xff], 0x4d4, 0x3505, 0x4, 0x1, 0xf, 0x4}], 0xb}}, @common=@ah={{0x30}, {[0x4d2, 0x4d5], 0x0, 0x3}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100"/19], 0xc4}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000010000000940000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000280)={0x2, 0x0, 0x6, {0xffff8001, 0xe7fffffc, 0xe44, 0xf}})
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100f0ff00080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, 0x0, 0x4004080)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000180)=0x2000000)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0xa, 0x4e26, 0x84000, @empty, 0xfffffffd}, 0xfecb, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES64=r4], 0x6e}, 0x10048084)

22.797860156s ago: executing program 8 (id=1298):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0xa1ff, &(0x7f0000001740)={&(0x7f0000000040)={0x14, r1, 0x30b, 0x0, 0x0, {0x26}}, 0x14}}, 0x0)

22.625820939s ago: executing program 4 (id=1300):
r0 = gettid()
timer_create(0x6, &(0x7f0000000340)={0x0, 0x3, 0x4, @thr={&(0x7f0000000200)="23301ecadf2fa968f89ef4e422f9f0bd66636d1d46332b04a1cb9ff3cb9a8bf2101dcf913b976a5fa84aaff6b8d39da9900cf80b9bfecfb8cf2033da76fbcf29527a6c026c2998718c1342cec5ca11ddfb7beac1ca0586358656bb2ae565f8001ce1806960962e653fb445f6d5ff30cdaaa24fa96f4f26c3d47dbca505736f0448869b07dad18501dac6fea537771a433dda3a8446dfde10b6e37769dcb1b6", &(0x7f00000002c0)="db8dd8c96f9f64cdc8021e032270c6a0848a5534431d81ab6b4016bc87d239029084cc1840732b50c24554495bafcda7b376731868e474e5a7f343c5915dd957cc28005b733f1535c063667b9a55c2b524becb2a1b2471fcdc07dc1635b3607a3c"}}, &(0x7f0000000380))
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f00000003c0), 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0xa1ff, &(0x7f0000001740)={&(0x7f0000000040)={0x14, r5, 0x30b, 0x0, 0x0, {0x26}}, 0x14}}, 0x0)

21.036235523s ago: executing program 4 (id=1302):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x4c850)
r1 = getpgid(0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6)
sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0)
mkdirat(r8, &(0x7f0000000180)='nullb1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000200)='1\x00', 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0)
write(r9, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, 0x0)
sched_getaffinity(r1, 0x8, &(0x7f0000000200))

20.005145667s ago: executing program 4 (id=1304):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r0, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000000c0))

18.95533618s ago: executing program 4 (id=1311):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r2], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x658080, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000006c0)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/export_features\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x4, 0x4, 0x568, 0xffffffff, 0x220, 0x220, 0x220, 0xfeffffff, 0xffffffff, 0x498, 0x498, 0x498, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x84d3], 0x0, 0xa, 0x2}}, @common=@ipv6header={{0x28}, {0x4c, 0x53, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private0, @local, [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xffffffff], 'dvmrp1\x00', 'dummy0\x00', {}, {0xff}, 0x87, 0xf, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a82b", 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfffd}}}, {{@uncond, 0x0, 0x230, 0x278, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [0xffffff00, 0xffffffff, 0xffffff, 0xff000000], @ipv4=@private=0xa010102, [0x0, 0xffffff00, 0xff000000, 0xffffff00], 0x4d5, 0x3502, 0x3b, 0x0, 0x1a, 0x2}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0xff, 0xffffffff, 0xff000000, 0xffffffff], 0x4d6, 0x3501, 0x0, 0x1, 0x8, 0x5}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0xffffff00, 0xffffffff], @ipv4=@remote, [0xffffff, 0xff000000, 0xff, 0xff000000], 0x4d5, 0x3504, 0x2e, 0x0, 0x4, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0x0, 0xff, 0xff000000], @ipv6=@rand_addr=' \x01\x00', [0xffffff00, 0xffffff00, 0xff], 0x4d4, 0x3505, 0x4, 0x1, 0xf, 0x4}], 0xb}}, @common=@ah={{0x30}, {[0x4d2, 0x4d5], 0x0, 0x3}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100"/19], 0xc4}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000010000000940000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001810", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000280)={0x2, 0x0, 0x6, {0xffff8001, 0xe7fffffc, 0xe44, 0xf}})
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100f0ff00080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, 0x0, 0x4004080)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000180)=0x2000000)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0xa, 0x4e26, 0x84000, @empty, 0xfffffffd}, 0xfecb, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES64=r4], 0x6e}, 0x10048084)

16.381152289s ago: executing program 4 (id=1317):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="0a4500001200050128bd700001cadf25050019006c00000027eae0e048ff0343c2d12615c35ed4fcbf8c8da6f73e1774a59a2f585aab918accec14c95b720b3b9220e9fceec08dff21e532669aafaf95d790a2a8500b03edddc6db2f287d3b96a7e8957741d1de4a9c815d10fb0d21e771e99825a29a95caf9f141af84fa0dcaf8f3535b571dadc32968046861c8c5fda931647f5427d99a43ad3a45e2f116ea7b5ffefbfab8039987198d5afe11143097cb39ed2e007b99480a366a59255d4a"], 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x20040044)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2}, &(0x7f0000000300)=<r1=>0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x309202, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x0, 0x40055}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000540)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
io_uring_enter(r3, 0x1000001, 0xfffffffa, 0x4b, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES8=r6, @ANYRESDEC=r1], 0x1c}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0xb8e6, 0x2a95, 0x4, 0x40, 0x2, 0x5, 0xa2}, 0x9c)
fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r8, 0x0, 0x20000023896)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x82, "a0e1c601283700"})
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r8, 0xc02054a5, &(0x7f0000000200)={0x1, r0, 'id0\x00'})
r9 = timerfd_create(0x5, 0x81000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timerfd_gettime(r9, 0x0)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
socket(0x2b, 0x1, 0x1)

15.787414416s ago: executing program 7 (id=1322):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r0, &(0x7f0000000100)=""/9, 0xfffffd87)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x19, 0x2, "b156"}, 0x0, 0x0, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x5}, 0x0})
write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xffe)

15.15454845s ago: executing program 7 (id=1323):
socket(0x15, 0x80005, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xffff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

14.430146802s ago: executing program 7 (id=1324):
r0 = gettid()
timer_create(0x6, &(0x7f0000000340)={0x0, 0x3, 0x4, @thr={&(0x7f0000000200)="23301ecadf2fa968f89ef4e422f9f0bd66636d1d46332b04a1cb9ff3cb9a8bf2101dcf913b976a5fa84aaff6b8d39da9900cf80b9bfecfb8cf2033da76fbcf29527a6c026c2998718c1342cec5ca11ddfb7beac1ca0586358656bb2ae565f8001ce1806960962e653fb445f6d5ff30cdaaa24fa96f4f26c3d47dbca505736f0448869b07dad18501dac6fea537771a433dda3a8446dfde10b6e37769dcb1b6", &(0x7f00000002c0)="db8dd8c96f9f64cdc8021e032270c6a0848a5534431d81ab6b4016bc87d239029084cc1840732b50c24554495bafcda7b376731868e474e5a7f343c5915dd957cc28005b733f1535c063667b9a55c2b524becb2a1b2471fcdc07dc1635b3607a3c"}}, &(0x7f0000000380))
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f00000003c0), 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0xa1ff, &(0x7f0000001740)={&(0x7f0000000040)={0x14, r6, 0x30b, 0x0, 0x0, {0x26}}, 0x14}}, 0x0)

13.114904673s ago: executing program 7 (id=1327):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x4c850)
r1 = getpgid(0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6)
sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0)
mkdirat(r8, &(0x7f0000000180)='nullb1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000200)='1\x00', 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0)
write(r9, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, 0x0)
sched_getaffinity(r1, 0x8, &(0x7f0000000200))

11.715957974s ago: executing program 7 (id=1328):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r2], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x658080, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000006c0)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/export_features\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x4, 0x4, 0x568, 0xffffffff, 0x220, 0x220, 0x220, 0xfeffffff, 0xffffffff, 0x498, 0x498, 0x498, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x84d3], 0x0, 0xa, 0x2}}, @common=@ipv6header={{0x28}, {0x4c, 0x53, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private0, @local, [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xffffffff], 'dvmrp1\x00', 'dummy0\x00', {}, {0xff}, 0x87, 0xf, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a82b", 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfffd}}}, {{@uncond, 0x0, 0x230, 0x278, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [0xffffff00, 0xffffffff, 0xffffff, 0xff000000], @ipv4=@private=0xa010102, [0x0, 0xffffff00, 0xff000000, 0xffffff00], 0x4d5, 0x3502, 0x3b, 0x0, 0x1a, 0x2}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0xff, 0xffffffff, 0xff000000, 0xffffffff], 0x4d6, 0x3501, 0x0, 0x1, 0x8, 0x5}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0xffffff00, 0xffffffff], @ipv4=@remote, [0xffffff, 0xff000000, 0xff, 0xff000000], 0x4d5, 0x3504, 0x2e, 0x0, 0x4, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0x0, 0xff, 0xff000000], @ipv6=@rand_addr=' \x01\x00', [0xffffff00, 0xffffff00, 0xff], 0x4d4, 0x3505, 0x4, 0x1, 0xf, 0x4}], 0xb}}, @common=@ah={{0x30}, {[0x4d2, 0x4d5], 0x0, 0x3}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100"/19], 0xc4}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000010000000940000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000280)={0x2, 0x0, 0x6, {0xffff8001, 0xe7fffffc, 0xe44, 0xf}})
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100f0ff00080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, 0x0, 0x4004080)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000180)=0x2000000)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0xa, 0x4e26, 0x84000, @empty, 0xfffffffd}, 0xfecb, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES64=r4], 0x6e}, 0x10048084)

7.576905856s ago: executing program 36 (id=1298):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0xa1ff, &(0x7f0000001740)={&(0x7f0000000040)={0x14, r1, 0x30b, 0x0, 0x0, {0x26}}, 0x14}}, 0x0)

7.552899203s ago: executing program 6 (id=1334):
socket(0x15, 0x80005, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xffff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

7.48610461s ago: executing program 2 (id=1335):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x20, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0)

6.852173414s ago: executing program 6 (id=1336):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010900000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100"], 0x64}}, 0x0)

6.60372965s ago: executing program 2 (id=1337):
r0 = gettid()
timer_create(0x6, &(0x7f0000000340)={0x0, 0x3, 0x4, @thr={&(0x7f0000000200)="23301ecadf2fa968f89ef4e422f9f0bd66636d1d46332b04a1cb9ff3cb9a8bf2101dcf913b976a5fa84aaff6b8d39da9900cf80b9bfecfb8cf2033da76fbcf29527a6c026c2998718c1342cec5ca11ddfb7beac1ca0586358656bb2ae565f8001ce1806960962e653fb445f6d5ff30cdaaa24fa96f4f26c3d47dbca505736f0448869b07dad18501dac6fea537771a433dda3a8446dfde10b6e37769dcb1b6", &(0x7f00000002c0)="db8dd8c96f9f64cdc8021e032270c6a0848a5534431d81ab6b4016bc87d239029084cc1840732b50c24554495bafcda7b376731868e474e5a7f343c5915dd957cc28005b733f1535c063667b9a55c2b524becb2a1b2471fcdc07dc1635b3607a3c"}}, &(0x7f0000000380))
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f00000003c0), 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0xa1ff, &(0x7f0000001740)={&(0x7f0000000040)={0x14, r6, 0x30b, 0x0, 0x0, {0x26}}, 0x14}}, 0x0)

5.611735779s ago: executing program 2 (id=1338):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x4c850)
r1 = getpgid(0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6)
sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0)
mkdirat(r8, &(0x7f0000000180)='nullb1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000200)='1\x00', 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0)
write(r9, &(0x7f0000000280), 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, 0x0)
sched_getaffinity(r1, 0x8, &(0x7f0000000200))

5.333318927s ago: executing program 7 (id=1339):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x2000000, 0x12c, @pic={0x7f, 0x1, 0x8, 0xfe, 0x81, 0xeb, 0x5, 0x2, 0x3b, 0x2, 0xa, 0x4, 0x2, 0x81, 0xfd, 0x10}})
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000004000070100000000fddbdf25047c00000c00c580080008"], 0x20}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0)

4.377431877s ago: executing program 2 (id=1340):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1, 0x2000000, 0x300}, 0x38)
syz_emit_vhci(0x0, 0x14)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket(0x2, 0x80002, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x11, @dev={0xac, 0x14, 0x14, 0x28}, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@multicast1, 0x4e20, 0x10000, 0x6, 0x1}}, 0x44)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0)
write(r6, &(0x7f0000000200)='offline', 0x7)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x24000045, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000280)="dd", 0x1, 0x0, 0x0, 0x0)
r7 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r7, &(0x7f0000000180)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

3.969909923s ago: executing program 6 (id=1341):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700)
ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x2000)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x4080)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000009060102f0ffffff00000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300))

3.012919872s ago: executing program 6 (id=1342):
mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff)
acct(0x0)
r0 = socket(0x15, 0x80005, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xf, @remote, 0xffffff7f}, 0x7)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xffff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5})
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)

1.768673784s ago: executing program 2 (id=1343):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680))
r2 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB], 0x40)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4}, 0x20)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r6, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x41, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r6, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1000001, {0x8, 0x3d, 0x0, {0x1, 0x7fffffffffffffff, 0x0, 0x1000, 0x11, 0xfffffffffffffffd, 0x1009ec, 0x35741061, 0x10004, 0xa593e9c1ca988eda, 0x3, 0xee01, 0x0, 0x10, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r6, &(0x7f000000db40)="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", 0x2000, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x10001, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000)

1.559551852s ago: executing program 6 (id=1344):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1, 0x2000000, 0x300}, 0x38)
syz_emit_vhci(0x0, 0x14)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket(0x2, 0x80002, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x11, @dev={0xac, 0x14, 0x14, 0x28}, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@multicast1, 0x4e20, 0x10000, 0x6, 0x1}}, 0x44)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0)
write(r6, &(0x7f0000000200)='offline', 0x7)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r7, &(0x7f0000000180)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

898.062278ms ago: executing program 37 (id=1317):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="0a4500001200050128bd700001cadf25050019006c00000027eae0e048ff0343c2d12615c35ed4fcbf8c8da6f73e1774a59a2f585aab918accec14c95b720b3b9220e9fceec08dff21e532669aafaf95d790a2a8500b03edddc6db2f287d3b96a7e8957741d1de4a9c815d10fb0d21e771e99825a29a95caf9f141af84fa0dcaf8f3535b571dadc32968046861c8c5fda931647f5427d99a43ad3a45e2f116ea7b5ffefbfab8039987198d5afe11143097cb39ed2e007b99480a366a59255d4a"], 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x20040044)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2}, &(0x7f0000000300)=<r1=>0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x309202, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x0, 0x40055}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000540)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
io_uring_enter(r3, 0x1000001, 0xfffffffa, 0x4b, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES8=r6, @ANYRESDEC=r1], 0x1c}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0xb8e6, 0x2a95, 0x4, 0x40, 0x2, 0x5, 0xa2}, 0x9c)
fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r8, 0x0, 0x20000023896)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x82, "a0e1c601283700"})
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r8, 0xc02054a5, &(0x7f0000000200)={0x1, r0, 'id0\x00'})
r9 = timerfd_create(0x5, 0x81000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timerfd_gettime(r9, 0x0)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
socket(0x2b, 0x1, 0x1)

273.084238ms ago: executing program 2 (id=1346):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000200000007"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24008811}, 0x400c040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r0, 0x0)
rt_sigprocmask(0x1, &(0x7f0000000580)={[0x800]}, &(0x7f00000005c0), 0x8)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x3000, 0x0, 0x9)

0s ago: executing program 6 (id=1347):
r0 = gettid()
timer_create(0x6, &(0x7f0000000340)={0x0, 0x3, 0x4, @thr={&(0x7f0000000200)="23301ecadf2fa968f89ef4e422f9f0bd66636d1d46332b04a1cb9ff3cb9a8bf2101dcf913b976a5fa84aaff6b8d39da9900cf80b9bfecfb8cf2033da76fbcf29527a6c026c2998718c1342cec5ca11ddfb7beac1ca0586358656bb2ae565f8001ce1806960962e653fb445f6d5ff30cdaaa24fa96f4f26c3d47dbca505736f0448869b07dad18501dac6fea537771a433dda3a8446dfde10b6e37769dcb1b6", &(0x7f00000002c0)="db8dd8c96f9f64cdc8021e032270c6a0848a5534431d81ab6b4016bc87d239029084cc1840732b50c24554495bafcda7b376731868e474e5a7f343c5915dd957cc28005b733f1535c063667b9a55c2b524becb2a1b2471fcdc07dc1635b3607a3c"}}, &(0x7f0000000380))
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f00000003c0), 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0xa1ff, &(0x7f0000001740)={&(0x7f0000000040)={0x14, r6, 0x30b, 0x0, 0x0, {0x26}}, 0x14}}, 0x0)

kernel console output (not intermixed with test programs):

7
[  417.877043][ T5811] kalmia 4-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71
[  417.877562][ T5811] kalmia 4-1:1.0: probe with driver kalmia failed with error -71
[  417.911854][ T5811] usb 4-1: USB disconnect, device number 26
[  418.061471][   T31] audit: type=1400 audit(1700006657.520:662): avc:  denied  { bind } for  pid=9199 comm="syz.3.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  418.096467][   T31] audit: type=1400 audit(1700006657.560:663): avc:  denied  { getopt } for  pid=9199 comm="syz.3.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  418.249127][ T5603] gspca_sonixj: reg_r err -32
[  418.249199][ T5603] sonixj 5-1:0.0: probe with driver sonixj failed with error -32
[  418.615279][ T9206] FAULT_INJECTION: forcing a failure.
[  418.615279][ T9206] name failslab, interval 1, probability 0, space 0, times 0
[  418.615322][ T9206] CPU: 0 UID: 0 PID: 9206 Comm: syz.2.933 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  418.615347][ T9206] Tainted: [L]=SOFTLOCKUP
[  418.615354][ T9206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  418.615365][ T9206] Call Trace:
[  418.615371][ T9206]  <TASK>
[  418.615379][ T9206]  dump_stack_lvl+0x100/0x190
[  418.615409][ T9206]  should_fail_ex.cold+0x5/0xa
[  418.615437][ T9206]  should_failslab+0xc2/0x120
[  418.615458][ T9206]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  418.615477][ T9206]  ? __alloc_skb+0x5b7/0x710
[  418.615505][ T9206]  ? __alloc_skb+0x140/0x710
[  418.615536][ T9206]  __alloc_skb+0x140/0x710
[  418.615562][ T9206]  ? __alloc_skb+0x5b7/0x710
[  418.615589][ T9206]  ? __pfx___alloc_skb+0x10/0x10
[  418.615613][ T9206]  ? selinux_file_permission+0x8f/0x6d0
[  418.615648][ T9206]  vhci_write+0xc1/0x490
[  418.615671][ T9206]  vfs_write+0x6af/0x1050
[  418.615688][ T9206]  ? __pfx_vhci_write+0x10/0x10
[  418.615709][ T9206]  ? __pfx_vfs_write+0x10/0x10
[  418.615724][ T9206]  ? find_held_lock+0x2b/0x80
[  418.615764][ T9206]  ksys_write+0x12a/0x250
[  418.615789][ T9206]  ? __pfx_ksys_write+0x10/0x10
[  418.615813][ T9206]  do_syscall_64+0x123/0x790
[  418.615839][ T9206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.615858][ T9206] RIP: 0033:0x7fd597d5e98e
[  418.615872][ T9206] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  418.615889][ T9206] RSP: 002b:00007fd598c76fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  418.615906][ T9206] RAX: ffffffffffffffda RBX: 00007fd598c776c0 RCX: 00007fd597d5e98e
[  418.615918][ T9206] RDX: 000000000000000d RSI: 0000000000000000 RDI: 00000000000000ca
[  418.615929][ T9206] RBP: 00007fd597e35024 R08: 0000000000000000 R09: 0000000000000000
[  418.615939][ T9206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  418.615949][ T9206] R13: 00007fd598026038 R14: 00007fd598025fa0 R15: 00007ffee17fe948
[  418.615973][ T9206]  </TASK>
[  418.670912][ T9209] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  419.737792][ T5603] usb 5-1: USB disconnect, device number 25
[  420.065963][ T9231] socket: no more sockets
[  420.214552][ T9231] socket: no more sockets
[  420.214575][ T9231] IPVS: Error during creation of socket; terminating
[  420.549287][   T31] audit: type=1400 audit(1700006660.010:664): avc:  denied  { setopt } for  pid=9244 comm="syz.0.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  420.655561][   T31] audit: type=1400 audit(1700006660.120:665): avc:  denied  { read } for  pid=9244 comm="syz.0.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  420.935741][   T31] audit: type=1400 audit(1700006660.400:666): avc:  denied  { ioctl } for  pid=9261 comm="syz.4.955" path="socket:[25190]" dev="sockfs" ino=25190 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  421.058921][   T31] audit: type=1400 audit(1700006660.520:667): avc:  denied  { ioctl } for  pid=9266 comm="syz.3.956" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  421.945377][   T31] audit: type=1400 audit(1700006661.410:668): avc:  denied  { write } for  pid=9298 comm="syz.2.967" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  421.946270][   T31] audit: type=1400 audit(1700006661.410:669): avc:  denied  { open } for  pid=9298 comm="syz.2.967" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  421.946561][ T9299] random: crng reseeded on system resumption
[  421.959816][   T31] audit: type=1400 audit(1700006661.410:670): avc:  denied  { ioctl } for  pid=9298 comm="syz.2.967" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  422.608671][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'.
[  422.628239][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'.
[  422.641359][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'.
[  422.672732][ T9308] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  422.901691][   T31] audit: type=1400 audit(1700006662.360:671): avc:  denied  { write } for  pid=9316 comm="syz.3.974" name="heartbeat" dev="configfs" ino=10453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  423.026982][ T9319] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  423.038923][ T9319] ipvlan2: left allmulticast mode
[  423.038965][ T9319] ip6gretap0: left allmulticast mode
[  423.151079][   T31] audit: type=1400 audit(1700006662.610:672): avc:  denied  { mount } for  pid=9324 comm="syz.3.978" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  423.193074][ T9326] ubi0: attaching mtd0
[  423.214025][ T9326] ubi0: scanning is finished
[  423.218780][ T9326] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  423.225457][ T9328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  423.406671][ T9326] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  423.479301][   T31] audit: type=1400 audit(1700006662.940:673): avc:  denied  { read } for  pid=9330 comm="syz.1.980" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  423.530139][ T5605] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  423.813854][ T9343] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  424.067826][ T9354] team_slave_1: entered promiscuous mode
[  424.086185][ T9353] team_slave_1: left promiscuous mode
[  424.145936][ T5613] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  424.162561][ T9358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9358 comm=syz.1.991
[  425.912754][   T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  426.032761][ T5811] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  426.042713][ T5603] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  426.072818][   T10] usb 3-1: Using ep0 maxpacket: 16
[  426.078555][   T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  426.090090][   T10] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  426.090125][   T10] usb 3-1: config 0 has no interface number 0
[  426.090166][   T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  426.090192][   T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  426.117137][   T10] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  426.117161][   T10] usb 3-1: Product: syz
[  426.117174][   T10] usb 3-1: SerialNumber: syz
[  426.121846][   T10] usb 3-1: config 0 descriptor??
[  426.124834][   T10] cm109 3-1:0.8: invalid payload size 0, expected 4
[  426.126267][   T10] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input29
[  426.182736][ T5811] usb 5-1: Using ep0 maxpacket: 16
[  426.188455][ T5811] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  426.197749][ T5603] usb 4-1: Using ep0 maxpacket: 16
[  426.198524][ T5603] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  426.215645][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  426.215725][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  426.215762][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  426.215783][ T5811] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  426.215805][ T5811] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  426.271929][ T5603] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  426.271964][ T5603] usb 4-1: config 0 has no interface number 0
[  426.272066][ T5603] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  426.272093][ T5603] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  426.286594][ T5811] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  426.286618][ T5811] usb 5-1: Manufacturer: syz
[  426.294067][ T5811] usb 5-1: config 0 descriptor??
[  426.295792][ T5603] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  426.295812][ T5603] usb 4-1: Product: syz
[  426.295824][ T5603] usb 4-1: SerialNumber: syz
[  426.313747][ T5603] usb 4-1: config 0 descriptor??
[  426.367925][ T5603] cm109 4-1:0.8: invalid payload size 0, expected 4
[  426.381101][ T5603] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input30
[  426.419819][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  426.421521][ T5603] usb 3-1: USB disconnect, device number 20
[  426.427127][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  426.427150][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  426.429177][ T5603] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  426.553873][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.554182][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.650856][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  426.651076][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  426.651272][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  426.651464][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  426.651655][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  426.651853][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  426.652056][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  426.652252][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  426.654337][ T5811] rc_core: IR keymap rc-hauppauge not found
[  426.654472][ T5811] Registered IR keymap rc-empty
[  426.654643][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  426.669574][ T9401] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  426.672872][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  426.698004][ T5811] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  426.705797][ T5811] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31
[  426.715793][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  426.734860][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  426.745633][ T9401] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  426.757825][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  426.772873][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  426.792798][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  426.807497][ T9410] usb 4-1: USB disconnect, device number 27
[  426.807546][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  426.812754][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  426.832830][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  426.835021][ T9410] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  426.854227][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  426.873394][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  426.893519][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  426.916796][ T5811] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  426.916844][ T5811] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  426.924598][ T5811] usb 5-1: USB disconnect, device number 26
[  427.114595][ T1163] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.114648][ T1163] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.114692][ T1163] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.114722][ T1163] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  429.162718][ T5731] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  429.646841][ T9447] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  430.168307][ T5731] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  430.170680][ T5731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  430.170704][ T5731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  430.170721][ T5731] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  430.170757][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.174204][ T5731] usb 5-1: config 0 descriptor??
[  430.482735][ T9425] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  430.594278][ T9437] random: crng reseeded on system resumption
[  430.643757][ T9425] usb 2-1: not running at top speed; connect to a high speed hub
[  430.651682][ T9425] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  430.663115][ T9425] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  430.677419][ T9425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.685645][ T9425] usb 2-1: Product: syz
[  430.685666][ T9425] usb 2-1: Manufacturer: syz
[  430.685679][ T9425] usb 2-1: SerialNumber: syz
[  430.704216][ T9425] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected
[  430.712053][ T9425] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81
[  430.719958][ T9425] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88
[  430.736836][ T9425] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1
[  430.751307][ T9425] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  430.756845][ T5731] hid_parser_main: 28 callbacks suppressed
[  430.756864][ T5731] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  430.756884][ T5731] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  430.756901][ T5731] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  430.756918][ T5731] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  430.756934][ T5731] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  430.756953][ T5731] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  430.756971][ T5731] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  430.756990][ T5731] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  430.757009][ T5731] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  430.757026][ T5731] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  431.823304][ T9425] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2
[  431.837708][ T5731] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  431.854397][ T9425] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  431.871257][ T9425] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 4
[  431.882832][ T9425] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  431.894256][ T9425] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6
[  431.907959][ T9425] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  431.929793][ T9437] Restarting kernel threads ...
[  431.930453][ T9437] Done restarting kernel threads.
[  432.127154][ T9425] usb 5-1: USB disconnect, device number 27
[  432.195504][ T9461] fido_id[9461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  432.252792][ T5731] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  432.405339][ T9420] usb 2-1: USB disconnect, device number 22
[  432.407733][ T9420] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  432.409816][ T9420] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  432.414348][ T9420] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  432.423379][ T9420] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  432.425241][ T5731] usb 3-1: Using ep0 maxpacket: 16
[  432.426502][ T5731] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  432.428531][ T5731] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  432.428553][ T5731] usb 3-1: config 0 has no interface number 0
[  432.428582][ T5731] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  432.428602][ T5731] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  432.436119][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  432.436141][ T5731] usb 3-1: Product: syz
[  432.436153][ T5731] usb 3-1: SerialNumber: syz
[  432.443480][ T5731] usb 3-1: config 0 descriptor??
[  432.450434][ T9420] keyspan 2-1:1.0: device disconnected
[  432.460232][ T5731] cm109 3-1:0.8: invalid payload size 0, expected 4
[  432.467269][ T5731] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input32
[  432.682649][    C0] cm109_urb_ctl_callback: 740 callbacks suppressed
[  432.682674][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  432.682921][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  432.683142][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  432.683358][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  432.683579][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  432.683781][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  432.683976][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  432.684103][ T5724] usb 3-1: USB disconnect, device number 21
[  432.684179][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  432.684197][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  432.693500][ T5724] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  432.763170][ T9425] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  432.912754][ T9425] usb 5-1: Using ep0 maxpacket: 16
[  432.912759][ T9420] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  432.914868][ T9425] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  432.915890][ T9425] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  432.915924][ T9425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  432.915944][ T9425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  432.915961][ T9425] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  432.915979][ T9425] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  432.917004][ T9425] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  432.917021][ T9425] usb 5-1: Manufacturer: syz
[  432.919663][ T9425] usb 5-1: config 0 descriptor??
[  433.143220][ T9420] usb 4-1: Using ep0 maxpacket: 16
[  433.165327][ T9420] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  433.218425][ T9420] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  433.218491][ T9420] usb 4-1: config 0 has no interface number 0
[  433.218715][ T9420] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  433.218754][ T9420] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  433.279288][ T9420] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  433.288542][ T9420] usb 4-1: Product: syz
[  433.288615][ T9420] usb 4-1: SerialNumber: syz
[  433.345844][ T9420] usb 4-1: config 0 descriptor??
[  433.532324][ T9420] cm109 4-1:0.8: invalid payload size 0, expected 4
[  433.962107][ T9420] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input34
[  434.173425][ T9425] rc_core: IR keymap rc-hauppauge not found
[  434.173460][ T9425] Registered IR keymap rc-empty
[  434.173563][ T9425] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  434.193927][ T9425] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  434.211687][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  434.211901][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  434.215247][ T9425] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  434.222067][ T9425] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input33
[  434.226266][ T5724] usb 4-1: USB disconnect, device number 28
[  434.230062][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  434.239233][ T9425] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  434.254235][ T9425] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  434.273164][ T9425] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  434.279124][ T5724] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  434.293449][ T9425] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  434.314088][ T9425] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  434.334448][ T9425] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  435.225063][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  435.230340][ T9425] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  435.231451][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  435.246064][ T9425] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  435.295637][ T9425] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  435.324222][ T9425] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  435.346475][ T9425] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  435.346522][ T9425] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  435.374200][ T9425] usb 5-1: USB disconnect, device number 28
[  435.667428][ T9491] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48400
[  435.667522][ T9491] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  435.667664][ T9491] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  435.667686][ T9491] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  435.667765][ T9491] page dumped because: unmovable page
[  435.667849][ T9491] page_owner tracks the page as allocated
[  435.667933][ T9491] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x28c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS), pid 10, tgid 10 (kworker/0:1), ts 79661551841
[  435.667990][ T9491]  post_alloc_hook+0xfd/0x120
[  435.668138][ T9491]  get_page_from_freelist+0x110d/0x35d0
[  435.668250][ T9491]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  435.668362][ T9491]  alloc_pages_mpol+0x201/0x550
[  435.668395][ T9491]  alloc_pages_noprof+0x1a/0x160
[  435.668504][ T9491]  __vmalloc_node_range_noprof+0x833/0x1420
[  435.668536][ T9491]  __vmalloc_node_noprof+0xad/0xf0
[  435.668567][ T9491]  kcov_remote_start+0x518/0x6d0
[  435.668637][ T9491]  hub_event+0x198/0x4420
[  435.668764][ T9491]  process_one_work+0xac7/0x1b10
[  435.668959][ T9491]  worker_thread+0x5ef/0xe50
[  435.669115][ T9491]  kthread+0x373/0x450
[  435.669148][ T9491]  ret_from_fork+0x730/0xd60
[  435.669177][ T9491]  ret_from_fork_asm+0x1a/0x30
[  435.669205][ T9491] page last free pid 1 tgid 1 ts 17409959679 stack trace:
[  435.669290][ T9491]  free_pages_prepare+0x586/0xe00
[  435.669371][ T9491]  __free_contig_range_common+0x14f/0x250
[  435.669405][ T9491]  destroy_args+0xa8/0x7a0
[  435.669434][ T9491]  debug_vm_pgtable+0x1d69/0x3490
[  435.669463][ T9491]  do_one_initcall+0x11c/0x6f0
[  435.669492][ T9491]  kernel_init_freeable+0x6ea/0x7b0
[  435.669523][ T9491]  kernel_init+0x21/0x1e0
[  435.669558][ T9491]  ret_from_fork+0x730/0xd60
[  435.669650][ T9491]  ret_from_fork_asm+0x1a/0x30
[  435.942870][ T9425] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  436.102776][ T9425] usb 5-1: Using ep0 maxpacket: 32
[  436.111714][ T9425] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  436.128226][ T9425] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  436.139154][ T9425] usb 5-1: config 0 has no interface number 0
[  436.167692][ T9425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.177696][ T9425] usb 5-1: Product: syz
[  436.182098][ T9425] usb 5-1: Manufacturer: syz
[  436.189892][ T9425] usb 5-1: SerialNumber: syz
[  436.244569][ T9425] usb 5-1: config 0 descriptor??
[  436.391242][ T9425] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  436.880723][ T9425] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  436.906973][ T9425] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  437.101315][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  437.110457][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  437.114088][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  437.114745][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  437.115134][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  437.159849][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  437.168677][ T9425] usb 5-1: USB disconnect, device number 29
[  437.191857][ T9425] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  437.213829][ T9425] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  437.225974][ T9425] quatech2 5-1:0.51: device disconnected
[  439.197213][ T5613] Bluetooth: hci5: command tx timeout
[  440.542963][ T5731] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  440.703012][ T5731] usb 2-1: Using ep0 maxpacket: 16
[  440.703603][ T5731] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  440.705113][ T5731] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  440.705147][ T5731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  440.705169][ T5731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  440.705186][ T5731] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  440.705204][ T5731] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  440.706800][ T5731] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  440.706820][ T5731] usb 2-1: Manufacturer: syz
[  440.722476][ T9495] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.722647][ T9495] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.722769][ T9495] bridge_slave_0: entered allmulticast mode
[  440.724171][ T9495] bridge_slave_0: entered promiscuous mode
[  440.726395][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.726484][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.726565][ T9495] bridge_slave_1: entered allmulticast mode
[  440.727790][ T9495] bridge_slave_1: entered promiscuous mode
[  440.751589][ T9495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.754139][ T9495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.766626][ T5731] usb 2-1: config 0 descriptor??
[  440.802732][ T9495] team0: Port device team_slave_0 added
[  440.806114][ T9495] team0: Port device team_slave_1 added
[  440.836154][ T9495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.836169][ T9495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.836189][ T9495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.843116][ T9495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.843129][ T9495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.843148][ T9495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.063509][ T9495] hsr_slave_0: entered promiscuous mode
[  441.064207][ T9495] hsr_slave_1: entered promiscuous mode
[  441.064764][ T9495] debugfs: 'hsr0' already exists in 'hsr'
[  441.064779][ T9495] Cannot create hsr debugfs directory
[  441.274241][ T5613] Bluetooth: hci5: command tx timeout
[  441.502701][ T5731] rc_core: IR keymap rc-hauppauge not found
[  441.502730][ T5731] Registered IR keymap rc-empty
[  441.502846][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  441.535046][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  441.558008][ T5731] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  441.847345][ T5731] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input35
[  442.164132][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  442.196945][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  442.214391][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  442.234516][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  442.254917][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  442.283016][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  442.306646][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  442.323697][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  442.343439][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  442.377096][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  442.521832][ T5731] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  442.521915][ T5731] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  442.635329][ T9546] siw: device registration error -23
[  442.670772][ T5731] usb 2-1: USB disconnect, device number 23
[  443.333060][ T5613] Bluetooth: hci5: command tx timeout
[  443.692217][ T9495] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  444.645726][ T9495] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  444.646755][ T9495] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  444.678796][ T9495] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  444.679410][ T9495] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  444.708084][ T9495] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  444.709320][ T9495] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  444.740970][ T9495] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  444.765747][ T9425] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  444.923514][ T9567] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48400
[  444.923544][ T9567] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  444.923574][ T9567] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  444.923792][ T9567] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  444.923878][ T9567] page dumped because: unmovable page
[  444.923964][ T9567] page_owner tracks the page as allocated
[  444.924014][ T9567] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x28c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS), pid 10, tgid 10 (kworker/0:1), ts 79661551841
[  444.924092][ T9567]  post_alloc_hook+0xfd/0x120
[  444.924203][ T9567]  get_page_from_freelist+0x110d/0x35d0
[  444.924324][ T9567]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  444.924399][ T9567]  alloc_pages_mpol+0x201/0x550
[  444.924429][ T9567]  alloc_pages_noprof+0x1a/0x160
[  444.924507][ T9567]  __vmalloc_node_range_noprof+0x833/0x1420
[  444.924539][ T9567]  __vmalloc_node_noprof+0xad/0xf0
[  444.924569][ T9567]  kcov_remote_start+0x518/0x6d0
[  444.924601][ T9567]  hub_event+0x198/0x4420
[  444.924633][ T9567]  process_one_work+0xac7/0x1b10
[  444.924669][ T9567]  worker_thread+0x5ef/0xe50
[  444.924741][ T9567]  kthread+0x373/0x450
[  444.924800][ T9567]  ret_from_fork+0x730/0xd60
[  444.924832][ T9567]  ret_from_fork_asm+0x1a/0x30
[  444.924864][ T9567] page last free pid 1 tgid 1 ts 17409959679 stack trace:
[  444.924963][ T9567]  free_pages_prepare+0x586/0xe00
[  444.924997][ T9567]  __free_contig_range_common+0x14f/0x250
[  444.925030][ T9567]  destroy_args+0xa8/0x7a0
[  444.925061][ T9567]  debug_vm_pgtable+0x1d69/0x3490
[  444.925093][ T9567]  do_one_initcall+0x11c/0x6f0
[  444.925183][ T9567]  kernel_init_freeable+0x6ea/0x7b0
[  444.925374][ T9567]  kernel_init+0x21/0x1e0
[  444.925408][ T9567]  ret_from_fork+0x730/0xd60
[  444.925495][ T9567]  ret_from_fork_asm+0x1a/0x30
[  445.132690][ T9425] usb 5-1: Using ep0 maxpacket: 32
[  445.172312][ T9425] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  445.199998][ T9425] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  445.200044][ T9425] usb 5-1: config 0 has no interface number 0
[  445.412726][ T5613] Bluetooth: hci5: command tx timeout
[  445.458947][ T9425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.458994][ T9425] usb 5-1: Product: syz
[  445.459023][ T9425] usb 5-1: Manufacturer: syz
[  445.459039][ T9425] usb 5-1: SerialNumber: syz
[  445.632407][ T9425] usb 5-1: config 0 descriptor??
[  445.641991][ T9425] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  445.830972][ T9495] 8021q: adding VLAN 0 to HW filter on device bond0
[  445.859034][ T9425] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  445.873177][ T9425] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  445.888687][ T9495] 8021q: adding VLAN 0 to HW filter on device team0
[  445.955260][ T9495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  445.965989][ T9495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  446.056888][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.057013][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  446.083793][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.083892][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  446.318766][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  446.328561][ T5731] usb 5-1: USB disconnect, device number 30
[  446.601222][ T5731] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  446.623579][ T5731] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  446.635840][ T5731] quatech2 5-1:0.51: device disconnected
[  447.138447][ T9592] PKCS7: Unknown OID: [4] (bad)
[  447.138493][ T9592] PKCS7: Only support pkcs7_signedData type
[  447.328714][ T9495] 8021q: adding VLAN 0 to HW filter on device batadv0
[  449.631593][ T9620] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  450.265360][ T9495] veth0_vlan: entered promiscuous mode
[  450.309755][ T9495] veth1_vlan: entered promiscuous mode
[  450.414306][ T9495] veth0_macvtap: entered promiscuous mode
[  450.422665][ T9495] veth1_macvtap: entered promiscuous mode
[  450.467289][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_0
[  450.473307][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_1
[  450.515567][ T9626] kvm [9625]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000000
[  450.517634][ T9626] kvm [9625]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000080
[  450.517721][ T9626] kvm [9625]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  450.519909][ T9626] kvm [9625]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000
[  450.521566][ T9626] kvm [9625]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000
[  450.521633][ T9626] kvm [9625]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  450.550197][  T148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.554537][  T148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.556334][   T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.556364][   T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.820783][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.820829][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.961178][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.961230][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.451067][ T9631] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48400
[  451.451101][ T9631] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  451.451126][ T9631] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  451.451138][ T9631] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  451.451146][ T9631] page dumped because: unmovable page
[  451.451153][ T9631] page_owner tracks the page as allocated
[  451.451160][ T9631] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x28c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS), pid 10, tgid 10 (kworker/0:1), ts 79661551841
[  451.451180][ T9631]  post_alloc_hook+0xfd/0x120
[  451.451199][ T9631]  get_page_from_freelist+0x110d/0x35d0
[  451.451216][ T9631]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  451.451233][ T9631]  alloc_pages_mpol+0x201/0x550
[  451.451248][ T9631]  alloc_pages_noprof+0x1a/0x160
[  451.451264][ T9631]  __vmalloc_node_range_noprof+0x833/0x1420
[  451.451279][ T9631]  __vmalloc_node_noprof+0xad/0xf0
[  451.451295][ T9631]  kcov_remote_start+0x518/0x6d0
[  451.451309][ T9631]  hub_event+0x198/0x4420
[  451.451323][ T9631]  process_one_work+0xac7/0x1b10
[  451.451343][ T9631]  worker_thread+0x5ef/0xe50
[  451.451359][ T9631]  kthread+0x373/0x450
[  451.451374][ T9631]  ret_from_fork+0x730/0xd60
[  451.451387][ T9631]  ret_from_fork_asm+0x1a/0x30
[  451.451401][ T9631] page last free pid 1 tgid 1 ts 17409959679 stack trace:
[  451.451411][ T9631]  free_pages_prepare+0x586/0xe00
[  451.451426][ T9631]  __free_contig_range_common+0x14f/0x250
[  451.451442][ T9631]  destroy_args+0xa8/0x7a0
[  451.451455][ T9631]  debug_vm_pgtable+0x1d69/0x3490
[  451.451468][ T9631]  do_one_initcall+0x11c/0x6f0
[  451.451480][ T9631]  kernel_init_freeable+0x6ea/0x7b0
[  451.451492][ T9631]  kernel_init+0x21/0x1e0
[  451.451509][ T9631]  ret_from_fork+0x730/0xd60
[  451.451521][ T9631]  ret_from_fork_asm+0x1a/0x30
[  455.072845][ T9653] PKCS7: Unknown OID: [4] (bad)
[  455.091288][ T9653] PKCS7: Only support pkcs7_signedData type
[  455.174664][ T9655] netlink: 3560 bytes leftover after parsing attributes in process `syz.2.1073'.
[  455.282720][ T9425] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  455.443450][ T9425] usb 5-1: Using ep0 maxpacket: 16
[  455.449576][ T9425] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  455.460454][ T9425] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  455.460502][ T9425] usb 5-1: config 0 has no interface number 0
[  455.460537][ T9425] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  455.460562][ T9425] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  455.500375][ T9425] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  455.500411][ T9425] usb 5-1: Product: syz
[  455.500451][ T9425] usb 5-1: SerialNumber: syz
[  455.520751][ T9425] usb 5-1: config 0 descriptor??
[  455.534936][ T9425] cm109 5-1:0.8: invalid payload size 0, expected 4
[  455.549835][ T9425] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input36
[  456.492841][ T5731] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  456.580771][    C1] cm109_urb_ctl_callback: 18 callbacks suppressed
[  456.580797][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  456.581345][    T9] usb 5-1: USB disconnect, device number 31
[  456.587421][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  456.587447][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  456.594628][    T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  456.644486][ T5731] usb 6-1: Using ep0 maxpacket: 16
[  456.645219][ T5731] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  456.647744][ T5731] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  456.647763][ T5731] usb 6-1: config 0 has no interface number 0
[  456.647791][ T5731] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  456.647812][ T5731] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  456.649516][ T5731] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  456.649536][ T5731] usb 6-1: Product: syz
[  456.649548][ T5731] usb 6-1: SerialNumber: syz
[  456.659497][ T5731] usb 6-1: config 0 descriptor??
[  456.669580][ T5731] cm109 6-1:0.8: invalid payload size 0, expected 4
[  456.680039][ T5731] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input37
[  457.024476][ T9670] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48400
[  457.033698][ T9670] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  457.033857][ T9670] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  457.034162][ T9670] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  457.034207][ T9670] page dumped because: unmovable page
[  457.034292][ T9670] page_owner tracks the page as allocated
[  457.034299][ T9670] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x28c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS), pid 10, tgid 10 (kworker/0:1), ts 79661551841
[  457.034329][ T9670]  post_alloc_hook+0xfd/0x120
[  457.034359][ T9670]  get_page_from_freelist+0x110d/0x35d0
[  457.034472][ T9670]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  457.034501][ T9670]  alloc_pages_mpol+0x201/0x550
[  457.034614][ T9670]  alloc_pages_noprof+0x1a/0x160
[  457.034645][ T9670]  __vmalloc_node_range_noprof+0x833/0x1420
[  457.034675][ T9670]  __vmalloc_node_noprof+0xad/0xf0
[  457.034739][ T9670]  kcov_remote_start+0x518/0x6d0
[  457.034770][ T9670]  hub_event+0x198/0x4420
[  457.034801][ T9670]  process_one_work+0xac7/0x1b10
[  457.034833][ T9670]  worker_thread+0x5ef/0xe50
[  457.034900][ T9670]  kthread+0x373/0x450
[  457.034929][ T9670]  ret_from_fork+0x730/0xd60
[  457.034958][ T9670]  ret_from_fork_asm+0x1a/0x30
[  457.035013][ T9670] page last free pid 1 tgid 1 ts 17409959679 stack trace:
[  457.035092][ T9670]  free_pages_prepare+0x586/0xe00
[  457.035121][ T9670]  __free_contig_range_common+0x14f/0x250
[  457.035150][ T9670]  destroy_args+0xa8/0x7a0
[  457.035214][ T9670]  debug_vm_pgtable+0x1d69/0x3490
[  457.035247][ T9670]  do_one_initcall+0x11c/0x6f0
[  457.035378][ T9670]  kernel_init_freeable+0x6ea/0x7b0
[  457.035409][ T9670]  kernel_init+0x21/0x1e0
[  457.035441][ T9670]  ret_from_fork+0x730/0xd60
[  457.035530][ T9670]  ret_from_fork_asm+0x1a/0x30
[  457.537411][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  457.537649][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  457.537891][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  457.538102][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  457.538318][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  457.538551][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  457.538770][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  457.538991][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  457.647556][    C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  457.658363][    T9] usb 6-1: USB disconnect, device number 2
[  457.850461][    T9] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  458.864833][ T9680] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  458.992904][ T5605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  459.007611][ T5605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  459.019727][ T5605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  459.029286][ T5605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  459.039787][ T5605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  460.471601][ T9698] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  461.040272][ T9700] PKCS7: Unknown OID: [4] (bad)
[  461.040303][ T9700] PKCS7: Only support pkcs7_signedData type
[  461.102746][ T5605] Bluetooth: hci6: command tx timeout
[  461.820105][ T9714] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48400
[  461.820230][ T9714] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  461.820418][ T9714] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  461.820609][ T9714] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  461.820625][ T9714] page dumped because: unmovable page
[  461.820765][ T9714] page_owner tracks the page as allocated
[  461.820977][ T9714] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x28c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS), pid 10, tgid 10 (kworker/0:1), ts 79661551841
[  461.821132][ T9714]  post_alloc_hook+0xfd/0x120
[  461.821330][ T9714]  get_page_from_freelist+0x110d/0x35d0
[  461.821367][ T9714]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  461.821499][ T9714]  alloc_pages_mpol+0x201/0x550
[  461.821529][ T9714]  alloc_pages_noprof+0x1a/0x160
[  461.821563][ T9714]  __vmalloc_node_range_noprof+0x833/0x1420
[  461.821593][ T9714]  __vmalloc_node_noprof+0xad/0xf0
[  461.821623][ T9714]  kcov_remote_start+0x518/0x6d0
[  461.821652][ T9714]  hub_event+0x198/0x4420
[  461.821683][ T9714]  process_one_work+0xac7/0x1b10
[  461.821716][ T9714]  worker_thread+0x5ef/0xe50
[  461.821750][ T9714]  kthread+0x373/0x450
[  461.821861][ T9714]  ret_from_fork+0x730/0xd60
[  461.821890][ T9714]  ret_from_fork_asm+0x1a/0x30
[  461.821925][ T9714] page last free pid 1 tgid 1 ts 17409959679 stack trace:
[  461.821951][ T9714]  free_pages_prepare+0x586/0xe00
[  461.821984][ T9714]  __free_contig_range_common+0x14f/0x250
[  461.822056][ T9714]  destroy_args+0xa8/0x7a0
[  461.822085][ T9714]  debug_vm_pgtable+0x1d69/0x3490
[  461.822114][ T9714]  do_one_initcall+0x11c/0x6f0
[  461.822144][ T9714]  kernel_init_freeable+0x6ea/0x7b0
[  461.822175][ T9714]  kernel_init+0x21/0x1e0
[  461.822207][ T9714]  ret_from_fork+0x730/0xd60
[  461.822236][ T9714]  ret_from_fork_asm+0x1a/0x30
[  463.219033][ T5605] Bluetooth: hci6: command tx timeout
[  463.948631][ T9737] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  463.959307][ T9684] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.968142][ T9684] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.975546][ T9684] bridge_slave_0: entered allmulticast mode
[  463.984639][ T9684] bridge_slave_0: entered promiscuous mode
[  463.995666][ T9684] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.003303][ T9684] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.010537][ T9684] bridge_slave_1: entered allmulticast mode
[  464.021274][ T9684] bridge_slave_1: entered promiscuous mode
[  464.906067][ T9684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  464.921612][ T9684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.034268][ T9684] team0: Port device team_slave_0 added
[  465.042861][ T9684] team0: Port device team_slave_1 added
[  465.075310][ T9684] batman_adv: batadv0: Adding interface: batadv_slave_0
[  465.082369][ T9684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  465.103660][ T9741] binder: 9740:9741 ioctl c0306201 200000000040 returned -22
[  465.118371][ T9684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  465.135481][ T9684] batman_adv: batadv0: Adding interface: batadv_slave_1
[  465.142539][ T9684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  465.156422][ T9684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.252960][ T5605] Bluetooth: hci6: command tx timeout
[  465.380855][ T9684] hsr_slave_0: entered promiscuous mode
[  465.386698][ T9684] hsr_slave_1: entered promiscuous mode
[  465.387169][ T9684] debugfs: 'hsr0' already exists in 'hsr'
[  465.387184][ T9684] Cannot create hsr debugfs directory
[  466.292940][ T5724] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  466.452942][ T5724] usb 6-1: Using ep0 maxpacket: 16
[  466.455010][ T5724] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  466.507372][ T5724] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  466.507408][ T5724] usb 6-1: config 0 has no interface number 0
[  466.507622][ T5724] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  466.507657][ T5724] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  466.618007][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  466.618045][ T5724] usb 6-1: Product: syz
[  466.618070][ T5724] usb 6-1: SerialNumber: syz
[  466.627708][ T5724] usb 6-1: config 0 descriptor??
[  466.643093][ T5724] cm109 6-1:0.8: invalid payload size 0, expected 4
[  466.658307][ T5724] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input38
[  467.332990][ T5605] Bluetooth: hci6: command tx timeout
[  467.386094][  T983] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  467.864779][    C1] cm109_urb_ctl_callback: 257 callbacks suppressed
[  467.864807][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  467.865069][    T9] usb 6-1: USB disconnect, device number 3
[  467.871796][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  467.871820][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  467.878541][    T9] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  467.895340][  T983] usb 2-1: Using ep0 maxpacket: 32
[  467.896790][  T983] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  467.907443][  T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.907465][  T983] usb 2-1: Product: syz
[  467.907477][  T983] usb 2-1: Manufacturer: syz
[  467.907490][  T983] usb 2-1: SerialNumber: syz
[  467.914630][  T983] usb 2-1: config 0 descriptor??
[  467.927875][  T983] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  468.564584][ T9767] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  469.076430][  T983] gspca_ov534_9: reg_w failed -110
[  469.346669][ T9684] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  469.359885][ T9684] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  469.362338][ T9684] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  469.372514][ T9684] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  469.373633][ T9684] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  469.382534][ T9684] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  469.390701][ T9684] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  469.408276][ T9684] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  469.502892][  T983] gspca_ov534_9: Unknown sensor 0000
[  469.503656][  T983] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[  469.641704][ T9684] 8021q: adding VLAN 0 to HW filter on device bond0
[  469.663541][ T9776] netlink: 'syz.5.1104': attribute type 19 has an invalid length.
[  469.677224][ T9684] 8021q: adding VLAN 0 to HW filter on device team0
[  469.701037][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.701126][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  469.719003][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.719106][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  470.727697][ T9421] usb 2-1: USB disconnect, device number 24
[  470.770534][   T31] kauditd_printk_skb: 3 callbacks suppressed
[  470.770595][   T31] audit: type=1400 audit(1700006710.230:677): avc:  denied  { listen } for  pid=9785 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  472.892452][   T31] audit: type=1400 audit(1700006712.350:678): avc:  denied  { write } for  pid=9820 comm="syz.2.1117" name="usb_gadget" dev="configfs" ino=2936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  472.929972][   T31] audit: type=1400 audit(1700006712.390:679): avc:  denied  { write } for  pid=9820 comm="syz.2.1117" name="functions" dev="configfs" ino=27452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  472.959212][   T31] audit: type=1400 audit(1700006712.420:680): avc:  denied  { write } for  pid=9820 comm="syz.2.1117" name="configs" dev="configfs" ino=27453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  472.985061][   T31] audit: type=1400 audit(1700006712.450:681): avc:  denied  { write } for  pid=9820 comm="syz.2.1117" name="c.1" dev="configfs" ino=27459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  473.014642][ T9684] 8021q: adding VLAN 0 to HW filter on device batadv0
[  473.026122][   T31] audit: type=1400 audit(1700006712.490:682): avc:  denied  { create } for  pid=9820 comm="syz.2.1117" name="uac1.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[  473.033782][   T31] audit: type=1400 audit(1700006712.490:683): avc:  denied  { accept } for  pid=9828 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  473.034311][ T9830] siw: device registration error -23
[  473.068581][   T31] audit: type=1400 audit(1700006712.520:684): avc:  denied  { write } for  pid=9820 comm="syz.2.1117" name="c.1" dev="configfs" ino=27459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  473.282792][    T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  473.523086][    T9] usb 3-1: Using ep0 maxpacket: 32
[  473.530658][    T9] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  473.563975][    T9] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  473.564015][    T9] usb 3-1: config 0 has no interface number 0
[  473.595886][    T9] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  473.595939][    T9] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  473.595961][    T9] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  473.700748][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.700794][    T9] usb 3-1: Product: syz
[  473.700818][    T9] usb 3-1: Manufacturer: syz
[  473.700833][    T9] usb 3-1: SerialNumber: syz
[  474.515865][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1120'.
[  474.523446][    T9] usb 3-1: config 0 descriptor??
[  474.544915][ T9831] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  474.778559][    T9] usb-storage 3-1:0.20: USB Mass Storage device detected
[  474.898493][    T9] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  474.980637][    T9] scsi host1: usb-storage 3-1:0.20
[  475.155469][    T9] usb 3-1: USB disconnect, device number 22
[  476.202251][ T9849] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  476.207250][ T9684] veth0_vlan: entered promiscuous mode
[  476.211281][ T9684] veth1_vlan: entered promiscuous mode
[  476.350399][ T9684] veth0_macvtap: entered promiscuous mode
[  476.366077][ T9684] veth1_macvtap: entered promiscuous mode
[  476.417449][ T9684] batman_adv: batadv0: Interface activated: batadv_slave_0
[  476.428943][ T9684] batman_adv: batadv0: Interface activated: batadv_slave_1
[  476.518113][   T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  476.520953][  T148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.520988][  T148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.521014][  T148] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  477.186466][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.186500][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.328556][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.328589][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.172193][ T9889] netlink: 'syz.4.1135': attribute type 21 has an invalid length.
[  481.172279][ T9889] netlink: 'syz.4.1135': attribute type 6 has an invalid length.
[  481.172306][ T9889] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1135'.
[  481.216010][ T9889] ipvlan3: entered promiscuous mode
[  481.229155][ T9889] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  481.229637][ T9889] team0: Device ipvlan3 is already an upper device of the team interface
[  481.591778][ T9890] macvlan2: entered promiscuous mode
[  481.591821][ T9890] bridge0: entered promiscuous mode
[  481.687453][    T9] hid_parser_main: 28 callbacks suppressed
[  481.687510][    T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  481.718527][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1133'.
[  481.789210][    T9] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  481.938406][ T9902] siw: device registration error -23
[  481.941681][ T9902] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1137'.
[  481.975994][ T9907] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1
[  481.976024][ T9907] Unsupported pkey algo: 106
[  482.025778][ T9908] siw: device registration error -23
[  482.125825][ T9911] FAULT_INJECTION: forcing a failure.
[  482.125825][ T9911] name failslab, interval 1, probability 0, space 0, times 0
[  482.141531][ T9911] CPU: 1 UID: 0 PID: 9911 Comm: syz.1.1134 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  482.141562][ T9911] Tainted: [L]=SOFTLOCKUP
[  482.141569][ T9911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  482.141580][ T9911] Call Trace:
[  482.141586][ T9911]  <TASK>
[  482.141593][ T9911]  dump_stack_lvl+0x100/0x190
[  482.141631][ T9911]  should_fail_ex.cold+0x5/0xa
[  482.141657][ T9911]  should_failslab+0xc2/0x120
[  482.141680][ T9911]  __kmalloc_noprof+0xfc/0x840
[  482.141699][ T9911]  ? tomoyo_encode2+0xfb/0x3c0
[  482.141723][ T9911]  tomoyo_encode2+0xfb/0x3c0
[  482.141745][ T9911]  tomoyo_encode+0x29/0x50
[  482.141763][ T9911]  tomoyo_mount_acl+0x14c/0x8b0
[  482.141793][ T9911]  ? is_bpf_text_address+0x8a/0x1a0
[  482.141816][ T9911]  ? is_bpf_text_address+0x8a/0x1a0
[  482.141841][ T9911]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  482.141870][ T9911]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  482.141898][ T9911]  ? kernel_text_address+0x8d/0x100
[  482.141927][ T9911]  ? unwind_get_return_address+0x59/0xa0
[  482.141953][ T9911]  ? arch_stack_walk+0xa6/0xf0
[  482.141980][ T9911]  ? __lock_acquire+0x4c5/0x1ec0
[  482.142010][ T9911]  ? tomoyo_mount_permission+0x1f6/0x460
[  482.142042][ T9911]  ? tomoyo_domain+0xb2/0x150
[  482.142063][ T9911]  ? tomoyo_profile+0x47/0x60
[  482.142087][ T9911]  tomoyo_mount_permission+0x214/0x460
[  482.142114][ T9911]  ? tomoyo_mount_permission+0x1f6/0x460
[  482.142144][ T9911]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  482.142188][ T9911]  security_sb_mount+0xdd/0x270
[  482.142216][ T9911]  path_mount+0x158/0x24c0
[  482.142246][ T9911]  ? __pfx_path_mount+0x10/0x10
[  482.142270][ T9911]  ? lockdep_hardirqs_on+0x7d/0x110
[  482.142295][ T9911]  ? putname+0xb1/0x110
[  482.142316][ T9911]  ? kmem_cache_free+0x127/0x6c0
[  482.142351][ T9911]  ? __x64_sys_mount+0x293/0x310
[  482.142375][ T9911]  __x64_sys_mount+0x293/0x310
[  482.142402][ T9911]  ? __pfx___x64_sys_mount+0x10/0x10
[  482.142434][ T9911]  do_syscall_64+0x123/0x790
[  482.142458][ T9911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.142477][ T9911] RIP: 0033:0x7fdb37b9e159
[  482.142494][ T9911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  482.142511][ T9911] RSP: 002b:00007fdb38b23028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  482.142531][ T9911] RAX: ffffffffffffffda RBX: 00007fdb37e25fa0 RCX: 00007fdb37b9e159
[  482.142542][ T9911] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 0000000000000000
[  482.142553][ T9911] RBP: 00007fdb38b23090 R08: 00002000000000c0 R09: 0000000000000000
[  482.142564][ T9911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  482.142574][ T9911] R13: 00007fdb37e26038 R14: 00007fdb37e25fa0 R15: 00007ffe59f32e28
[  482.142604][ T9911]  </TASK>
[  482.602777][ T9424] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  483.642821][ T9424] usb 7-1: Using ep0 maxpacket: 32
[  483.647248][ T9424] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  483.648381][ T9424] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  483.655091][ T9424] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.655112][ T9424] usb 7-1: Product: syz
[  483.655124][ T9424] usb 7-1: Manufacturer: syz
[  483.655137][ T9424] usb 7-1: SerialNumber: syz
[  483.661200][ T9424] usb 7-1: config 0 descriptor??
[  483.669072][ T9424] gs_usb 7-1:0.0: Required endpoints not found
[  483.865911][ T9895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.866251][ T9895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.129979][    T9] usb 7-1: USB disconnect, device number 2
[  486.740122][ T9951] syzkaller0: entered promiscuous mode
[  486.740161][ T9951] syzkaller0: entered allmulticast mode
[  486.928981][ T9955] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  487.915118][ T9968] overlayfs: missing 'lowerdir'
[  488.360267][   T31] audit: type=1400 audit(1700006727.820:685): avc:  denied  { mounton } for  pid=9982 comm="syz.4.1149" path="/241/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  490.310627][T10006] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  491.745307][   T31] audit: type=1400 audit(1700006730.960:686): avc:  denied  { connect } for  pid=10021 comm="syz.1.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  494.020287][T10042] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  495.738734][T10053] ceph: No mds server is up or the cluster is laggy
[  495.740227][ T9421] libceph: connect (1)[c::]:6789 error -101
[  495.740373][ T9421] libceph: mon0 (1)[c::]:6789 connect error
[  496.135540][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  496.135615][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  496.664186][T10059] siw: device registration error -23
[  499.177107][T10081] FAULT_INJECTION: forcing a failure.
[  499.177107][T10081] name failslab, interval 1, probability 0, space 0, times 0
[  499.177153][T10081] CPU: 1 UID: 0 PID: 10081 Comm: syz.2.1186 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  499.177178][T10081] Tainted: [L]=SOFTLOCKUP
[  499.177184][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  499.177193][T10081] Call Trace:
[  499.177198][T10081]  <TASK>
[  499.177204][T10081]  dump_stack_lvl+0x100/0x190
[  499.177229][T10081]  should_fail_ex.cold+0x5/0xa
[  499.177252][T10081]  should_failslab+0xc2/0x120
[  499.177272][T10081]  kmem_cache_alloc_noprof+0x92/0x6a0
[  499.177289][T10081]  ? __skb_ext_alloc+0x1a/0x80
[  499.177316][T10081]  __skb_ext_alloc+0x1a/0x80
[  499.177334][T10081]  skb_ext_add+0x40b/0x810
[  499.177353][T10081]  ? preempt_schedule_thunk+0x16/0x40
[  499.177384][T10081]  j1939_sk_sendmsg+0x6da/0x1440
[  499.177413][T10081]  ? __pfx_j1939_sk_sendmsg+0x10/0x10
[  499.177431][T10081]  ? selinux_socket_sendmsg+0x198/0x2f0
[  499.177459][T10081]  ____sys_sendmsg+0xa4d/0xbe0
[  499.177477][T10081]  ? __pfx_j1939_sk_sendmsg+0x10/0x10
[  499.177496][T10081]  ? __pfx_____sys_sendmsg+0x10/0x10
[  499.177518][T10081]  ? _kstrtoull+0x144/0x200
[  499.177536][T10081]  ? __pfx__kstrtoull+0x10/0x10
[  499.177557][T10081]  ___sys_sendmsg+0x190/0x1e0
[  499.177580][T10081]  ? __pfx____sys_sendmsg+0x10/0x10
[  499.177609][T10081]  ? __fget_files+0x34/0x3d0
[  499.177643][T10081]  __sys_sendmmsg+0x20c/0x440
[  499.177663][T10081]  ? __pfx___sys_sendmmsg+0x10/0x10
[  499.177678][T10081]  ? ksys_write+0x190/0x250
[  499.177711][T10081]  ? xfd_validate_state+0x129/0x190
[  499.177734][T10081]  __x64_sys_sendmmsg+0x9c/0x100
[  499.177750][T10081]  ? lockdep_hardirqs_on+0x7d/0x110
[  499.177768][T10081]  do_syscall_64+0x123/0x790
[  499.177788][T10081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.177804][T10081] RIP: 0033:0x7fd597d9e159
[  499.177821][T10081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  499.177836][T10081] RSP: 002b:00007fd598c35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  499.177851][T10081] RAX: ffffffffffffffda RBX: 00007fd598026180 RCX: 00007fd597d9e159
[  499.177862][T10081] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000008
[  499.177872][T10081] RBP: 00007fd598c35090 R08: 0000000000000000 R09: 0000000000000000
[  499.177881][T10081] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001
[  499.177890][T10081] R13: 00007fd598026218 R14: 00007fd598026180 R15: 00007ffee17fe948
[  499.177912][T10081]  </TASK>
[  502.462869][ T9424] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  502.472668][    T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  502.623258][ T9424] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00
[  502.641336][ T9424] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  502.652647][    T9] usb 7-1: Using ep0 maxpacket: 32
[  502.658811][ T9424] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  502.670324][ T9424] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  502.670361][ T9424] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  502.670398][ T9424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.711871][    T9] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  502.733580][    T9] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  502.733620][    T9] usb 7-1: config 0 has no interface number 0
[  502.803713][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.803758][    T9] usb 7-1: Product: syz
[  502.803785][    T9] usb 7-1: Manufacturer: syz
[  502.803801][    T9] usb 7-1: SerialNumber: syz
[  502.897960][ T9424] cxacru 3-1:1.0: submit of write urb for cm 0x90 failed (-90)
[  502.916278][ T9424] cxacru 3-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  502.927715][ T9424] cxacru 3-1:1.0: probe with driver cxacru failed with error -22
[  503.245319][    T9] usb 7-1: config 0 descriptor??
[  503.478853][    T9] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  503.737793][    T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  503.751029][    T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  504.823569][    C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  504.831504][ T9424] usb 7-1: USB disconnect, device number 3
[  504.851953][ T9424] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  504.868333][ T9424] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  504.884654][ T9424] quatech2 7-1:0.51: device disconnected
[  506.586929][   T10] usb 3-1: USB disconnect, device number 23
[  507.386093][T10129] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  508.179867][T10133] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.180664][T10133] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.212682][ T9421] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  508.922408][T10133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  508.926356][T10133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  508.962696][ T9421] usb 5-1: Using ep0 maxpacket: 32
[  508.968787][ T9421] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  508.985262][ T9421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.993442][ T9421] usb 5-1: Product: syz
[  508.993462][ T9421] usb 5-1: Manufacturer: syz
[  508.993476][ T9421] usb 5-1: SerialNumber: syz
[  509.009810][ T9421] usb 5-1: config 0 descriptor??
[  509.018457][ T9421] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  509.232790][ T6227] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  509.241937][ T6227] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  509.251270][ T6227] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  509.260369][ T6227] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.233771][ T9421] gspca_ov534_9: reg_w failed -110
[  510.662675][ T9421] gspca_ov534_9: Unknown sensor 0000
[  510.662761][ T9421] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  510.827429][T10156] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48400
[  510.827532][T10156] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  510.827763][T10156] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  510.828078][T10156] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  510.828166][T10156] page dumped because: unmovable page
[  510.828255][T10156] page_owner tracks the page as allocated
[  510.828753][T10156] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x28c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS), pid 10, tgid 10 (kworker/0:1), ts 79661551841
[  510.828792][T10156]  post_alloc_hook+0xfd/0x120
[  510.828837][T10156]  get_page_from_freelist+0x110d/0x35d0
[  510.828933][T10156]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  510.829009][T10156]  alloc_pages_mpol+0x201/0x550
[  510.829039][T10156]  alloc_pages_noprof+0x1a/0x160
[  510.829072][T10156]  __vmalloc_node_range_noprof+0x833/0x1420
[  510.829104][T10156]  __vmalloc_node_noprof+0xad/0xf0
[  510.829136][T10156]  kcov_remote_start+0x518/0x6d0
[  510.829169][T10156]  hub_event+0x198/0x4420
[  510.829201][T10156]  process_one_work+0xac7/0x1b10
[  510.829236][T10156]  worker_thread+0x5ef/0xe50
[  510.829269][T10156]  kthread+0x373/0x450
[  510.829300][T10156]  ret_from_fork+0x730/0xd60
[  510.829336][T10156]  ret_from_fork_asm+0x1a/0x30
[  510.829368][T10156] page last free pid 1 tgid 1 ts 17409959679 stack trace:
[  510.829459][T10156]  free_pages_prepare+0x586/0xe00
[  510.829491][T10156]  __free_contig_range_common+0x14f/0x250
[  510.829524][T10156]  destroy_args+0xa8/0x7a0
[  510.829553][T10156]  debug_vm_pgtable+0x1d69/0x3490
[  510.829854][T10156]  do_one_initcall+0x11c/0x6f0
[  510.829927][T10156]  kernel_init_freeable+0x6ea/0x7b0
[  510.829957][T10156]  kernel_init+0x21/0x1e0
[  510.829991][T10156]  ret_from_fork+0x730/0xd60
[  510.830021][T10156]  ret_from_fork_asm+0x1a/0x30
[  512.380262][ T5731] usb 5-1: USB disconnect, device number 32
[  513.473935][T10176] siw: device registration error -23
[  515.183599][T10181] FAULT_INJECTION: forcing a failure.
[  515.183599][T10181] name failslab, interval 1, probability 0, space 0, times 0
[  515.183737][T10181] CPU: 1 UID: 0 PID: 10181 Comm: syz.4.1217 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  515.183760][T10181] Tainted: [L]=SOFTLOCKUP
[  515.183766][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  515.183775][T10181] Call Trace:
[  515.183780][T10181]  <TASK>
[  515.183787][T10181]  dump_stack_lvl+0x100/0x190
[  515.183814][T10181]  should_fail_ex.cold+0x5/0xa
[  515.183836][T10181]  should_failslab+0xc2/0x120
[  515.183855][T10181]  kmem_cache_alloc_noprof+0x92/0x6a0
[  515.183871][T10181]  ? d_instantiate+0x8a/0xb0
[  515.183891][T10181]  ? alloc_empty_file+0x5b/0x1c0
[  515.183916][T10181]  alloc_empty_file+0x5b/0x1c0
[  515.183936][T10181]  alloc_file_pseudo+0x183/0x290
[  515.183958][T10181]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  515.183978][T10181]  ? alloc_fd+0x471/0x7a0
[  515.184000][T10181]  sock_alloc_file+0x50/0x210
[  515.184018][T10181]  __sys_socket+0x1c0/0x260
[  515.184039][T10181]  ? __pfx___sys_socket+0x10/0x10
[  515.184065][T10181]  __x64_sys_socket+0x72/0xb0
[  515.184085][T10181]  ? lockdep_hardirqs_on+0x7d/0x110
[  515.184103][T10181]  do_syscall_64+0x123/0x790
[  515.184124][T10181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.184141][T10181] RIP: 0033:0x7fcd2739f9c7
[  515.184154][T10181] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  515.184175][T10181] RSP: 002b:00007fcd255f4f38 EFLAGS: 00000293 ORIG_RAX: 0000000000000029
[  515.184191][T10181] RAX: ffffffffffffffda RBX: 00007fcd27625fa0 RCX: 00007fcd2739f9c7
[  515.184202][T10181] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  515.184211][T10181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  515.184221][T10181] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000000
[  515.184230][T10181] R13: 00007fcd27626038 R14: 0000200000000040 R15: 0000000000000000
[  515.184252][T10181]  </TASK>
[  515.608332][ T5613] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  515.620085][ T5613] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  515.629211][ T5613] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  515.639225][ T5613] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  515.651224][ T5613] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  516.074770][T10198] Can't find a SQUASHFS superblock on nullb0
[  516.733258][T10202] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  517.896251][ T5613] Bluetooth: hci7: command tx timeout
[  518.851771][   T10] hid-generic 0005:0009:0306.0006: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on syz0
[  519.025858][T10213] fido_id[10213]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  519.983345][ T5613] Bluetooth: hci7: command tx timeout
[  522.062725][ T5613] Bluetooth: hci7: command tx timeout
[  523.551576][T10192] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.553056][T10192] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.553180][T10192] bridge_slave_0: entered allmulticast mode
[  523.571064][T10192] bridge_slave_0: entered promiscuous mode
[  523.582532][T10192] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.586985][T10192] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.587529][T10192] bridge_slave_1: entered allmulticast mode
[  523.602847][T10192] bridge_slave_1: entered promiscuous mode
[  523.699535][T10192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.711646][T10192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.763737][T10192] team0: Port device team_slave_0 added
[  523.773362][T10192] team0: Port device team_slave_1 added
[  523.881377][ T9421] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  523.915762][T10192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.915791][T10192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.915828][T10192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.967313][T10192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.977362][T10192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.977424][T10192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  524.032698][ T9421] usb 7-1: Using ep0 maxpacket: 8
[  524.034474][ T9421] usb 7-1: unable to get BOS descriptor or descriptor too short
[  524.034509][ T9421] usb 7-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd
[  524.035402][ T9421] usb 7-1: config 2 has an invalid interface number: 232 but max is 0
[  524.035421][ T9421] usb 7-1: config 2 has no interface number 0
[  524.035449][ T9421] usb 7-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 3917, setting to 1024
[  524.035471][ T9421] usb 7-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024
[  524.035491][ T9421] usb 7-1: config 2 interface 232 has no altsetting 0
[  524.037289][ T9421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.037306][ T9421] usb 7-1: Product: syz
[  524.037319][ T9421] usb 7-1: Manufacturer: syz
[  524.037331][ T9421] usb 7-1: SerialNumber: syz
[  524.058248][T10242] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  524.132866][ T5613] Bluetooth: hci7: command tx timeout
[  524.725949][T10192] hsr_slave_0: entered promiscuous mode
[  524.727461][T10192] hsr_slave_1: entered promiscuous mode
[  524.728471][T10192] debugfs: 'hsr0' already exists in 'hsr'
[  524.728488][T10192] Cannot create hsr debugfs directory
[  524.729375][T10242] xt_hashlimit: max too large, truncated to 1048576
[  525.000309][ T9421] usb 7-1: USB disconnect, device number 4
[  525.032137][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.232/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  525.106161][T10258] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.106270][T10258] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.066308][T10258] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  526.097754][T10258] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  526.383657][ T7101] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  526.415796][ T7101] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  526.417081][ T7101] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  526.417129][ T7101] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  526.502897][ T9425] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  526.581616][T10192] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  526.605149][T10192] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  526.613278][T10192] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  526.653356][ T9425] usb 7-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  526.666415][ T9425] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  526.682356][ T9425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.682380][ T9425] usb 7-1: Product: syz
[  526.682396][ T9425] usb 7-1: Manufacturer: syz
[  526.682406][ T9425] usb 7-1: SerialNumber: syz
[  526.714364][T10192] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  526.724524][ T9425] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  526.731099][T10192] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  526.745425][T10192] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  526.756836][T10192] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  526.769928][T10192] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  526.964665][T10192] 8021q: adding VLAN 0 to HW filter on device bond0
[  526.997041][T10192] 8021q: adding VLAN 0 to HW filter on device team0
[  527.027720][ T6227] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.027813][ T6227] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.032334][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.032410][ T6227] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.113090][ T5731] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  527.264873][ T5731] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  527.265827][ T5731] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  527.265863][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.281341][ T5731] usb 3-1: config 0 descriptor??
[  527.425317][ T9425] gspca_mr97310a: reg read [21] error -110
[  527.425394][ T9425] mr97310a 7-1:1.0: probe with driver mr97310a failed with error -110
[  527.512687][T10279] macvlan2: left promiscuous mode
[  527.714624][ T5731] ath6kl: Unsupported hardware version: 0x0
[  527.728049][ T5731] ath6kl: Failed to init ath6kl core: -22
[  527.728462][ T5731] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22
[  527.952291][T10277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  527.965775][T10277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.979787][ T9423] usb 3-1: USB disconnect, device number 24
[  528.568873][T10192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.077897][   T31] audit: type=1400 audit(1700006768.540:687): avc:  denied  { mounton } for  pid=10317 comm="syz.4.1248" path="/265/dev/mtdblock0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  529.109399][T10192] veth0_vlan: entered promiscuous mode
[  529.128026][T10192] veth1_vlan: entered promiscuous mode
[  529.148580][T10321] XFS (mtdblock0): Invalid superblock magic number
[  529.213023][T10192] veth0_macvtap: entered promiscuous mode
[  529.220312][T10192] veth1_macvtap: entered promiscuous mode
[  529.252530][T10192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  529.273439][T10192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  529.332270][ T5731] usb 7-1: USB disconnect, device number 5
[  529.467111][   T82] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  529.467403][   T82] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  529.467607][   T82] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  529.514246][   T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.571997][T10330] FAULT_INJECTION: forcing a failure.
[  529.571997][T10330] name failslab, interval 1, probability 0, space 0, times 0
[  529.586106][T10330] CPU: 1 UID: 0 PID: 10330 Comm: syz.6.1249 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  529.586138][T10330] Tainted: [L]=SOFTLOCKUP
[  529.586145][T10330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  529.586156][T10330] Call Trace:
[  529.586170][T10330]  <TASK>
[  529.586178][T10330]  dump_stack_lvl+0x100/0x190
[  529.586214][T10330]  should_fail_ex.cold+0x5/0xa
[  529.586240][T10330]  should_failslab+0xc2/0x120
[  529.586260][T10330]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  529.586279][T10330]  ? __d_alloc+0x35/0xa50
[  529.586305][T10330]  __d_alloc+0x35/0xa50
[  529.586329][T10330]  d_alloc_pseudo+0x1c/0xc0
[  529.586346][T10330]  alloc_file_pseudo+0x118/0x290
[  529.586372][T10330]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  529.586397][T10330]  ? alloc_fd+0x471/0x7a0
[  529.586423][T10330]  sock_alloc_file+0x50/0x210
[  529.586445][T10330]  __sys_socket+0x1c0/0x260
[  529.586469][T10330]  ? __pfx___sys_socket+0x10/0x10
[  529.586501][T10330]  __x64_sys_socket+0x72/0xb0
[  529.586524][T10330]  ? lockdep_hardirqs_on+0x7d/0x110
[  529.586545][T10330]  do_syscall_64+0x123/0x790
[  529.586569][T10330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.586588][T10330] RIP: 0033:0x7fa17619f9c7
[  529.586604][T10330] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  529.586621][T10330] RSP: 002b:00007fa1743f4f38 EFLAGS: 00000293 ORIG_RAX: 0000000000000029
[  529.586639][T10330] RAX: ffffffffffffffda RBX: 00007fa176425fa0 RCX: 00007fa17619f9c7
[  529.586651][T10330] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  529.586661][T10330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  529.586671][T10330] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000006
[  529.586682][T10330] R13: 00007fa176426038 R14: 0000200000000040 R15: 0000200000000080
[  529.586707][T10330]  </TASK>
[  529.798736][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.798761][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.847477][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1253'.
[  529.978988][ T7098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.979020][ T7098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.274370][ T5605] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  530.284314][ T5605] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  530.296669][ T5605] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  530.299112][ T5605] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  530.299516][ T5605] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  530.453077][ T9420] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  530.623051][ T9420] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  530.624165][ T9420] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  530.624190][ T9420] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  530.625988][ T9420] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.626006][ T9420] usb 7-1: Product: syz
[  530.626019][ T9420] usb 7-1: Manufacturer: syz
[  530.626032][ T9420] usb 7-1: SerialNumber: syz
[  530.635322][ T9420] usb 7-1: config 0 descriptor??
[  530.643773][ T9420] streamzap 7-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200
[  530.894326][   T31] audit: type=1400 audit(1700006770.360:688): avc:  denied  { write } for  pid=10357 comm="syz.2.1259" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  530.918432][   T31] audit: type=1400 audit(1700006770.390:689): avc:  denied  { open } for  pid=10357 comm="syz.2.1259" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  530.929558][   T31] audit: type=1400 audit(1700006770.390:690): avc:  denied  { ioctl } for  pid=10357 comm="syz.2.1259" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  530.936328][T10360] 0x00000000000a-0x000000000309 : ""
[  532.376947][ T5613] Bluetooth: hci8: command tx timeout
[  532.486549][T10360] ftl_cs: FTL header corrupt!
[  533.248674][ T9423] usb 7-1: USB disconnect, device number 6
[  534.479344][ T5613] Bluetooth: hci8: command tx timeout
[  535.656375][T10391] fuse: Bad value for 'fd'
[  536.495458][   T31] audit: type=1400 audit(1700006775.960:691): avc:  denied  { bind } for  pid=10404 comm="syz.4.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  536.515897][T10405] FAULT_INJECTION: forcing a failure.
[  536.515897][T10405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  536.532809][ T5613] Bluetooth: hci8: command tx timeout
[  536.560328][T10405] CPU: 0 UID: 0 PID: 10405 Comm: syz.4.1270 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  536.560361][T10405] Tainted: [L]=SOFTLOCKUP
[  536.560368][T10405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  536.560379][T10405] Call Trace:
[  536.560386][T10405]  <TASK>
[  536.560394][T10405]  dump_stack_lvl+0x100/0x190
[  536.560427][T10405]  should_fail_ex.cold+0x5/0xa
[  536.560453][T10405]  _copy_from_user+0x2e/0xd0
[  536.560490][T10405]  kstrtouint_from_user+0xd6/0x1d0
[  536.560512][T10405]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  536.560540][T10405]  ? lock_acquire+0x1d1/0x380
[  536.560566][T10405]  proc_fail_nth_write+0x83/0x220
[  536.560589][T10405]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  536.560618][T10405]  vfs_write+0x2aa/0x1050
[  536.560637][T10405]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  536.560658][T10405]  ? lock_acquire+0x1d1/0x380
[  536.560676][T10405]  ? __fget_files+0x34/0x3d0
[  536.560699][T10405]  ? __pfx_vfs_write+0x10/0x10
[  536.560714][T10405]  ? find_held_lock+0x2b/0x80
[  536.560740][T10405]  ? __fget_files+0x215/0x3d0
[  536.560766][T10405]  ? __fget_files+0x21f/0x3d0
[  536.560795][T10405]  ksys_write+0x12a/0x250
[  536.560813][T10405]  ? __pfx_ksys_write+0x10/0x10
[  536.560838][T10405]  do_syscall_64+0x123/0x790
[  536.560863][T10405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.560882][T10405] RIP: 0033:0x7fcd2735e98e
[  536.560897][T10405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  536.560914][T10405] RSP: 002b:00007fcd255f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  536.560933][T10405] RAX: ffffffffffffffda RBX: 00007fcd255f66c0 RCX: 00007fcd2735e98e
[  536.560945][T10405] RDX: 0000000000000001 RSI: 00007fcd255f60a0 RDI: 0000000000000003
[  536.560955][T10405] RBP: 00007fcd255f6090 R08: 0000000000000000 R09: 0000000000000000
[  536.560966][T10405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  536.560977][T10405] R13: 00007fcd27626038 R14: 00007fcd27625fa0 R15: 00007ffeb99e9fb8
[  536.561003][T10405]  </TASK>
[  536.700001][T10346] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.706136][T10346] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.706260][T10346] bridge_slave_0: entered allmulticast mode
[  536.710281][T10346] bridge_slave_0: entered promiscuous mode
[  536.724328][T10346] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.724396][T10346] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.724510][T10346] bridge_slave_1: entered allmulticast mode
[  536.734045][T10346] bridge_slave_1: entered promiscuous mode
[  537.002373][T10410] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  537.371303][T10346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  537.439016][T10346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  537.550512][T10346] team0: Port device team_slave_0 added
[  537.567127][T10346] team0: Port device team_slave_1 added
[  538.218093][T10420] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  538.603731][T10346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  538.603758][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  538.603797][T10346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  538.642993][ T5613] Bluetooth: hci8: command tx timeout
[  538.742436][T10346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  538.742474][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  538.752323][T10346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  538.949540][T10346] hsr_slave_0: entered promiscuous mode
[  538.951897][T10346] hsr_slave_1: entered promiscuous mode
[  538.958829][T10346] debugfs: 'hsr0' already exists in 'hsr'
[  538.958847][T10346] Cannot create hsr debugfs directory
[  539.307267][T10429] batman_adv: batadv0: Adding interface: veth0
[  539.307298][T10429] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  539.307343][T10429] batman_adv: batadv0: Interface activated: veth0
[  540.832788][ T5731] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  541.002270][ T5731] usb 8-1: Using ep0 maxpacket: 32
[  541.008704][ T5731] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  541.499856][ T5731] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  541.499900][ T5731] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  541.499918][ T5731] usb 8-1: config 0 has no interface number 0
[  541.499945][ T5731] usb 8-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  541.499965][ T5731] usb 8-1: config 0 interface 1 has no altsetting 0
[  541.553074][ T5731] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.553117][ T5731] usb 8-1: Product: syz
[  541.553145][ T5731] usb 8-1: Manufacturer: syz
[  541.553158][ T5731] usb 8-1: SerialNumber: syz
[  541.579617][ T5731] usb 8-1: config 0 descriptor??
[  541.601129][ T5731] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  541.601178][ T5731] cx231xx 8-1:0.1: Not found matching IAD interface
[  541.696973][T10346] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  541.711670][T10346] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  541.713301][T10346] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  541.779645][T10346] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  541.780422][T10346] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  541.883230][T10437] xt_hashlimit: size too large, truncated to 1048576
[  541.897073][T10346] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  541.905052][T10346] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  541.954232][T10346] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  542.740566][ T9423] usb 8-1: USB disconnect, device number 2
[  542.919560][T10346] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.983733][T10346] 8021q: adding VLAN 0 to HW filter on device team0
[  543.013964][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.014052][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  543.033795][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.036011][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.677224][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1286'.
[  544.305135][T10478] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  545.838544][T10346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.266912][T10346] veth0_vlan: entered promiscuous mode
[  546.289712][T10346] veth1_vlan: entered promiscuous mode
[  546.340027][T10346] veth0_macvtap: entered promiscuous mode
[  546.352001][T10346] veth1_macvtap: entered promiscuous mode
[  546.377806][T10346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  546.400428][T10346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  546.423015][ T9424] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  546.432997][ T7101] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.442073][ T7101] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.454429][ T7101] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.463853][ T7101] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.593809][ T9424] usb 3-1: Using ep0 maxpacket: 32
[  546.602823][ T9424] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  546.614255][ T9424] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  546.623228][ T9424] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  546.623276][ T9424] usb 3-1: config 0 has no interface number 0
[  546.623319][ T9424] usb 3-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  546.623345][ T9424] usb 3-1: config 0 interface 1 has no altsetting 0
[  546.662413][ T9424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.662451][ T9424] usb 3-1: Product: syz
[  546.662492][ T9424] usb 3-1: Manufacturer: syz
[  546.662510][ T9424] usb 3-1: SerialNumber: syz
[  546.690888][ T9424] usb 3-1: config 0 descriptor??
[  546.699908][ T9424] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  546.709111][ T9424] cx231xx 3-1:0.1: Not found matching IAD interface
[  546.834331][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.834369][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.811682][ T6233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.811720][ T6233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.845080][ T9420] usb 3-1: USB disconnect, device number 25
[  549.301140][T10512] siw: device registration error -23
[  551.578589][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1293'.
[  551.598964][T10525] xfrm1: entered promiscuous mode
[  551.612238][T10525] xfrm1: entered allmulticast mode
[  551.619152][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1293'.
[  551.661913][ T9422] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  551.681907][ T9422] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  551.725205][   T31] audit: type=1400 audit(1700006791.190:692): avc:  denied  { create } for  pid=10524 comm="syz.6.1293" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  551.869993][   T31] audit: type=1400 audit(1700006791.330:693): avc:  denied  { mounton } for  pid=10524 comm="syz.6.1293" path="/34/file0" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  551.906342][T10530] 8021q: adding VLAN 0 to HW filter on device bond0
[  551.916487][T10530] 8021q: adding VLAN 0 to HW filter on device team0
[  551.928296][T10530] 8021q: adding VLAN 0 to HW filter on device batadv0
[  551.967247][T10530] batman_adv: batadv0: Interface activated: batadv_slave_0
[  551.968830][T10530] batman_adv: batadv0: Interface activated: batadv_slave_1
[  551.973553][T10530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  551.973572][T10530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  551.977271][T10530] veth1_vlan: left promiscuous mode
[  551.978190][T10530] veth0_vlan: left promiscuous mode
[  551.981091][T10530] veth0_vlan: entered promiscuous mode
[  551.988825][T10530] veth1_vlan: entered promiscuous mode
[  551.997767][T10530] veth1_macvtap: left promiscuous mode
[  551.999689][T10530] veth0_macvtap: left promiscuous mode
[  552.000920][T10530] veth0_macvtap: entered promiscuous mode
[  552.003995][T10530] veth1_macvtap: entered promiscuous mode
[  552.013274][T10530] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  552.014251][T10530] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  552.015534][T10530] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  552.016577][T10530] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  552.028071][T10530] 8021q: adding VLAN 0 to HW filter on device eth0
[  552.033883][ T7098] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  552.033920][ T7098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  552.034010][ T7098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  552.034039][ T7098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  552.034065][ T7098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  552.060272][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.060349][ T7101] bridge0: port 1(bridge_slave_0) entered listening state
[  552.068657][ T7101] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.068738][ T7101] bridge0: port 2(bridge_slave_1) entered listening state
[  553.367571][T10542] FAULT_INJECTION: forcing a failure.
[  553.367571][T10542] name failslab, interval 1, probability 0, space 0, times 0
[  553.367629][T10542] CPU: 1 UID: 0 PID: 10542 Comm: syz.2.1303 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  553.367655][T10542] Tainted: [L]=SOFTLOCKUP
[  553.367663][T10542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  553.367673][T10542] Call Trace:
[  553.367679][T10542]  <TASK>
[  553.367685][T10542]  dump_stack_lvl+0x100/0x190
[  553.367714][T10542]  should_fail_ex.cold+0x5/0xa
[  553.367739][T10542]  should_failslab+0xc2/0x120
[  553.367767][T10542]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  553.367785][T10542]  ? kasprintf+0xc7/0x100
[  553.367802][T10542]  ? debugfs_create_symlink+0x29/0x1f0
[  553.367831][T10542]  kstrdup+0x51/0xe0
[  553.367855][T10542]  debugfs_create_symlink+0x29/0x1f0
[  553.367878][T10542]  drm_debugfs_clients_add+0x199/0x210
[  553.367901][T10542]  drm_file_alloc+0x5c6/0xb40
[  553.367924][T10542]  drm_open_helper+0x1fc/0x540
[  553.367946][T10542]  drm_open+0x1a0/0x3e0
[  553.367965][T10542]  ? __pfx_drm_open+0x10/0x10
[  553.367984][T10542]  drm_stub_open+0x20f/0x380
[  553.368003][T10542]  ? __pfx_drm_stub_open+0x10/0x10
[  553.368022][T10542]  chrdev_open+0x234/0x6a0
[  553.368042][T10542]  ? __pfx_chrdev_open+0x10/0x10
[  553.368062][T10542]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  553.368089][T10542]  do_dentry_open+0x6ab/0x14d0
[  553.368106][T10542]  ? __pfx_chrdev_open+0x10/0x10
[  553.368129][T10542]  vfs_open+0x82/0x3f0
[  553.368151][T10542]  path_openat+0x19fa/0x2440
[  553.368174][T10542]  ? __pfx_path_openat+0x10/0x10
[  553.368199][T10542]  do_file_open+0x20e/0x430
[  553.368221][T10542]  ? __pfx_do_file_open+0x10/0x10
[  553.368254][T10542]  ? _raw_spin_unlock+0x28/0x50
[  553.368271][T10542]  ? alloc_fd+0x471/0x7a0
[  553.368297][T10542]  do_sys_openat2+0x10f/0x1e0
[  553.368318][T10542]  ? __pfx_do_sys_openat2+0x10/0x10
[  553.368337][T10542]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  553.368363][T10542]  __x64_sys_openat+0x12d/0x210
[  553.368385][T10542]  ? __pfx___x64_sys_openat+0x10/0x10
[  553.368415][T10542]  do_syscall_64+0x123/0x790
[  553.368438][T10542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.368455][T10542] RIP: 0033:0x7fd597d5e98e
[  553.368470][T10542] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  553.368486][T10542] RSP: 002b:00007fd598c76b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  553.368503][T10542] RAX: ffffffffffffffda RBX: 00007fd598c776c0 RCX: 00007fd597d5e98e
[  553.368514][T10542] RDX: 0000000000000000 RSI: 00007fd598c76c00 RDI: ffffffffffffff9c
[  553.368525][T10542] RBP: 00007fd598c76c00 R08: 0000000000000000 R09: 0000000000000000
[  553.368535][T10542] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  553.368546][T10542] R13: 00007fd598026038 R14: 00007fd598025fa0 R15: 00007ffee17fe948
[  553.368567][T10542]  </TASK>
[  553.377723][T10542] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[  553.404351][   T31] audit: type=1400 audit(1700006792.860:694): avc:  denied  { ioctl } for  pid=10541 comm="syz.2.1303" path="socket:[33467]" dev="sockfs" ino=33467 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  553.647787][T10547] nvme_fabrics: unknown parameter or missing value 'tranuport=loop' in ctrl creation request
[  553.785064][   T31] audit: type=1400 audit(1700006793.250:695): avc:  denied  { map } for  pid=10550 comm="syz.6.1308" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  553.810993][   T31] audit: type=1400 audit(1700006793.250:696): avc:  denied  { execute } for  pid=10550 comm="syz.6.1308" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  553.917765][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'.
[  554.476042][T10567] siw: device registration error -23
[  557.532855][ T9420] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  557.581778][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  557.589444][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  557.672736][ T5731] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  557.683772][ T9420] usb 7-1: not running at top speed; connect to a high speed hub
[  557.683812][ T9420] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  557.684779][ T9420] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64
[  557.684805][ T9420] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64
[  557.684826][ T9420] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  557.684847][ T9420] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  557.684869][ T9420] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64
[  557.684890][ T9420] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  557.686640][ T9420] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.686659][ T9420] usb 7-1: Product: syz
[  557.686672][ T9420] usb 7-1: Manufacturer: syz
[  557.686685][ T9420] usb 7-1: SerialNumber: syz
[  557.691448][T10600] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  557.691527][T10600] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  557.691644][T10600] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  557.691757][T10600] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  557.691830][T10600] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  557.696434][ T9420] usb 7-1: USB2VGA dongle found at address 7
[  557.702884][ T9420] usb 7-1: Allocated 8 output buffers
[  557.702903][ T9420] usb 7-1: Not attached to USB 2.0 hub, deferring init
[  557.830807][ T5731] usb 3-1: Using ep0 maxpacket: 16
[  557.843582][ T5731] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  557.858503][ T5731] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  557.858537][ T5731] usb 3-1: config 0 has no interface number 0
[  557.858569][ T5731] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  557.858590][ T5731] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  557.859948][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  557.859966][ T5731] usb 3-1: Product: syz
[  557.859978][ T5731] usb 3-1: SerialNumber: syz
[  557.862024][ T5731] usb 3-1: config 0 descriptor??
[  557.869378][ T5731] cm109 3-1:0.8: invalid payload size 0, expected 4
[  557.871569][ T5731] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input42
[  557.964223][T10600] FAULT_INJECTION: forcing a failure.
[  557.964223][T10600] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  557.964291][T10600] CPU: 0 UID: 0 PID: 10600 Comm: syz.6.1320 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  557.964320][T10600] Tainted: [L]=SOFTLOCKUP
[  557.964328][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  557.964337][T10600] Call Trace:
[  557.964343][T10600]  <TASK>
[  557.964350][T10600]  dump_stack_lvl+0x100/0x190
[  557.964381][T10600]  should_fail_ex.cold+0x5/0xa
[  557.964406][T10600]  ? prepare_alloc_pages+0x16d/0x5b0
[  557.964428][T10600]  should_fail_alloc_page+0xeb/0x140
[  557.964450][T10600]  prepare_alloc_pages+0x1f0/0x5b0
[  557.964469][T10600]  ? do_raw_spin_unlock+0x145/0x1e0
[  557.964492][T10600]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[  557.964519][T10600]  ? trace_hrtimer_start+0x77/0x220
[  557.964543][T10600]  ? hrtimer_start_range_ns_common+0x78e/0x18b0
[  557.964571][T10600]  ? find_held_lock+0x2b/0x80
[  557.964592][T10600]  ? finish_task_switch.isra.0+0x2bd/0x10d0
[  557.964612][T10600]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  557.964638][T10600]  ? finish_task_switch.isra.0+0x2c2/0x10d0
[  557.964658][T10600]  ? finish_task_switch.isra.0+0x3b3/0x10d0
[  557.964679][T10600]  ? rcu_is_watching+0x13/0xc0
[  557.964701][T10600]  ? trace_sched_exit_tp+0x120/0x160
[  557.964722][T10600]  ? __schedule+0x126b/0x6920
[  557.964744][T10600]  ? __lock_acquire+0x4c5/0x1ec0
[  557.964761][T10600]  ? __css_rstat_updated+0x1ce/0x590
[  557.964780][T10600]  ? lockdep_hardirqs_on+0x7d/0x110
[  557.964799][T10600]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  557.964819][T10600]  ? policy_nodemask+0xed/0x4f0
[  557.964842][T10600]  alloc_pages_mpol+0x201/0x550
[  557.964863][T10600]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  557.964884][T10600]  ? find_held_lock+0x2b/0x80
[  557.964904][T10600]  ? find_held_lock+0x2b/0x80
[  557.964925][T10600]  ? folio_isolate_lru+0x665/0xe90
[  557.964949][T10600]  folio_alloc_mpol_noprof+0x36/0x260
[  557.964974][T10600]  alloc_migration_target_by_mpol+0x2c1/0x650
[  557.965000][T10600]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  557.965025][T10600]  ? __pfx___might_resched+0x10/0x10
[  557.965045][T10600]  migrate_pages_batch+0x5c4/0x4680
[  557.965069][T10600]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  557.965099][T10600]  ? walk_pgd_range+0x11d1/0x1e00
[  557.965123][T10600]  ? __pfx_migrate_pages_batch+0x10/0x10
[  557.965161][T10600]  migrate_pages_sync+0x12c/0x880
[  557.965183][T10600]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  557.965209][T10600]  ? vma_migratable+0x380/0x450
[  557.965231][T10600]  ? __pfx_migrate_pages_sync+0x10/0x10
[  557.965252][T10600]  ? __pfx_queue_pages_test_walk+0x10/0x10
[  557.965278][T10600]  ? walk_page_range_mm_unsafe+0x32c/0xa10
[  557.965319][T10600]  migrate_pages+0x1a83/0x2850
[  557.965346][T10600]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  557.965377][T10600]  ? __pfx_migrate_pages+0x10/0x10
[  557.965405][T10600]  ? do_mbind+0x555/0xfd0
[  557.965438][T10600]  do_mbind+0x5a4/0xfd0
[  557.965469][T10600]  ? __pfx_do_mbind+0x10/0x10
[  557.965495][T10600]  ? find_held_lock+0x2b/0x80
[  557.965518][T10600]  ? ksys_write+0x190/0x250
[  557.965543][T10600]  ? __pfx_get_nodes+0x10/0x10
[  557.965568][T10600]  kernel_mbind+0x1b7/0x200
[  557.965592][T10600]  ? __pfx_kernel_mbind+0x10/0x10
[  557.965623][T10600]  do_syscall_64+0x123/0x790
[  557.965644][T10600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.965661][T10600] RIP: 0033:0x7fa17619e159
[  557.965677][T10600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  557.965692][T10600] RSP: 002b:00007fa1743f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  557.965709][T10600] RAX: ffffffffffffffda RBX: 00007fa176425fa0 RCX: 00007fa17619e159
[  557.965720][T10600] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000
[  557.965732][T10600] RBP: 00007fa176235024 R08: 0000000000000000 R09: 0000000000000002
[  557.965743][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  557.965754][T10600] R13: 00007fa176426038 R14: 00007fa176425fa0 R15: 00007ffc98b61ef8
[  557.965778][T10600]  </TASK>
[  557.990033][ T9420] usb 7-1: USB disconnect, device number 7
[  558.171268][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  558.171485][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  558.171700][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  558.171923][ T5731] usb 3-1: USB disconnect, device number 26
[  558.172724][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  558.172742][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  558.188861][ T5731] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  559.402843][ T9420] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  559.561398][ T9420] usb 7-1: Using ep0 maxpacket: 8
[  559.563659][ T9420] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  559.564526][ T9420] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  559.564550][ T9420] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  559.564571][ T9420] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  559.564590][ T9420] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  559.564622][ T9420] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.652949][ T5605] Bluetooth: hci5: command 0x0406 tx timeout
[  559.772687][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  559.824921][ T9420] usb 7-1: GET_CAPABILITIES returned 0
[  559.824965][ T9420] usbtmc 7-1:16.0: can't read capabilities
[  559.924656][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  559.924719][    T9] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  559.925830][    T9] usb 3-1: config index 0 descriptor too short (expected 40744, got 96)
[  559.925852][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  559.925868][    T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  559.925900][    T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30
[  559.925927][    T9] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  559.925948][    T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  559.925969][    T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  559.925987][    T9] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226
[  559.927722][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.927739][    T9] usb 3-1: Product: syz
[  559.927784][    T9] usb 3-1: Manufacturer: syz
[  559.927797][    T9] usb 3-1: SerialNumber: syz
[  560.056985][T10614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  560.066038][T10614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.476692][    T9] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1
[  562.181472][    T9] usb 3-1: USB disconnect, device number 27
[  562.216945][ T9423] usb 7-1: USB disconnect, device number 8
[  562.257141][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  562.559192][   T31] audit: type=1400 audit(1700006801.980:697): avc:  denied  { shutdown } for  pid=10628 comm="syz.2.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  563.358749][T10638] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48400
[  563.358833][T10638] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  563.358867][T10638] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  563.401955][T10638] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  563.402048][T10638] page dumped because: unmovable page
[  563.411171][T10638] page_owner tracks the page as allocated
[  563.411216][T10638] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x28c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS), pid 10, tgid 10 (kworker/0:1), ts 79661551841
[  563.411288][T10638]  post_alloc_hook+0xfd/0x120
[  563.411358][T10638]  get_page_from_freelist+0x110d/0x35d0
[  563.411392][T10638]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  563.411425][T10638]  alloc_pages_mpol+0x201/0x550
[  563.411453][T10638]  alloc_pages_noprof+0x1a/0x160
[  563.411483][T10638]  __vmalloc_node_range_noprof+0x833/0x1420
[  563.411563][T10638]  __vmalloc_node_noprof+0xad/0xf0
[  563.411591][T10638]  kcov_remote_start+0x518/0x6d0
[  563.411650][T10638]  hub_event+0x198/0x4420
[  563.411681][T10638]  process_one_work+0xac7/0x1b10
[  563.411715][T10638]  worker_thread+0x5ef/0xe50
[  563.411747][T10638]  kthread+0x373/0x450
[  563.411772][T10638]  ret_from_fork+0x730/0xd60
[  563.411858][T10638]  ret_from_fork_asm+0x1a/0x30
[  563.411917][T10638] page last free pid 1 tgid 1 ts 17409959679 stack trace:
[  563.412110][T10638]  free_pages_prepare+0x586/0xe00
[  563.412137][T10638]  __free_contig_range_common+0x14f/0x250
[  563.412258][T10638]  destroy_args+0xa8/0x7a0
[  563.412286][T10638]  debug_vm_pgtable+0x1d69/0x3490
[  563.412317][T10638]  do_one_initcall+0x11c/0x6f0
[  563.412368][T10638]  kernel_init_freeable+0x6ea/0x7b0
[  563.412396][T10638]  kernel_init+0x21/0x1e0
[  563.412428][T10638]  ret_from_fork+0x730/0xd60
[  563.412457][T10638]  ret_from_fork_asm+0x1a/0x30
[  564.928930][ T5605] Bluetooth: hci8: command 0x0405 tx timeout
[  566.894107][T10194] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  566.910018][T10194] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  566.919384][T10194] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  566.938886][T10194] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  567.093849][T10194] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  567.176168][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  567.176891][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  567.268308][T10665] siw: device registration error -23
[  569.172689][T10194] Bluetooth: hci9: command tx timeout
[  570.957217][T10659] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.958966][T10659] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.959215][T10659] bridge_slave_0: entered allmulticast mode
[  570.967927][T10659] bridge_slave_0: entered promiscuous mode
[  570.984987][T10659] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.985114][T10659] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.985389][T10659] bridge_slave_1: entered allmulticast mode
[  570.988302][T10659] bridge_slave_1: entered promiscuous mode
[  571.198220][T10700] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  571.416627][T10659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  571.417518][T10194] Bluetooth: hci9: command tx timeout
[  571.420189][T10659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.495351][T10659] team0: Port device team_slave_0 added
[  571.509121][T10659] team0: Port device team_slave_1 added
[  571.550008][T10659] batman_adv: batadv0: Adding interface: batadv_slave_0
[  571.550039][T10659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  571.550060][T10659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  571.551291][T10659] batman_adv: batadv0: Adding interface: batadv_slave_1
[  571.551302][T10659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  571.551321][T10659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  571.694429][T10659] hsr_slave_0: entered promiscuous mode
[  571.696707][T10659] hsr_slave_1: entered promiscuous mode
[  571.698785][T10659] debugfs: 'hsr0' already exists in 'hsr'
[  571.698805][T10659] Cannot create hsr debugfs directory
[  571.798553][T10704] fuse: Unknown parameter 'fd0x0000000000000009'
[  572.968186][T10708] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48400
[  572.968216][T10708] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  572.968243][T10708] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  572.968256][T10708] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  572.968265][T10708] page dumped because: unmovable page
[  572.968273][T10708] page_owner tracks the page as allocated
[  572.968297][T10708] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x28c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS), pid 10, tgid 10 (kworker/0:1), ts 79661551841
[  572.968318][T10708]  post_alloc_hook+0xfd/0x120
[  572.968339][T10708]  get_page_from_freelist+0x110d/0x35d0
[  572.968356][T10708]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  572.968374][T10708]  alloc_pages_mpol+0x201/0x550
[  572.968389][T10708]  alloc_pages_noprof+0x1a/0x160
[  572.968406][T10708]  __vmalloc_node_range_noprof+0x833/0x1420
[  572.968422][T10708]  __vmalloc_node_noprof+0xad/0xf0
[  572.968437][T10708]  kcov_remote_start+0x518/0x6d0
[  572.968451][T10708]  hub_event+0x198/0x4420
[  572.968465][T10708]  process_one_work+0xac7/0x1b10
[  572.968482][T10708]  worker_thread+0x5ef/0xe50
[  572.968498][T10708]  kthread+0x373/0x450
[  572.968514][T10708]  ret_from_fork+0x730/0xd60
[  572.968527][T10708]  ret_from_fork_asm+0x1a/0x30
[  572.968540][T10708] page last free pid 1 tgid 1 ts 17409959679 stack trace:
[  572.968549][T10708]  free_pages_prepare+0x586/0xe00
[  572.968565][T10708]  __free_contig_range_common+0x14f/0x250
[  572.968582][T10708]  destroy_args+0xa8/0x7a0
[  572.968595][T10708]  debug_vm_pgtable+0x1d69/0x3490
[  572.968609][T10708]  do_one_initcall+0x11c/0x6f0
[  572.968621][T10708]  kernel_init_freeable+0x6ea/0x7b0
[  572.968634][T10708]  kernel_init+0x21/0x1e0
[  572.968655][T10708]  ret_from_fork+0x730/0xd60
[  572.968674][T10708]  ret_from_fork_asm+0x1a/0x30
[  573.012381][ T5613] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  573.016818][ T5613] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  573.017559][ T5613] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  573.027026][ T5613] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  573.030662][ T5613] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  573.492661][ T5613] Bluetooth: hci9: command tx timeout
[  573.573692][   T32] INFO: task syz.0.954:9259 blocked for more than 144 seconds.
[  573.573717][   T32]       Tainted: G             L      syzkaller #0
[  573.573728][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  573.573735][   T32] task:syz.0.954       state:D stack:26904 pid:9259  tgid:9255  ppid:5600   task_flags:0x400140 flags:0x00080002
[  573.573794][   T32] Call Trace:
[  573.573801][ 
** replaying previous printk message **
[  573.573801][   T32]  <TASK>
[  573.573812][   T32]  __schedule+0x1259/0x6920
[  573.573836][   T32]  ? __lock_acquire+0x4c5/0x1ec0
[  573.573869][   T32]  ? __pfx___schedule+0x10/0x10
[  573.573886][   T32]  ? find_held_lock+0x2b/0x80
[  573.573911][   T32]  ? schedule+0x225/0x2c0
[  573.573933][   T32]  schedule+0xdd/0x2c0
[  573.573950][   T32]  schedule_preempt_disabled+0x13/0x30
[  573.573966][   T32]  __mutex_lock+0xccb/0x1bd0
[  573.573984][   T32]  ? nfsd_nl_listener_set_doit+0x1a3/0x1dc0
[  573.574008][   T32]  ? do_syscall_64+0x123/0x790
[  573.574033][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  573.574063][   T32]  ? __asan_memset+0x23/0x50
[  573.574091][   T32]  ? __nla_validate_parse+0x1e7/0x28b0
[  573.574122][   T32]  ? nfsd_nl_listener_set_doit+0x1a3/0x1dc0
[  573.574145][   T32]  nfsd_nl_listener_set_doit+0x1a3/0x1dc0
[  573.574171][   T32]  ? rcu_is_watching+0x13/0xc0
[  573.574192][   T32]  ? trace_kmalloc+0xeb/0x110
[  573.574217][   T32]  ? __kasan_kmalloc+0xaa/0xb0
[  573.574236][   T32]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  573.574263][   T32]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[  573.574283][   T32]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  573.574307][   T32]  genl_family_rcv_msg_doit+0x214/0x300
[  573.574327][   T32]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  573.574352][   T32]  ? bpf_lsm_capable+0x9/0x10
[  573.574374][   T32]  ? security_capable+0x80/0x260
[  573.574400][   T32]  genl_rcv_msg+0x560/0x800
[  573.574420][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  573.574437][   T32]  ? __lock_acquire+0x4c5/0x1ec0
[  573.574454][   T32]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  573.574484][   T32]  netlink_rcv_skb+0x159/0x420
[  573.574508][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  573.574526][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  573.574641][   T32]  ? netlink_deliver_tap+0x1ae/0xcc0
[  573.574669][   T32]  genl_rcv+0x28/0x40
[  573.574684][   T32]  netlink_unicast+0x585/0x850
[  573.574711][   T32]  ? __pfx_netlink_unicast+0x10/0x10
[  573.574755][   T32]  netlink_sendmsg+0x8b0/0xda0
[  573.574784][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  573.574810][   T32]  ? selinux_socket_sendmsg+0x198/0x2f0
[  573.574839][   T32]  ____sys_sendmsg+0xa4d/0xbe0
[  573.574858][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  573.574883][   T32]  ? __pfx_____sys_sendmsg+0x10/0x10
[  573.574914][   T32]  ___sys_sendmsg+0x190/0x1e0
[  573.574937][   T32]  ? __pfx____sys_sendmsg+0x10/0x10
[  573.574959][   T32]  ? futex_wait+0x11e/0x370
[  573.574993][   T32]  ? find_held_lock+0x2b/0x80
[  573.575051][   T32]  __sys_sendmsg+0x160/0x210
[  573.575070][   T32]  ? __pfx___sys_sendmsg+0x10/0x10
[  573.575099][   T32]  do_syscall_64+0x123/0x790
[  573.575121][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.575139][   T32] RIP: 0033:0x7fa52d39e159
[  573.575153][   T32] RSP: 002b:00007fa52e25d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  573.575169][   T32] RAX: ffffffffffffffda RBX: 00007fa52d626090 RCX: 00007fa52d39e159
[  573.575180][   T32] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000006
[  573.587481][   T32] RBP: 00007fa52d435024 R08: 0000000000000000 R09: 0000000000000000
[  573.587496][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  573.587507][   T32] R13: 00007fa52d626128 R14: 00007fa52d626090 R15: 00007fff07798e38
[  573.587532][   T32]  </TASK>
[  573.587570][   T32] 
[  573.587570][   T32] Showing all locks held in the system:
[  573.587579][   T32] locks held by pr/ttyS0/16: 2, last CPU#1:
[  573.587591][   T32]  #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60
[  573.587638][   T32]  #1: ffffffff9bc65c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0
[  573.587684][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[  573.587696][   T32]  #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  573.587745][   T32] locks held by kworker/u8:4/59: 3, last CPU#0:
[  573.587756][   T32]  #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  573.587802][   T32]  #1: ffffc9000201fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  573.587872][   T32]  #2: ffff888029809258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20
[  573.587920][   T32] locks held by kworker/u8:6/148: 3, last CPU#0:
[  573.587932][   T32]  #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  573.587975][   T32]  #1: ffffc90002f07d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  573.588021][   T32]  #2: ffff888023684258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20
[  573.588069][   T32] locks held by kworker/u8:8/1107: 2, last CPU#0:
[  573.588080][   T32]  #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  573.588124][   T32]  #1: ffffc90004fcfd08 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  573.588181][   T32] locks held by klogd/4958: 1, last CPU#0:
[  573.588193][   T32]  #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0x90/0x600
[  573.588245][   T32] locks held by getty/5362: 2, on CPU#1:
[  573.588256][   T32]  #0: ffff8880379ac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  573.588299][   T32]  #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  573.588341][   T32] locks held by syz-executor/5599: 2, on CPU#1:
[  573.588352][   T32]  #0: ffff88804d27c0e8 (&type->s_umount_key#82){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  573.588402][   T32]  #1: ffffffff8f287800 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  573.588444][   T32] locks held by syz-executor/5601: 2, on CPU#1:
[  573.588455][   T32]  #0: ffff888033e920e8 (&type->s_umount_key#82){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  573.590634][   T32]  #1: ffffffff8f287800 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  573.590675][   T32] locks held by syz-executor/5602: 2, on CPU#0:
[  573.590686][   T32]  #0: ffff8880406f00e8 (&type->s_umount_key#82){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  573.590734][   T32]  #1: ffffffff8f287800 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  573.590805][   T32] locks held by kworker/u8:13/6233: 2, last CPU#0:
[  573.590817][   T32]  #0: ffff888033c1f140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  573.592426][   T32]  #1: ffffc900055efd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  573.592476][   T32] locks held by kworker/u8:17/7100: 4, last CPU#0:
[  573.592488][   T32]  #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  573.592532][   T32]  #1: ffffc90004bdfd08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  573.596967][   T32]  #2: ffffffff8ec7ca50 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20
[  573.597015][   T32]  #3: ffffffff8ef40280 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x110/0x1c0
[  573.597064][   T32] locks held by syz.0.954/9256: 3, on CPU#1:
[  573.597076][   T32]  #0: ffff888079e4cb70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  573.597118][   T32]  #1: ffff888056038460 (sb_writers#23){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  573.597159][   T32]  #2: ffffffff8f287800 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  573.597199][   T32] locks held by syz.0.954/9259: 2, on CPU#1:
[  573.597216][   T32]  #0: ffffffff90d7ec28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  573.597253][   T32]  #1: ffffffff8f287800 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x1a3/0x1dc0
[  573.597298][   T32] locks held by syz-executor/9495: 2, on CPU#0:
[  573.597309][   T32]  #0: ffff88803401a0e8 (&type->s_umount_key#82){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  573.597358][   T32]  #1: ffffffff8f287800 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  573.597398][   T32] locks held by syz-executor/10192: 2, on CPU#0:
[  573.597409][   T32]  #0: ffff88807d8f20e8 (&type->s_umount_key#82){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  573.597456][   T32]  #1: ffffffff8f287800 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  573.597494][   T32] locks held by syz-executor/10346: 2, on CPU#0:
[  573.597506][   T32]  #0: ffff88804e5cc0e8 (&type->s_umount_key#82){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110
[  573.597554][   T32]  #1: ffffffff8f287800 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  573.597592][   T32] locks held by syz-executor/10659: 8, last CPU#0:
[  573.597603][   T32]  #0: ffff8880312ac460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  573.597668][   T32]  #1: ffff8880742d6480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  573.597706][   T32]  #2: ffff88802a08fb48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  573.600492][   T32]  #3: ffffffff90235c80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0xfe/0x6d0
[  573.600538][   T32]  #4: ffff88802ff02128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[  573.600576][   T32]  #5: ffff888079003258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_drv_probe+0xcd/0x1350
[  573.600619][   T32]  #6: ffffffff90ccf5c0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x9a2/0x1420
[  573.600654][   T32]  #7: ffff88809b3e4e70 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: register_netdevice+0x1978/0x25a0
[  573.600699][   T32] locks held by syz.6.1342/10699: 3, last CPU#0:
[  573.600711][   T32]  #0: ffff88807dea2460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0
[  573.600754][   T32]  #1: ffff8880809994a0 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140
[  573.600808][   T32]  #2: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090
[  573.600851][   T32] locks held by syz-executor/10711: 1, on CPU#0:
[  573.600863][   T32]  #0: ffffffff90ccf5c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0
[  573.600902][   T32] 
[  573.600906][   T32] =============================================
[  573.600906][   T32] 
[  573.600913][   T32] NMI backtrace for cpu 0
[  573.600926][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  573.600948][   T32] Tainted: [L]=SOFTLOCKUP
[  573.600954][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  573.600963][   T32] Call Trace:
[  573.600969][   T32]  <TASK>
[  573.600975][   T32]  dump_stack_lvl+0x100/0x190
[  573.600999][   T32]  nmi_cpu_backtrace.cold+0x12d/0x151
[  573.601023][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  573.601045][   T32]  nmi_trigger_cpumask_backtrace+0x21f/0x2a0
[  573.601071][   T32]  sys_info+0x141/0x190
[  573.601093][   T32]  watchdog+0xcb1/0x1030
[  573.601114][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  573.601132][   T32]  ? __pfx_watchdog+0x10/0x10
[  573.601150][   T32]  ? __kthread_parkme+0x18f/0x230
[  573.601171][   T32]  ? kthread+0x13a/0x450
[  573.601190][   T32]  ? __pfx_watchdog+0x10/0x10
[  573.601211][   T32]  kthread+0x373/0x450
[  573.601231][   T32]  ? __pfx_kthread+0x10/0x10
[  573.601253][   T32]  ret_from_fork+0x730/0xd60
[  573.601271][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  573.601290][   T32]  ? __switch_to+0x800/0x10f0
[  573.601311][   T32]  ? __pfx_kthread+0x10/0x10
[  573.601333][   T32]  ret_from_fork_asm+0x1a/0x30
[  573.601359][   T32]  </TASK>
[  573.601408][   T32] Sending NMI from CPU 0 to CPUs 1:
[  573.601428][    C1] NMI backtrace for cpu 1
[  573.601440][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  573.601459][    C1] Tainted: [L]=SOFTLOCKUP
[  573.601464][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  573.601472][    C1] RIP: 0010:io_serial_in+0x87/0xb0
[  573.601495][    C1] Code: e6 5b fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 0d 1d 23 06 e8 78 0a cf fc eb a2 e8 01 0b
[  573.601508][    C1] RSP: 0018:ffffc90000157958 EFLAGS: 00000002
[  573.601520][    C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000
[  573.601529][    C1] RDX: 00000000000003fd RSI: ffffffff85b00920 RDI: ffffffff9bc65ca0
[  573.601538][    C1] RBP: ffffffff9bc65c60 R08: 0000000000000001 R09: 000000000000001f
[  573.601547][    C1] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000
[  573.601556][    C1] R13: 0000000000000020 R14: fffffbfff378cbe9 R15: dffffc0000000000
[  573.601566][    C1] FS:  0000000000000000(0000) GS:ffff888123c5f000(0000) knlGS:0000000000000000
[  573.601581][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  573.601590][    C1] CR2: 000000110c3500c6 CR3: 00000000791e9000 CR4: 00000000003526f0
[  573.601600][    C1] Call Trace:
[  573.601605][    C1]  <TASK>
[  573.601611][    C1]  wait_for_lsr+0x13a/0x210
[  573.601627][    C1]  serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0
[  573.601643][    C1]  __serial8250_console_fifo_write+0xa5/0x290
[  573.601658][    C1]  ? __pfx_io_serial_out+0x10/0x10
[  573.601680][    C1]  serial8250_console_write+0xf46/0x1330
[  573.601698][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  573.601720][    C1]  ? __nbcon_context_update_unsafe+0x1b6/0x220
[  573.601743][    C1]  ? __pfx___nbcon_context_update_unsafe+0x10/0x10
[  573.601767][    C1]  nbcon_emit_next_record+0x8f7/0xa70
[  573.601789][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  573.601809][    C1]  ? nbcon_context_try_acquire+0x3a6/0xc60
[  573.601828][    C1]  ? do_raw_spin_lock+0xd0/0x260
[  573.601847][    C1]  ? __pfx___cant_migrate+0x10/0x10
[  573.601865][    C1]  ? _raw_spin_lock_irqsave+0x42/0x60
[  573.601880][    C1]  nbcon_emit_one+0x1a8/0x2b0
[  573.601899][    C1]  ? __pfx_nbcon_emit_one+0x10/0x10
[  573.601921][    C1]  nbcon_kthread_func+0x613/0x7d0
[  573.601943][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  573.601966][    C1]  ? __kthread_parkme+0x18f/0x230
[  573.601983][    C1]  ? kthread+0x13a/0x450
[  573.601999][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  573.602019][    C1]  kthread+0x373/0x450
[  573.602036][    C1]  ? __pfx_kthread+0x10/0x10
[  573.602054][    C1]  ret_from_fork+0x730/0xd60
[  573.602069][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  573.602084][    C1]  ? __switch_to+0x800/0x10f0
[  573.602101][    C1]  ? __pfx_kthread+0x10/0x10
[  573.602120][    C1]  ret_from_fork_asm+0x1a/0x30
[  573.602139][    C1]  </TASK>
[  573.615114][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  574.989251][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  574.999955][   T32] Tainted: [L]=SOFTLOCKUP
[  575.004279][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  575.014317][   T32] Call Trace:
[  575.017576][   T32]  <TASK>
[  575.020485][   T32]  dump_stack_lvl+0x100/0x190
[  575.025148][   T32]  vpanic+0x553/0x970
[  575.029111][   T32]  ? __pfx_vpanic+0x10/0x10
[  575.033595][   T32]  panic+0xd1/0xe0
[  575.037300][   T32]  ? __pfx_panic+0x10/0x10
[  575.041692][   T32]  ? nmi_trigger_cpumask_backtrace+0x263/0x2a0
[  575.047833][   T32]  ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0
[  575.053979][   T32]  ? watchdog.cold+0x1ec/0x234
[  575.058721][   T32]  watchdog.cold+0x1fd/0x234
[  575.063296][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  575.069117][   T32]  ? __pfx_watchdog+0x10/0x10
[  575.073804][   T32]  ? __kthread_parkme+0x18f/0x230
[  575.078838][   T32]  ? kthread+0x13a/0x450
[  575.083085][   T32]  ? __pfx_watchdog+0x10/0x10
[  575.088117][   T32]  kthread+0x373/0x450
[  575.092195][   T32]  ? __pfx_kthread+0x10/0x10
[  575.096799][   T32]  ret_from_fork+0x730/0xd60
[  575.101383][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  575.106513][   T32]  ? __switch_to+0x800/0x10f0
[  575.111232][   T32]  ? __pfx_kthread+0x10/0x10
[  575.115831][   T32]  ret_from_fork_asm+0x1a/0x30
[  575.120625][   T32]  </TASK>
[  575.123845][   T32] Kernel Offset: disabled
[  575.128149][   T32] Rebooting in 86400 seconds..