last executing test programs:

26m20.194454415s ago: executing program 0 (id=6):
r0 = getpgrp(0xffffffffffffffff)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
fchdir(0xffffffffffffffff)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r6 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x2, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0)

26m11.036961338s ago: executing program 0 (id=12):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x20000000)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_emit_ethernet(0xa6, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
fsmount(0xffffffffffffffff, 0x0, 0x0)

26m5.438377761s ago: executing program 2 (id=18):
r0 = getpgrp(0xffffffffffffffff)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
fchdir(0xffffffffffffffff)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r7 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x2, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)

26m1.476999807s ago: executing program 0 (id=21):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x4e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xd)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'})
sendmsg$nl_route(r1, 0x0, 0x20000094)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="1518a7a093f1", 0x0, 0x84, 0x2, 0x0, 0x0})
r3 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x24)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)

26m1.473865531s ago: executing program 2 (id=22):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000006c0)={0x4, 0x1000000, 0x8, 0x20, 0x100, &(0x7f0000000040)="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"})
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x2}, 0x94)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x40000)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020)

25m53.457908617s ago: executing program 0 (id=27):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000006c0)={0x4, 0x1000000, 0x8, 0x20, 0x100, &(0x7f0000000040)="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"})
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x2}, 0x94)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x40000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f00000001c0)={0x1, 0x4, 0x7})

25m52.659227722s ago: executing program 2 (id=30):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

25m49.948380402s ago: executing program 2 (id=33):
r0 = openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$smackfs_labels_list(r0, &(0x7f00000055c0)={[{'@\x19\\'}, {':'}]}, 0x7)

25m49.613263771s ago: executing program 0 (id=34):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x84, 0x464, 0x10, 0x70bd29, 0x25dfdbfd, "6fcac2a3c8bebdc1f9f0d83dc88774c6078f5bd4b21de98c10e28e1724c18a3987d68c15581e4b684c8925fad4a7b2186677f6db99e7ef83d52fe7654aca12bb0d318233b52fc0517e893c14de97af28d5bf91cadc096fb4d3c6e2978c3f5352e3015868431dc249a26274e6572b3833b83e63be", ["", "", "", "", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x4008884}, 0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
io_setup(0x8, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3})
socket$inet6(0xa, 0x1, 0x0)
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x2, 0x4002)

25m46.993627954s ago: executing program 2 (id=38):
r0 = getpgrp(0xffffffffffffffff)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r6 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x2, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0)

25m46.918162195s ago: executing program 0 (id=39):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
read$char_usb(r0, &(0x7f0000000a80)=""/73, 0x49)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x10, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x2000})
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
poll(&(0x7f0000000240), 0x0, 0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x40882)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, r1, 0x7}, 0x10)
pread64(r0, &(0x7f0000000480)=""/177, 0xb1, 0xa6)

25m40.511930426s ago: executing program 2 (id=42):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mount$9p_unix(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=uni'])

25m31.486522336s ago: executing program 32 (id=39):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
read$char_usb(r0, &(0x7f0000000a80)=""/73, 0x49)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x10, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x2000})
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
poll(&(0x7f0000000240), 0x0, 0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x40882)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, r1, 0x7}, 0x10)
pread64(r0, &(0x7f0000000480)=""/177, 0xb1, 0xa6)

25m24.260317082s ago: executing program 33 (id=42):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mount$9p_unix(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=uni'])

23m11.961138568s ago: executing program 3 (id=162):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x142)
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x3}, 0x18, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7eb, 0x14)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
munlockall()
landlock_restrict_self(r0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f00000000c0)={0x1, 0x20000000, 0x17, 0x101, 0xee, 0x0})

23m7.286812128s ago: executing program 3 (id=165):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
read$char_usb(r0, &(0x7f0000000a80)=""/73, 0x49)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x10, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x2000})
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, 0xffffffffffffffff, 0x7}, 0x10)
socket$inet(0x2, 0x4000000000000001, 0x0)
pread64(r0, &(0x7f0000000480)=""/177, 0xb1, 0xa6)

23m0.329324347s ago: executing program 3 (id=172):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

22m54.727234043s ago: executing program 3 (id=177):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffff01}]}, 0x28}}, 0x0)

22m53.357709274s ago: executing program 3 (id=178):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'ip6tnl0\x00', 0x101}) (fail_nth: 1)

22m37.730188747s ago: executing program 34 (id=178):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'ip6tnl0\x00', 0x101}) (fail_nth: 1)

21m5.635782745s ago: executing program 4 (id=264):
r0 = socket$inet6(0xa, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(r4, 0x80045105, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r6}, 0x10)
r7 = userfaultfd(0x801) (fail_nth: 3)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00006a4000/0x800000)=nil, 0x800000}, 0x2})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0xfffffffe, @mcast2}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38)
socket$inet(0x2, 0x3, 0x2)

21m4.155501598s ago: executing program 4 (id=267):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd28, 0x25dfdbfe, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x6fa2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000003}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$kcm(0xa, 0x3, 0x87)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x87, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[@routing={0x4, 0x2, 0x1, 0xf, 0x0, [@empty]}]}}}}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x5a3}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"})

20m57.305841122s ago: executing program 4 (id=274):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x8, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80), 0x0, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9d)

20m55.142249452s ago: executing program 4 (id=276):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400000000e0a01030000000000000000070000000900020073797a31000000000900010073797a300000000014000380100000800800034000000006"], 0xd4}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_io_uring_setup(0x82b, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x3, 0x80}, 0x0, &(0x7f0000000180))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000440)="6fb7", 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
open(&(0x7f0000000000)='./file0/file0\x00', 0x40000, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
umount2(&(0x7f0000000380)='./file0\x00', 0x1)
r3 = socket$pptp(0x18, 0x1, 0x2)
accept(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x8, 0x1)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000580)='stack\x00')
read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x2020)

20m53.560886203s ago: executing program 4 (id=277):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

20m51.755919726s ago: executing program 4 (id=279):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20)

20m51.513565556s ago: executing program 35 (id=279):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20)

18m4.239682467s ago: executing program 1 (id=419):
r0 = getpgrp(0xffffffffffffffff)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fchdir(0xffffffffffffffff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)

18m2.983900219s ago: executing program 1 (id=420):
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x400400, 0x100, 0x60}, 0x18)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x8, 0x0, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x8000000000000000, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x1]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x10899, &(0x7f00000002c0)={0x0, 0x3cad, 0x80, 0xa, 0x20002f7, 0x0, r0})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
socket$inet_tcp(0x2, 0x1, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r5 = dup(r4)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
dup3(r6, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)

18m2.307818302s ago: executing program 1 (id=421):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000600), 0x0, 0x2002)
r1 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8)
r5 = accept(r1, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r5, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200281, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000240))
write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401})
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3)

17m59.204157877s ago: executing program 1 (id=422):
r0 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x2, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

17m59.001214962s ago: executing program 1 (id=423):
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x2b0, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x27a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1b, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a6706"}, {0x0, 0xa, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51"}, {0x0, 0x3, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc"}]}}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c000780060004"], 0x34}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f17000000fd07150015000000839d0000006100005f2e"], 0x0, 0x37, 0x0, 0x9, 0x1000}, 0x28)
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
unshare(0x24020400)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4)
getpid()

17m57.797567133s ago: executing program 1 (id=424):
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async)
pipe2$9p(&(0x7f00000000c0), 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) (async)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1) (async)

17m42.059341236s ago: executing program 36 (id=424):
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async)
pipe2$9p(&(0x7f00000000c0), 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) (async)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1) (async)

16m40.427909185s ago: executing program 7 (id=440):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) (fail_nth: 3)

16m40.322013938s ago: executing program 7 (id=441):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

16m31.023355721s ago: executing program 7 (id=450):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
write$binfmt_elf64(r2, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xdc, 0x1, 0x3, 0xfffffffffffffff9, 0x3, 0x3e, 0x1001, 0x101, 0x40, 0x2001df, 0x0, 0x3b, 0x38, 0x1, 0x27, 0x5, 0xff}, [{0x3, 0x0, 0x7fffffffffffffff, 0x2, 0x6, 0xffc, 0x80059b4, 0x8}]}, 0x78)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e24, 0x3, 'sh\x00', 0x29, 0x80005, 0x6f}, 0x2c)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x40040)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608262300", 0x7, 0xfffffffffffffffc)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00@\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002300000020000180140002006e72300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x34}}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @remote, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@private=0xa010101, 0x4e20, 0x10000, 0xf8}}, 0x44)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_ISOLATED={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002)

16m28.393499623s ago: executing program 7 (id=451):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x14}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe0e}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008845}, 0x4880)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000800)={'syz0\x00', {0x3, 0x7ff, 0x3, 0x8}, 0x16, [0x3ff, 0x6, 0x101, 0x7, 0x70e0, 0x2, 0x1, 0x2, 0x8, 0xfffff001, 0x2, 0x7, 0x5, 0x3, 0x5000, 0x8, 0x3, 0x9, 0x100, 0xfffffff7, 0x8, 0xff7ffffd, 0x644, 0xfffffffc, 0x8000, 0xb, 0xc432, 0xfffff9c6, 0x2, 0xd97, 0x8, 0x1edf, 0x1, 0xe739, 0x4, 0x0, 0x80000000, 0x4, 0x7, 0xaa1, 0x4, 0x7fa, 0x4, 0x5, 0xfffffffc, 0x898d, 0x3, 0xb631, 0x3, 0xb, 0x62e4e0d4, 0x7, 0x5, 0x1, 0x6, 0x4, 0xce93, 0x5, 0x8b, 0xb32, 0x4, 0xbfd6, 0x400, 0xfffffffa], [0x5, 0x6, 0x8001, 0xffffffff, 0x2, 0x9, 0x7, 0x1, 0x6, 0x20000000, 0x80000000, 0x2, 0xfffffffc, 0x6, 0x8000, 0x4, 0x8000, 0x9f, 0x1000, 0x9, 0x1, 0x6, 0x401, 0x8, 0xfffffc00, 0xffffffff, 0x5, 0x47ffc, 0x2, 0xffffff80, 0x7ff, 0x8, 0x9, 0xdf9, 0x3, 0x0, 0x5382, 0x1, 0xfff, 0x5, 0x4, 0x3, 0x1, 0x9, 0x7, 0xd91, 0x3, 0x10001, 0x5bdc, 0x5, 0x6, 0x1ff, 0xf28b, 0x574579b4, 0x6, 0x51fd, 0x3, 0x5, 0x9, 0x3, 0x4, 0x1, 0x82, 0x2], [0x3, 0x4f957d33, 0x4, 0xffff8001, 0x8, 0xffff, 0x7, 0x3, 0xffffffff, 0xa, 0x46cd, 0x0, 0x2, 0x6, 0x2, 0x5, 0xfffffbff, 0x7, 0x0, 0x100, 0x5, 0x10, 0x6, 0x40, 0x7fffffff, 0x5, 0x0, 0x7, 0x10001, 0x2, 0xfff, 0x2, 0x0, 0x6, 0x9, 0x2, 0x4, 0x80000000, 0xbf91, 0x80003, 0x0, 0xfffffffc, 0xffffffff, 0x5, 0x8, 0x8, 0x8, 0x0, 0x5, 0x4, 0x7, 0xff, 0xffffffff, 0x2, 0x8, 0x1, 0x7fffffff, 0x7, 0xffffff81, 0x8, 0xc, 0x6, 0x40, 0x800], [0x4, 0xb, 0x1, 0xfff, 0x5, 0x80001000, 0x6, 0x7ff, 0xfffff3b3, 0x5e, 0x7, 0x2, 0x10de, 0x5, 0x0, 0x2, 0x80000001, 0x100, 0x2, 0xf, 0x1, 0x7, 0xd97, 0x3, 0x2, 0xf89422a, 0x2, 0x9, 0x2, 0x64d3, 0xffffffff, 0x5d, 0x1, 0x6, 0xffff2cfc, 0x7, 0x4, 0x2, 0x5, 0x7, 0x0, 0x9, 0x9, 0x2, 0x101, 0x3f, 0x4, 0x8000, 0xe03, 0x1, 0x7f, 0x5e3, 0xe23, 0x1, 0x5, 0x3, 0x5, 0x2, 0x9, 0x1, 0x400, 0xfffffff9, 0xfffffffa, 0x3]}, 0x45c)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r5=>0x0})
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r7 = getpid()
r8 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, <r10=>0x0}, 0x2020)
write$FUSE_NOTIFY_STORE(r9, &(0x7f00000000c0)={0x29, 0x4, 0x0, {0x1, 0x7fffffff, 0x1, 0x0, [0x0]}}, 0x29)
write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r9, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r9, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x105081, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x4, 'syz0\x00'}, 0x5, 0x31, 0x1, r7, 0x0, 0x8, 'syz1\x00', 0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r5], 0x4c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000006800b56100b86a4e508b1a640000000000f5ff010000000000000004000b00080010"], 0x24}, 0x1, 0x0, 0x0, 0x20048804}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r12 = msgget$private(0x0, 0x0)
msgsnd(r12, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0)
msgrcv(r12, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000)

16m23.828045428s ago: executing program 7 (id=459):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0)
mknodat(r5, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
chdir(&(0x7f0000000300)='./bus\x00')
renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffff01}]}, 0x28}}, 0x0)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x4001}, 0x1c)

16m21.754519068s ago: executing program 6 (id=462):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x8, r1, 0x0, 0x2, 0x1b, &(0x7f0000000080)="b4984bf5f19a344326c8db32b1edfe0e8dff043d03a79d749e1be5", 0x9})
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

16m21.483235776s ago: executing program 7 (id=464):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000007060104000000000000000007be05020900020073797a31000000000500010007000000080006400000001a"], 0x30}, 0x1, 0x0, 0x0, 0x4010010}, 0x20040020)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r6, r8, 0x0, 0x20000023893)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
clock_getres(0x17, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="005c267456ddb70b5a220326af0bc119c280fb20d5b671178a8ac70337d3fb425c36fd3ca4a17c2beeb3f09c440dce5db07c504afc64426dc4bbc3b1ca7b268efc4389b1b5083be01ec9557e39079c3ad78c816e264439705322ba6926d53013f1d8", @ANYRES16=r0, @ANYBLOB="01002abd7000fedbdf251500000004002b8008000300", @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4c011}, 0x800)
socket(0x1, 0x803, 0x9e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)

16m21.390249916s ago: executing program 6 (id=465):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000007060104000000000000000007be05020900020073797a31000000000500010007000000080006400000001a"], 0x30}, 0x1, 0x0, 0x0, 0x4010010}, 0x20040020)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r6, r8, 0x0, 0x20000023893)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
clock_getres(0x17, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="005c267456ddb70b5a220326af0bc119c280fb20d5b671178a8ac70337d3fb425c36fd3ca4a17c2beeb3f09c440dce5db07c504afc64426dc4bbc3b1ca7b268efc4389b1b5083be01ec9557e39079c3ad78c816e264439705322ba6926d53013f1d8", @ANYRES16=r0, @ANYBLOB="01002abd7000fedbdf251500000004002b8008000300", @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4c011}, 0x800)
socket(0x1, 0x803, 0x9e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94)
socket(0x1, 0x803, 0x0)

16m19.364584726s ago: executing program 6 (id=468):
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(r1, 0x5, &(0x7f0000000140)={0x6, 0x9}, &(0x7f0000000180))
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

16m17.692271481s ago: executing program 6 (id=470):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="ad4386000000ffffffff02"], 0x14}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130825bd7000f8dbdf2508000000040001800800040006000000"], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x840)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={<r4=>0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x2d, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r6, @ANYBLOB="040014000a000100000000000000000008000f0004"], 0x30}}, 0x0)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1f8)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb105e, 0x0)
pivot_root(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='.\x00')
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="050127bd7000fddbdf25050000000800020024"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40400c0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010032bd7000ffdbdf250100000008000100", @ANYRES32=r12, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x24040000}, 0x4040894)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', <r13=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r14=>0x0, 0x4, 0x7, 0xb7, 0x5, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x8000, 0x8, 0x2, 0x6}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=<r15=>0x0, &(0x7f00000001c0)=0x4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="100028bd7000fedbdf25010000003c0006800800060017000000080006000b00000008000700", @ANYRES32=r12, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r13, @ANYBLOB="0500020009000000060005004e210000050002000700000005000500020000000800030006000000050005000100000040000180060001000200000008000700", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="080006002b00000014000400fe8000000000000000000000000000aa080006000000000028000400ed00000024000680060005004e2300000800060002000000060005004e240000060005004e20000008000400050000000800030001000000e74f7f4019c65dd9579eb42820da573bff1f6d3ad4c7a3b385fbc30eab54fcda97bb20c4e2dedbc8e8e3268c1ab71add00c1c59e47c7b9cc966873f468f29c1704e05ecf37161c82f8fdd2f630bb4b57a07f56f889d0675ab8185b340971509a29f7a6216240cd5a90f94d2902d58f77b045183c99e3cf1e165da3c0c6b6f368be4fdec1b40cac3e575585ee10"], 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x10)

16m8.032020463s ago: executing program 6 (id=480):
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(r1, 0x5, &(0x7f0000000140)={0x6, 0x9}, &(0x7f0000000180))
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

16m6.255806398s ago: executing program 6 (id=483):
syz_open_dev$sndpcmp(&(0x7f0000000600), 0x0, 0x2002)
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8)
r4 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200281, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

16m6.180723682s ago: executing program 37 (id=464):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000007060104000000000000000007be05020900020073797a31000000000500010007000000080006400000001a"], 0x30}, 0x1, 0x0, 0x0, 0x4010010}, 0x20040020)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r6, r8, 0x0, 0x20000023893)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
clock_getres(0x17, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="005c267456ddb70b5a220326af0bc119c280fb20d5b671178a8ac70337d3fb425c36fd3ca4a17c2beeb3f09c440dce5db07c504afc64426dc4bbc3b1ca7b268efc4389b1b5083be01ec9557e39079c3ad78c816e264439705322ba6926d53013f1d8", @ANYRES16=r0, @ANYBLOB="01002abd7000fedbdf251500000004002b8008000300", @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4c011}, 0x800)
socket(0x1, 0x803, 0x9e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)

16m5.438647572s ago: executing program 38 (id=483):
syz_open_dev$sndpcmp(&(0x7f0000000600), 0x0, 0x2002)
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8)
r4 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200281, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

14m51.027144752s ago: executing program 5 (id=565):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
listen(r0, 0x4)

14m47.524137789s ago: executing program 5 (id=569):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000080)={0x1000000, 0x83b, 0x0, 0x0, '\x00', '\x00', '\x00', 0x3, 0x4000, 0x0, 0x40000, "f900"})

14m41.683424623s ago: executing program 5 (id=575):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x1, "875ccbeca25ed2796456579335c7b8de4b0f29efa1c0fc50cce9de6f78aadfcf"})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)={0x20, 0xb, 0x14, "e17d2faa4b9dee7ae62424805793628e08cae0cb"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1, 0xc}})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000440)={0x14, &(0x7f00000003c0)={0x20, 0xb, 0x2b, {0x2b, 0x8, "beea6e86bb97ebefc5397fa8d865b1f8a6fce57a258771206de766b9dc8f4c99e552d1d2e0c394ad7a"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x1c, &(0x7f0000000480)={0x20, 0x1, 0xce, "f8d1d20b6f17c3ff656ff9c4b0c01ba9027bbcc18fc2d8788def41e099723a4410286dab6648533c0ab73ecf9c28bbd644a9fcbf1c6a319e2840e8c119bca6d6b75a3641041f1a14ee51fe345d1689b3480e84da0480f7950ba8d025bba7930c87789165cd9bd478b9b9a43976db13b4555e6b10ca5512e3a1e2f8aaa50acc44b5f39270f779a4deacd8841955533ce0054811207e7e7f4228ff8c9b47c6641c2856b50fd9a6a72466e9633487c74b7ed05aeba8adbee1c9a1006415a01ef5f64a6b15fe70a8327eab47ee3e4a30"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x2}})
syz_usb_control_io$hid(r0, 0x0, 0x0)

14m37.656747642s ago: executing program 5 (id=578):
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000007060104000000000000000007be05020900020073797a31000000000500010007000000080006400000001a"], 0x30}, 0x1, 0x0, 0x0, 0x4010010}, 0x20040020)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r4, r6, 0x0, 0x20000023893)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
clock_getres(0x17, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
socket(0x1, 0x803, 0x9e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94)
socket(0x1, 0x803, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)

14m36.428611537s ago: executing program 5 (id=579):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffff01}]}, 0x28}}, 0x0)

14m35.14176082s ago: executing program 5 (id=580):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0xfff0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x7, 0x9, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x1016, &(0x7f0000001880)=""/4118, 0x41000, 0xf}, 0xae)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x8000051)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRESOCT=r3], 0x48)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x402, 0x8000000000000001, 0xffdfffffffffffff, 0x9, 0x0, 0x10, 0x80000006}, 0x0, 0x0)

14m19.609557936s ago: executing program 39 (id=580):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0xfff0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x7, 0x9, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x1016, &(0x7f0000001880)=""/4118, 0x41000, 0xf}, 0xae)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x8000051)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRESOCT=r3], 0x48)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x402, 0x8000000000000001, 0xffdfffffffffffff, 0x9, 0x0, 0x10, 0x80000006}, 0x0, 0x0)

6.563996386s ago: executing program 8 (id=1848):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x3, "1e"}, @local=@item_4={0x3, 0x2, 0x0, "7d4bcdc9"}]}}, 0x0}, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x9, @loopback, 0x2}, 0x1c)
connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c2506538a2bf20013dc2eeec0a0723e530b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0)

4.808232649s ago: executing program 8 (id=1852):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xff00)

4.726234627s ago: executing program 8 (id=1853):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet(0x2, 0x3, 0x7f)
setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x7fff, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg(r2, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r2, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r2, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r2, &(0x7f0000000840)={0x2, 0x0, {&(0x7f0000000200)=""/242, 0xf2, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x3, 0x3}}, 0x48)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)

4.263479401s ago: executing program 9 (id=1854):
r0 = epoll_create1(0x0)
r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=<r2=>0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x2})

4.029860322s ago: executing program 9 (id=1855):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc0000"], 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b8}, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x4)
socket(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
pipe(&(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})

3.70474717s ago: executing program 9 (id=1856):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000003c0)=""/165, 0xa5, <r1=>0x0, &(0x7f0000000480)=""/107, 0x6b}}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYRESOCT=r2], 0x10}, 0x1, 0x0, 0x0, 0x8884}, 0x8015)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000d00)=ANY=[@ANYRESHEX, @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r4, 0x0, 0x30, 0x2, @val=@target_btf_id=r1}, 0x14)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0xc31, 0x9, 0x1, 0x7, 0x7, 0x80000000}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x9, 0xa3e, 0x1000}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000700000000000000ffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000008500000004000000183a00000200000000000000000000004ba30100ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000985000000a600000018230000", @ANYRES32=r0, @ANYBLOB="000000008300000018210000", @ANYRES32=r0, @ANYBLOB="00000000040000001576f8ff080000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x39, &(0x7f0000000700)=""/57, 0x40f00, 0x1, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x8, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000800)=[{0x4, 0x1, 0xe, 0x4}, {0x1, 0x1, 0xe, 0x2}, {0x3, 0x3, 0xb, 0x3}, {0x2, 0x2, 0x0, 0x1}, {0x2, 0x2, 0x6, 0x1}], 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', r6, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000003e0003000000700000000000017c00000400fc800c0001805b8692cc", @ANYRES32=r7, @ANYBLOB="080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r8 = socket(0x10, 0x803, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r9 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xffffffdf, 0x175}, &(0x7f0000000000)=<r10=>0x0, &(0x7f0000000280)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(r9, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
set_tid_address(0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r14, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc9196887c2008000240000000000c00010052415445455354000900020073797a3200008000140000001100010000000000000000000100000a21400989f4a49f52c6cc70fe2514d86efd3c302a82bc658ea178861f917d1ea3ff718bb1a4e031677e4716424820734266e4b03535225b791e81c7d2a9134d066ab34006cb542ec57fe91e6ef88c986257d19f16dd5cdb82d9c43c96084d71d57a6f93e0859968f3ce3e9cdd81124a2b6802fa6d8a6b63d8d72cc92a5f04444889b3d8abfd44b0f60f2a0cc11ebc146ae315f9c990aaa635561b9a58358743d5febc2098cdae3e79c9e3e7eab44dc86140755a247d002f8db2d1258974784c5124a95fe5de863cd2851a32829b5b5490f80f2a08c7cdd41222532285f1a4885c54889c6dbe5aad81e66de85befc08c8f0e152200"/419], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)
sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="8000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r12, @ANYBLOB="fd1f67e514a48d85140a5576bef3bd3d0c31a7ee61eaab3830dbf6d70e8b44144c461153d6feed739b2d700cb13b94be76d2bd029abaea1261fbce433af652775ba280fa935c62ac5e96c5c2bcab986eab5595f3051de5ebee283a8b9db728943b7e"], 0x3c}}, 0x8000)

2.970431353s ago: executing program 8 (id=1857):
syz_usb_connect$cdc_ncm(0x5, 0xd8, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x2, 0x1, 0x0, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x9, 0x3, 0xc}, {0x6, 0x24, 0x1a, 0xbae}, [@country_functional={0xa, 0x24, 0x7, 0x9, 0x0, [0x9, 0x1]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}, @mdlm_detail={0x5b, 0x24, 0x13, 0x9, "0db4c1438d49980f46ddddf06774717374f70d6aeea72d72cb2c36ff9d8d698a4d7091725a39029fb5dfe09abb5a9a6ce4e1da1f12bc48c864354e7d0c120a6513fe5830e5f0cf054f9e27e15d4acada0458127eb2d593"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xe, 0x4, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x4, 0xc0}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0x54, 0x5}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x8, 0x6, 0x6, 0xff, 0xda}, 0xfffffd32, &(0x7f0000000400)=ANY=[@ANYBLOB="050f240004f9454cf54679cc98612015910b10010c250007f1d4b4d503100b0710020cd509000a10030a0a000608070001d921ba6f4ade093b4a2cb06e277e9d7756b4accb71c43014a7a3e875a70fad2059d1f21e28b4a5487b9802c4ed2c0be8831de5c1500e1d088598b37764728e764fa41c467ad992022095a7f123b502ed477958091717dbf58adf0a8f3556c7119e"], 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x426}}, {0x9c, &(0x7f0000000540)=@string={0x9c, 0x3, "6e80bd03717ded927e4da3a08a34be24806ba90e913b7609f446341c027a0c38d0c31abd15c85b02e1364b5f785a121378ec03137e51938758be477208e0aedb3c576596a1067ce0ea6fd22f0680e379ac97dcfda47ab7ee28879c46bffd95909d00b31569f016a3c9f180350c5bc4c8ac568f0c825dbf832e44223d3c93e69496d3a0926137266d75040514a37cdd917099b37614eaf8d137b0"}}, {0xd8, &(0x7f0000000600)=@string={0xd8, 0x3, "b66be34a4000e53928daa76c8145ee467537a638869d9bf49678bbbfb7853cc02023e5dff611d6f7aa95656f5a440aff8b9936e57dedb6996765b5304299ffd7dd72e96298f61258354f0e359b0adc9999dbead9c32443e0a302039ec4799fd68335c4f9b8c30cecc99194b88b7ee7dd751fdc4a01b03917dd8bce730eba9678c2ac3e325145d1347ed0cdc9a61e62f2780d2d72e5edc7a3a06967253638d697b99cc539840f6bdffb6058a96a238e5c0042594fcd30b2d9d47d88c3a6bac73f17453472d8c2c70c0ed62f8bbf1fd989d534f79cbbdd"}}, {0xc, &(0x7f0000000200)=@string={0xc, 0x3, "02fb89d2838acb592262"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1801}}]})
ftruncate(0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0)

2.80813375s ago: executing program 9 (id=1858):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
personality(0x5000002)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x40000000001})
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x50}}, 0x48004)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, 0x0)
r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000001c0)={&(0x7f0000001780)=[{0x1, 0x11, 0x0, 0x0}, {0x1, 0x1000, 0x0, 0x0}], 0x2})
timer_create(0x9, 0x0, &(0x7f00000000c0)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x77359400}}, 0x0)
timer_settime(r6, 0x0, &(0x7f0000000200), &(0x7f0000000280))
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0], 0x50)
syz_open_dev$usbfs(0x0, 0x205, 0x2581)
syz_open_procfs(0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000040)=0x4)
mmap(&(0x7f000036d000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8408e000)

1.79038338s ago: executing program 3 (id=592):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000feb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68812300000004000000010000b441bf", @ANYRES32], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.41388183s ago: executing program 8 (id=1859):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xc8, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x94, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x84, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x8}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x84, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffff85, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0xfff}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x67, 0x1, {0x1002, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc, 0x7}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0xc8}}, 0x0)

1.211972519s ago: executing program 8 (id=1860):
syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x9, 0x3, 0xc}, {0x6, 0x24, 0x1a, 0xbae}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xe, 0x4, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x4, 0xc0}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0x54, 0x5}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x8, 0x6, 0x6, 0xff, 0xda}, 0xfffffd32, &(0x7f0000000400)=ANY=[@ANYBLOB="050f240004f9454cf54679cc98612015910b10010c250007f1d4b4d503100b0710020cd509000a10030a0a000608070001d921ba6f4ade093b4a2cb06e277e9d7756b4accb71c43014a7a3e875a70fad2059d1f21e28b4a5487b9802c4ed2c0be8831de5c1500e1d088598b37764728e764fa41c467ad992022095a7f123b502ed477958091717dbf58adf0a8f3556c7119e"], 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x426}}, {0x9c, &(0x7f0000000540)=@string={0x9c, 0x3, "6e80bd03717ded927e4da3a08a34be24806ba90e913b7609f446341c027a0c38d0c31abd15c85b02e1364b5f785a121378ec03137e51938758be477208e0aedb3c576596a1067ce0ea6fd22f0680e379ac97dcfda47ab7ee28879c46bffd95909d00b31569f016a3c9f180350c5bc4c8ac568f0c825dbf832e44223d3c93e69496d3a0926137266d75040514a37cdd917099b37614eaf8d137b0"}}, {0xd8, &(0x7f0000000600)=@string={0xd8, 0x3, "b66be34a4000e53928daa76c8145ee467537a638869d9bf49678bbbfb7853cc02023e5dff611d6f7aa95656f5a440aff8b9936e57dedb6996765b5304299ffd7dd72e96298f61258354f0e359b0adc9999dbead9c32443e0a302039ec4799fd68335c4f9b8c30cecc99194b88b7ee7dd751fdc4a01b03917dd8bce730eba9678c2ac3e325145d1347ed0cdc9a61e62f2780d2d72e5edc7a3a06967253638d697b99cc539840f6bdffb6058a96a238e5c0042594fcd30b2d9d47d88c3a6bac73f17453472d8c2c70c0ed62f8bbf1fd989d534f79cbbdd"}}, {0xc, &(0x7f0000000200)=@string={0xc, 0x3, "02fb89d2838acb592262"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1801}}]})
ftruncate(0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0)

980.417484ms ago: executing program 9 (id=1861):
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18)
connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18)
sendmmsg(r3, &(0x7f000000a200), 0x3ffffffffffff31, 0x60000800)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r5=>0x0})
connect$can_j1939(r3, &(0x7f0000000a40)={0x1d, r5, 0x0, {0x0, 0xf, 0x1}, 0x2}, 0x18)

0s ago: executing program 9 (id=1862):
r0 = epoll_create1(0x0)
r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=<r2=>0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x2})

kernel console output (not intermixed with test programs):

ltsetting 48: 48, using maximum allowed: 30
[ 1465.116990][ T8868] usb 9-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[ 1465.117020][ T8868] usb 9-1: config 0 interface 48 has no altsetting 0
[ 1465.120925][ T8868] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1465.121042][ T8868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1465.121065][ T8868] usb 9-1: Product: syz
[ 1465.121080][ T8868] usb 9-1: Manufacturer: syz
[ 1465.121096][ T8868] usb 9-1: SerialNumber: syz
[ 1465.214815][ T8868] usb 9-1: config 0 descriptor??
[ 1466.570272][ T8868] usb 9-1: USB disconnect, device number 58
[ 1466.669385][T14100] ALSA: mixer_oss: invalid OSS volume '�e'
[ 1466.773750][T13941] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1466.774753][T13941] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1466.774961][T13941] bridge_slave_0: entered allmulticast mode
[ 1466.777043][T13941] bridge_slave_0: entered promiscuous mode
[ 1466.821519][T13941] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1466.821589][T13941] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1466.821717][T13941] bridge_slave_1: entered allmulticast mode
[ 1466.828059][T13941] bridge_slave_1: entered promiscuous mode
[ 1466.973402][ T6017] hsr_slave_0: left promiscuous mode
[ 1466.993483][ T6017] hsr_slave_1: left promiscuous mode
[ 1466.994492][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1467.026398][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1467.254066][ T6017] hsr_slave_0: left promiscuous mode
[ 1467.274461][ T6017] hsr_slave_1: left promiscuous mode
[ 1467.276143][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1467.315784][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1467.963024][   T31] usb 10-1: new high-speed USB device number 75 using dummy_hcd
[ 1468.882912][   T31] usb 10-1: Using ep0 maxpacket: 32
[ 1468.884718][   T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1468.887162][   T31] usb 10-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[ 1468.887192][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1468.887204][   T31] usb 10-1: Product: syz
[ 1468.887212][   T31] usb 10-1: Manufacturer: syz
[ 1468.887220][   T31] usb 10-1: SerialNumber: syz
[ 1468.890382][   T31] usb 10-1: config 0 descriptor??
[ 1468.895279][   T31] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[ 1469.235936][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1545'.
[ 1469.803881][ T6017] team0 (unregistering): Port device team_slave_1 removed
[ 1469.992002][   T31] input: gspca_pac7302 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input84
[ 1470.017041][T14118] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1470.143829][ T6017] team0 (unregistering): Port device team_slave_0 removed
[ 1470.204663][ T8868] usb 10-1: USB disconnect, device number 75
[ 1471.173741][T14123] fuse: Unknown parameter '0x0000000000000004'
[ 1473.234691][ T7792] Bluetooth: hci2: unexpected event for opcode 0x3065
[ 1474.148313][T14146] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1553'.
[ 1476.343600][ T6017] team0 (unregistering): Port device team_slave_1 removed
[ 1476.524771][ T6017] team0 (unregistering): Port device team_slave_0 removed
[ 1476.602994][T14096] usb 10-1: new high-speed USB device number 76 using dummy_hcd
[ 1476.817683][T14096] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[ 1476.817712][T14096] usb 10-1: config 0 has no interface number 0
[ 1476.817742][T14096] usb 10-1: too many endpoints for config 0 interface 2 altsetting 1: 65, using maximum allowed: 30
[ 1476.817774][T14096] usb 10-1: config 0 interface 2 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1476.817789][T14096] usb 10-1: config 0 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[ 1476.817804][T14096] usb 10-1: config 0 interface 2 has no altsetting 0
[ 1476.817825][T14096] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1476.817838][T14096] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1476.823969][T14096] usb 10-1: config 0 descriptor??
[ 1477.296574][T14096] hid-multitouch 0003:1FD2:6007.0012: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.9-1/input2
[ 1477.537770][T14157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1477.538176][T14157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1477.564346][T14096] usb 10-1: USB disconnect, device number 76
[ 1479.665734][T14096] usb 9-1: new high-speed USB device number 59 using dummy_hcd
[ 1479.853254][T14096] usb 9-1: Using ep0 maxpacket: 32
[ 1479.856179][T14096] usb 9-1: config 6 has an invalid interface number: 2 but max is 0
[ 1479.856214][T14096] usb 9-1: config 6 has no interface number 0
[ 1479.856233][T14096] usb 9-1: config 6 interface 2 has no altsetting 0
[ 1479.861163][T14096] usb 9-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=47.b9
[ 1479.861193][T14096] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1479.861204][T14096] usb 9-1: Product: ဉ
[ 1479.861212][T14096] usb 9-1: Manufacturer: М
[ 1479.861220][T14096] usb 9-1: SerialNumber: 䀊
[ 1480.137059][T14096] usb 9-1: USB disconnect, device number 59
[ 1480.446112][T13941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1480.450433][T13941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1481.566631][T14180] 9p: Bad value for 'wfdno'
[ 1483.015625][T13941] team0: Port device team_slave_0 added
[ 1483.031812][T13941] team0: Port device team_slave_1 added
[ 1483.463178][ T7792] Bluetooth: hci2: unexpected event for opcode 0x0000
[ 1484.779347][T13941] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1484.779364][T13941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1484.779391][T13941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1484.781934][T13941] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1484.781949][T13941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1484.781974][T13941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1486.085875][T13941] hsr_slave_0: entered promiscuous mode
[ 1486.087213][T13941] hsr_slave_1: entered promiscuous mode
[ 1487.034682][ T7924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1487.069805][ T7924] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1487.074684][ T7924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1487.079258][ T7924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1487.080102][ T7924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1487.487746][ T7924] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1487.488050][ T7924] Bluetooth: hci2: Injecting HCI hardware error event
[ 1487.490820][ T7792] Bluetooth: hci2: hardware error 0x00
[ 1488.143787][   T31] usb 10-1: new high-speed USB device number 77 using dummy_hcd
[ 1488.433104][   T31] usb 10-1: Using ep0 maxpacket: 16
[ 1488.467803][   T31] usb 10-1: too many configurations: 123, using maximum allowed: 8
[ 1488.469779][   T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1488.480900][   T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1488.483019][   T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1488.488217][   T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1488.495229][   T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1488.498084][   T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1488.521489][   T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1488.594247][   T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1488.596235][   T31] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1488.596264][   T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1488.596286][   T31] usb 10-1: SerialNumber: syz
[ 1489.192732][ T7924] Bluetooth: hci4: command tx timeout
[ 1489.259835][   T31] usb 10-1: config 0 descriptor??
[ 1489.268593][   T31] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input85
[ 1489.569374][ T7792] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1489.573742][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1574'.
[ 1489.723376][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1489.723446][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1490.596958][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1575'.
[ 1491.090077][ T5153] bcm5974 10-1:0.0: could not read from device
[ 1491.139148][T13917] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1491.176489][   T31] usb 10-1: USB disconnect, device number 77
[ 1491.313965][ T7792] Bluetooth: hci4: command tx timeout
[ 1492.112275][T13917] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1492.189472][T13917] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1493.027737][T13917] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1493.204927][T14096] usb 9-1: new high-speed USB device number 60 using dummy_hcd
[ 1493.327795][ T7792] Bluetooth: hci4: command tx timeout
[ 1493.356079][T14096] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[ 1493.356108][T14096] usb 9-1: config 0 has no interface number 0
[ 1493.356137][T14096] usb 9-1: too many endpoints for config 0 interface 2 altsetting 1: 65, using maximum allowed: 30
[ 1493.356162][T14096] usb 9-1: config 0 interface 2 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1493.356177][T14096] usb 9-1: config 0 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[ 1493.356192][T14096] usb 9-1: config 0 interface 2 has no altsetting 0
[ 1493.356212][T14096] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1493.356225][T14096] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1493.360069][T14096] usb 9-1: config 0 descriptor??
[ 1493.534275][ T6017] bridge_slave_1: left allmulticast mode
[ 1493.534357][ T6017] bridge_slave_1: left promiscuous mode
[ 1493.534721][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1493.594741][ T6017] bridge_slave_0: left allmulticast mode
[ 1493.594763][ T6017] bridge_slave_0: left promiscuous mode
[ 1493.595412][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1493.658224][ T6017] bridge_slave_1: left allmulticast mode
[ 1493.658445][ T6017] bridge_slave_1: left promiscuous mode
[ 1493.658832][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1493.715903][ T6017] bridge_slave_0: left allmulticast mode
[ 1493.715936][ T6017] bridge_slave_0: left promiscuous mode
[ 1493.716377][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1493.770565][T14096] hid-multitouch 0003:1FD2:6007.0013: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input2
[ 1493.970977][T14241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1493.971335][T14241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1493.999166][  T805] usb 9-1: USB disconnect, device number 60
[ 1495.092529][T14256] Can't find ip_set type hash:n�%
[ 1495.274415][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1495.478203][ T7792] Bluetooth: hci4: command tx timeout
[ 1495.525585][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1496.450093][ T6017] bond0 (unregistering): Released all slaves
[ 1496.763755][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1496.826004][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1496.953806][ T6017] bond0 (unregistering): Released all slaves
[ 1497.733032][ T6017] hsr_slave_0: left promiscuous mode
[ 1497.783012][ T6017] hsr_slave_1: left promiscuous mode
[ 1497.784021][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1497.908666][ T7924] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1497.941813][ T7924] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1497.951018][ T7924] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1498.019397][ T7924] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1498.030783][ T7924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1498.158136][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1498.600375][ T6017] hsr_slave_0: left promiscuous mode
[ 1498.693030][ T6017] hsr_slave_1: left promiscuous mode
[ 1498.693979][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1498.750174][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1499.664810][ T6017] team0 (unregistering): Port device team_slave_1 removed
[ 1499.844751][ T6017] team0 (unregistering): Port device team_slave_0 removed
[ 1500.242061][ T7924] Bluetooth: hci5: command tx timeout
[ 1500.474252][T14287] FAULT_INJECTION: forcing a failure.
[ 1500.474252][T14287] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1500.474290][T14287] CPU: 1 UID: 0 PID: 14287 Comm: syz.9.1588 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1500.474318][T14287] Tainted: [L]=SOFTLOCKUP
[ 1500.474326][T14287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1500.474339][T14287] Call Trace:
[ 1500.474347][T14287]  <TASK>
[ 1500.474356][T14287]  dump_stack_lvl+0xe8/0x150
[ 1500.474395][T14287]  should_fail_ex+0x46c/0x600
[ 1500.474426][T14287]  _copy_from_iter+0x1cd/0x1630
[ 1500.474454][T14287]  ? kmalloc_reserve+0xbd/0x290
[ 1500.474475][T14287]  ? rcu_is_watching+0x15/0xb0
[ 1500.474500][T14287]  ? __pfx__copy_from_iter+0x10/0x10
[ 1500.474526][T14287]  ? __build_skb_around+0x22d/0x3c0
[ 1500.474549][T14287]  ? __alloc_skb+0x198/0x3a0
[ 1500.474569][T14287]  ? netlink_sendmsg+0x642/0xb30
[ 1500.474592][T14287]  ? skb_put+0x11b/0x210
[ 1500.474616][T14287]  netlink_sendmsg+0x6b2/0xb30
[ 1500.474648][T14287]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1500.474680][T14287]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1500.474704][T14287]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1500.474728][T14287]  __sock_sendmsg+0x21c/0x270
[ 1500.474757][T14287]  ____sys_sendmsg+0x508/0x810
[ 1500.474785][T14287]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1500.474816][T14287]  ? import_iovec+0x74/0xa0
[ 1500.474838][T14287]  ___sys_sendmsg+0x21f/0x2a0
[ 1500.474864][T14287]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1500.474918][T14287]  ? __fget_files+0x2a/0x420
[ 1500.474938][T14287]  ? __fget_files+0x3a6/0x420
[ 1500.474966][T14287]  __x64_sys_sendmsg+0x1a1/0x260
[ 1500.474993][T14287]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1500.475030][T14287]  ? __pfx_ksys_write+0x10/0x10
[ 1500.475067][T14287]  do_syscall_64+0xec/0xf80
[ 1500.475087][T14287]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1500.475105][T14287]  ? trace_irq_disable+0x37/0x100
[ 1500.475125][T14287]  ? clear_bhb_loop+0x60/0xb0
[ 1500.475148][T14287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1500.475167][T14287] RIP: 0033:0x7f11c13ef749
[ 1500.475184][T14287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1500.475202][T14287] RSP: 002b:00007f11bf656038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1500.475240][T14287] RAX: ffffffffffffffda RBX: 00007f11c1645fa0 RCX: 00007f11c13ef749
[ 1500.475254][T14287] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[ 1500.475270][T14287] RBP: 00007f11bf656090 R08: 0000000000000000 R09: 0000000000000000
[ 1500.475281][T14287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1500.475293][T14287] R13: 00007f11c1646038 R14: 00007f11c1645fa0 R15: 00007fff7e86ca18
[ 1500.475323][T14287]  </TASK>
[ 1501.334372][ T7792] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1501.346095][ T7792] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1501.347606][ T7792] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1501.349328][ T7792] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1501.350228][ T7792] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1502.371201][ T7792] Bluetooth: hci5: command tx timeout
[ 1503.434075][ T7792] Bluetooth: hci6: command tx timeout
[ 1504.444534][ T7792] Bluetooth: hci5: command tx timeout
[ 1504.583977][ T6017] team0 (unregistering): Port device team_slave_1 removed
[ 1504.757510][ T6017] team0 (unregistering): Port device team_slave_0 removed
[ 1505.483032][ T7792] Bluetooth: hci6: command tx timeout
[ 1506.691433][ T7924] Bluetooth: hci5: command tx timeout
[ 1507.027410][T14210] chnl_net:caif_netlink_parms(): no params data found
[ 1507.563864][ T7924] Bluetooth: hci6: command tx timeout
[ 1507.846154][T14210] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1507.846270][T14210] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1507.846401][T14210] bridge_slave_0: entered allmulticast mode
[ 1507.848007][T14210] bridge_slave_0: entered promiscuous mode
[ 1507.871940][T14210] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1507.872061][T14210] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1507.872244][T14210] bridge_slave_1: entered allmulticast mode
[ 1507.902575][T14210] bridge_slave_1: entered promiscuous mode
[ 1509.770997][ T7924] Bluetooth: hci6: command tx timeout
[ 1509.936965][T14210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1509.983783][ T5944] usb 9-1: new high-speed USB device number 61 using dummy_hcd
[ 1510.006017][T14210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1510.156140][ T5944] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[ 1510.156170][ T5944] usb 9-1: config 0 has no interface number 0
[ 1510.156203][ T5944] usb 9-1: too many endpoints for config 0 interface 2 altsetting 1: 65, using maximum allowed: 30
[ 1510.156226][ T5944] usb 9-1: config 0 interface 2 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1510.156241][ T5944] usb 9-1: config 0 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[ 1510.156256][ T5944] usb 9-1: config 0 interface 2 has no altsetting 0
[ 1510.156275][ T5944] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1510.156288][ T5944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1510.159099][ T5944] usb 9-1: config 0 descriptor??
[ 1510.192988][ T8696] usb 10-1: new high-speed USB device number 78 using dummy_hcd
[ 1510.353090][ T8696] usb 10-1: Using ep0 maxpacket: 16
[ 1510.370830][ T8696] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1510.370860][ T8696] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1510.393854][ T8696] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1510.393874][ T8696] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1510.393895][ T8696] usb 10-1: Product: syz
[ 1510.393910][ T8696] usb 10-1: Manufacturer: syz
[ 1510.393926][ T8696] usb 10-1: SerialNumber: syz
[ 1510.503746][T14210] team0: Port device team_slave_0 added
[ 1510.549386][T14210] team0: Port device team_slave_1 added
[ 1510.585323][ T5944] hid-multitouch 0003:1FD2:6007.0014: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input2
[ 1510.619821][ T8696] usb 10-1: 0:2 : does not exist
[ 1510.632662][ T8696] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[ 1510.659795][ T8696] usb 10-1: USB disconnect, device number 78
[ 1510.763087][T14210] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1510.763106][T14210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1510.763132][T14210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1510.777085][T14210] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1510.777102][T14210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1510.777129][T14210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1510.782177][T14357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1510.782565][T14357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1510.791786][   T31] usb 9-1: USB disconnect, device number 61
[ 1511.221271][T14210] hsr_slave_0: entered promiscuous mode
[ 1511.223131][T14210] hsr_slave_1: entered promiscuous mode
[ 1511.224103][T14210] debugfs: 'hsr0' already exists in 'hsr'
[ 1511.224127][T14210] Cannot create hsr debugfs directory
[ 1511.233495][T14290] chnl_net:caif_netlink_parms(): no params data found
[ 1513.793273][T14276] chnl_net:caif_netlink_parms(): no params data found
[ 1515.783507][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1618'.
[ 1515.975752][T14290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1515.975880][T14290] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1515.976007][T14290] bridge_slave_0: entered allmulticast mode
[ 1515.977414][T14290] bridge_slave_0: entered promiscuous mode
[ 1516.094331][T14290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1516.094489][T14290] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1516.094682][T14290] bridge_slave_1: entered allmulticast mode
[ 1516.096849][T14290] bridge_slave_1: entered promiscuous mode
[ 1516.222947][ T8696] usb 10-1: new high-speed USB device number 79 using dummy_hcd
[ 1516.373732][ T8696] usb 10-1: Using ep0 maxpacket: 16
[ 1516.376900][ T8696] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1516.378090][ T8696] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[ 1516.381100][ T8696] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1516.381128][ T8696] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1516.381140][ T8696] usb 10-1: Product: 殶䫣@㧥沧䖁䛮㝵㢦鶆碖뾻薷쀼⌠ᇶ閪潥䑚＊馋馶敧サ饂퟿狝择堒伵㔎છ駜Ⓝʣ鸃秄횟㖃龍쎸釉뢔纋ή䫜뀁᜹话珎먎碖곂㈾䕑㓑큾짍Ầ൸爭ꏇ榠╧㠶韖鲹㧅྄惻꥘⍪岎䈀余ネ緔쎈몦㿇䔗爴싘ೇ혎謯᾿觙㓕鳷
[ 1516.381209][ T8696] usb 10-1: Manufacturer: 聮ν統鋭䵾ꂣ㒊Ⓘ殀ຩ㮑ॶ䛴ᰴ稂㠌쏐봚정ɛ㛡彋婸ጒጃ兾螓빘片圼陥ڡ濪⿒耆秣鞬﷜窤蜨䚜ﶿ邕ᖳꌖ㖀嬌죄嚬ಏ嶂莿䐮㴢錼铦펖銠㝡洦ѵᐅ粣針饰皳퇸뀷
[ 1516.381237][ T8696] usb 10-1: SerialNumber: fl튉誃始戢
[ 1516.421881][ T8696] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found
[ 1516.421936][ T8696] cdc_ncm 10-1:1.0: bind() failure
[ 1516.438028][ T8696] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found
[ 1516.438080][ T8696] cdc_ncm 10-1:1.1: bind() failure
[ 1516.569519][T14276] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1516.569651][T14276] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1516.569824][T14276] bridge_slave_0: entered allmulticast mode
[ 1516.571360][T14276] bridge_slave_0: entered promiscuous mode
[ 1516.609810][T14290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1516.684019][T14276] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1516.684145][T14276] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1516.684322][T14276] bridge_slave_1: entered allmulticast mode
[ 1516.686028][T14276] bridge_slave_1: entered promiscuous mode
[ 1516.722289][T14290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1517.955909][T14276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1518.198060][T14290] team0: Port device team_slave_0 added
[ 1518.306344][T14276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1518.339160][T14290] team0: Port device team_slave_1 added
[ 1518.806695][T14276] team0: Port device team_slave_0 added
[ 1518.869976][T14290] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1518.869992][T14290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1518.870013][T14290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1518.921325][T14276] team0: Port device team_slave_1 added
[ 1518.922261][T14290] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1518.922276][T14290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1518.922303][T14290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1518.991409][  T805] usb 10-1: USB disconnect, device number 79
[ 1520.695334][T14210] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1520.779279][T14276] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1520.779297][T14276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1520.779325][T14276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1520.780046][T14210] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1520.898696][T14276] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1520.898715][T14276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1520.898741][T14276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1520.900469][T14210] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1521.806572][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1628'.
[ 1521.933405][T14210] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1522.040841][T14435] FAULT_INJECTION: forcing a failure.
[ 1522.040841][T14435] name fail_futex, interval 1, probability 0, space 0, times 1
[ 1522.040962][T14435] CPU: 0 UID: 0 PID: 14435 Comm: syz.9.1626 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1522.040990][T14435] Tainted: [L]=SOFTLOCKUP
[ 1522.040998][T14435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1522.041011][T14435] Call Trace:
[ 1522.041019][T14435]  <TASK>
[ 1522.041028][T14435]  dump_stack_lvl+0xe8/0x150
[ 1522.041059][T14435]  should_fail_ex+0x46c/0x600
[ 1522.041090][T14435]  get_futex_key+0x8ff/0x1660
[ 1522.041126][T14435]  ? __pfx_get_futex_key+0x10/0x10
[ 1522.041148][T14435]  ? __lock_acquire+0x6b6/0x2cf0
[ 1522.041175][T14435]  ? __lock_acquire+0x6b6/0x2cf0
[ 1522.041205][T14435]  futex_wake+0xf8/0x560
[ 1522.041231][T14435]  ? __pfx_futex_wake+0x10/0x10
[ 1522.041259][T14435]  ? do_raw_spin_lock+0x121/0x290
[ 1522.041292][T14435]  do_futex+0x395/0x420
[ 1522.041317][T14435]  ? __might_fault+0xb0/0x130
[ 1522.041348][T14435]  ? __pfx_do_futex+0x10/0x10
[ 1522.041378][T14435]  ? __might_fault+0xb0/0x130
[ 1522.041406][T14435]  mm_release+0x103/0x290
[ 1522.041430][T14435]  exit_mm+0x52/0x230
[ 1522.041453][T14435]  ? unwind_deferred_task_exit+0x68/0xa0
[ 1522.041474][T14435]  do_exit+0x627/0x22f0
[ 1522.041500][T14435]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1522.041520][T14435]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1522.041540][T14435]  ? __pfx_do_exit+0x10/0x10
[ 1522.041563][T14435]  ? rt_mutex_slowunlock+0x493/0x8a0
[ 1522.041586][T14435]  ? reacquire_held_locks+0x104/0x190
[ 1522.041612][T14435]  ? rt_spin_lock+0x1c1/0x3e0
[ 1522.041646][T14435]  do_group_exit+0x21c/0x2d0
[ 1522.041671][T14435]  ? rt_spin_unlock+0x161/0x200
[ 1522.041697][T14435]  get_signal+0x125d/0x1310
[ 1522.041738][T14435]  arch_do_signal_or_restart+0x9a/0x7a0
[ 1522.041770][T14435]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1522.041804][T14435]  ? ksys_write+0x230/0x260
[ 1522.041838][T14435]  exit_to_user_mode_loop+0x87/0x4e0
[ 1522.041863][T14435]  ? rcu_is_watching+0x15/0xb0
[ 1522.041885][T14435]  do_syscall_64+0x2b7/0xf80
[ 1522.041903][T14435]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1522.041922][T14435]  ? trace_irq_disable+0x37/0x100
[ 1522.041942][T14435]  ? clear_bhb_loop+0x60/0xb0
[ 1522.041965][T14435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1522.041984][T14435] RIP: 0033:0x7f11c13ef749
[ 1522.042001][T14435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1522.042017][T14435] RSP: 002b:00007f11bf656038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1522.042039][T14435] RAX: 0000000000002000 RBX: 00007f11c1645fa0 RCX: 00007f11c13ef749
[ 1522.042054][T14435] RDX: 0000000000003002 RSI: 0000000000002000 RDI: 0000000000000003
[ 1522.042067][T14435] RBP: 00007f11bf656090 R08: 0000200000000040 R09: 0000000000000008
[ 1522.042081][T14435] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1522.042092][T14435] R13: 00007f11c1646038 R14: 00007f11c1645fa0 R15: 00007fff7e86ca18
[ 1522.042120][T14435]  </TASK>
[ 1524.476062][T14290] hsr_slave_0: entered promiscuous mode
[ 1524.477391][T14290] hsr_slave_1: entered promiscuous mode
[ 1524.478282][T14290] debugfs: 'hsr0' already exists in 'hsr'
[ 1524.478306][T14290] Cannot create hsr debugfs directory
[ 1525.178878][T14276] hsr_slave_0: entered promiscuous mode
[ 1525.182329][T14276] hsr_slave_1: entered promiscuous mode
[ 1525.183806][T14276] debugfs: 'hsr0' already exists in 'hsr'
[ 1525.183831][T14276] Cannot create hsr debugfs directory
[ 1525.755760][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1636'.
[ 1526.797953][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1639'.
[ 1529.474382][ T6017] bridge_slave_1: left allmulticast mode
[ 1529.474413][ T6017] bridge_slave_1: left promiscuous mode
[ 1529.474681][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1529.534599][ T6017] bridge_slave_0: left allmulticast mode
[ 1529.534629][ T6017] bridge_slave_0: left promiscuous mode
[ 1529.534910][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1529.640857][ T6017] bridge_slave_1: left allmulticast mode
[ 1529.640888][ T6017] bridge_slave_1: left promiscuous mode
[ 1529.641126][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1529.734870][ T6017] bridge_slave_0: left allmulticast mode
[ 1529.734901][ T6017] bridge_slave_0: left promiscuous mode
[ 1529.735176][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1530.333868][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1530.423869][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1530.465805][ T6017] bond0 (unregistering): Released all slaves
[ 1531.053976][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1531.113873][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1531.176932][ T6017] bond0 (unregistering): Released all slaves
[ 1531.254484][T14511] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1645'.
[ 1531.295645][T14511] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1645'.
[ 1531.495028][T14210] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1531.796853][ T6017] hsr_slave_0: left promiscuous mode
[ 1531.807590][ T8696] usb 9-1: new high-speed USB device number 62 using dummy_hcd
[ 1531.833169][ T6017] hsr_slave_1: left promiscuous mode
[ 1531.834050][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1531.934552][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1532.002043][ T8696] usb 9-1: Using ep0 maxpacket: 32
[ 1532.011035][ T8696] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1532.029732][ T8696] usb 9-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[ 1532.029770][ T8696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1532.029792][ T8696] usb 9-1: Product: syz
[ 1532.029807][ T8696] usb 9-1: Manufacturer: syz
[ 1532.029823][ T8696] usb 9-1: SerialNumber: syz
[ 1532.065946][ T8696] usb 9-1: config 0 descriptor??
[ 1532.071929][ T8696] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[ 1532.157472][ T6017] hsr_slave_0: left promiscuous mode
[ 1532.173097][ T6017] hsr_slave_1: left promiscuous mode
[ 1532.174437][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1532.197249][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1532.955519][ T8696] input: gspca_pac7302 as /devices/platform/dummy_hcd.8/usb9/9-1/input/input86
[ 1532.972885][ T6017] team0 (unregistering): Port device team_slave_1 removed
[ 1533.133908][ T6017] team0 (unregistering): Port device team_slave_0 removed
[ 1533.187932][ T6012] usb 9-1: USB disconnect, device number 62
[ 1534.484766][ T6017] team0 (unregistering): Port device team_slave_1 removed
[ 1534.643454][ T6017] team0 (unregistering): Port device team_slave_0 removed
[ 1535.743746][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1646'.
[ 1535.877839][T14210] 8021q: adding VLAN 0 to HW filter on device team0
[ 1535.900163][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1535.900381][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1536.068715][ T9064] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1536.068909][ T9064] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1536.998643][T14528] block nbd9: shutting down sockets
[ 1537.154666][T14210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1537.801383][T14210] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1537.907759][T14551] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1655'.
[ 1539.842412][T14558] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1539.842456][T14558] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1539.842477][T14558] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1539.874876][T14210] veth0_vlan: entered promiscuous mode
[ 1539.948777][T14210] veth1_vlan: entered promiscuous mode
[ 1540.211299][T14210] veth0_macvtap: entered promiscuous mode
[ 1540.226094][T14210] veth1_macvtap: entered promiscuous mode
[ 1540.267450][T14210] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1540.284959][T14210] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1540.304099][ T5971] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1540.304541][ T5971] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1540.307159][ T5971] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1540.307373][ T5971] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1540.717644][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1658'.
[ 1540.846911][  T805] usb 10-1: new full-speed USB device number 80 using dummy_hcd
[ 1541.069035][  T805] usb 10-1: config 0 has an invalid interface number: 48 but max is 0
[ 1541.069072][  T805] usb 10-1: config 0 has no interface number 0
[ 1541.069116][  T805] usb 10-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[ 1541.069163][  T805] usb 10-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[ 1541.069193][  T805] usb 10-1: config 0 interface 48 has no altsetting 0
[ 1541.090075][  T805] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1541.090119][  T805] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1541.090183][  T805] usb 10-1: Product: syz
[ 1541.090199][  T805] usb 10-1: Manufacturer: syz
[ 1541.090215][  T805] usb 10-1: SerialNumber: syz
[ 1541.283898][  T805] usb 10-1: config 0 descriptor??
[ 1544.340788][  T805] usb 10-1: USB disconnect, device number 80
[ 1544.455551][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1544.455574][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1544.502996][ T6086] usb 9-1: new full-speed USB device number 63 using dummy_hcd
[ 1544.669990][ T6086] usb 9-1: config 0 has an invalid interface number: 48 but max is 0
[ 1544.670021][ T6086] usb 9-1: config 0 has no interface number 0
[ 1544.670059][ T6086] usb 9-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[ 1544.670101][ T6086] usb 9-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[ 1544.670132][ T6086] usb 9-1: config 0 interface 48 has no altsetting 0
[ 1544.673034][ T6086] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1544.673064][ T6086] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1544.673083][ T6086] usb 9-1: Product: syz
[ 1544.673096][ T6086] usb 9-1: Manufacturer: syz
[ 1544.673109][ T6086] usb 9-1: SerialNumber: syz
[ 1544.681127][ T6086] usb 9-1: config 0 descriptor??
[ 1546.020092][T14290] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1546.034443][ T6086] usb 9-1: USB disconnect, device number 63
[ 1546.131372][T14290] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1546.131684][ T1510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1546.131694][ T1510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1546.195032][T14290] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1546.261983][T14290] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1546.309159][T14276] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1546.354863][T14276] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1546.406986][T14276] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1546.449695][T14276] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1547.087037][T14290] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1547.805825][T14602] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1664'.
[ 1548.516165][ T7792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1548.521345][ T7792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1548.523947][ T7792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1548.529896][ T7792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1548.541307][ T7792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1548.612150][ T5940] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1548.909775][T14290] 8021q: adding VLAN 0 to HW filter on device team0
[ 1549.551575][T14276] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1549.611949][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1549.612168][ T6204] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1549.936869][ T5940] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1549.982087][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1667'.
[ 1549.999480][  T808] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1549.999631][  T808] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1550.033173][T14573] usb 10-1: new high-speed USB device number 81 using dummy_hcd
[ 1550.046290][T14276] 8021q: adding VLAN 0 to HW filter on device team0
[ 1550.183286][T14573] usb 10-1: Using ep0 maxpacket: 16
[ 1550.186484][T14573] usb 10-1: too many configurations: 123, using maximum allowed: 8
[ 1550.218759][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1550.245284][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1550.250869][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1550.280545][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1550.282341][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1550.307023][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1550.308964][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1550.311002][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1550.312731][T14573] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1550.312765][T14573] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1550.365128][T14573] usb 10-1: SerialNumber: syz
[ 1550.369449][ T5940] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1550.371399][T14573] usb 10-1: config 0 descriptor??
[ 1550.425567][T14573] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input87
[ 1550.608012][ T7924] Bluetooth: hci3: command tx timeout
[ 1550.611508][ T9064] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1550.611802][ T9064] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1550.698945][ T9064] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1550.699051][ T9064] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1551.092754][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1551.099875][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1551.446341][ T5153] bcm5974 10-1:0.0: could not read from device
[ 1551.470250][T14573] usb 10-1: USB disconnect, device number 81
[ 1551.651385][ T5940] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1553.202180][T14604] chnl_net:caif_netlink_parms(): no params data found
[ 1553.543070][T14648] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1673'.
[ 1553.754652][T14645] Can't find ip_set type hash:n�%
[ 1554.207731][ T7924] Bluetooth: hci3: command tx timeout
[ 1555.246316][T14658] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1555.246361][T14658] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1555.246383][T14658] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1556.047336][ T5940] bridge_slave_1: left allmulticast mode
[ 1556.047367][ T5940] bridge_slave_1: left promiscuous mode
[ 1556.047619][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1556.057236][T14671] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1679'.
[ 1556.145332][ T5940] bridge_slave_0: left allmulticast mode
[ 1556.145353][ T5940] bridge_slave_0: left promiscuous mode
[ 1556.145538][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1556.283520][ T7924] Bluetooth: hci3: command tx timeout
[ 1556.373244][T14573] usb 10-1: new high-speed USB device number 82 using dummy_hcd
[ 1556.533214][T14573] usb 10-1: Using ep0 maxpacket: 16
[ 1556.534308][T14573] usb 10-1: too many configurations: 123, using maximum allowed: 8
[ 1556.536650][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1556.538661][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1556.578447][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1556.581279][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1556.605893][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1556.608191][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1556.611145][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1556.696412][T14573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1556.700560][T14573] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1556.700591][T14573] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1556.700613][T14573] usb 10-1: SerialNumber: syz
[ 1556.711605][T14573] usb 10-1: config 0 descriptor??
[ 1556.742457][T14573] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input88
[ 1557.354414][ T5153] bcm5974 10-1:0.0: could not read from device
[ 1557.436669][T14573] usb 10-1: USB disconnect, device number 82
[ 1558.004595][T14678] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1682'.
[ 1558.113455][T14678] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1682'.
[ 1558.381174][ T7924] Bluetooth: hci3: command tx timeout
[ 1558.953579][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1559.017677][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1559.035705][ T5940] bond0 (unregistering): Released all slaves
[ 1559.253962][T14604] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1559.254088][T14604] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1559.254326][T14604] bridge_slave_0: entered allmulticast mode
[ 1559.256466][T14604] bridge_slave_0: entered promiscuous mode
[ 1559.718265][T14604] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1559.718396][T14604] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1559.718645][T14604] bridge_slave_1: entered allmulticast mode
[ 1559.721199][T14604] bridge_slave_1: entered promiscuous mode
[ 1559.754119][ T7792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1559.759601][ T7792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1559.875157][T14688] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1683'.
[ 1560.023682][ T7792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1560.137836][ T7792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1560.178569][ T7792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1561.893457][T14604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1561.996976][T14604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1562.899150][ T7792] Bluetooth: hci4: command tx timeout
[ 1562.925642][T14695] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1562.925688][T14695] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1562.925709][T14695] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1562.975562][ T7924] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1562.986776][ T7924] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1562.992005][ T7924] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1562.995402][ T7924] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1562.996309][ T7924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1563.098781][T14604] team0: Port device team_slave_0 added
[ 1563.255685][ T5940] hsr_slave_0: left promiscuous mode
[ 1563.293181][ T5940] hsr_slave_1: left promiscuous mode
[ 1563.294268][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1563.294294][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1563.366105][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1563.366130][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1563.458732][ T5940] veth1_macvtap: left promiscuous mode
[ 1563.458799][ T5940] veth0_macvtap: left promiscuous mode
[ 1563.458939][ T5940] veth1_vlan: left promiscuous mode
[ 1563.459036][ T5940] veth0_vlan: left promiscuous mode
[ 1563.634108][T14573] usb 9-1: new high-speed USB device number 64 using dummy_hcd
[ 1563.793253][T14573] usb 9-1: Using ep0 maxpacket: 16
[ 1563.796102][T14573] usb 9-1: too many configurations: 123, using maximum allowed: 8
[ 1563.798371][T14573] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1563.877898][T14573] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1563.904244][T14573] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1563.906143][T14573] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1563.910753][T14573] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1563.913497][T14573] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1563.927034][T14573] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1563.929604][T14573] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1563.938670][T14573] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1563.938701][T14573] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1563.938723][T14573] usb 9-1: SerialNumber: syz
[ 1563.952559][T14573] usb 9-1: config 0 descriptor??
[ 1564.070026][T14573] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input89
[ 1564.685504][ T5153] bcm5974 9-1:0.0: could not read from device
[ 1564.689032][ T5889] usb 9-1: USB disconnect, device number 64
[ 1564.923995][ T7792] Bluetooth: hci4: command tx timeout
[ 1565.129282][ T7792] Bluetooth: hci5: command tx timeout
[ 1565.248403][T14715] FAULT_INJECTION: forcing a failure.
[ 1565.248403][T14715] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1565.248458][T14715] CPU: 1 UID: 0 PID: 14715 Comm: syz.8.1692 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1565.248486][T14715] Tainted: [L]=SOFTLOCKUP
[ 1565.248494][T14715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1565.248506][T14715] Call Trace:
[ 1565.248515][T14715]  <TASK>
[ 1565.248524][T14715]  dump_stack_lvl+0xe8/0x150
[ 1565.248555][T14715]  should_fail_ex+0x46c/0x600
[ 1565.248586][T14715]  _copy_from_user+0x2d/0xb0
[ 1565.248607][T14715]  move_addr_to_kernel+0x7e/0x160
[ 1565.248637][T14715]  io_submit_sqes+0xad3/0x2140
[ 1565.248692][T14715]  __se_sys_io_uring_enter+0x2df/0x2b00
[ 1565.248726][T14715]  ? do_raw_spin_lock+0x121/0x290
[ 1565.248760][T14715]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[ 1565.248783][T14715]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1565.248802][T14715]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1565.248822][T14715]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1565.248846][T14715]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1565.248880][T14715]  ? fput+0xa0/0xd0
[ 1565.248903][T14715]  ? ksys_write+0x230/0x260
[ 1565.248930][T14715]  ? __pfx_ksys_write+0x10/0x10
[ 1565.248960][T14715]  ? __x64_sys_io_uring_enter+0x21/0xf0
[ 1565.248986][T14715]  do_syscall_64+0xec/0xf80
[ 1565.249004][T14715]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1565.249023][T14715]  ? trace_irq_disable+0x37/0x100
[ 1565.249043][T14715]  ? clear_bhb_loop+0x60/0xb0
[ 1565.249072][T14715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1565.249091][T14715] RIP: 0033:0x7fa5282cf749
[ 1565.249109][T14715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1565.249126][T14715] RSP: 002b:00007fa526536038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1565.249147][T14715] RAX: ffffffffffffffda RBX: 00007fa528525fa0 RCX: 00007fa5282cf749
[ 1565.249161][T14715] RDX: 00000000000010f9 RSI: 00000000000047b2 RDI: 0000000000000004
[ 1565.249174][T14715] RBP: 00007fa526536090 R08: 0000000000000000 R09: 0000000000000048
[ 1565.249188][T14715] R10: 0000000000000082 R11: 0000000000000246 R12: 0000000000000001
[ 1565.249200][T14715] R13: 00007fa528526038 R14: 00007fa528525fa0 R15: 00007ffc59a17f08
[ 1565.249233][T14715]  </TASK>
[ 1565.511156][T14717] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1691'.
[ 1566.239109][ T7792] Bluetooth: hci1: ACL packet for unknown connection handle 201
[ 1567.680230][ T7792] Bluetooth: hci4: command tx timeout
[ 1567.682457][ T7792] Bluetooth: hci5: command tx timeout
[ 1569.725138][ T7792] Bluetooth: hci5: command tx timeout
[ 1569.725172][ T7792] Bluetooth: hci4: command tx timeout
[ 1570.547832][ T5940] team0 (unregistering): Port device team_slave_1 removed
[ 1570.834122][ T5940] team0 (unregistering): Port device team_slave_0 removed
[ 1571.821598][ T7792] Bluetooth: hci5: command tx timeout
[ 1573.704961][T14726] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1573.704989][T14726] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1573.705001][T14726] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1573.760180][T14604] team0: Port device team_slave_1 added
[ 1575.012976][T14573] usb 9-1: new high-speed USB device number 65 using dummy_hcd
[ 1575.239573][T14573] usb 9-1: Using ep0 maxpacket: 16
[ 1575.241423][T14573] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1575.241451][T14573] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1575.264315][T14573] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1575.264348][T14573] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1575.264370][T14573] usb 9-1: Product: syz
[ 1575.264384][T14573] usb 9-1: Manufacturer: syz
[ 1575.264400][T14573] usb 9-1: SerialNumber: syz
[ 1576.102596][T14604] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1576.102616][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1576.102644][T14604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1576.163638][T14573] usb 9-1: 0:2 : does not exist
[ 1576.173705][T14573] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[ 1576.211052][T14604] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1576.211069][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1576.211096][T14604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1576.310871][T14573] usb 9-1: USB disconnect, device number 65
[ 1578.081568][T14604] hsr_slave_0: entered promiscuous mode
[ 1578.093299][T14604] hsr_slave_1: entered promiscuous mode
[ 1578.929118][T14686] chnl_net:caif_netlink_parms(): no params data found
[ 1579.008459][T14773] FAULT_INJECTION: forcing a failure.
[ 1579.008459][T14773] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1579.008484][T14773] CPU: 0 UID: 0 PID: 14773 Comm: syz.8.1706 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1579.008500][T14773] Tainted: [L]=SOFTLOCKUP
[ 1579.008504][T14773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1579.008512][T14773] Call Trace:
[ 1579.008516][T14773]  <TASK>
[ 1579.008522][T14773]  dump_stack_lvl+0xe8/0x150
[ 1579.008541][T14773]  should_fail_ex+0x46c/0x600
[ 1579.008558][T14773]  _copy_from_user+0x2d/0xb0
[ 1579.008570][T14773]  ____sys_sendmsg+0x2fa/0x810
[ 1579.008587][T14773]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1579.008605][T14773]  ? import_iovec+0x74/0xa0
[ 1579.008617][T14773]  ___sys_sendmsg+0x21f/0x2a0
[ 1579.008631][T14773]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1579.008646][T14773]  ? kstrtouint+0x6e/0xe0
[ 1579.008674][T14773]  ? __fget_files+0x2a/0x420
[ 1579.008685][T14773]  ? __fget_files+0x3a6/0x420
[ 1579.008701][T14773]  __sys_sendmmsg+0x22d/0x430
[ 1579.008716][T14773]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1579.008733][T14773]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1579.008755][T14773]  ? ksys_write+0x230/0x260
[ 1579.008771][T14773]  ? __pfx_ksys_write+0x10/0x10
[ 1579.008787][T14773]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1579.008802][T14773]  do_syscall_64+0xec/0xf80
[ 1579.008812][T14773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1579.008822][T14773]  ? trace_irq_disable+0x37/0x100
[ 1579.008834][T14773]  ? clear_bhb_loop+0x60/0xb0
[ 1579.008847][T14773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1579.008857][T14773] RIP: 0033:0x7fa5282cf749
[ 1579.008867][T14773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1579.008877][T14773] RSP: 002b:00007fa526536038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1579.008889][T14773] RAX: ffffffffffffffda RBX: 00007fa528525fa0 RCX: 00007fa5282cf749
[ 1579.008897][T14773] RDX: 0000000000000001 RSI: 0000200000016bc0 RDI: 0000000000000003
[ 1579.008912][T14773] RBP: 00007fa526536090 R08: 0000000000000000 R09: 0000000000000000
[ 1579.008919][T14773] R10: 0000000004044044 R11: 0000000000000246 R12: 0000000000000001
[ 1579.008926][T14773] R13: 00007fa528526038 R14: 00007fa528525fa0 R15: 00007ffc59a17f08
[ 1579.008942][T14773]  </TASK>
[ 1580.267248][    C1] vcan0: j1939_simple_recv: Received already invalidated message
[ 1580.276126][T14781] Can't find ip_set type hash:n
[ 1582.440346][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1713'.
[ 1583.525676][ T5920] usb 9-1: new high-speed USB device number 66 using dummy_hcd
[ 1583.693066][ T5920] usb 9-1: Using ep0 maxpacket: 8
[ 1583.701548][ T5920] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1583.701607][ T5920] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1583.701632][ T5920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1583.705586][ T5920] usb 9-1: config 0 descriptor??
[ 1583.746241][ T5920] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1584.379663][T14697] chnl_net:caif_netlink_parms(): no params data found
[ 1584.420225][T14686] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1584.420402][T14686] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1584.420814][T14686] bridge_slave_0: entered allmulticast mode
[ 1584.426663][T14686] bridge_slave_0: entered promiscuous mode
[ 1584.828586][T14686] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1584.828834][T14686] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1584.829062][T14686] bridge_slave_1: entered allmulticast mode
[ 1584.835706][T14686] bridge_slave_1: entered promiscuous mode
[ 1585.367303][T14803] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.1712'.
[ 1585.389098][ T5889] usb 9-1: USB disconnect, device number 66
[ 1585.694035][T14686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1585.721842][T14686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1586.750354][T14823] FAULT_INJECTION: forcing a failure.
[ 1586.750354][T14823] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1586.750643][T14823] CPU: 0 UID: 0 PID: 14823 Comm: syz.9.1718 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1586.750674][T14823] Tainted: [L]=SOFTLOCKUP
[ 1586.750683][T14823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1586.750694][T14823] Call Trace:
[ 1586.750702][T14823]  <TASK>
[ 1586.750713][T14823]  dump_stack_lvl+0xe8/0x150
[ 1586.750743][T14823]  should_fail_ex+0x46c/0x600
[ 1586.750774][T14823]  _copy_to_user+0x31/0xb0
[ 1586.750796][T14823]  put_timespec64+0xc0/0x120
[ 1586.750824][T14823]  ? __pfx_put_timespec64+0x10/0x10
[ 1586.750859][T14823]  poll_select_finish+0x47e/0x5e0
[ 1586.750883][T14823]  ? __pfx_poll_select_finish+0x10/0x10
[ 1586.750906][T14823]  ? set_user_sigmask+0xc1/0x250
[ 1586.750929][T14823]  ? __pfx_set_user_sigmask+0x10/0x10
[ 1586.750960][T14823]  __se_sys_ppoll+0x213/0x260
[ 1586.750981][T14823]  ? __pfx___se_sys_ppoll+0x10/0x10
[ 1586.751003][T14823]  ? __secure_computing+0xe2/0x2a0
[ 1586.751030][T14823]  ? __x64_sys_ppoll+0x20/0xc0
[ 1586.751050][T14823]  do_syscall_64+0xec/0xf80
[ 1586.751069][T14823]  ? rcu_is_watching+0x15/0xb0
[ 1586.751087][T14823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1586.751106][T14823]  ? clear_bhb_loop+0x60/0xb0
[ 1586.751128][T14823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1586.751147][T14823] RIP: 0033:0x7f11c13ef749
[ 1586.751165][T14823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1586.751182][T14823] RSP: 002b:00007f11bf656038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[ 1586.751209][T14823] RAX: ffffffffffffffda RBX: 00007f11c1645fa0 RCX: 00007f11c13ef749
[ 1586.751224][T14823] RDX: 0000200000002640 RSI: 0000000000000001 RDI: 00002000000001c0
[ 1586.751237][T14823] RBP: 00007f11bf656090 R08: 0000000000000000 R09: 0000000000000000
[ 1586.751249][T14823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1586.751262][T14823] R13: 00007f11c1646038 R14: 00007f11c1645fa0 R15: 00007fff7e86ca18
[ 1586.751293][T14823]  </TASK>
[ 1587.329459][T14697] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1587.329574][T14697] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1587.329785][T14697] bridge_slave_0: entered allmulticast mode
[ 1587.331272][T14697] bridge_slave_0: entered promiscuous mode
[ 1588.206272][T14686] team0: Port device team_slave_0 added
[ 1588.305146][T14697] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1588.305961][T14697] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1588.306219][T14697] bridge_slave_1: entered allmulticast mode
[ 1588.345888][T14697] bridge_slave_1: entered promiscuous mode
[ 1588.369233][T14686] team0: Port device team_slave_1 added
[ 1589.664732][T14697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1589.702355][T14686] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1589.702374][T14686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1589.702401][T14686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1589.764493][T14697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1589.772147][T14686] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1589.772165][T14686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1589.772193][T14686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1590.319873][T14697] team0: Port device team_slave_0 added
[ 1590.360134][T14697] team0: Port device team_slave_1 added
[ 1590.360207][T14604] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1590.406795][T14839] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1722'.
[ 1590.561756][T14604] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1590.824208][T14604] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1590.873117][T14686] hsr_slave_0: entered promiscuous mode
[ 1590.874176][T14686] hsr_slave_1: entered promiscuous mode
[ 1590.874814][T14686] debugfs: 'hsr0' already exists in 'hsr'
[ 1590.874830][T14686] Cannot create hsr debugfs directory
[ 1590.875204][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1724'.
[ 1590.876779][T14697] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1590.876793][T14697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1590.876821][T14697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1590.882549][T14604] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1590.973462][T14697] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1590.973481][T14697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1590.973507][T14697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1591.243130][ T6086] usb 10-1: new high-speed USB device number 83 using dummy_hcd
[ 1591.393155][ T6086] usb 10-1: Using ep0 maxpacket: 16
[ 1591.394203][ T6086] usb 10-1: too many configurations: 123, using maximum allowed: 8
[ 1591.395288][ T6086] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1591.396606][ T6086] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1591.398058][ T6086] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1591.399144][ T6086] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1591.400181][ T6086] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1591.401230][ T6086] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1591.402259][ T6086] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1591.423838][ T6086] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1591.425487][ T6086] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1591.425518][ T6086] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1591.425539][ T6086] usb 10-1: SerialNumber: syz
[ 1591.430459][ T6086] usb 10-1: config 0 descriptor??
[ 1591.439722][ T6086] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input92
[ 1591.898797][ T5153] bcm5974 10-1:0.0: could not read from device
[ 1591.933021][ T6012] usb 9-1: new high-speed USB device number 67 using dummy_hcd
[ 1591.944568][ T6086] usb 10-1: USB disconnect, device number 83
[ 1592.083230][ T6012] usb 9-1: Using ep0 maxpacket: 32
[ 1592.085118][ T6012] usb 9-1: config 0 has an invalid interface number: 12 but max is 0
[ 1592.085152][ T6012] usb 9-1: config 0 has no interface number 0
[ 1592.085190][ T6012] usb 9-1: config 0 interface 12 has no altsetting 0
[ 1592.087437][ T6012] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1592.087468][ T6012] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1592.087488][ T6012] usb 9-1: Product: syz
[ 1592.087496][ T6012] usb 9-1: Manufacturer: syz
[ 1592.087504][ T6012] usb 9-1: SerialNumber: syz
[ 1592.090356][ T6012] usb 9-1: config 0 descriptor??
[ 1592.315453][ T6012] f81534 9-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[ 1592.315489][ T6012] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71
[ 1592.315500][ T6012] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1592.315554][ T6012] f81534 9-1:0.12: probe with driver f81534 failed with error -71
[ 1592.319735][ T6012] usb 9-1: USB disconnect, device number 67
[ 1592.369597][T14697] hsr_slave_0: entered promiscuous mode
[ 1592.370440][T14697] hsr_slave_1: entered promiscuous mode
[ 1592.378765][T14697] debugfs: 'hsr0' already exists in 'hsr'
[ 1592.378796][T14697] Cannot create hsr debugfs directory
[ 1592.933355][T14872] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1732'.
[ 1593.633265][ T5889] usb 10-1: new full-speed USB device number 84 using dummy_hcd
[ 1594.371262][ T5940] bridge_slave_1: left allmulticast mode
[ 1594.371292][ T5940] bridge_slave_1: left promiscuous mode
[ 1594.371561][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1594.397002][ T5889] usb 10-1: config 0 has an invalid interface number: 48 but max is 0
[ 1594.397031][ T5889] usb 10-1: config 0 has no interface number 0
[ 1594.397064][ T5889] usb 10-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[ 1594.397103][ T5889] usb 10-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[ 1594.397130][ T5889] usb 10-1: config 0 interface 48 has no altsetting 0
[ 1594.508020][ T5889] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1594.508053][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1594.508074][ T5889] usb 10-1: Product: syz
[ 1594.508089][ T5889] usb 10-1: Manufacturer: syz
[ 1594.508106][ T5889] usb 10-1: SerialNumber: syz
[ 1594.517894][ T5889] usb 10-1: config 0 descriptor??
[ 1594.588796][ T5940] bridge_slave_0: left allmulticast mode
[ 1594.588825][ T5940] bridge_slave_0: left promiscuous mode
[ 1594.589068][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1595.769480][ T5940] bridge_slave_1: left allmulticast mode
[ 1595.769513][ T5940] bridge_slave_1: left promiscuous mode
[ 1595.769757][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1595.815176][ T5940] bridge_slave_0: left allmulticast mode
[ 1595.815211][ T5940] bridge_slave_0: left promiscuous mode
[ 1595.815458][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1595.842417][ T5889] usb 10-1: USB disconnect, device number 84
[ 1598.535345][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1598.613732][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1598.636781][ T5940] bond0 (unregistering): Released all slaves
[ 1600.503680][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1600.563783][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1600.585891][ T5940] bond0 (unregistering): Released all slaves
[ 1600.952429][   T37] audit: type=1326 audit(1767000441.239:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.8.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1600.952489][   T37] audit: type=1326 audit(1767000441.239:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.8.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1600.952530][   T37] audit: type=1326 audit(1767000441.239:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.8.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1600.952569][   T37] audit: type=1326 audit(1767000441.239:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.8.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1600.952608][   T37] audit: type=1326 audit(1767000441.239:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.8.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1600.952650][   T37] audit: type=1326 audit(1767000441.239:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.8.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1600.952690][   T37] audit: type=1326 audit(1767000441.239:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.8.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1600.952727][   T37] audit: type=1326 audit(1767000441.239:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.8.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1600.952766][   T37] audit: type=1326 audit(1767000441.239:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.8.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1600.952940][   T37] audit: type=1326 audit(1767000441.239:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14896 comm="syz.8.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1601.219383][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1741'.
[ 1601.268284][T14604] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1603.391289][ T5940] hsr_slave_0: left promiscuous mode
[ 1603.453010][ T5940] hsr_slave_1: left promiscuous mode
[ 1603.453986][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1603.504346][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1604.533067][ T5940] hsr_slave_0: left promiscuous mode
[ 1604.553033][ T5940] hsr_slave_1: left promiscuous mode
[ 1604.554084][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1604.577543][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1606.413704][ T5940] team0 (unregistering): Port device team_slave_1 removed
[ 1606.679041][ T5940] team0 (unregistering): Port device team_slave_0 removed
[ 1609.255508][ T7924] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1609.259364][ T7924] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1609.260937][ T7924] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1609.262042][ T7924] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1609.273023][ T7924] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1610.293681][ T5940] team0 (unregistering): Port device team_slave_1 removed
[ 1610.604506][ T5940] team0 (unregistering): Port device team_slave_0 removed
[ 1611.345140][ T7792] Bluetooth: hci6: command tx timeout
[ 1612.557746][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1613.403122][ T7792] Bluetooth: hci6: command tx timeout
[ 1613.532682][T14913] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1613.532729][T14913] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1613.532751][T14913] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1614.843533][ T5920] usb 9-1: new high-speed USB device number 68 using dummy_hcd
[ 1614.978422][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1750'.
[ 1615.033007][ T5920] usb 9-1: Using ep0 maxpacket: 16
[ 1615.035891][ T5920] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1615.037492][ T5920] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[ 1615.040441][ T5920] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1615.040471][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1615.040490][ T5920] usb 9-1: Product: 殶䫣@㧥沧䖁䛮㝵㢦鶆碖뾻薷쀼⌠ᇶ閪潥䑚＊馋馶敧サ饂퟿狝择堒伵㔎છ駜Ⓝʣ鸃秄횟㖃龍쎸釉뢔纋ή䫜뀁᜹话珎먎碖곂㈾䕑㓑큾짍Ầ൸爭ꏇ榠╧㠶韖鲹㧅྄惻꥘⍪岎䈀余ネ緔쎈몦㿇䔗爴싘ೇ혎謯᾿觙㓕鳷
[ 1615.040523][ T5920] usb 9-1: Manufacturer: 聮ν統鋭䵾ꂣ㒊Ⓘ殀ຩ㮑ॶ䛴ᰴ稂㠌쏐봚정ɛ㛡彋婸ጒጃ兾螓빘片圼陥ڡ濪⿒耆秣鞬﷜窤蜨䚜ﶿ邕ᖳꌖ㖀嬌죄嚬ಏ嶂莿䐮㴢錼铦펖銠㝡洦ѵᐅ粣針饰皳퇸뀷
[ 1615.040552][ T5920] usb 9-1: SerialNumber: fl튉誃始戢
[ 1615.256182][ T5920] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found
[ 1615.256226][ T5920] cdc_ncm 9-1:1.0: bind() failure
[ 1615.304052][ T5920] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[ 1615.304082][ T5920] cdc_ncm 9-1:1.1: bind() failure
[ 1615.492941][ T7792] Bluetooth: hci6: command tx timeout
[ 1616.533510][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1752'.
[ 1616.721631][ T5889] usb 9-1: USB disconnect, device number 68
[ 1616.804419][T14924] chnl_net:caif_netlink_parms(): no params data found
[ 1617.098452][T14955] FAULT_INJECTION: forcing a failure.
[ 1617.098452][T14955] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1617.098513][T14955] CPU: 0 UID: 0 PID: 14955 Comm: syz.8.1754 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1617.098542][T14955] Tainted: [L]=SOFTLOCKUP
[ 1617.098550][T14955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1617.098563][T14955] Call Trace:
[ 1617.098572][T14955]  <TASK>
[ 1617.098581][T14955]  dump_stack_lvl+0xe8/0x150
[ 1617.098613][T14955]  should_fail_ex+0x46c/0x600
[ 1617.098643][T14955]  _copy_from_user+0x2d/0xb0
[ 1617.098665][T14955]  ___sys_sendmsg+0x158/0x2a0
[ 1617.098693][T14955]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1617.098721][T14955]  ? trace_sched_exit_tp+0x36/0xf0
[ 1617.098746][T14955]  ? __schedule+0x1475/0x5070
[ 1617.098798][T14955]  ? __fget_files+0x2a/0x420
[ 1617.098818][T14955]  ? __fget_files+0x3a6/0x420
[ 1617.098849][T14955]  __x64_sys_sendmsg+0x1a1/0x260
[ 1617.098874][T14955]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1617.098921][T14955]  do_syscall_64+0xec/0xf80
[ 1617.098939][T14955]  ? rcu_is_watching+0x15/0xb0
[ 1617.098969][T14955]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1617.098989][T14955]  ? clear_bhb_loop+0x60/0xb0
[ 1617.099013][T14955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1617.099032][T14955] RIP: 0033:0x7fa5282cf749
[ 1617.099051][T14955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1617.099068][T14955] RSP: 002b:00007fa5264f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1617.099090][T14955] RAX: ffffffffffffffda RBX: 00007fa528526180 RCX: 00007fa5282cf749
[ 1617.099106][T14955] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[ 1617.099119][T14955] RBP: 00007fa5264f4090 R08: 0000000000000000 R09: 0000000000000000
[ 1617.099132][T14955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1617.099144][T14955] R13: 00007fa528526218 R14: 00007fa528526180 R15: 00007ffc59a17f08
[ 1617.099176][T14955]  </TASK>
[ 1617.775122][ T7792] Bluetooth: hci6: command tx timeout
[ 1619.433761][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1758'.
[ 1619.557488][ T5920] usb 9-1: new high-speed USB device number 69 using dummy_hcd
[ 1619.618010][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1759'.
[ 1619.734427][T14924] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1619.734638][T14924] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1619.734866][T14924] bridge_slave_0: entered allmulticast mode
[ 1619.737322][T14924] bridge_slave_0: entered promiscuous mode
[ 1619.740788][T14924] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1619.741985][T14924] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1619.742214][T14924] bridge_slave_1: entered allmulticast mode
[ 1619.746360][T14924] bridge_slave_1: entered promiscuous mode
[ 1619.795901][ T5920] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[ 1619.795929][ T5920] usb 9-1: config 0 has no interface number 0
[ 1619.795961][ T5920] usb 9-1: too many endpoints for config 0 interface 2 altsetting 1: 65, using maximum allowed: 30
[ 1619.796003][ T5920] usb 9-1: config 0 interface 2 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1619.796029][ T5920] usb 9-1: config 0 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[ 1619.796054][ T5920] usb 9-1: config 0 interface 2 has no altsetting 0
[ 1619.796088][ T5920] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1619.796111][ T5920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1619.801165][ T5920] usb 9-1: config 0 descriptor??
[ 1620.117841][T14924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1620.121767][T14924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1620.228640][ T5920] hid-multitouch 0003:1FD2:6007.0015: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input2
[ 1620.426884][ T5920] usb 9-1: USB disconnect, device number 69
[ 1620.544147][T14924] team0: Port device team_slave_0 added
[ 1620.565993][T14924] team0: Port device team_slave_1 added
[ 1620.747546][T14924] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1620.747564][T14924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1620.747589][T14924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1620.784163][T14924] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1620.784182][T14924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1620.784210][T14924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1621.017732][T14924] hsr_slave_0: entered promiscuous mode
[ 1621.018574][T14924] hsr_slave_1: entered promiscuous mode
[ 1621.019124][T14924] debugfs: 'hsr0' already exists in 'hsr'
[ 1621.019142][T14924] Cannot create hsr debugfs directory
[ 1621.587292][ T7924] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1621.604834][ T7924] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1621.629157][ T7924] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1621.675807][ T7924] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1621.693020][ T7924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1623.814365][ T7792] Bluetooth: hci3: command tx timeout
[ 1624.095749][ T7924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1624.119692][ T7924] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1624.122411][ T7924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1624.148057][ T7924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1624.176079][ T7924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1625.165537][T14992] Failed to get privilege flags for destination (handle=0x2:0x25)
[ 1625.231920][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1766'.
[ 1625.682313][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1768'.
[ 1625.883156][ T7924] Bluetooth: hci3: command tx timeout
[ 1626.243063][ T7924] Bluetooth: hci4: command tx timeout
[ 1627.387966][T15007] FAULT_INJECTION: forcing a failure.
[ 1627.387966][T15007] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1627.388011][T15007] CPU: 1 UID: 0 PID: 15007 Comm: syz.9.1770 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1627.388054][T15007] Tainted: [L]=SOFTLOCKUP
[ 1627.388062][T15007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1627.388074][T15007] Call Trace:
[ 1627.388082][T15007]  <TASK>
[ 1627.388091][T15007]  dump_stack_lvl+0xe8/0x150
[ 1627.388123][T15007]  should_fail_ex+0x46c/0x600
[ 1627.388154][T15007]  _copy_from_user+0x2d/0xb0
[ 1627.388175][T15007]  __copy_msghdr+0x3c5/0x5b0
[ 1627.388203][T15007]  ___sys_sendmsg+0x1a5/0x2a0
[ 1627.388229][T15007]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1627.388258][T15007]  ? kstrtouint+0x6e/0xe0
[ 1627.388306][T15007]  ? __fget_files+0x2a/0x420
[ 1627.388327][T15007]  ? __fget_files+0x3a6/0x420
[ 1627.388357][T15007]  __sys_sendmmsg+0x22d/0x430
[ 1627.388386][T15007]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1627.388418][T15007]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1627.388456][T15007]  ? ksys_write+0x230/0x260
[ 1627.388484][T15007]  ? __pfx_ksys_write+0x10/0x10
[ 1627.388515][T15007]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1627.388541][T15007]  do_syscall_64+0xec/0xf80
[ 1627.388559][T15007]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1627.388578][T15007]  ? trace_irq_disable+0x37/0x100
[ 1627.388598][T15007]  ? clear_bhb_loop+0x60/0xb0
[ 1627.388621][T15007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1627.388640][T15007] RIP: 0033:0x7f11c13ef749
[ 1627.388657][T15007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1627.388674][T15007] RSP: 002b:00007f11bf656038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1627.388696][T15007] RAX: ffffffffffffffda RBX: 00007f11c1645fa0 RCX: 00007f11c13ef749
[ 1627.388711][T15007] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003
[ 1627.388725][T15007] RBP: 00007f11bf656090 R08: 0000000000000000 R09: 0000000000000000
[ 1627.388737][T15007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1627.388750][T15007] R13: 00007f11c1646038 R14: 00007f11c1645fa0 R15: 00007fff7e86ca18
[ 1627.388781][T15007]  </TASK>
[ 1627.719980][T15009] FAULT_INJECTION: forcing a failure.
[ 1627.719980][T15009] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1627.720016][T15009] CPU: 0 UID: 0 PID: 15009 Comm: syz.9.1771 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1627.720045][T15009] Tainted: [L]=SOFTLOCKUP
[ 1627.720052][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1627.720064][T15009] Call Trace:
[ 1627.720072][T15009]  <TASK>
[ 1627.720081][T15009]  dump_stack_lvl+0xe8/0x150
[ 1627.720111][T15009]  should_fail_ex+0x46c/0x600
[ 1627.720141][T15009]  _copy_to_user+0x31/0xb0
[ 1627.720164][T15009]  simple_read_from_buffer+0xe1/0x170
[ 1627.720189][T15009]  proc_fail_nth_read+0x1b6/0x220
[ 1627.720219][T15009]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1627.720247][T15009]  ? rw_verify_area+0x2ac/0x4e0
[ 1627.720271][T15009]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1627.720298][T15009]  vfs_read+0x206/0xa30
[ 1627.720331][T15009]  ? __pfx_vfs_read+0x10/0x10
[ 1627.720376][T15009]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1627.720397][T15009]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1627.720415][T15009]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1627.720435][T15009]  ? mutex_lock_nested+0x154/0x1d0
[ 1627.720457][T15009]  ? fdget_pos+0x253/0x320
[ 1627.720487][T15009]  ksys_read+0x14b/0x260
[ 1627.720514][T15009]  ? __pfx_ksys_read+0x10/0x10
[ 1627.720550][T15009]  do_syscall_64+0xec/0xf80
[ 1627.720569][T15009]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1627.720588][T15009]  ? trace_irq_disable+0x37/0x100
[ 1627.720608][T15009]  ? clear_bhb_loop+0x60/0xb0
[ 1627.720631][T15009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1627.720650][T15009] RIP: 0033:0x7f11c13ee15c
[ 1627.720667][T15009] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1627.720684][T15009] RSP: 002b:00007f11bf656030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1627.720704][T15009] RAX: ffffffffffffffda RBX: 00007f11c1645fa0 RCX: 00007f11c13ee15c
[ 1627.720719][T15009] RDX: 000000000000000f RSI: 00007f11bf6560a0 RDI: 0000000000000004
[ 1627.720732][T15009] RBP: 00007f11bf656090 R08: 0000000000000000 R09: 0000000000000000
[ 1627.720745][T15009] R10: 0000000040002042 R11: 0000000000000246 R12: 0000000000000001
[ 1627.720758][T15009] R13: 00007f11c1646038 R14: 00007f11c1645fa0 R15: 00007fff7e86ca18
[ 1627.720791][T15009]  </TASK>
[ 1627.973935][ T7924] Bluetooth: hci3: command tx timeout
[ 1628.889455][ T7924] Bluetooth: hci4: command tx timeout
[ 1629.473004][ T5953] usb 9-1: new full-speed USB device number 70 using dummy_hcd
[ 1629.642358][ T5953] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1629.644063][ T5953] usb 9-1: not running at top speed; connect to a high speed hub
[ 1629.657658][ T5953] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1629.677872][ T5953] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.40
[ 1629.677905][ T5953] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1629.677927][ T5953] usb 9-1: Product: syz
[ 1629.677942][ T5953] usb 9-1: SerialNumber: syz
[ 1630.043158][ T7924] Bluetooth: hci3: command tx timeout
[ 1630.064595][T14697] netdevsim netdevsim2: probe with driver netdevsim failed with error -12
[ 1630.118780][ T5953] usbhid 9-1:1.0: can't add hid device: -71
[ 1630.118918][ T5953] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[ 1630.139771][ T5953] usb 9-1: USB disconnect, device number 70
[ 1630.927036][ T7924] Bluetooth: hci4: command tx timeout
[ 1631.451803][T14977] chnl_net:caif_netlink_parms(): no params data found
[ 1632.461189][ T5940] bridge_slave_1: left allmulticast mode
[ 1632.461220][ T5940] bridge_slave_1: left promiscuous mode
[ 1632.461483][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1632.541012][ T5940] bridge_slave_0: left allmulticast mode
[ 1632.541045][ T5940] bridge_slave_0: left promiscuous mode
[ 1632.541317][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1633.010637][ T7924] Bluetooth: hci4: command tx timeout
[ 1635.565067][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1635.643634][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1635.706373][ T5940] bond0 (unregistering): Released all slaves
[ 1635.773283][T14977] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1635.773411][T14977] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1635.773982][T14977] bridge_slave_0: entered allmulticast mode
[ 1635.776563][T14977] bridge_slave_0: entered promiscuous mode
[ 1635.950608][   T37] kauditd_printk_skb: 148 callbacks suppressed
[ 1635.950630][   T37] audit: type=1326 audit(1767000476.239:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15092 comm="syz.8.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1635.951022][   T37] audit: type=1326 audit(1767000476.239:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15092 comm="syz.8.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1635.951403][   T37] audit: type=1326 audit(1767000476.239:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15092 comm="syz.8.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1636.034140][   T37] audit: type=1326 audit(1767000476.329:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15092 comm="syz.8.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1636.034663][   T37] audit: type=1326 audit(1767000476.329:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15092 comm="syz.8.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1636.034982][   T37] audit: type=1326 audit(1767000476.329:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15092 comm="syz.8.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5282cf749 code=0x7ffc0000
[ 1636.216252][T14985] chnl_net:caif_netlink_parms(): no params data found
[ 1636.235364][T14977] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1636.235489][T14977] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1636.235720][T14977] bridge_slave_1: entered allmulticast mode
[ 1636.239683][T14977] bridge_slave_1: entered promiscuous mode
[ 1638.145088][T14977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1638.412299][T14977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1639.439920][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1804'.
[ 1639.653038][ T5940] hsr_slave_0: left promiscuous mode
[ 1640.443047][ T5940] hsr_slave_1: left promiscuous mode
[ 1640.443857][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1640.474038][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1640.715316][T14612] usb 9-1: new high-speed USB device number 71 using dummy_hcd
[ 1640.885504][T14612] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[ 1640.885541][T14612] usb 9-1: config 0 has no interface number 0
[ 1640.885573][T14612] usb 9-1: too many endpoints for config 0 interface 2 altsetting 1: 65, using maximum allowed: 30
[ 1640.885598][T14612] usb 9-1: config 0 interface 2 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1640.885613][T14612] usb 9-1: config 0 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[ 1640.885628][T14612] usb 9-1: config 0 interface 2 has no altsetting 0
[ 1640.885648][T14612] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1640.885661][T14612] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1640.888861][T14612] usb 9-1: config 0 descriptor??
[ 1641.315985][T14612] hid-multitouch 0003:1FD2:6007.0016: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input2
[ 1641.373612][ T5940] team0 (unregistering): Port device team_slave_1 removed
[ 1641.515747][T14612] usb 9-1: USB disconnect, device number 71
[ 1641.574130][ T5940] team0 (unregistering): Port device team_slave_0 removed
[ 1642.383183][T14612] usb 9-1: new high-speed USB device number 72 using dummy_hcd
[ 1642.563034][T14612] usb 9-1: Using ep0 maxpacket: 16
[ 1642.565405][T14612] usb 9-1: config 0 has an invalid interface number: 28 but max is 0
[ 1642.565428][T14612] usb 9-1: config 0 has no interface number 0
[ 1642.565460][T14612] usb 9-1: config 0 interface 28 altsetting 8 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 1642.565477][T14612] usb 9-1: config 0 interface 28 has no altsetting 0
[ 1642.572028][T14612] usb 9-1: Dual-Role OTG device on HNP port
[ 1642.572432][T14612] usb 9-1: New USB device found, idVendor=12d1, idProduct=937e, bcdDevice=af.67
[ 1642.572450][T14612] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1642.572462][T14612] usb 9-1: Product: syz
[ 1642.572470][T14612] usb 9-1: Manufacturer: syz
[ 1642.572479][T14612] usb 9-1: SerialNumber: syz
[ 1642.588964][T14612] usb 9-1: config 0 descriptor??
[ 1642.640067][T14612] hub 9-1:0.28: bad descriptor, ignoring hub
[ 1642.640107][T14612] hub 9-1:0.28: probe with driver hub failed with error -5
[ 1642.641645][T14612] option 9-1:0.28: GSM modem (1-port) converter detected
[ 1642.846629][T15137] IPVS: starting estimator thread 0...
[ 1642.847919][T15135] futex_wake_op: syz.8.1807 tries to shift op by -1; fix this program
[ 1642.933114][T15138] IPVS: using max 9 ests per chain, 21600 per kthread
[ 1642.956715][T14977] team0: Port device team_slave_0 added
[ 1642.976516][ T5953] usb 9-1: USB disconnect, device number 72
[ 1642.978321][ T5953] option 9-1:0.28: device disconnected
[ 1643.066414][T14977] team0: Port device team_slave_1 added
[ 1643.212314][T14985] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1643.212440][T14985] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1643.212701][T14985] bridge_slave_0: entered allmulticast mode
[ 1643.215405][T14985] bridge_slave_0: entered promiscuous mode
[ 1643.410691][T14985] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1643.410819][T14985] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1643.411014][T14985] bridge_slave_1: entered allmulticast mode
[ 1643.414365][T14985] bridge_slave_1: entered promiscuous mode
[ 1643.683085][ T8696] usb 10-1: new high-speed USB device number 85 using dummy_hcd
[ 1643.724599][T14977] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1643.724618][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1643.724646][T14977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1644.635741][ T8696] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1644.635789][ T8696] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1644.635814][ T8696] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1644.640731][ T8696] usb 10-1: config 0 descriptor??
[ 1644.923389][ T5889] usb 10-1: USB disconnect, device number 85
[ 1644.936942][T14977] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1644.936960][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1644.936986][T14977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1645.967061][T14985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1647.345086][T14985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1647.627729][T14977] hsr_slave_0: entered promiscuous mode
[ 1647.629083][T14977] hsr_slave_1: entered promiscuous mode
[ 1648.038636][T14985] team0: Port device team_slave_0 added
[ 1648.846714][T14985] team0: Port device team_slave_1 added
[ 1649.064389][T14924] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1650.303274][T14924] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1650.722712][T14985] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1650.722730][T14985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1650.722758][T14985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1650.735498][T14924] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1651.432540][T14985] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1651.432558][T14985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1651.432587][T14985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1651.458424][T14924] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1651.518649][T15200] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1826'.
[ 1651.863138][ T5920] usb 9-1: new high-speed USB device number 73 using dummy_hcd
[ 1651.960940][T14985] hsr_slave_0: entered promiscuous mode
[ 1651.961776][T14985] hsr_slave_1: entered promiscuous mode
[ 1651.962385][T14985] debugfs: 'hsr0' already exists in 'hsr'
[ 1651.962401][T14985] Cannot create hsr debugfs directory
[ 1652.013058][ T5920] usb 9-1: Using ep0 maxpacket: 16
[ 1652.019552][ T5920] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1652.021129][ T5920] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[ 1652.024514][ T5920] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1652.024603][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1652.024624][ T5920] usb 9-1: Product: 殶䫣@㧥沧䖁䛮㝵㢦鶆碖뾻薷쀼⌠ᇶ閪潥䑚＊馋馶敧サ饂퟿狝择堒伵㔎છ駜Ⓝʣ鸃秄횟㖃龍쎸釉뢔纋ή䫜뀁᜹话珎먎碖곂㈾䕑㓑큾짍Ầ൸爭ꏇ榠╧㠶韖鲹㧅྄惻꥘⍪岎䈀余ネ緔쎈몦㿇䔗爴싘ೇ혎謯᾿觙㓕鳷
[ 1652.024656][ T5920] usb 9-1: Manufacturer: 聮ν統鋭䵾ꂣ㒊Ⓘ殀ຩ㮑ॶ䛴ᰴ稂㠌쏐봚정ɛ㛡彋婸ጒጃ兾螓빘片圼陥ڡ濪⿒耆秣鞬﷜窤蜨䚜ﶿ邕ᖳꌖ㖀嬌죄嚬ಏ嶂莿䐮㴢錼铦펖銠㝡洦ѵᐅ粣針饰皳퇸뀷
[ 1652.024684][ T5920] usb 9-1: SerialNumber: fl튉誃始戢
[ 1652.123039][T14612] usb 10-1: new high-speed USB device number 86 using dummy_hcd
[ 1652.273081][T14612] usb 10-1: Using ep0 maxpacket: 32
[ 1652.288989][T14612] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1652.307095][T14612] usb 10-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[ 1652.307127][T14612] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1652.307148][T14612] usb 10-1: Product: syz
[ 1652.307164][T14612] usb 10-1: Manufacturer: syz
[ 1652.307181][T14612] usb 10-1: SerialNumber: syz
[ 1652.390245][ T5920] cdc_ncm 9-1:1.0: bind() failure
[ 1652.392640][T14612] usb 10-1: config 0 descriptor??
[ 1652.410849][ T5920] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[ 1652.410897][ T5920] cdc_ncm 9-1:1.1: bind() failure
[ 1652.421622][ T5920] usb 9-1: USB disconnect, device number 73
[ 1652.442079][T14612] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[ 1653.927292][T14612] input: gspca_pac7302 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input94
[ 1653.961044][T15219] FAULT_INJECTION: forcing a failure.
[ 1653.961044][T15219] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1653.961081][T15219] CPU: 0 UID: 0 PID: 15219 Comm: syz.8.1831 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1653.961110][T15219] Tainted: [L]=SOFTLOCKUP
[ 1653.961117][T15219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1653.961134][T15219] Call Trace:
[ 1653.961142][T15219]  <TASK>
[ 1653.961151][T15219]  dump_stack_lvl+0xe8/0x150
[ 1653.961182][T15219]  should_fail_ex+0x46c/0x600
[ 1653.961212][T15219]  _copy_from_user+0x2d/0xb0
[ 1653.961232][T15219]  binder_ioctl_write_read+0x127/0x9ef0
[ 1653.961271][T15219]  ? try_to_take_rt_mutex+0x840/0xb00
[ 1653.961297][T15219]  ? kernel_text_address+0xa5/0xe0
[ 1653.961335][T15219]  ? __lock_acquire+0x6b6/0x2cf0
[ 1653.961365][T15219]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[ 1653.961391][T15219]  ? stack_depot_save_flags+0x33/0x810
[ 1653.961423][T15219]  ? do_raw_spin_lock+0x121/0x290
[ 1653.961456][T15219]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1653.961475][T15219]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1653.961504][T15219]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1653.961523][T15219]  ? rt_mutex_slowunlock+0x493/0x8a0
[ 1653.961546][T15219]  ? reacquire_held_locks+0x104/0x190
[ 1653.961572][T15219]  ? rt_spin_lock+0x1c1/0x3e0
[ 1653.961597][T15219]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1653.961623][T15219]  ? rt_spin_unlock+0x150/0x200
[ 1653.961656][T15219]  ? binder_get_thread+0x178/0x6d0
[ 1653.961680][T15219]  binder_ioctl+0x3c8/0x19d0
[ 1653.961702][T15219]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1653.961728][T15219]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1653.961756][T15219]  ? do_vfs_ioctl+0xbeb/0x1440
[ 1653.961781][T15219]  ? __pfx_binder_ioctl+0x10/0x10
[ 1653.961801][T15219]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1653.961825][T15219]  ? __pfx_smack_log+0x10/0x10
[ 1653.961846][T15219]  ? smk_access+0x14c/0x4e0
[ 1653.961873][T15219]  ? smk_tskacc+0x2fc/0x370
[ 1653.961898][T15219]  ? smack_file_ioctl+0x2ac/0x340
[ 1653.961924][T15219]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1653.961956][T15219]  ? __fget_files+0x2a/0x420
[ 1653.961976][T15219]  ? __fget_files+0x3a6/0x420
[ 1653.961995][T15219]  ? __fget_files+0x2a/0x420
[ 1653.962018][T15219]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1653.962045][T15219]  ? __pfx_binder_ioctl+0x10/0x10
[ 1653.962065][T15219]  __se_sys_ioctl+0xff/0x170
[ 1653.962092][T15219]  do_syscall_64+0xec/0xf80
[ 1653.962110][T15219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1653.962130][T15219]  ? trace_irq_disable+0x37/0x100
[ 1653.962150][T15219]  ? clear_bhb_loop+0x60/0xb0
[ 1653.962173][T15219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1653.962192][T15219] RIP: 0033:0x7fa5282cf749
[ 1653.962210][T15219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1653.962227][T15219] RSP: 002b:00007fa526536038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1653.962249][T15219] RAX: ffffffffffffffda RBX: 00007fa528525fa0 RCX: 00007fa5282cf749
[ 1653.962264][T15219] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[ 1653.962278][T15219] RBP: 00007fa526536090 R08: 0000000000000000 R09: 0000000000000000
[ 1653.962292][T15219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1653.962304][T15219] R13: 00007fa528526038 R14: 00007fa528525fa0 R15: 00007ffc59a17f08
[ 1653.962335][T15219]  </TASK>
[ 1653.962435][T15219] binder: 15218:15219 ioctl c0306201 2000000001c0 returned -14
[ 1654.126251][ T5889] usb 10-1: USB disconnect, device number 86
[ 1654.968316][T15221] nvme_fabrics: missing parameter 'transport=%s'
[ 1654.968388][T15221] nvme_fabrics: missing parameter 'nqn=%s'
[ 1655.409170][T14924] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1655.583031][ T5920] usb 9-1: new high-speed USB device number 74 using dummy_hcd
[ 1655.736515][ T5920] usb 9-1: Using ep0 maxpacket: 16
[ 1655.738684][ T5920] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1655.738714][ T5920] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1655.738738][ T5920] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1655.738751][ T5920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1655.819320][ T5940] bridge_slave_1: left allmulticast mode
[ 1655.819348][ T5940] bridge_slave_1: left promiscuous mode
[ 1655.822547][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1655.886697][ T5940] bridge_slave_0: left allmulticast mode
[ 1655.886727][ T5940] bridge_slave_0: left promiscuous mode
[ 1655.886976][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1655.979801][ T5940] bridge_slave_1: left allmulticast mode
[ 1655.979836][ T5940] bridge_slave_1: left promiscuous mode
[ 1655.980159][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1656.194412][ T5940] bridge_slave_0: left allmulticast mode
[ 1656.194444][ T5940] bridge_slave_0: left promiscuous mode
[ 1656.194685][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1656.328493][ T7924] Bluetooth: hci1: ISO packet for unknown connection handle 0
[ 1656.345077][ T5920] mcp2221 0003:04D8:00DD.0017: unbalanced delimiter at end of report description
[ 1656.345525][ T5920] mcp2221 0003:04D8:00DD.0017: can't parse reports
[ 1656.345603][ T5920] mcp2221 0003:04D8:00DD.0017: probe with driver mcp2221 failed with error -22
[ 1656.545316][ T5920] usb 9-1: USB disconnect, device number 74
[ 1656.594327][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1656.673855][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1656.735373][ T5940] bond0 (unregistering): Released all slaves
[ 1656.975310][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1657.076476][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1657.154701][ T5940] bond0 (unregistering): Released all slaves
[ 1657.510624][T14924] 8021q: adding VLAN 0 to HW filter on device team0
[ 1657.529638][T15243] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1839'.
[ 1657.800495][ T8673] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1657.800744][ T8673] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1657.834880][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1657.835030][ T8673] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1657.983197][ T5940] hsr_slave_0: left promiscuous mode
[ 1658.024962][ T5940] hsr_slave_1: left promiscuous mode
[ 1658.026066][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1658.088714][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1658.233213][ T5940] hsr_slave_0: left promiscuous mode
[ 1658.273047][ T5940] hsr_slave_1: left promiscuous mode
[ 1658.273785][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1658.315582][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1658.462988][ T5953] usb 9-1: new high-speed USB device number 75 using dummy_hcd
[ 1658.643189][ T5953] usb 9-1: Using ep0 maxpacket: 32
[ 1658.646297][ T5953] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[ 1658.646325][ T5953] usb 9-1: config 0 has no interface number 0
[ 1658.646356][ T5953] usb 9-1: too many endpoints for config 0 interface 51 altsetting 0: 73, using maximum allowed: 30
[ 1658.646380][ T5953] usb 9-1: config 0 interface 51 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73
[ 1658.648498][ T5953] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1658.648520][ T5953] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1658.648531][ T5953] usb 9-1: Product: syz
[ 1658.648539][ T5953] usb 9-1: Manufacturer: syz
[ 1658.648547][ T5953] usb 9-1: SerialNumber: syz
[ 1658.651561][ T5953] usb 9-1: config 0 descriptor??
[ 1658.736716][ T5953] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1658.874974][ T5953] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1658.898899][ T5953] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1659.067649][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6
[ 1659.294009][    C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1659.300090][ T8696] usb 9-1: USB disconnect, device number 75
[ 1659.305376][ T8696] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1659.342335][ T8696] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1659.343713][ T8696] quatech2 9-1:0.51: device disconnected
[ 1659.485669][ T5940] team0 (unregistering): Port device team_slave_1 removed
[ 1659.685581][ T5940] team0 (unregistering): Port device team_slave_0 removed
[ 1661.113571][ T5940] team0 (unregistering): Port device team_slave_1 removed
[ 1661.133051][ T8696] usb 10-1: new high-speed USB device number 87 using dummy_hcd
[ 1661.283537][ T5940] team0 (unregistering): Port device team_slave_0 removed
[ 1661.353301][ T8696] usb 10-1: Using ep0 maxpacket: 16
[ 1661.359461][ T8696] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 126, changing to 10
[ 1661.359510][ T8696] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1661.359532][ T8696] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1661.359556][ T8696] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[ 1661.362305][ T8696] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1661.362334][ T8696] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1661.362354][ T8696] usb 10-1: Product: 孳爠ℂྞ峡䩃緒蜓媱惟巎私鍽覾溆茌ﮜ❹倫ꏪ넄旘쓣齲싻牯嘿㋟섅漖毈轒䣟䍈₿࠲ᢢ⏉舍⣊额￳鐱ﲽ養ૂ収ﳅɖ⃎헲ꪧ湃厡抆⼇攫⾑৚⒊⍄윗䱝䑏䰼ꀥ悶쓊❬楜㷞ﻜ쭘뤮䍉뢖숝ᒽ疁䨴タ箿譍鸪ﻊ瘗Lj㨻뺙㙏㺏䯩櫕Δ£㕤趯ਢ꒲伣쓑鄰ㅹ몔몖冷꿗ҋ뒼탛ᑙ뗚틄俩䖒
[ 1661.362389][ T8696] usb 10-1: Manufacturer: ᰁ
[ 1661.362403][ T8696] usb 10-1: SerialNumber: 뀜鋚즑ﱢ渖祴ܜ篋癡칈䝫㾴Ⓑ맀Ꟑ䭠췚국쑚묒悉顸뫥翎齔绸캌녮힄ῆ铲香홐옆ﻮ뀴௦荚㗼㖩篴⺟쵟戝ꨑ⟅㔗﮻ᵭ쁷
[ 1661.888933][T15273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1661.889406][T15273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1661.911482][ T8696] cdc_ncm 10-1:1.0: bind() failure
[ 1661.946324][ T8696] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found
[ 1661.946353][ T8696] cdc_ncm 10-1:1.1: bind() failure
[ 1661.950359][ T8696] usb 10-1: USB disconnect, device number 87
[ 1662.363118][ T5953] usb 9-1: new high-speed USB device number 76 using dummy_hcd
[ 1662.535814][ T5953] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1662.535862][ T5953] usb 9-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1662.535887][ T5953] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1662.542577][ T5953] usb 9-1: config 0 descriptor??
[ 1662.742504][T15281] FAULT_INJECTION: forcing a failure.
[ 1662.742504][T15281] name failslab, interval 1, probability 0, space 0, times 0
[ 1662.742540][T15281] CPU: 0 UID: 0 PID: 15281 Comm: syz.9.1849 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1662.742569][T15281] Tainted: [L]=SOFTLOCKUP
[ 1662.742577][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1662.742589][T15281] Call Trace:
[ 1662.742598][T15281]  <TASK>
[ 1662.742606][T15281]  dump_stack_lvl+0xe8/0x150
[ 1662.742628][T15281]  should_fail_ex+0x46c/0x600
[ 1662.742646][T15281]  should_failslab+0xa8/0x100
[ 1662.742662][T15281]  __kmalloc_noprof+0xe0/0x7e0
[ 1662.742689][T15281]  ? tomoyo_encode+0x28b/0x550
[ 1662.742713][T15281]  tomoyo_encode+0x28b/0x550
[ 1662.742737][T15281]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1662.742759][T15281]  ? tomoyo_domain+0xd9/0x130
[ 1662.742778][T15281]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1662.742798][T15281]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1662.742823][T15281]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1662.742844][T15281]  ? __lock_acquire+0x6b6/0x2cf0
[ 1662.742870][T15281]  ? do_raw_spin_lock+0x121/0x290
[ 1662.742918][T15281]  ? __fget_files+0x2a/0x420
[ 1662.742940][T15281]  ? __fget_files+0x2a/0x420
[ 1662.742957][T15281]  ? __fget_files+0x3a6/0x420
[ 1662.742975][T15281]  ? __fget_files+0x2a/0x420
[ 1662.742997][T15281]  security_file_ioctl+0xcb/0x2d0
[ 1662.743023][T15281]  __se_sys_ioctl+0x47/0x170
[ 1662.743049][T15281]  do_syscall_64+0xec/0xf80
[ 1662.743066][T15281]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1662.743084][T15281]  ? trace_irq_disable+0x37/0x100
[ 1662.743103][T15281]  ? clear_bhb_loop+0x60/0xb0
[ 1662.743125][T15281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1662.743143][T15281] RIP: 0033:0x7f11c13ef749
[ 1662.743161][T15281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1662.743177][T15281] RSP: 002b:00007f11bf656038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1662.743198][T15281] RAX: ffffffffffffffda RBX: 00007f11c1645fa0 RCX: 00007f11c13ef749
[ 1662.743212][T15281] RDX: 0000200000000080 RSI: 0000000000008953 RDI: 0000000000000003
[ 1662.743225][T15281] RBP: 00007f11bf656090 R08: 0000000000000000 R09: 0000000000000000
[ 1662.743238][T15281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1662.743250][T15281] R13: 00007f11c1646038 R14: 00007f11c1645fa0 R15: 00007fff7e86ca18
[ 1662.743281][T15281]  </TASK>
[ 1662.765602][T15281] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1663.049275][T14924] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1663.074930][T14985] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1663.185049][T14985] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1663.296172][ T5961] usb 9-1: USB disconnect, device number 76
[ 1663.389965][T14985] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1663.421468][T14985] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1664.057550][T14977] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1664.209339][T14977] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1664.292522][T14924] veth0_vlan: entered promiscuous mode
[ 1664.304560][T14977] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1664.348271][T14977] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1664.363002][ T5961] usb 9-1: new high-speed USB device number 77 using dummy_hcd
[ 1664.458155][T14924] veth1_vlan: entered promiscuous mode
[ 1664.542987][ T5961] usb 9-1: Using ep0 maxpacket: 16
[ 1664.546306][ T5961] usb 9-1: too many configurations: 123, using maximum allowed: 8
[ 1664.547535][ T5961] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.549413][ T5961] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.550520][ T5961] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.551624][ T5961] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.552732][ T5961] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.563461][ T5961] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.574057][ T5961] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.575544][ T5961] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.576843][ T5961] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1664.576870][ T5961] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1664.576891][ T5961] usb 9-1: SerialNumber: syz
[ 1664.581720][ T5961] usb 9-1: config 0 descriptor??
[ 1664.589590][ T5961] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input95
[ 1664.818417][T14924] veth0_macvtap: entered promiscuous mode
[ 1664.855343][T14924] veth1_macvtap: entered promiscuous mode
[ 1665.030902][T14924] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1665.108570][T14985] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1665.120863][ T5153] bcm5974 9-1:0.0: could not read from device
[ 1665.132262][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1856'.
[ 1665.161178][T14924] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1665.194012][ T5961] usb 9-1: USB disconnect, device number 77
[ 1665.231719][T15316] [���: entered promiscuous mode
[ 1665.258039][T14985] 8021q: adding VLAN 0 to HW filter on device team0
[ 1665.292510][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1665.292727][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1665.328707][ T5940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1665.334689][ T5940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1665.360135][ T5940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1665.373417][ T5940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1665.376697][  T808] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1665.377541][  T808] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1665.866188][T14977] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1665.940552][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1665.940574][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1666.072337][T14977] 8021q: adding VLAN 0 to HW filter on device team0
[ 1666.108048][T13896] usb 9-1: new high-speed USB device number 78 using dummy_hcd
[ 1666.160646][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1666.161563][ T3678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1666.161581][ T3678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1666.165344][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1666.262907][T13896] usb 9-1: Using ep0 maxpacket: 16
[ 1666.265047][T13896] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1666.266387][T13896] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[ 1666.268851][T13896] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1666.268879][T13896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1666.268899][T13896] usb 9-1: Product: 殶䫣@㧥沧䖁䛮㝵㢦鶆碖뾻薷쀼⌠ᇶ閪潥䑚＊馋馶敧サ饂퟿狝择堒伵㔎છ駜Ⓝʣ鸃秄횟㖃龍쎸釉뢔纋ή䫜뀁᜹话珎먎碖곂㈾䕑㓑큾짍Ầ൸爭ꏇ榠╧㠶韖鲹㧅྄惻꥘⍪岎䈀余ネ緔쎈몦㿇䔗爴싘ೇ혎謯᾿觙㓕鳷
[ 1666.268925][T13896] usb 9-1: Manufacturer: 聮ν統鋭䵾ꂣ㒊Ⓘ殀ຩ㮑ॶ䛴ᰴ稂㠌쏐봚정ɛ㛡彋婸ጒጃ兾螓빘片圼陥ڡ濪⿒耆秣鞬﷜窤蜨䚜ﶿ邕ᖳꌖ㖀嬌죄嚬ಏ嶂莿䐮㴢錼铦펖銠㝡洦ѵᐅ粣針饰皳퇸뀷
[ 1666.268948][T13896] usb 9-1: SerialNumber: fl튉誃始戢
[ 1666.303035][ T8696] usb 10-1: new high-speed USB device number 88 using dummy_hcd
[ 1666.446056][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1666.446231][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1666.555181][ T8696] usb 10-1: Using ep0 maxpacket: 8
[ 1666.557188][ T8696] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1666.557219][ T8696] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1666.601829][T13896] cdc_ncm 9-1:1.0: bind() failure
[ 1666.612520][ T8696] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1666.612542][ T8696] pvrusb2: **********
[ 1666.612549][ T8696] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1666.612563][ T8696] pvrusb2: Important functionality might not be entirely working.
[ 1666.612574][ T8696] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1666.612586][ T8696] pvrusb2: **********
[ 1666.661001][T13896] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[ 1666.661052][T13896] cdc_ncm 9-1:1.1: bind() failure
[ 1666.694282][T13896] usb 9-1: USB disconnect, device number 78
[ 1666.828970][ T2356] pvrusb2: Invalid write control endpoint
[ 1666.989895][T14985] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1667.040691][ T2356] pvrusb2: Invalid write control endpoint
[ 1667.040709][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1667.040720][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1667.040729][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1667.040740][ T2356] pvrusb2: Device being rendered inoperable
[ 1667.103174][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1667.103302][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1667.184438][T13896] usb 10-1: USB disconnect, device number 88
[ 1667.191102][ T2356] pvrusb2: Attached sub-driver cx25840
[ 1667.191136][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1667.191142][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1667.384761][T14985] veth0_vlan: entered promiscuous mode
[ 1667.456552][T14985] veth1_vlan: entered promiscuous mode
[ 1667.729737][T14977] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1667.772009][T14985] veth0_macvtap: entered promiscuous mode
[ 1667.783457][T14985] veth1_macvtap: entered promiscuous mode
[ 1667.810818][T14985] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1667.833966][T14985] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1667.854059][ T6017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1667.859038][ T6017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1667.859108][ T6017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1667.859166][ T6017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1667.884482][ T8696] usb 9-1: new high-speed USB device number 79 using dummy_hcd
[ 1668.233831][ T8696] usb 9-1: Using ep0 maxpacket: 16
[ 1668.239242][ T8696] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1668.240717][ T8696] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[ 1668.273945][ T8696] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1668.273976][ T8696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1668.274140][ T8696] usb 9-1: Product: 殶䫣@㧥沧䖁䛮㝵㢦鶆碖뾻薷쀼⌠ᇶ閪潥䑚＊馋馶敧サ饂퟿狝择堒伵㔎છ駜Ⓝʣ鸃秄횟㖃龍쎸釉뢔纋ή䫜뀁᜹话珎먎碖곂㈾䕑㓑큾짍Ầ൸爭ꏇ榠╧㠶韖鲹㧅྄惻꥘⍪岎䈀余ネ緔쎈몦㿇䔗爴싘ೇ혎謯᾿觙㓕鳷
[ 1668.274164][ T8696] usb 9-1: Manufacturer: 聮ν統鋭䵾ꂣ㒊Ⓘ殀ຩ㮑ॶ䛴ᰴ稂㠌쏐봚정ɛ㛡彋婸ጒጃ兾螓빘片圼陥ڡ濪⿒耆秣鞬﷜窤蜨䚜ﶿ邕ᖳꌖ㖀嬌죄嚬ಏ嶂莿䐮㴢錼铦펖銠㝡洦ѵᐅ粣針饰皳퇸뀷
[ 1668.274180][ T8696] usb 9-1: SerialNumber: fl튉誃始戢
[ 1668.663197][ T8696] cdc_ncm 9-1:1.0: bind() failure
[ 1668.703243][ T8696] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[ 1668.703274][ T8696] cdc_ncm 9-1:1.1: bind() failure
[ 1668.796577][ T8696] usb 9-1: USB disconnect, device number 79
[ 1668.888780][   T82] ------------[ cut here ]------------
[ 1668.888795][   T82] kernel BUG at net/ipv6/route.c:1473!
[ 1668.926757][   T82] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[ 1668.926779][   T82] CPU: 1 UID: 0 PID: 82 Comm: kworker/u8:5 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1668.926795][   T82] Tainted: [L]=SOFTLOCKUP
[ 1668.926799][   T82] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1668.926807][   T82] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker
[ 1668.926824][   T82] RIP: 0010:ip6_pol_route+0x117d/0x1180
[ 1668.926841][   T82] Code: 9d f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 8e 72 9d f8 e9 f6 fa ff ff e8 54 3b 3b f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e
[ 1668.926850][   T82] RSP: 0018:ffffc900015bf2e0 EFLAGS: 00010293
[ 1668.926859][   T82] RAX: ffffffff89846ecc RBX: ffff888126def000 RCX: ffff88801bb08000
[ 1668.926868][   T82] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1668.926874][   T82] RBP: ffffc900015bf3f0 R08: ffffe8ffffd4327f R09: 1ffffd1ffffa864f
[ 1668.926882][   T82] R10: dffffc0000000000 R11: fffff91ffffa8650 R12: ffff888034dcda00
[ 1668.926890][   T82] R13: ffffffff89845eb2 R14: dffffc0000000000 R15: 0000607ed8f54278
[ 1668.926898][   T82] FS:  0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000
[ 1668.926907][   T82] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1668.926919][   T82] CR2: 0000001b34516ff8 CR3: 0000000034d1c000 CR4: 00000000003526f0
[ 1668.926929][   T82] Call Trace:
[ 1668.926934][   T82]  <TASK>
[ 1668.926939][   T82]  ? ip6_pol_route+0x162/0x1180
[ 1668.926953][   T82]  ? __pfx_ip6_pol_route+0x10/0x10
[ 1668.926965][   T82]  ? __lock_acquire+0x6b6/0x2cf0
[ 1668.926980][   T82]  ? check_noncircular+0xda/0x150
[ 1668.926997][   T82]  fib6_rule_lookup+0x1fc/0x6f0
[ 1668.927012][   T82]  ? __pfx_ip6_pol_route_output+0x10/0x10
[ 1668.927025][   T82]  ? __pfx_fib6_rule_lookup+0x10/0x10
[ 1668.927039][   T82]  ? ip6_route_output_flags+0x2e/0x5d0
[ 1668.927052][   T82]  ? ip6_route_output_flags+0x2e/0x5d0
[ 1668.927073][   T82]  ip6_route_output_flags+0x364/0x5d0
[ 1668.927086][   T82]  ? ip6_route_output_flags+0x2e/0x5d0
[ 1668.927099][   T82]  ip6_dst_lookup_tail+0x1ae/0x1510
[ 1668.927115][   T82]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1668.927126][   T82]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1668.927135][   T82]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1668.927146][   T82]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[ 1668.927161][   T82]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1668.927174][   T82]  ? rt_spin_unlock+0x150/0x200
[ 1668.927188][   T82]  ? rt_spin_unlock+0x161/0x200
[ 1668.927201][   T82]  ip6_dst_lookup_flow+0x47/0xe0
[ 1668.927216][   T82]  ? __pfx_ip6_dst_lookup_flow+0x10/0x10
[ 1668.927230][   T82]  send6+0x4ce/0x8d0
[ 1668.927240][   T82]  ? rt_read_lock+0x203/0x490
[ 1668.927252][   T82]  ? send6+0x220/0x8d0
[ 1668.927263][   T82]  ? __pfx_send6+0x10/0x10
[ 1668.927273][   T82]  ? rcu_is_watching+0x15/0xb0
[ 1668.927284][   T82]  ? __local_bh_disable_ip+0x3c/0x420
[ 1668.927297][   T82]  ? wg_socket_send_skb_to_peer+0x59/0x200
[ 1668.927309][   T82]  ? wg_socket_send_skb_to_peer+0x59/0x200
[ 1668.927320][   T82]  wg_socket_send_skb_to_peer+0x128/0x200
[ 1668.927332][   T82]  wg_packet_handshake_send_worker+0x1db/0x320
[ 1668.927343][   T82]  ? __pfx_wg_packet_handshake_send_worker+0x10/0x10
[ 1668.927358][   T82]  ? lock_acquire+0x222/0x340
[ 1668.927370][   T82]  ? process_scheduled_works+0x9ef/0x1770
[ 1668.927382][   T82]  ? process_scheduled_works+0x9ef/0x1770
[ 1668.927393][   T82]  process_scheduled_works+0xad1/0x1770
[ 1668.927410][   T82]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1668.927421][   T82]  ? do_raw_spin_lock+0x121/0x290
[ 1668.927435][   T82]  worker_thread+0x8a0/0xda0
[ 1668.927451][   T82]  kthread+0x711/0x8a0
[ 1668.927465][   T82]  ? __pfx_worker_thread+0x10/0x10
[ 1668.927476][   T82]  ? __pfx_kthread+0x10/0x10
[ 1668.927488][   T82]  ? rt_spin_unlock+0x150/0x200
[ 1668.927501][   T82]  ? rt_spin_unlock+0x161/0x200
[ 1668.927514][   T82]  ? __pfx_kthread+0x10/0x10
[ 1668.927527][   T82]  ret_from_fork+0x510/0xa50
[ 1668.927539][   T82]  ? __pfx_ret_from_fork+0x10/0x10
[ 1668.927549][   T82]  ? __switch_to+0xc9e/0x1480
[ 1668.927564][   T82]  ? __pfx_kthread+0x10/0x10
[ 1668.927578][   T82]  ret_from_fork_asm+0x1a/0x30
[ 1668.927597][   T82]  </TASK>
[ 1668.927604][   T82] Modules linked in:
[ 1668.927625][   T82] ---[ end trace 0000000000000000 ]---
[ 1668.927658][   T82] RIP: 0010:ip6_pol_route+0x117d/0x1180
[ 1668.927672][   T82] Code: 9d f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 8e 72 9d f8 e9 f6 fa ff ff e8 54 3b 3b f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e
[ 1668.927681][   T82] RSP: 0018:ffffc900015bf2e0 EFLAGS: 00010293
[ 1668.927690][   T82] RAX: ffffffff89846ecc RBX: ffff888126def000 RCX: ffff88801bb08000
[ 1668.927698][   T82] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1668.927705][   T82] RBP: ffffc900015bf3f0 R08: ffffe8ffffd4327f R09: 1ffffd1ffffa864f
[ 1668.927713][   T82] R10: dffffc0000000000 R11: fffff91ffffa8650 R12: ffff888034dcda00
[ 1668.927720][   T82] R13: ffffffff89845eb2 R14: dffffc0000000000 R15: 0000607ed8f54278
[ 1668.927729][   T82] FS:  0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000
[ 1668.927737][   T82] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1668.927744][   T82] CR2: 0000001b34516ff8 CR3: 0000000034d1c000 CR4: 00000000003526f0
[ 1668.927758][   T82] Kernel panic - not syncing: Fatal exception in interrupt
[ 1668.928183][   T82] Kernel Offset: disabled