last executing test programs:

3m59.844426272s ago: executing program 2 (id=9):
syz_usb_connect(0x3, 0xf5, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3m58.923255111s ago: executing program 2 (id=11):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6)
syz_emit_vhci(0x0, 0x0)

3m58.082796818s ago: executing program 2 (id=15):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000540)='usbip-vudc.0\n', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0)
write(r1, &(0x7f0000000640)='3\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0)
write(r2, &(0x7f0000000640)='-1', 0x2)

3m58.0820849s ago: executing program 3 (id=16):
mkdir(&(0x7f0000000e00)='./proc_dir\x00', 0x1ff)
mkdir(&(0x7f0000001400)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc_dir/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r0, &(0x7f0000000b00)='* ./export_dir 2000000000 8194 0 0 1\n', 0x25)

3m57.534583772s ago: executing program 3 (id=18):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
close(0xffffffffffffffff)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)

3m57.479074338s ago: executing program 0 (id=19):
mkdir(&(0x7f0000000000)='./nfsd_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd_mnt\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/portlist\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd_mnt/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000600)='udp 2', 0x5)
write(r1, &(0x7f0000000700)='1', 0x1)

3m57.353112659s ago: executing program 2 (id=20):
add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffd)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000900)='syz \x00', 0x5)
listen(r0, 0xa)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)="0100000002000800ffffff7f01000000", 0x10, 0xfffffffd)
setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000a00)='syz \x00', 0x5)
connect$rxrpc(r1, &(0x7f0000000700)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0xc351, @loopback}}, 0x24)
sendmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000d00)='hello', 0x5}], 0x1, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0)

3m56.598616824s ago: executing program 3 (id=21):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='add 1', 0x5)
write(r0, &(0x7f0000000180)='add 2', 0x5)
write(r0, &(0x7f00000001c0)='add 3', 0x5)
write(r0, &(0x7f0000000200)='add ', 0x4)
write(r0, &(0x7f0000000240)='add 5', 0x5)
write(r0, &(0x7f0000000280)='add 6', 0x5)
write(r0, &(0x7f00000002c0)='add 7', 0x5)
write(r0, &(0x7f0000000300)='add 8', 0x5)
write(r0, &(0x7f0000000340)='add 1-', 0x6)
write(r0, &(0x7f0000000380)='add 2-', 0x6)
write(r0, &(0x7f00000003c0)='add 3-', 0x6)
write(r0, &(0x7f0000000400)='add 4-', 0x6)

3m55.330732098s ago: executing program 3 (id=22):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='add 1', 0x5)
write(r0, &(0x7f0000000180)='add 2', 0x5)
write(r0, 0x0, 0x0)
write(r0, &(0x7f0000000200)='add 4', 0x5)
write(r0, &(0x7f0000000240)='add 5', 0x5)
write(r0, &(0x7f0000000280)='add 6', 0x5)
write(r0, &(0x7f00000002c0)='add 7', 0x5)
write(r0, &(0x7f0000000300)='add 8', 0x5)
write(r0, &(0x7f0000000340)='add 1-', 0x6)
write(r0, &(0x7f0000000380)='add 2-', 0x6)
write(r0, &(0x7f00000003c0)='add 3-', 0x6)
write(r0, &(0x7f0000000400)='add 4-', 0x6)

3m55.172581775s ago: executing program 2 (id=23):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000540)='usbip-vudc.0\n', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0)
write(r1, &(0x7f0000000640)='3\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0)
write(r2, &(0x7f0000000640)='-1', 0x2)

3m54.44103371s ago: executing program 2 (id=25):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007008c7948"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)

3m54.363084264s ago: executing program 3 (id=26):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xf, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

3m50.493140562s ago: executing program 3 (id=33):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007008c7948"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)

3m45.483095394s ago: executing program 0 (id=44):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10)
rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00')

3m44.286818348s ago: executing program 0 (id=48):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write(r0, &(0x7f0000000040)="102f6d", 0x3)

3m44.007253622s ago: executing program 0 (id=52):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0)
write(r0, &(0x7f0000000440)="d6", 0x1)

3m43.366635513s ago: executing program 0 (id=54):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x48013, 0x0, 0x0)

3m42.950200565s ago: executing program 0 (id=58):
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000800)='vivid.0', 0x7)
r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, 0x0, &(0x7f0000002000)={0x40, 0xe, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, &(0x7f0000002100)={0x40, 0xf, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000500)={0x8, 0xb, 0x1})

3m39.166893685s ago: executing program 32 (id=25):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007008c7948"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)

3m35.33771621s ago: executing program 33 (id=33):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007008c7948"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)

3m27.90976614s ago: executing program 34 (id=58):
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000800)='vivid.0', 0x7)
r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, 0x0, &(0x7f0000002000)={0x40, 0xe, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, &(0x7f0000002100)={0x40, 0xf, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000500)={0x8, 0xb, 0x1})

2m38.617788088s ago: executing program 5 (id=256):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)='1\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0)
write(r1, &(0x7f0000000800), 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0)
write(r2, &(0x7f0000000a00)='0\x00', 0x2)

2m37.859917333s ago: executing program 5 (id=257):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)="616e306d058d8ef0ea4e00000000acc859553d3372cce5040000000000000011d200157f21cc0200285a15", 0x5d)
openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0)

2m37.654930217s ago: executing program 5 (id=258):
mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='bfq', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='1\n', 0x2)
pread64(r0, &(0x7f0000000400), 0x8, 0x1000)
pread64(r0, &(0x7f0000000940), 0x8, 0x70000)
pread64(r0, &(0x7f00000002c0)=""/7, 0x7, 0x9)

2m36.826518667s ago: executing program 5 (id=262):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[], 0x0)
nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)='1\x00', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0)
write(r1, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0)
write(r2, &(0x7f0000000a00)='0\x00', 0x2)
close(r2)

2m33.509238835s ago: executing program 5 (id=274):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00040028000180070001"], 0x80}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0xc000)

2m33.2147996s ago: executing program 5 (id=276):
mkdir(&(0x7f0000000000)='./nfsd_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd_mnt\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/portlist\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd_mnt/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000600)='udp 2', 0x5)
write(r1, &(0x7f0000000700)='1', 0x1)

2m18.067534517s ago: executing program 35 (id=276):
mkdir(&(0x7f0000000000)='./nfsd_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd_mnt\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/portlist\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd_mnt/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000600)='udp 2', 0x5)
write(r1, &(0x7f0000000700)='1', 0x1)

2m7.560395505s ago: executing program 6 (id=450):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x24c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x238, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x40003, 0x0, 0x0, 0x200000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7fffffff}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0xa8, 0x17, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xd}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffff7}]}, {0x55, 0x6, "b36c9360a687b7b48dab4646d9ca683e6f662cdd59e47700fe58c607f2e1944e6d769925ab9d591039d5e685ae47c195900d58202e5b7c9f7144b2ec9b078940184666c5cf7d3e11408e96ff85bc8b3529"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x98, 0xb, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x17, 0x6, "b0c788834491db917a9a992c9833c17cff3b43"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x80, 0x16, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1, 0x20000000, 0x4, 0xcb8a}, 0x4}}]}, {0x31, 0x6, "a611650f26be9cd7202da28cac16d8d11fdb771f20ce375a34e3dba9f39705a673d73efe471bb4fd0d2fbed092"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x24c}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]})

2m7.101179462s ago: executing program 6 (id=455):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='add 1', 0x5)
write(r0, &(0x7f0000000180)='add 2', 0x5)
write(r0, &(0x7f00000001c0)='add 3', 0x5)
write(r0, &(0x7f0000000200)='add 4', 0x5)
write(r0, &(0x7f0000000240)='add 5', 0x5)
write(r0, &(0x7f0000000280)='add 6', 0x5)
write(r0, &(0x7f00000002c0)='add 7', 0x5)
write(r0, &(0x7f0000000300)='add 8', 0x5)
write(r0, &(0x7f0000000340)='add 1', 0x5)
write(r0, &(0x7f0000000380)='add 2-', 0x6)
write(r0, &(0x7f00000003c0)='add 3-', 0x6)
write(r0, &(0x7f0000000400)='add 4-', 0x6)

2m6.868231492s ago: executing program 6 (id=456):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r0, 0x5, 0x4)

2m5.818934346s ago: executing program 6 (id=464):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0xffffffffffffffff}]})

2m5.587196728s ago: executing program 6 (id=467):
mkdir(&(0x7f0000000000)='./nfsd_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./nfsd_dir\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_dir/threads\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='-2', 0x2)

2m5.424584354s ago: executing program 6 (id=468):
mkdir(0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00')

1m50.362708413s ago: executing program 36 (id=468):
mkdir(0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00')

21.422452852s ago: executing program 1 (id=1195):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0}}], 0x1, 0x80)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0)

20.077005303s ago: executing program 1 (id=1200):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff)
mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='127.0.0.1', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='77', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='0', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0)
write(r3, &(0x7f0000000380)='1', 0x1)
close(r3)
close(0xffffffffffffffff)
mkdir(&(0x7f0000000440)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x1, 0x0)
write(r4, &(0x7f00000005c0)='64', 0x2)

19.443668535s ago: executing program 9 (id=1201):
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', 0x0, 0x0)

19.428709536s ago: executing program 1 (id=1202):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x80000)
r1 = getpid()
kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x2, 'veth0_vlan\x00', {0x2}, 0xa})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7)

18.663025513s ago: executing program 9 (id=1206):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x80000)
r1 = getpid()
kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'veth0_vlan\x00', {0x2}, 0xa})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpriority(0x2, r6)
ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r8, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)

17.946896468s ago: executing program 8 (id=1207):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)

17.663349758s ago: executing program 1 (id=1209):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

16.60258561s ago: executing program 9 (id=1210):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)='port', 0x400, &(0x7f0000000180)={@align=0x8000, {0x10, 0x5, 0x80, 0xd57}}, 0x8000, &(0x7f00000001c0), &(0x7f0000000200)=0xfff})
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={0x0, 0x0, 0x18}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c70726976706f72742c0004d6fe9f773da921d86d07f15b229baa73e5"])

14.372201116s ago: executing program 4 (id=1216):
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', 0x0, 0x0)

12.722043769s ago: executing program 8 (id=1217):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000800)={"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"})
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xffffffffffffffff, 0xfff], 0x200000, 0x1c6017})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12.650763274s ago: executing program 4 (id=1218):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100", 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmmsg$alg(r2, &(0x7f0000000180), 0x0, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
r4 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
tkill(r4, 0xb)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000103, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

11.947252984s ago: executing program 9 (id=1220):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

11.773969731s ago: executing program 1 (id=1221):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)='port', 0x400, &(0x7f0000000180)={@align=0x8000, {0x10, 0x5, 0x80, 0xd57}}, 0x8000, &(0x7f00000001c0), &(0x7f0000000200)=0xfff})
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={0x0, 0x0, 0x18}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c70726976706f72742c0004d6fe9f773da921d86d07f15b229baa73e5"])

11.606034855s ago: executing program 7 (id=1222):
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0)

10.100651603s ago: executing program 8 (id=1223):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x80000)
r1 = getpid()
kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'veth0_vlan\x00', {0x2}, 0xa})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r8, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)

10.092484309s ago: executing program 7 (id=1224):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100", 0x7)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmmsg$alg(r2, &(0x7f0000000180), 0x0, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
r4 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
tkill(r4, 0xb)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000103, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

8.340780925s ago: executing program 1 (id=1225):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff)
mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='127.0.0.1', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='77', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='0', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0)
write(r3, &(0x7f0000000380)='1', 0x1)
close(r3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x1, 0x0)
write(r4, &(0x7f00000005c0)='64', 0x2)

5.542215434s ago: executing program 8 (id=1226):
r0 = userfaultfd(0x80001)
io_setup(0x8, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
r6 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f046})
poll(&(0x7f0000000180)=[{r6, 0x3}], 0x1, 0x9)

4.450054037s ago: executing program 8 (id=1227):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='add 1', 0x5)
write(r0, &(0x7f0000000180)='add 2', 0x5)
write(r0, &(0x7f00000001c0)='add 3', 0x5)
write(r0, &(0x7f0000000200)='add 4', 0x5)
write(r0, &(0x7f0000000240)='add 5', 0x5)
write(r0, &(0x7f0000000280)='add 6', 0x5)
write(r0, &(0x7f00000002c0)='add 7', 0x5)
write(r0, &(0x7f0000000300)='add 8', 0x5)
write(r0, &(0x7f0000000340), 0x0)
write(r0, &(0x7f0000000380)='add 2-', 0x6)
write(r0, &(0x7f00000003c0)='add 3-', 0x6)
write(r0, &(0x7f0000000400)='add 4-', 0x6)

4.126933268s ago: executing program 4 (id=1228):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff)
mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='127.0.0.1', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='77', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='0', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0)
write(r3, &(0x7f0000000380)='1', 0x1)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x1, 0x0)
write(r4, &(0x7f0000000540)='1', 0x1)

4.103331011s ago: executing program 7 (id=1229):
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', 0x0, 0x0)

4.030598205s ago: executing program 8 (id=1230):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
r0 = open_tree(0xffffffffffffffff, 0x0, 0x1001)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fspick(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = signalfd4(r2, &(0x7f00000001c0)={[0x3c4f5a0e]}, 0x8, 0x80000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000)

3.881298512s ago: executing program 4 (id=1231):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0}}], 0x1, 0x80)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb5", 0x89)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

3.834733173s ago: executing program 7 (id=1232):
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
add_key(0x0, 0x0, &(0x7f0000002240), 0x0, 0xfffffffffffffffe)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x106}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x38}}, 0x0)

3.332159738s ago: executing program 7 (id=1233):
socket$can_raw(0x1d, 0x3, 0x1)
dup(0xffffffffffffffff)
socket$rds(0x15, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00')
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket(0x10, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x2, 0x300)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x8}}, 0x20)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4126}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

3.315254346s ago: executing program 9 (id=1234):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
socket$tipc(0x1e, 0x2, 0x0)
sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000180), 0x2000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002680)=[{}, {{&(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000002500)=[{&(0x7f0000000280)="2c9bbc262b6f", 0x6}, {0x0}, {&(0x7f0000000400)="8a120be4448668ddf883e5d676f201a0457d35fc812532b7516d5953dba90dc165d16cc4d7b1527beee9acd6", 0x2c}, {&(0x7f0000000440)}, {&(0x7f0000000540)="31cbbc94dca7d34134c1e415423a9409c1528f52649086c59680d933340aeb2b2c91c9172f03f472a8825da6e1e5ea28afd40748236087cd284fd2e84299dd05f004fff3f9a0e85852fd2c807a6997b3238e94329ad45abfa6f9b503e8b5d08f5ae3a6968abd95b9a322f745", 0x6c}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="ba4831fc8335b03ac767e3341af1931c1e5f6c2036758649dcf8989ea6d8f084225742a4cbad6087ef82473c540a42bda358e5a8dc1145dc088632", 0x3b}], 0x7, &(0x7f0000002580)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffff8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @broadcast}}}], 0x88}}], 0x2, 0x0)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x2})

3.05266118s ago: executing program 7 (id=1235):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
fsync(r1)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x20000)

2.017339927s ago: executing program 4 (id=1236):
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={0x0, 0x0, 0x18}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', 0x0, 0x8010, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c70726976706f72742c0004d6fe9f773da921d86d07f15b229baa73e57dfe1d51"])

314.911009ms ago: executing program 4 (id=1237):
r0 = userfaultfd(0x80001)
io_setup(0x8, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
r6 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f046})
poll(&(0x7f0000000180)=[{r6, 0x3}], 0x1, 0x9)

0s ago: executing program 9 (id=1238):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x18)
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xffffffffffffffff}}, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00')
read$FUSE(r3, &(0x7f0000004800)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.0' (ED25519) to the list of known hosts.
[  151.008919][ T5593] cgroup: Unknown subsys name 'net'
[  151.260384][ T5593] cgroup: Unknown subsys name 'cpuset'
[  151.340926][ T5593] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  156.034803][ T5593] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  162.373543][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  162.418113][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  162.431071][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  162.470793][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  162.476077][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  162.775189][ T4914] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  162.893976][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  162.907506][ T4914] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  162.941448][ T4914] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  162.968558][ T4914] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  163.033657][ T4914] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  163.155702][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  163.235539][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  163.293516][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  163.294331][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  163.469659][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  163.494911][   T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  163.577766][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  163.636647][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  163.675593][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  163.717780][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  163.788640][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  163.789717][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  163.942672][ T4914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  163.971438][ T4914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  165.290532][ T5626] Bluetooth: hci3: command tx timeout
[  165.370487][ T5626] Bluetooth: hci2: command tx timeout
[  165.840096][ T5626] Bluetooth: hci4: command tx timeout
[  166.082164][ T5626] Bluetooth: hci0: command tx timeout
[  166.267958][ T5626] Bluetooth: hci1: command tx timeout
[  167.363606][ T5626] Bluetooth: hci3: command tx timeout
[  167.449193][ T5626] Bluetooth: hci2: command tx timeout
[  167.930112][ T5626] Bluetooth: hci4: command tx timeout
[  168.161895][ T5626] Bluetooth: hci0: command tx timeout
[  168.321575][ T5626] Bluetooth: hci1: command tx timeout
[  169.440471][ T5626] Bluetooth: hci3: command tx timeout
[  169.521212][ T5626] Bluetooth: hci2: command tx timeout
[  169.816356][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.818596][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.848316][ T5610] bridge_slave_0: entered allmulticast mode
[  169.858018][ T5610] bridge_slave_0: entered promiscuous mode
[  169.966909][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.967037][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.967228][ T5613] bridge_slave_0: entered allmulticast mode
[  169.981320][ T5613] bridge_slave_0: entered promiscuous mode
[  169.987498][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.987733][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.988223][ T5612] bridge_slave_0: entered allmulticast mode
[  170.000210][ T5626] Bluetooth: hci4: command tx timeout
[  170.016843][ T5612] bridge_slave_0: entered promiscuous mode
[  170.052369][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.052474][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.052749][ T5610] bridge_slave_1: entered allmulticast mode
[  170.054741][ T5610] bridge_slave_1: entered promiscuous mode
[  170.056340][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.056489][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.056628][ T5611] bridge_slave_0: entered allmulticast mode
[  170.076658][ T5611] bridge_slave_0: entered promiscuous mode
[  170.132356][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.132482][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.132669][ T5613] bridge_slave_1: entered allmulticast mode
[  170.134869][ T5613] bridge_slave_1: entered promiscuous mode
[  170.138317][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.138440][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.138613][ T5612] bridge_slave_1: entered allmulticast mode
[  170.199470][ T5612] bridge_slave_1: entered promiscuous mode
[  170.228393][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.228513][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.228656][ T5611] bridge_slave_1: entered allmulticast mode
[  170.250169][ T5626] Bluetooth: hci0: command tx timeout
[  170.254082][ T5611] bridge_slave_1: entered promiscuous mode
[  170.266887][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.267224][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.277146][ T5614] bridge_slave_0: entered allmulticast mode
[  170.287375][ T5614] bridge_slave_0: entered promiscuous mode
[  170.398970][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.401022][ T5626] Bluetooth: hci1: command tx timeout
[  170.401757][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.401998][ T5614] bridge_slave_1: entered allmulticast mode
[  170.406182][ T5614] bridge_slave_1: entered promiscuous mode
[  170.531948][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.584460][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.615350][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.618849][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.649398][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.788063][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.795501][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.847216][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.852910][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.996299][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.058425][ T5610] team0: Port device team_slave_0 added
[  171.111776][ T5613] team0: Port device team_slave_0 added
[  171.114627][ T5612] team0: Port device team_slave_0 added
[  171.117629][ T5610] team0: Port device team_slave_1 added
[  171.144268][ T5611] team0: Port device team_slave_0 added
[  171.178857][ T5613] team0: Port device team_slave_1 added
[  171.194116][ T5612] team0: Port device team_slave_1 added
[  171.227068][ T5611] team0: Port device team_slave_1 added
[  171.229195][ T5614] team0: Port device team_slave_0 added
[  171.335161][ T5614] team0: Port device team_slave_1 added
[  171.392285][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.392302][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.392323][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.495067][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.495081][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.495101][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.496338][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.496354][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.496382][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.519259][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.519308][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.519334][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.527306][ T5626] Bluetooth: hci3: command tx timeout
[  171.545519][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.545606][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.545683][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.603588][ T5626] Bluetooth: hci2: command tx timeout
[  171.689290][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.689307][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.689330][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.709243][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.709300][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.709375][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.838779][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.838853][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.838949][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.080431][ T5626] Bluetooth: hci4: command tx timeout
[  172.181541][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.181555][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.181580][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.301132][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.301201][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.301222][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.334573][ T5626] Bluetooth: hci0: command tx timeout
[  172.491789][ T5626] Bluetooth: hci1: command tx timeout
[  172.649423][ T5610] hsr_slave_0: entered promiscuous mode
[  172.662838][ T5610] hsr_slave_1: entered promiscuous mode
[  172.703001][ T5613] hsr_slave_0: entered promiscuous mode
[  172.704012][ T5613] hsr_slave_1: entered promiscuous mode
[  172.704910][ T5613] debugfs: 'hsr0' already exists in 'hsr'
[  172.705010][ T5613] Cannot create hsr debugfs directory
[  172.783190][ T5612] hsr_slave_0: entered promiscuous mode
[  172.784317][ T5612] hsr_slave_1: entered promiscuous mode
[  172.785097][ T5612] debugfs: 'hsr0' already exists in 'hsr'
[  172.785115][ T5612] Cannot create hsr debugfs directory
[  172.841056][ T5611] hsr_slave_0: entered promiscuous mode
[  172.843040][ T5611] hsr_slave_1: entered promiscuous mode
[  172.843782][ T5611] debugfs: 'hsr0' already exists in 'hsr'
[  172.843800][ T5611] Cannot create hsr debugfs directory
[  173.056049][ T5614] hsr_slave_0: entered promiscuous mode
[  173.057760][ T5614] hsr_slave_1: entered promiscuous mode
[  173.058518][ T5614] debugfs: 'hsr0' already exists in 'hsr'
[  173.058542][ T5614] Cannot create hsr debugfs directory
[  175.011696][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  175.146703][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  175.204108][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  175.317135][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  175.355692][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  175.397371][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  175.479332][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  175.547067][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  176.062636][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  176.119818][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  176.137792][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  176.174734][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  176.243970][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  176.292685][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  176.378911][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  176.400551][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  176.750964][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  176.807160][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  176.836387][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  176.875823][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  176.895119][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  176.934326][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  176.988869][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  177.024220][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  177.426299][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  177.469065][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  177.489810][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  177.546432][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  177.603969][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  177.651413][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  177.740841][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  177.768694][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  177.852205][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.284803][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  178.337117][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  178.352186][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[  178.415578][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  178.520646][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  178.580307][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  178.631300][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  178.659004][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  178.696974][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  178.765177][ T3398] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.765369][ T3398] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.918561][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.918713][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.977809][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.390802][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[  179.527761][  T711] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.553708][  T711] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.583373][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.716505][  T711] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.716980][  T711] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.946748][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[  180.066282][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.253905][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.254071][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.380306][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.380466][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.561724][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[  180.669430][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.669651][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.805090][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.849594][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.873896][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.231490][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[  181.391455][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.392614][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.478984][ T3412] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.479184][ T3412] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.723200][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.791918][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.963649][ T5610] veth0_vlan: entered promiscuous mode
[  183.342287][ T5610] veth1_vlan: entered promiscuous mode
[  183.465046][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.541288][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.751038][ T5612] veth0_vlan: entered promiscuous mode
[  183.956828][ T5610] veth0_macvtap: entered promiscuous mode
[  183.985681][ T5612] veth1_vlan: entered promiscuous mode
[  184.125477][ T5610] veth1_macvtap: entered promiscuous mode
[  184.429827][ T5611] veth0_vlan: entered promiscuous mode
[  184.500664][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.593101][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.649325][ T5611] veth1_vlan: entered promiscuous mode
[  184.715404][   T66] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.736996][ T5612] veth0_macvtap: entered promiscuous mode
[  184.759469][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.774193][   T66] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.798857][   T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.825948][   T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.857066][ T5612] veth1_macvtap: entered promiscuous mode
[  185.433144][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.677120][ T5613] veth0_vlan: entered promiscuous mode
[  185.861376][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.862018][ T5611] veth0_macvtap: entered promiscuous mode
[  185.951455][ T5611] veth1_macvtap: entered promiscuous mode
[  185.976129][ T3412] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.977381][ T5613] veth1_vlan: entered promiscuous mode
[  186.063688][ T3412] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.107898][ T3412] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.164989][ T3412] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.229659][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.229688][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.492587][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.612506][ T5614] veth0_vlan: entered promiscuous mode
[  186.772973][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.148980][ T5614] veth1_vlan: entered promiscuous mode
[  187.175988][ T3337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.212612][ T3337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.228156][ T3337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.271406][ T3337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.275612][ T3412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.275635][ T3412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.775734][ T5613] veth0_macvtap: entered promiscuous mode
[  187.849792][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.849816][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.104628][ T5613] veth1_macvtap: entered promiscuous mode
[  188.766339][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.767567][ T5614] veth0_macvtap: entered promiscuous mode
[  188.767822][  T711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.767841][  T711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.010732][ T5614] veth1_macvtap: entered promiscuous mode
[  189.017606][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.019450][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.019471][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.452576][   T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.577662][   T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.593224][   T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.595261][   T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.740227][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.742969][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.742994][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.879193][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.238506][  T711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.283394][  T711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.326887][  T711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.370962][  T711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.668621][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.668643][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.074261][ T5823] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[  192.496982][ T3412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.497006][ T3412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.248360][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.248385][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.658300][ T5839] usbip-vudc usbip-vudc.0: gadget not bound
[  194.089737][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.089760][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.518907][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  194.519035][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  196.565217][ T5863] usbip-vudc usbip-vudc.0: gadget not bound
[  196.565936][ T5863] usbip-vudc usbip-vudc.0: gadget not bound
[  196.779166][ T5871] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  196.837919][ T5871] CIFS: Attempting to mount //127.0.0.1/share
[  197.278919][ T5876] netlink: 'syz.3.26': attribute type 10 has an invalid length.
[  197.588680][ T5871] CIFS: VFS: Error connecting to socket. Aborting operation.
[  197.588850][ T5871] CIFS: VFS: cifs_mount failed w/return code = -4
[  197.642474][ T5880] netlink: 'syz.3.26': attribute type 4 has an invalid length.
[  197.644034][ T5880] netlink: 152 bytes leftover after parsing attributes in process `syz.3.26'.
[  198.140249][ T5885] usbip-vudc usbip-vudc.0: gadget not bound
[  198.140844][ T5885] usbip-vudc usbip-vudc.0: gadget not bound
[  198.329397][ T5876] bond0: (slave syzkaller0): Enslaving as an active interface with an up link
[  198.394345][ T5877] bridge_slave_0: left allmulticast mode
[  198.394380][ T5877] bridge_slave_0: left promiscuous mode
[  198.428080][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.817827][ T5877] bridge_slave_1: left allmulticast mode
[  198.817894][ T5877] bridge_slave_1: left promiscuous mode
[  198.818807][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.510773][ T5877] bond0: (slave bond_slave_0): Releasing backup interface
[  199.846459][ T5877] bond0: (slave bond_slave_1): Releasing backup interface
[  200.077289][ T5877] team0: Port device team_slave_0 removed
[  200.213104][ T5877] team0: Port device team_slave_1 removed
[  200.216828][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.216858][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.257093][   T48] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  200.453529][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.453554][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.497039][ T5877] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  200.554499][   T48] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
[  200.554536][   T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.101743][   T48] emi26 - firmware loader 2-1:1.0: emi26_probe start
[  201.265625][   T48] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2
[  201.265656][   T48] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw
[  202.177960][ T5907] usbip-vudc usbip-vudc.0: gadget not bound
[  202.188828][ T5907] usbip-vudc usbip-vudc.0: gadget not bound
[  203.419180][ T5918] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  204.265361][ T5921] Config c/1 of g1 needs at least one function.
[  204.315032][ T5922] usbip-vudc usbip-vudc.0: gadget not bound
[  204.332635][ T5922] usbip-vudc usbip-vudc.0: gadget not bound
[  204.339336][ T5921] udc usbip-vudc.0: failed to start g1: -22
[  204.339368][ T5921] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22
[  204.596466][ T5921] UDC core: g1: couldn't find an available UDC or it's busy
[  204.914758][ T5924] bridge0: port 3(syz_tun) entered blocking state
[  204.915000][ T5924] bridge0: port 3(syz_tun) entered disabled state
[  204.915230][ T5924] syz_tun: entered allmulticast mode
[  204.919704][ T5924] syz_tun: entered promiscuous mode
[  204.951430][ T5924] bridge0: port 3(syz_tun) entered blocking state
[  204.951638][ T5924] bridge0: port 3(syz_tun) entered forwarding state
[  205.110337][ T5925] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  205.189849][ T5926] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  205.909735][ T5611] svc: failed to register nfsdv3 RPC service (errno 111).
[  205.964077][ T5611] svc: failed to register nfsaclv3 RPC service (errno 111).
[  205.964101][ T5611] failed to unregister udp with rpcbind
[  206.033396][ T5611] svc: failed to register nfsdv3 RPC service (errno 97).
[  206.033424][ T5611] svc: failed to register nfsaclv3 RPC service (errno 97).
[  206.033437][ T5611] failed to unregister udp with rpcbind
[  206.035522][ T5933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.636063][   T36] audit: type=1800 audit(1785202824.206:2): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.44" name="enable" dev="configfs" ino=9653 res=0 errno=0
[  207.556672][ T5952] Config c/1 of g1 needs at least one function.
[  207.611382][ T5952] udc usbip-vudc.0: failed to start g1: -22
[  207.611414][ T5952] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22
[  207.638575][ T5956] usbip-vudc usbip-vudc.0: gadget not bound
[  207.639404][ T5956] usbip-vudc usbip-vudc.0: gadget not bound
[  207.831402][ T5952] UDC core: g1: couldn't find an available UDC or it's busy
[  208.846703][ T5967] vivid-000: unregistering video7
[  208.916754][ T5620] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  208.930497][ T5967] vivid-000: unregistering video8
[  208.968248][ T5967] vivid-000: unregistering vbi0
[  209.085816][ T5967] vivid-000: unregistering vbi1
[  209.104841][ T5967] vivid-000: unregistering swradio0
[  209.235459][ T5967] vivid-000: unregistering radio0
[  209.245165][ T5620] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.313161][ T5967] vivid-000: unregistering radio1
[  209.346841][ T5620] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00
[  209.346884][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.346910][ T5620] usb 1-1: Product: syz
[  209.347019][ T5620] usb 1-1: Manufacturer: syz
[  209.347036][ T5620] usb 1-1: SerialNumber: syz
[  209.469686][ T5967] vivid-000: unregistering video9
[  209.506357][ T5967] vivid-000: unregistering video10
[  209.638157][ T5967] vivid-000: unregistering v4l-touch0
[  210.415011][ T5620] hackrf 1-1:1.0: Board ID: 00
[  210.415035][ T5620] hackrf 1-1:1.0: Firmware version: 
[  210.599606][ T5967] vivid-001: unregistering video11
[  210.985942][ T5967] vivid-001: unregistering video12
[  210.986500][ T5620] hackrf 1-1:1.0: Registered as swradio0
[  211.088733][ T5967] vivid-001: unregistering vbi2
[  211.090268][ T5620] hackrf 1-1:1.0: Registered as swradio24
[  211.090289][ T5620] hackrf 1-1:1.0: SDR API is still slightly experimental and functionality changes may follow
[  211.264109][ T5967] vivid-001: unregistering vbi3
[  211.462842][ T5967] vivid-001: unregistering swradio1
[  211.474597][ T5967] vivid-001: unregistering radio2
[  211.491851][ T5967] vivid-001: unregistering radio3
[  211.560308][ T5967] vivid-001: unregistering video13
[  211.562136][ T5967] vivid-001: unregistering video14
[  211.584012][ T5967] vivid-001: unregistering v4l-touch1
[  211.757037][ T6002] usbip-vudc usbip-vudc.0: gadget not bound
[  211.759290][ T6002] usbip-vudc usbip-vudc.0: gadget not bound
[  212.171026][ T5967] vivid-002: unregistering video15
[  212.190407][ T5967] vivid-002: unregistering video16
[  212.223279][ T5967] vivid-002: unregistering vbi4
[  212.330359][ T5967] vivid-002: unregistering vbi5
[  212.356035][ T5967] vivid-002: unregistering swradio2
[  212.388394][ T5967] vivid-002: unregistering radio4
[  212.407582][ T5967] vivid-002: unregistering radio5
[  212.540428][ T5967] vivid-002: unregistering video17
[  212.542290][ T5967] vivid-002: unregistering video18
[  212.592929][ T5967] vivid-002: unregistering v4l-touch2
[  213.038812][ T5967] vivid-003: unregistering video19
[  213.065086][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  213.107503][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  213.119070][ T5967] vivid-003: unregistering video20
[  213.132521][ T5967] vivid-003: unregistering vbi6
[  213.133940][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  213.136660][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  213.137636][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  213.253175][ T5967] vivid-003: unregistering vbi7
[  213.271800][ T5967] vivid-003: unregistering swradio3
[  213.298244][ T5967] vivid-003: unregistering radio6
[  213.316277][ T5967] vivid-003: unregistering radio7
[  213.342625][ T5967] vivid-003: unregistering video21
[  213.406360][ T5967] vivid-003: unregistering video22
[  213.417001][ T5967] vivid-003: unregistering v4l-touch3
[  213.816346][ T5967] vivid-004: unregistering video23
[  213.830643][ T5967] vivid-004: unregistering video24
[  213.833107][ T5967] vivid-004: unregistering vbi8
[  213.886899][ T5967] vivid-004: unregistering vbi9
[  213.925617][ T5967] vivid-004: unregistering swradio4
[  213.980491][ T5967] vivid-004: unregistering radio8
[  214.006976][ T5967] vivid-004: unregistering radio9
[  214.067352][ T5967] vivid-004: unregistering video25
[  214.081432][ T5967] vivid-004: unregistering video26
[  214.095501][ T5967] vivid-004: unregistering v4l-touch4
[  214.467374][ T5967] vivid-005: unregistering video27
[  214.469142][ T5967] vivid-005: unregistering video28
[  214.504298][ T5967] vivid-005: unregistering vbi10
[  214.593556][ T5967] vivid-005: unregistering vbi11
[  214.636653][ T6043] usbip-vudc usbip-vudc.0: gadget not bound
[  214.639527][ T5967] vivid-005: unregistering swradio5
[  214.640220][ T6041] usbip-vudc usbip-vudc.0: gadget not bound
[  214.699299][ T5967] vivid-005: unregistering radio10
[  214.715868][ T5967] vivid-005: unregistering radio11
[  214.760431][ T5967] vivid-005: unregistering video29
[  214.762206][ T5967] vivid-005: unregistering video30
[  214.789575][ T5967] vivid-005: unregistering v4l-touch5
[  215.043186][ T5875] Set syz1 is full, maxelem 65536 reached
[  215.116771][ T5967] vivid-006: unregistering video31
[  215.130508][ T5967] vivid-006: unregistering video32
[  215.135285][ T5967] vivid-006: unregistering vbi12
[  215.158676][ T5967] vivid-006: unregistering vbi13
[  215.217077][ T5967] vivid-006: unregistering swradio6
[  215.279763][ T5967] vivid-006: unregistering radio12
[  215.284920][ T5626] Bluetooth: hci5: command tx timeout
[  215.314742][ T5967] vivid-006: unregistering radio13
[  215.370406][ T5967] vivid-006: unregistering video33
[  215.418018][ T5967] vivid-006: unregistering video34
[  215.454084][ T5967] vivid-006: unregistering v4l-touch6
[  215.667990][ T5967] vivid-007: unregistering video35
[  215.729513][ T5967] vivid-007: unregistering video36
[  215.756898][ T5967] vivid-007: unregistering vbi14
[  215.812013][ T5967] vivid-007: unregistering vbi15
[  215.877935][ T5967] vivid-007: unregistering swradio7
[  215.922399][ T5967] vivid-007: unregistering radio14
[  215.955283][ T5967] vivid-007: unregistering radio15
[  216.041068][ T5967] vivid-007: unregistering video37
[  216.083799][ T5967] vivid-007: unregistering video38
[  216.114522][ T5967] vivid-007: unregistering v4l-touch7
[  216.510211][ T5967] vivid-008: unregistering video39
[  216.520005][ T5967] vivid-008: unregistering video40
[  216.529119][ T5967] vivid-008: unregistering vbi16
[  216.560642][ T5967] vivid-008: unregistering vbi17
[  216.596789][ T5967] vivid-008: unregistering swradio8
[  216.658944][ T5967] vivid-008: unregistering radio16
[  216.838546][ T5967] vivid-008: unregistering radio17
[  216.928444][ T5621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  216.957365][ T5621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  216.967300][ T5621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  216.971317][ T5967] vivid-008: unregistering video41
[  216.980909][ T5621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  216.987733][ T5621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  217.080837][ T5967] vivid-008: unregistering video42
[  217.193690][ T5967] vivid-008: unregistering v4l-touch8
[  217.370009][ T5626] Bluetooth: hci5: command tx timeout
[  217.763985][ T5967] vivid-009: unregistering video43
[  217.795626][ T5967] vivid-009: unregistering video44
[  217.816761][ T5967] vivid-009: unregistering vbi18
[  218.050817][   T48] usb 2-1: Direct firmware load for emi26/bitstream.fw failed with error -2
[  218.050856][   T48] usb 2-1: Falling back to sysfs fallback for: emi26/bitstream.fw
[  218.060589][ T5967] vivid-009: unregistering vbi19
[  218.191628][ T5967] vivid-009: unregistering swradio9
[  218.193861][ T5967] vivid-009: unregistering radio18
[  218.198919][ T5967] vivid-009: unregistering radio19
[  218.380372][ T5967] vivid-009: unregistering video45
[  218.448835][ T5967] vivid-009: unregistering video46
[  218.494087][ T5967] vivid-009: unregistering v4l-touch9
[  218.865458][ T6087] usbip-vudc usbip-vudc.0: gadget not bound
[  218.866163][ T6087] usbip-vudc usbip-vudc.0: gadget not bound
[  218.973260][ T5967] vivid-010: unregistering video47
[  218.989317][ T5967] vivid-010: unregistering video48
[  218.999070][ T5967] vivid-010: unregistering vbi20
[  219.084015][ T5967] vivid-010: unregistering vbi21
[  219.101446][ T5967] vivid-010: unregistering swradio10
[  219.130343][ T5967] vivid-010: unregistering radio20
[  219.154430][ T5967] vivid-010: unregistering radio21
[  219.199419][ T5967] vivid-010: unregistering video49
[  219.249145][ T5967] vivid-010: unregistering video50
[  219.263964][ T5967] vivid-010: unregistering v4l-touch10
[  219.330943][ T5967] vivid-011: unregistering video51
[  219.348621][ T5967] vivid-011: unregistering video52
[  219.370826][ T5626] Bluetooth: hci6: command tx timeout
[  219.456070][ T5967] vivid-011: unregistering vbi22
[  219.458631][ T5626] Bluetooth: hci5: command tx timeout
[  219.503225][ T5967] vivid-011: unregistering vbi23
[  219.541724][ T5967] vivid-011: unregistering swradio11
[  219.608272][ T5967] vivid-011: unregistering radio22
[  219.638663][ T5967] vivid-011: unregistering radio23
[  219.709647][ T5967] vivid-011: unregistering video53
[  219.741726][ T5967] vivid-011: unregistering video54
[  219.796821][ T5967] vivid-011: unregistering v4l-touch11
[  220.137671][ T5967] vivid-012: unregistering video55
[  220.168352][ T5967] vivid-012: unregistering video56
[  220.193919][ T5967] vivid-012: unregistering vbi24
[  220.338037][ T5967] vivid-012: unregistering vbi25
[  220.370689][ T5967] vivid-012: unregistering swradio12
[  220.446347][ T5967] vivid-012: unregistering radio24
[  220.490724][ T5967] vivid-012: unregistering radio25
[  220.542645][ T5967] vivid-012: unregistering video57
[  220.556624][ T5967] vivid-012: unregistering video58
[  220.567212][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  220.590318][ T5967] vivid-012: unregistering v4l-touch12
[  220.679225][ T5967] vivid-013: unregistering video59
[  220.687211][ T5967] vivid-013: unregistering video60
[  220.689143][ T5967] vivid-013: unregistering vbi26
[  220.723539][ T5967] vivid-013: unregistering vbi27
[  220.751120][    T9] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
[  220.751152][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.812494][ T5967] vivid-013: unregistering swradio13
[  220.817881][ T5967] vivid-013: unregistering radio26
[  220.863537][ T5967] vivid-013: unregistering radio27
[  220.952110][    T9] emi26 - firmware loader 5-1:1.0: emi26_probe start
[  220.986912][ T5967] vivid-013: unregistering video61
[  221.005426][ T5967] vivid-013: unregistering video62
[  221.020956][ T5967] vivid-013: unregistering v4l-touch13
[  221.132006][ T5967] vivid-014: unregistering video63
[  221.134526][ T5967] vivid-014: unregistering video64
[  221.138131][ T5967] vivid-014: unregistering vbi28
[  221.163628][ T5967] vivid-014: unregistering vbi29
[  221.262908][ T5967] vivid-014: unregistering swradio14
[  221.289699][ T5967] vivid-014: unregistering radio28
[  221.297237][ T5967] vivid-014: unregistering radio29
[  221.325303][ T5967] vivid-014: unregistering video65
[  221.386195][ T5967] vivid-014: unregistering video66
[  221.401070][ T5967] vivid-014: unregistering v4l-touch14
[  221.440112][ T5626] Bluetooth: hci6: command tx timeout
[  221.522947][ T5626] Bluetooth: hci5: command tx timeout
[  221.554132][ T5967] vivid-015: unregistering video67
[  221.556820][ T5967] vivid-015: unregistering video68
[  221.575349][ T5967] vivid-015: unregistering vbi30
[  221.643245][ T5967] vivid-015: unregistering vbi31
[  221.670736][ T5967] vivid-015: unregistering swradio15
[  221.712861][ T5967] vivid-015: unregistering radio30
[  221.766659][ T5967] vivid-015: unregistering radio31
[  221.798817][ T5967] vivid-015: unregistering video69
[  221.814262][ T5967] vivid-015: unregistering video70
[  221.819618][ T5967] vivid-015: unregistering v4l-touch15
[  222.076611][ T5967] vivid-016: unregistering video71
[  222.078746][ T5967] vivid-016: unregistering video72
[  222.104520][ T5967] vivid-016: unregistering vbi32
[  222.131191][ T5967] vivid-016: unregistering vbi33
[  222.135034][ T5967] vivid-016: unregistering swradio16
[  222.160136][ T5967] vivid-016: unregistering radio32
[  222.168476][ T5967] vivid-016: unregistering radio33
[  222.253006][ T5967] vivid-016: unregistering video73
[  222.269611][ T5967] vivid-016: unregistering video74
[  222.279514][ T5967] vivid-016: unregistering v4l-touch16
[  222.371270][ T5967] vivid-017: unregistering video75
[  222.383109][ T5967] vivid-017: unregistering video76
[  222.415931][ T5967] vivid-017: unregistering vbi34
[  222.501560][ T6110] Config c/1 of g1 needs at least one function.
[  222.501713][ T6110] udc usbip-vudc.0: failed to start g1: -22
[  222.501737][ T6110] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22
[  222.502742][ T6110] UDC core: g1: couldn't find an available UDC or it's busy
[  222.537806][ T5967] vivid-017: unregistering vbi35
[  222.596021][ T5967] vivid-017: unregistering swradio17
[  222.614981][ T5967] vivid-017: unregistering radio34
[  222.618701][ T5967] vivid-017: unregistering radio35
[  222.637335][ T5967] vivid-017: unregistering video77
[  222.669053][ T5967] vivid-017: unregistering video78
[  222.689226][ T5967] vivid-017: unregistering v4l-touch17
[  222.858199][ T5967] vivid-018: unregistering video79
[  222.868599][ T5967] vivid-018: unregistering video80
[  222.922985][ T5967] vivid-018: unregistering vbi36
[  222.926901][   T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.947867][ T5967] vivid-018: unregistering vbi37
[  223.066762][ T5967] vivid-018: unregistering swradio18
[  223.108415][ T5967] vivid-018: unregistering radio36
[  223.136438][ T5967] vivid-018: unregistering radio37
[  223.173024][ T5967] vivid-018: unregistering video81
[  223.202999][ T5967] vivid-018: unregistering video82
[  223.252499][ T5967] vivid-018: unregistering v4l-touch18
[  223.530188][ T5626] Bluetooth: hci6: command tx timeout
[  223.585468][ T5967] vivid-019: unregistering video83
[  223.601951][ T5967] vivid-019: unregistering video84
[  223.609410][ T5967] vivid-019: unregistering vbi38
[  223.688416][ T5967] vivid-019: unregistering vbi39
[  223.704984][ T5967] vivid-019: unregistering swradio19
[  223.755267][ T5967] vivid-019: unregistering radio38
[  223.787426][ T5967] vivid-019: unregistering radio39
[  223.834570][ T5967] vivid-019: unregistering video85
[  223.851626][ T5967] vivid-019: unregistering video86
[  223.898599][ T5967] vivid-019: unregistering v4l-touch19
[  223.907354][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  223.955513][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  223.959224][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  223.982611][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  223.984564][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  224.173284][ T5967] vivid-020: unregistering video87
[  224.201736][ T5967] vivid-020: unregistering video88
[  224.222586][ T5967] vivid-020: unregistering vbi40
[  224.357007][ T5967] vivid-020: unregistering vbi41
[  224.367761][ T5967] vivid-020: unregistering swradio20
[  224.416652][ T5967] vivid-020: unregistering radio40
[  224.460967][ T5967] vivid-020: unregistering radio41
[  224.517368][ T5967] vivid-020: unregistering video89
[  224.537398][ T5967] vivid-020: unregistering video90
[  224.580661][ T5967] vivid-020: unregistering v4l-touch20
[  224.754921][ T5967] vivid-021: unregistering video91
[  224.768753][ T5967] vivid-021: unregistering video92
[  224.804539][ T5967] vivid-021: unregistering vbi42
[  224.828847][ T5967] vivid-021: unregistering vbi43
[  224.855930][ T5967] vivid-021: unregistering swradio21
[  224.857544][   T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.890094][ T5967] vivid-021: unregistering radio42
[  224.918296][ T5967] vivid-021: unregistering radio43
[  224.967399][ T5967] vivid-021: unregistering video93
[  224.970878][ T5967] vivid-021: unregistering video94
[  224.985930][ T5967] vivid-021: unregistering v4l-touch21
[  225.393899][ T5967] vivid-022: unregistering video95
[  225.440476][ T5967] vivid-022: unregistering video96
[  225.446091][ T5967] vivid-022: unregistering vbi44
[  225.535276][ T5967] vivid-022: unregistering vbi45
[  225.536781][ T5967] vivid-022: unregistering swradio22
[  225.538354][ T5967] vivid-022: unregistering radio44
[  225.557522][ T5967] vivid-022: unregistering radio45
[  225.567470][ T5967] vivid-022: unregistering video97
[  225.569418][ T5967] vivid-022: unregistering video98
[  225.592356][ T5967] vivid-022: unregistering v4l-touch22
[  225.601617][ T5626] Bluetooth: hci6: command tx timeout
[  225.670046][   T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.789621][ T5967] vivid-023: unregistering video99
[  225.797477][ T5967] vivid-023: unregistering video100
[  225.808559][ T5967] vivid-023: unregistering vbi46
[  225.846927][ T5967] vivid-023: unregistering vbi47
[  225.883197][ T6150] Config c/1 of g1 needs at least one function.
[  225.883492][ T6150] udc usbip-vudc.0: failed to start g1: -22
[  225.883518][ T6150] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22
[  225.900429][ T5967] vivid-023: unregistering swradio23
[  225.902131][ T6150] UDC core: g1: couldn't find an available UDC or it's busy
[  225.965708][ T5967] vivid-023: unregistering radio46
[  225.999059][ T5967] vivid-023: unregistering radio47
[  226.023954][ T5967] vivid-023: unregistering video101
[  226.042611][ T5967] vivid-023: unregistering video102
[  226.062275][ T5967] vivid-023: unregistering v4l-touch23
[  226.080066][ T5626] Bluetooth: hci2: command tx timeout
[  226.175790][ T5614] FAULT_INJECTION: forcing a failure.
[  226.175790][ T5614] name fail_page_alloc, interval 1, probability 100, space 0, times 1
[  226.175854][ T5614] CPU: 0 UID: 0 PID: 5614 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  226.175882][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  226.175903][ T5614] Call Trace:
[  226.175911][ T5614]  <TASK>
[  226.175921][ T5614]  dump_stack_lvl+0xe8/0x150
[  226.175967][ T5614]  should_fail_ex+0x467/0x600
[  226.176007][ T5614]  prepare_alloc_pages+0x223/0x690
[  226.176040][ T5614]  __alloc_frozen_pages_noprof+0x12f/0x380
[  226.176071][ T5614]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  226.176111][ T5614]  ? __pfx_policy_nodemask+0x10/0x10
[  226.176138][ T5614]  ? lockdep_hardirqs_on+0x7a/0x110
[  226.176166][ T5614]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  226.176207][ T5614]  alloc_pages_mpol+0xce/0x280
[  226.176239][ T5614]  alloc_pages_noprof+0xd2/0x2f0
[  226.176270][ T5614]  pte_alloc_one+0x22/0x380
[  226.176298][ T5614]  __pte_alloc+0x25/0x1a0
[  226.176330][ T5614]  copy_pmd_range+0x4b01/0x53e0
[  226.176355][ T5614]  ? arch_stack_walk+0xfb/0x150
[  226.176420][ T5614]  ? __pfx_copy_pmd_range+0x10/0x10
[  226.176450][ T5614]  ? __lock_acquire+0x683/0x2ce0
[  226.176496][ T5614]  copy_page_range+0xb34/0x1160
[  226.176548][ T5614]  ? __pfx_copy_page_range+0x10/0x10
[  226.176583][ T5614]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  226.176612][ T5614]  ? lockdep_hardirqs_on+0x7a/0x110
[  226.176639][ T5614]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  226.176673][ T5614]  ? up_write+0x5a/0x190
[  226.176713][ T5614]  dup_mmap+0xf2d/0x1d40
[  226.176760][ T5614]  ? __pfx_dup_mmap+0x10/0x10
[  226.176772][ T6152] FAULT_INJECTION: forcing a failure.
[  226.176772][ T6152] name fail_page_alloc, interval 1, probability 100, space 0, times 1
[  226.176783][ T5614]  ? rt_spin_lock+0x1e0/0x400
[  226.176826][ T5614]  ? copy_mm+0x10f/0x480
[  226.176852][ T5614]  ? copy_mm+0x10f/0x480
[  226.176890][ T5614]  copy_mm+0x11a/0x480
[  226.176916][ T5614]  ? copy_process+0xd3c/0x4390
[  226.176938][ T5614]  copy_process+0x1e46/0x4390
[  226.176970][ T5614]  ? copy_process+0xd3c/0x4390
[  226.177012][ T5614]  ? __pfx_copy_process+0x10/0x10
[  226.177036][ T5614]  ? do_raw_spin_lock+0x12b/0x2f0
[  226.177074][ T5614]  kernel_clone+0x2d2/0x8d0
[  226.177109][ T5614]  ? __pfx_kernel_clone+0x10/0x10
[  226.177153][ T5614]  __x64_sys_clone+0x1b6/0x230
[  226.177182][ T5614]  ? __pfx___x64_sys_clone+0x10/0x10
[  226.177225][ T5614]  ? do_user_addr_fault+0xc4a/0x1340
[  226.177250][ T5614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.177272][ T5614]  do_syscall_64+0x174/0x580
[  226.177294][ T5614]  ? trace_irq_disable+0x3b/0x140
[  226.177314][ T5614]  ? clear_bhb_loop+0x40/0x90
[  226.177337][ T5614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.177357][ T5614] RIP: 0033:0x7fd872946912
[  226.177381][ T5614] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  226.177397][ T5614] RSP: 002b:00007fffb9607390 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  226.177424][ T5614] RAX: ffffffffffffffda RBX: 00007fffb9607390 RCX: 00007fd872946912
[  226.177438][ T5614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  226.177450][ T5614] RBP: 00007fffb960751c R08: 0000000000000000 R09: 0000000000000001
[  226.177461][ T5614] R10: 00005555794b37d0 R11: 0000000000000246 R12: 0000000000000001
[  226.177473][ T5614] R13: 00000000000927c0 R14: 00000000000370ec R15: 00007fffb9607570
[  226.177501][ T5614]  </TASK>
[  226.177514][ T6152] CPU: 1 UID: 0 PID: 6152 Comm: modprobe Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  226.177537][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  226.177549][ T6152] Call Trace:
[  226.177557][ T6152]  <TASK>
[  226.177566][ T6152]  dump_stack_lvl+0xe8/0x150
[  226.177611][ T6152]  should_fail_ex+0x467/0x600
[  226.177643][ T6152]  prepare_alloc_pages+0x223/0x690
[  226.177671][ T6152]  __alloc_frozen_pages_noprof+0x12f/0x380
[  226.177698][ T6152]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  226.177727][ T6152]  ? __pfx_policy_nodemask+0x10/0x10
[  226.177754][ T6152]  ? __lock_acquire+0x683/0x2ce0
[  226.177783][ T6152]  alloc_pages_mpol+0xce/0x280
[  226.177810][ T6152]  folio_alloc_mpol_noprof+0x3b/0x1e0
[  226.177839][ T6152]  vma_alloc_folio_noprof+0xe1/0x1e0
[  226.177869][ T6152]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  226.177893][ T6152]  ? __pte_offset_map+0x29/0x200
[  226.177935][ T6152]  do_pte_missing+0x835/0x28f0
[  226.177981][ T6152]  ? handle_mm_fault+0xe8/0x13f0
[  226.178007][ T6152]  handle_mm_fault+0xd28/0x13f0
[  226.178032][ T6152]  ? handle_mm_fault+0xe8/0x13f0
[  226.178052][ T6152]  ? __pfx_handle_mm_fault+0x10/0x10
[  226.178069][ T6152]  ? lock_vma_under_rcu+0x45a/0x500
[  226.178116][ T6152]  do_user_addr_fault+0xa4d/0x1340
[  226.178146][ T6152]  ? trace_page_fault_user+0x84/0x1e0
[  226.178168][ T6152]  exc_page_fault+0x6a/0xc0
[  226.178193][ T6152]  asm_exc_page_fault+0x26/0x30
[  226.178215][ T6152] RIP: 0033:0x7f0460ad2d34
[  226.178235][ T6152] Code: 8d 34 19 49 39 d0 49 89 70 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 48 89 cf 4c 89 e6 48 89 4c 24 08 e8 18 c7 ff ff 48 8b
[  226.178253][ T6152] RSP: 002b:00007ffc5c0444c0 EFLAGS: 00010206
[  226.178272][ T6152] RAX: 000000000001fd51 RBX: 00000000000009b0 RCX: 0000562a5275d910
[  226.178286][ T6152] RDX: 00000000000009b1 RSI: 0000562a5275e2b0 RDI: 0000000000000000
[  226.178300][ T6152] RBP: ffffffffffffffc0 R08: 00007f0460c0bac0 R09: 0000000000000000
[  226.178314][ T6152] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000000009a0
[  226.178326][ T6152] R13: 0000000000000000 R14: 0000000000000099 R15: 00007f0460c0bb20
[  226.178358][ T6152]  </TASK>
[  226.222243][ T6152] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  226.996682][   T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.098385][ T5900] Set syz1 is full, maxelem 65536 reached
[  227.330886][ T6162] (syz.4.115,6162,0):o2hb_bio_end_io:499 ERROR: IO Error 10
[  227.331248][ T6162] (syz.4.115,6162,0):o2hb_region_dev_store:1850 ERROR: status = -5
[  228.170152][ T5626] Bluetooth: hci2: command tx timeout
[  228.455711][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  228.471625][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  228.473451][ T6177] Config c/1 of g1 needs at least one function.
[  228.473602][ T6177] udc usbip-vudc.0: failed to start g1: -22
[  228.473627][ T6177] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22
[  228.505761][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  228.509812][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  228.523246][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  228.637726][ T6177] UDC core: g1: couldn't find an available UDC or it's busy
[  228.639116][ T5620] usb 1-1: USB disconnect, device number 2
[  228.878903][ T6181] openvswitch: netlink: Missing valid actions attribute.
[  228.878930][ T6181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.367550][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.367764][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.367933][ T6016] bridge_slave_0: entered allmulticast mode
[  229.392575][ T6016] bridge_slave_0: entered promiscuous mode
[  229.417934][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.418073][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.418292][ T6016] bridge_slave_1: entered allmulticast mode
[  229.440874][ T6016] bridge_slave_1: entered promiscuous mode
[  229.979585][ T6016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.081577][ T6016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.240035][ T5626] Bluetooth: hci2: command tx timeout
[  230.358955][ T6016] team0: Port device team_slave_0 added
[  230.470760][   T56] bridge_slave_1: left allmulticast mode
[  230.470941][   T56] bridge_slave_1: left promiscuous mode
[  230.479684][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.633520][   T56] bridge_slave_0: left allmulticast mode
[  230.633548][   T56] bridge_slave_0: left promiscuous mode
[  230.633734][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.650065][ T5626] Bluetooth: hci0: command tx timeout
[  231.610841][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.670716][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.713572][   T56] bond0 (unregistering): Released all slaves
[  231.796500][ T6016] team0: Port device team_slave_1 added
[  231.924959][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.925065][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.925220][ T6057] bridge_slave_0: entered allmulticast mode
[  231.927239][ T6057] bridge_slave_0: entered promiscuous mode
[  231.990600][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.990748][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.990970][ T6057] bridge_slave_1: entered allmulticast mode
[  231.993666][ T6057] bridge_slave_1: entered promiscuous mode
[  232.146578][ T6016] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.146591][ T6016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  232.146611][ T6016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.227137][ T6016] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.227150][ T6016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  232.227171][ T6016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.231334][ T6057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.329297][ T5626] Bluetooth: hci2: command tx timeout
[  232.353632][ T6057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.730933][ T5626] Bluetooth: hci0: command tx timeout
[  232.808069][ T6057] team0: Port device team_slave_0 added
[  232.987302][ T6057] team0: Port device team_slave_1 added
[  233.042860][ T6016] hsr_slave_0: entered promiscuous mode
[  233.043911][ T6016] hsr_slave_1: entered promiscuous mode
[  233.044608][ T6016] debugfs: 'hsr0' already exists in 'hsr'
[  233.044625][ T6016] Cannot create hsr debugfs directory
[  233.807093][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.807111][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.807139][ T6057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.972295][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1
[  233.974871][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.974886][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.974915][ T6057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.590548][   T56] hsr_slave_0: left promiscuous mode
[  234.630062][   T56] hsr_slave_1: left promiscuous mode
[  234.635123][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.674572][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[  234.702658][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.702688][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.801343][ T5626] Bluetooth: hci0: command tx timeout
[  234.974161][   T56] veth1_macvtap: left promiscuous mode
[  234.986475][   T56] veth0_macvtap: left promiscuous mode
[  235.007835][   T56] veth1_vlan: left promiscuous mode
[  235.009266][   T56] veth0_vlan: left promiscuous mode
[  236.401252][   T56] team0 (unregistering): Port device team_slave_1 removed
[  236.460750][   T56] team0 (unregistering): Port device team_slave_0 removed
[  236.890154][ T5626] Bluetooth: hci0: command tx timeout
[  236.927958][ T6057] hsr_slave_0: entered promiscuous mode
[  236.929620][ T6057] hsr_slave_1: entered promiscuous mode
[  237.038719][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.038935][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.039154][ T6122] bridge_slave_0: entered allmulticast mode
[  237.073785][ T6122] bridge_slave_0: entered promiscuous mode
[  237.140051][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.140180][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.140375][ T6122] bridge_slave_1: entered allmulticast mode
[  237.142788][ T6122] bridge_slave_1: entered promiscuous mode
[  237.536166][ T6122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.729337][ T6122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.196930][ T6122] team0: Port device team_slave_0 added
[  238.221299][ T6122] team0: Port device team_slave_1 added
[  238.637959][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2
[  238.651106][ T6122] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.651124][ T6122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  238.651153][ T6122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.734569][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.734772][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.735007][ T6173] bridge_slave_0: entered allmulticast mode
[  238.763385][ T6173] bridge_slave_0: entered promiscuous mode
[  238.776839][ T6122] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.776857][ T6122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  238.776886][ T6122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.900612][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.900742][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.901021][ T6173] bridge_slave_1: entered allmulticast mode
[  238.903956][ T6173] bridge_slave_1: entered promiscuous mode
[  239.292623][ T6173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.454827][ T6173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.492725][ T6122] hsr_slave_0: entered promiscuous mode
[  239.494233][ T6122] hsr_slave_1: entered promiscuous mode
[  239.495283][ T6122] debugfs: 'hsr0' already exists in 'hsr'
[  239.495306][ T6122] Cannot create hsr debugfs directory
[  239.661337][ T6016] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  239.725524][ T6016] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  239.805202][ T6016] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  239.901285][ T6016] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  239.997553][ T6173] team0: Port device team_slave_0 added
[  240.009191][ T6016] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  240.087518][ T6016] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  240.104595][ T6173] team0: Port device team_slave_1 added
[  240.362194][ T6016] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  240.508129][ T6016] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  241.022897][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3
[  241.136328][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.136342][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  241.136363][ T6173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.213603][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.213617][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  241.213637][ T6173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.777743][   T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.115414][ T6057] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  242.220616][ T6057] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  242.387641][   T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.486706][ T6173] hsr_slave_0: entered promiscuous mode
[  242.488210][ T6173] hsr_slave_1: entered promiscuous mode
[  242.489241][ T6173] debugfs: 'hsr0' already exists in 'hsr'
[  242.489266][ T6173] Cannot create hsr debugfs directory
[  242.489647][ T6057] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  242.558358][ T6057] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  242.629163][ T6057] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  242.658078][ T6057] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  242.815284][   T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.871284][ T6057] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  242.894324][ T6057] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  243.617093][   T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.148533][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4
[  245.291977][ T6122] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  245.346192][ T6122] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  245.371721][ T6122] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  245.463525][ T6122] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  245.758132][ T6173] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.859037][ T6122] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  245.914809][ T6122] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  245.960135][ T6122] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  246.068182][ T6122] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  246.548253][   T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.826189][ T6173] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.996639][ T6016] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.274924][   T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.639492][ T6173] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.077286][   T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.172572][ T6016] 8021q: adding VLAN 0 to HW filter on device team0
[  248.179330][ T6057] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.416329][ T6173] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.504247][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.504554][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.537664][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.537896][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.749032][   T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.819385][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5
[  248.874821][ T6057] 8021q: adding VLAN 0 to HW filter on device team0
[  248.982130][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.988429][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.047802][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.047931][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.249557][ T6122] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.700057][ T6122] 8021q: adding VLAN 0 to HW filter on device team0
[  249.923929][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.924051][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.136518][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.138303][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.254759][ T6173] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  250.313606][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  250.591616][   T56] bridge_slave_1: left allmulticast mode
[  250.591644][   T56] bridge_slave_1: left promiscuous mode
[  250.591884][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.721572][   T56] bridge_slave_0: left allmulticast mode
[  250.721600][   T56] bridge_slave_0: left promiscuous mode
[  250.721848][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.871810][   T56] bond0 (unregistering): (slave syzkaller0): Releasing backup interface
[  252.087644][   T56] bond0 (unregistering): Released all slaves
[  252.683140][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  252.760751][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  252.782479][   T56] bond0 (unregistering): Released all slaves
[  252.820655][ T6173] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  252.888362][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  252.938232][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6
[  252.943187][ T6173] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  253.002008][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  253.029630][ T6173] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  253.095533][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  253.498922][ T6016] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.235723][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7
[  255.034479][ T6057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.171499][ T6173] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.643882][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8
[  255.853537][ T6173] 8021q: adding VLAN 0 to HW filter on device team0
[  255.904286][ T3398] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.904512][ T3398] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.945137][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  255.945211][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  256.268230][ T3412] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.268340][ T3412] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.284870][ T6016] veth0_vlan: entered promiscuous mode
[  256.457744][ T6016] veth1_vlan: entered promiscuous mode
[  256.491131][ T6122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.731567][   T56] hsr_slave_0: left promiscuous mode
[  256.771391][   T56] hsr_slave_1: left promiscuous mode
[  256.940379][   T56] hsr_slave_0: left promiscuous mode
[  257.000307][   T56] hsr_slave_1: left promiscuous mode
[  257.016310][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.016338][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.057395][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.057426][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.337011][   T56] veth1_macvtap: left promiscuous mode
[  257.337089][   T56] veth0_macvtap: left promiscuous mode
[  257.338568][   T56] veth1_vlan: left promiscuous mode
[  257.338716][   T56] veth0_vlan: left promiscuous mode
[  257.520339][   T56] veth1_macvtap: left promiscuous mode
[  257.542646][   T56] veth0_macvtap: left promiscuous mode
[  257.542841][   T56] veth1_vlan: left promiscuous mode
[  257.542977][   T56] veth0_vlan: left promiscuous mode
[  259.100942][   T56] team0 (unregistering): Port device team_slave_1 removed
[  259.172419][   T56] team0 (unregistering): Port device team_slave_0 removed
[  259.377825][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9
[  259.433297][ T6057] veth0_vlan: entered promiscuous mode
[  259.508240][ T6057] veth1_vlan: entered promiscuous mode
[  259.720695][ T6016] veth0_macvtap: entered promiscuous mode
[  259.849263][ T6016] veth1_macvtap: entered promiscuous mode
[  259.964170][ T6016] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.017006][ T6057] veth0_macvtap: entered promiscuous mode
[  260.033807][ T6016] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.108694][ T6057] veth1_macvtap: entered promiscuous mode
[  260.135369][ T3398] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.148772][ T3398] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.202646][ T3398] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.233966][ T2316] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.463135][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.701101][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.903804][ T6122] veth0_vlan: entered promiscuous mode
[  260.949493][ T3412] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.977514][ T3412] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.068870][ T3412] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.197925][ T3412] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.298860][ T6122] veth1_vlan: entered promiscuous mode
[  261.407147][ T3337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.407167][ T3337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.435369][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10
[  261.777476][ T6173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.814030][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.814046][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.291428][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.291455][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.391253][ T6122] veth0_macvtap: entered promiscuous mode
[  262.543622][ T6122] veth1_macvtap: entered promiscuous mode
[  262.621545][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.621567][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.916746][ T6690] Config c/1 of g1 needs at least one function.
[  262.916908][ T6690] udc dummy_udc.0: failed to start g1: -22
[  262.916931][ T6690] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  262.989046][ T6122] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.011188][ T6173] veth0_vlan: entered promiscuous mode
[  263.035090][ T6690] UDC core: g1: couldn't find an available UDC or it's busy
[  263.091525][ T6122] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.216294][  T152] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.234789][  T152] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.248328][ T6173] veth1_vlan: entered promiscuous mode
[  263.260612][  T152] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.299182][  T152] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.652240][ T5916] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  263.852605][ T5916] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  264.046605][ T5916] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00
[  264.046638][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.046659][ T5916] usb 6-1: Product: syz
[  264.046675][ T5916] usb 6-1: Manufacturer: syz
[  264.046691][ T5916] usb 6-1: SerialNumber: syz
[  264.457051][ T6173] veth0_macvtap: entered promiscuous mode
[  264.513042][ T5916] hackrf 6-1:1.0: Board ID: 00
[  264.513065][ T5916] hackrf 6-1:1.0: Firmware version: 
[  264.546304][ T5916] hackrf 6-1:1.0: Registered as swradio0
[  264.556107][ T5916] hackrf 6-1:1.0: Registered as swradio1
[  264.556139][ T5916] hackrf 6-1:1.0: SDR API is still slightly experimental and functionality changes may follow
[  264.556437][ T3412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.556455][ T3412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.649071][ T6173] veth1_macvtap: entered promiscuous mode
[  264.841183][ T5620] usb 6-1: USB disconnect, device number 2
[  265.079247][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.079268][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.115228][ T6173] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.243787][ T6173] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.467301][ T1139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.473149][ T1139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.517718][ T1139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.556556][ T1139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.857589][ T6725] bridge0: port 3(syz_tun) entered blocking state
[  265.857807][ T6725] bridge0: port 3(syz_tun) entered disabled state
[  265.858036][ T6725] syz_tun: entered allmulticast mode
[  265.896258][ T6725] syz_tun: entered promiscuous mode
[  265.896914][ T6725] bridge0: port 3(syz_tun) entered blocking state
[  265.897047][ T6725] bridge0: port 3(syz_tun) entered forwarding state
[  265.925592][ T6725] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  267.081671][ T2316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.081695][ T2316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.186793][  T199] IPVS: starting estimator thread 0...
[  267.290724][ T6754] IPVS: using max 10 ests per chain, 24000 per kthread
[  267.767930][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.767955][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.077636][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11
[  268.445913][ T6772] netlink: 'syz.5.237': attribute type 13 has an invalid length.
[  269.269127][ T6772] bridge0: port 3(syz_tun) entered disabled state
[  269.492863][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.493802][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.158146][ T6772] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  270.177642][ T6772] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.564591][ T3337] bridge_slave_1: left allmulticast mode
[  271.564626][ T3337] bridge_slave_1: left promiscuous mode
[  271.567809][ T3337] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.722038][ T6835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.754364][ T3337] bridge_slave_0: left allmulticast mode
[  271.754403][ T3337] bridge_slave_0: left promiscuous mode
[  271.754662][ T3337] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.555592][ T3337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  273.637472][ T3337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  273.800149][ T3337] bond0 (unregistering): Released all slaves
[  274.199988][   T36] audit: type=1800 audit(1785202891.816:3): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.261" name="enable" dev="configfs" ino=14804 res=0 errno=0
[  274.500387][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.518674][ T6789] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.780018][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  274.910085][   T10] usb 6-1: device descriptor read/64, error -71
[  275.151425][ T6789] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  275.164925][ T6789] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.210058][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  275.350026][   T10] usb 6-1: device descriptor read/64, error -71
[  275.460346][   T10] usb usb6-port1: attempt power cycle
[  275.860078][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  275.882540][   T10] usb 6-1: device descriptor read/8, error -71
[  276.123738][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  276.140753][   T10] usb 6-1: device descriptor read/8, error -71
[  276.253745][   T10] usb usb6-port1: unable to enumerate USB device
[  276.305058][   T42] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.351538][   T42] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.554546][   T42] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.600716][   T42] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.601276][   T42] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.605577][   T42] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.606184][   T42] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.622369][   T42] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.225274][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'.
[  277.270075][ T6767] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  277.453225][ T6767] usb 8-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
[  277.453256][ T6767] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.548295][ T6767] emi26 - firmware loader 8-1:1.0: emi26_probe start
[  278.059964][ T1008] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  278.245012][ T1008] usb 7-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
[  278.245046][ T1008] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.342580][ T1008] emi26 - firmware loader 7-1:1.0: emi26_probe start
[  278.417647][ T6930] netlink: 'syz.4.277': attribute type 10 has an invalid length.
[  278.515689][ T6931] syz_tun: left allmulticast mode
[  278.515724][ T6931] syz_tun: left promiscuous mode
[  278.516007][ T6931] bridge0: port 3(syz_tun) entered disabled state
[  278.572388][ T6928] netlink: 'syz.4.277': attribute type 4 has an invalid length.
[  278.572414][ T6928] netlink: 152 bytes leftover after parsing attributes in process `syz.4.277'.
[  278.736631][ T6931] bridge_slave_0: left allmulticast mode
[  278.736667][ T6931] bridge_slave_0: left promiscuous mode
[  278.743232][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.092262][ T6931] bridge_slave_1: left allmulticast mode
[  279.092296][ T6931] bridge_slave_1: left promiscuous mode
[  279.092530][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.351262][ T6931] bond0: (slave bond_slave_0): Releasing backup interface
[  279.443587][ T6931] bond0: (slave bond_slave_1): Releasing backup interface
[  279.557923][ T6931] team0: Port device team_slave_0 removed
[  279.646806][ T6931] team0: Port device team_slave_1 removed
[  279.648063][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.648089][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.687438][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.687468][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_1
[  279.736322][ T6931] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  279.991103][ T6962] bridge0: port 3(syz_tun) entered blocking state
[  279.991666][ T6962] bridge0: port 3(syz_tun) entered disabled state
[  279.993202][ T6962] syz_tun: entered allmulticast mode
[  280.005314][ T6962] syz_tun: entered promiscuous mode
[  281.002141][ T3337] hsr_slave_0: left promiscuous mode
[  281.042846][ T3337] hsr_slave_1: left promiscuous mode
[  281.043856][ T3337] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  281.043882][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  281.075237][ T3337] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  281.075266][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  281.250766][ T3337] veth1_macvtap: left promiscuous mode
[  281.250876][ T3337] veth0_macvtap: left promiscuous mode
[  281.251141][ T3337] veth1_vlan: left promiscuous mode
[  281.251350][ T3337] veth0_vlan: left promiscuous mode
[  281.532316][ T6767] usb 8-1: emi26_load_firmware - request_firmware() failed
[  281.532342][ T6767] usb 8-1: emi26_load_firmware - error loading firmware: error = -2
[  281.532449][ T6767] emi26 - firmware loader 8-1:1.0: probe with driver emi26 - firmware loader failed with error -5
[  281.533612][    T9] usb 5-1: emi26_load_firmware - request_firmware() failed
[  281.533631][    T9] usb 5-1: emi26_load_firmware - error loading firmware: error = -2
[  281.533711][    T9] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5
[  281.535695][ T1008] usb 7-1: emi26_load_firmware - request_firmware() failed
[  281.535778][ T1008] usb 7-1: emi26_load_firmware - error loading firmware: error = -2
[  281.535853][ T1008] emi26 - firmware loader 7-1:1.0: probe with driver emi26 - firmware loader failed with error -5
[  281.649493][   T48] usb 2-1: emi26_load_firmware - request_firmware() failed
[  281.649517][   T48] usb 2-1: emi26_load_firmware - error loading firmware: error = -110
[  281.649818][   T48] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5
[  281.697509][ T1008] usb 7-1: USB disconnect, device number 2
[  281.714341][ T6767] usb 8-1: USB disconnect, device number 2
[  281.769989][    T9] usb 5-1: USB disconnect, device number 2
[  281.836878][   T48] usb 2-1: USB disconnect, device number 2
[  282.270052][ T1008] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  282.270402][ T6767] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  282.320164][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  282.370022][   T48] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  282.419988][ T1008] usb 7-1: device descriptor read/64, error -71
[  282.480181][    T9] usb 5-1: device descriptor read/64, error -71
[  282.501946][ T6767] usb 8-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
[  282.501975][ T6767] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.538879][ T6767] emi26 - firmware loader 8-1:1.0: emi26_probe start
[  282.555115][ T6767] usb 8-1: Direct firmware load for emi26/loader.fw failed with error -2
[  282.555144][ T6767] usb 8-1: Falling back to sysfs fallback for: emi26/loader.fw
[  282.577951][   T48] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
[  282.577979][   T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.671289][   T48] emi26 - firmware loader 2-1:1.0: emi26_probe start
[  282.730147][ T1008] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  282.800251][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  282.822987][ T3337] team0 (unregistering): Port device team_slave_1 removed
[  282.880100][ T1008] usb 7-1: device descriptor read/64, error -71
[  282.902777][ T3337] team0 (unregistering): Port device team_slave_0 removed
[  282.935096][    T9] usb 5-1: device descriptor read/64, error -71
[  282.970169][   T48] usb 2-1: Firmware "emi26/loader.fw" not valid IHEX records
[  282.970232][   T48] usb 2-1: emi26_load_firmware - request_firmware() failed
[  282.970248][   T48] usb 2-1: emi26_load_firmware - error loading firmware: error = -22
[  282.970309][   T48] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5
[  283.007846][ T1008] usb usb7-port1: attempt power cycle
[  283.042731][    T9] usb usb5-port1: attempt power cycle
[  283.053894][ T6767] usb 8-1: Firmware "emi26/loader.fw" not valid IHEX records
[  283.054046][ T6767] usb 8-1: emi26_load_firmware - request_firmware() failed
[  283.054065][ T6767] usb 8-1: emi26_load_firmware - error loading firmware: error = -22
[  283.054117][ T6767] emi26 - firmware loader 8-1:1.0: probe with driver emi26 - firmware loader failed with error -5
[  283.237803][ T6767] usb 8-1: USB disconnect, device number 3
[  283.360136][ T6768] usb 2-1: USB disconnect, device number 3
[  283.632867][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12
[  284.694207][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  284.696994][    T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  284.852848][   T10] usb 2-1: device descriptor read/64, error -71
[  284.869999][    T9] usb 7-1: device descriptor read/64, error -71
[  285.090107][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  285.118822][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  285.269983][   T10] usb 2-1: device descriptor read/64, error -71
[  285.270095][    T9] usb 7-1: device descriptor read/64, error -71
[  285.388705][   T10] usb usb2-port1: attempt power cycle
[  285.397969][    T9] usb usb7-port1: attempt power cycle
[  285.489997][ T5628] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  285.656873][ T5628] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
[  285.656907][ T5628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.731490][ T5628] emi26 - firmware loader 5-1:1.0: emi26_probe start
[  285.732503][ T5628] usb 5-1: Direct firmware load for emi26/loader.fw failed with error -2
[  285.732520][ T5628] usb 5-1: Falling back to sysfs fallback for: emi26/loader.fw
[  285.741560][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  285.762225][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  285.776247][   T10] usb 2-1: device descriptor read/8, error -71
[  285.851407][    T9] usb 7-1: device descriptor read/8, error -71
[  286.010050][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  286.035954][   T10] usb 2-1: device descriptor read/8, error -71
[  286.100061][    T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  286.125551][    T9] usb 7-1: device descriptor read/8, error -71
[  286.147796][   T10] usb usb2-port1: unable to enumerate USB device
[  286.230612][    T9] usb usb7-port1: unable to enumerate USB device
[  286.627566][ T5628] usb 5-1: Firmware "emi26/loader.fw" not valid IHEX records
[  286.627733][ T5628] usb 5-1: emi26_load_firmware - request_firmware() failed
[  286.627750][ T5628] usb 5-1: emi26_load_firmware - error loading firmware: error = -22
[  286.627811][ T5628] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5
[  286.690416][ T5628] usb 5-1: USB disconnect, device number 6
[  287.438097][ T7094] gtp0: entered promiscuous mode
[  288.250977][ T1255] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  288.290086][ T6767] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  288.404888][ T1255] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
[  288.404918][ T1255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.430143][ T6767] usb 7-1: device descriptor read/64, error -71
[  288.457166][ T1255] emi26 - firmware loader 2-1:1.0: emi26_probe start
[  288.458042][ T1255] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2
[  288.458057][ T1255] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw
[  288.500062][ T5902] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  288.630031][ T5902] usb 5-1: device descriptor read/64, error -71
[  288.680049][ T6767] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  288.719992][ T5626] Bluetooth: hci3: command 0x0406 tx timeout
[  288.820419][ T6767] usb 7-1: device descriptor read/64, error -71
[  288.890234][ T5902] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  288.930489][ T6767] usb usb7-port1: attempt power cycle
[  289.030078][ T5902] usb 5-1: device descriptor read/64, error -71
[  289.147587][ T5902] usb usb5-port1: attempt power cycle
[  289.276591][ T7139] gtp0: entered promiscuous mode
[  289.300077][ T6767] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  289.332419][ T6767] usb 7-1: device descriptor read/8, error -71
[  289.489982][ T5902] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  289.532724][ T5902] usb 5-1: device descriptor read/8, error -71
[  289.588620][ T6767] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  289.612330][ T6767] usb 7-1: device descriptor read/8, error -71
[  289.731196][ T6767] usb usb7-port1: unable to enumerate USB device
[  289.800323][ T5902] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  289.862894][ T5902] usb 5-1: device descriptor read/8, error -71
[  289.970782][ T5902] usb usb5-port1: unable to enumerate USB device
[  290.430023][ T5628] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  290.582380][ T5628] usb 8-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
[  290.582414][ T5628] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.658061][ T5628] emi26 - firmware loader 8-1:1.0: emi26_probe start
[  290.674448][   T36] audit: type=1804 audit(1785202908.276:4): pid=7170 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.359" name="/newroot/23/dir0/trace_marker" dev="tracefs" ino=3290 res=1 errno=0
[  290.775222][ T7172] gtp0: entered promiscuous mode
[  291.612540][   T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  291.778391][ T7202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.803190][   T10] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
[  291.803222][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.837393][   T10] emi26 - firmware loader 5-1:1.0: emi26_probe start
[  291.861676][ T7202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.867934][ T7202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.930577][ T7204] gtp0: entered promiscuous mode
[  292.500110][ T6767] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  292.630075][ T6767] usb 7-1: device descriptor read/64, error -71
[  292.890272][ T6767] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  293.031077][ T6767] usb 7-1: device descriptor read/64, error -71
[  293.142040][ T6767] usb usb7-port1: attempt power cycle
[  293.332238][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  293.361212][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  293.377620][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  293.389449][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  293.399016][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  293.500011][ T6767] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  293.523652][ T6767] usb 7-1: device descriptor read/8, error -71
[  293.769993][ T6767] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  293.803665][ T6767] usb 7-1: device descriptor read/8, error -71
[  293.910954][ T6767] usb usb7-port1: unable to enumerate USB device
[  294.140453][ T7225] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.140657][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.141173][ T7225] bridge_slave_0: entered allmulticast mode
[  294.143836][ T7225] bridge_slave_0: entered promiscuous mode
[  294.147295][ T7225] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.147509][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.147676][ T7225] bridge_slave_1: entered allmulticast mode
[  294.151499][ T7225] bridge_slave_1: entered promiscuous mode
[  294.228263][ T7225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.236676][ T7225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.333791][ T7225] team0: Port device team_slave_0 added
[  294.337256][ T7225] team0: Port device team_slave_1 added
[  294.409327][ T7225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.409340][ T7225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  294.409358][ T7225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.479434][ T7225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.479447][ T7225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  294.479466][ T7225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.753747][ T7225] hsr_slave_0: entered promiscuous mode
[  294.755664][ T7225] hsr_slave_1: entered promiscuous mode
[  294.756684][ T7225] debugfs: 'hsr0' already exists in 'hsr'
[  294.756709][ T7225] Cannot create hsr debugfs directory
[  294.861467][ T7258] gtp0: entered promiscuous mode
[  295.520027][ T5621] Bluetooth: hci1: command tx timeout
[  296.832108][ T7225] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  296.877667][ T7225] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  296.879179][ T7225] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  296.964185][ T7225] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  296.971868][ T7225] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  297.031694][ T7225] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  297.033237][ T7225] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  297.073737][ T7225] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  297.307815][ T7225] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.379313][ T7225] 8021q: adding VLAN 0 to HW filter on device team0
[  297.417303][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.419077][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.467829][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.468038][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.600235][ T5621] Bluetooth: hci1: command tx timeout
[  298.587606][ T7225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.779790][ T7379] bridge0: port 1(syz_tun) entered blocking state
[  298.797806][ T7379] bridge0: port 1(syz_tun) entered disabled state
[  298.798536][ T7379] syz_tun: entered allmulticast mode
[  298.838617][ T7379] syz_tun: entered promiscuous mode
[  298.851352][ T7379] bridge0: port 1(syz_tun) entered blocking state
[  298.851520][ T7379] bridge0: port 1(syz_tun) entered forwarding state
[  298.952933][ T7379] Zero length message leads to an empty skb
[  299.404045][   T36] audit: type=1800 audit(1785202917.006:5): pid=7401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.418" name="start_block" dev="configfs" ino=17654 res=0 errno=0
[  299.520479][ T7225] veth0_vlan: entered promiscuous mode
[  299.638664][ T7225] veth1_vlan: entered promiscuous mode
[  299.685839][ T5621] Bluetooth: hci1: command tx timeout
[  299.770711][ T7225] veth0_macvtap: entered promiscuous mode
[  299.791457][ T7225] veth1_macvtap: entered promiscuous mode
[  299.872337][ T7225] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.927672][ T7225] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.991406][   T66] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  300.041025][   T66] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  300.047541][   T66] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  300.048299][   T66] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.532807][ T7432] openvswitch: netlink: Message has 8 unknown bytes.
[  300.532840][ T7432] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.178086][ T3398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.178106][ T3398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.314574][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.314596][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.495735][ T7451] gtp0: entered promiscuous mode
[  301.761047][ T5621] Bluetooth: hci1: command tx timeout
[  303.133998][ T7500] usbip-vudc usbip-vudc.0: Device not connected
[  305.458703][ T7564] usbip_vudc: v_rx exit with error -32
[  306.154908][ T7586] zram0: detected capacity change from 0 to 8
[  307.171738][ T7600] process 'syz.8.478' launched './file2' with NULL argv: empty string added
[  307.523769][ T7609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  307.578353][ T7609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  307.592103][ T7608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.799000][ T7645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.875478][ T7645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.886700][ T7645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.929860][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  310.949880][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  310.959872][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  310.979858][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  310.989858][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  311.299858][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  311.318263][ T7691] 9pnet_fd: p9_fd_create_tcp (7691): problem connecting socket to 127.0.0.1
[  311.429854][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  311.449857][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  311.459855][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  311.479855][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  313.865277][ T7715] Bluetooth: MGMT ver 1.23
[  315.031239][ T7727] 9pnet_fd: p9_fd_create_tcp (7727): problem connecting socket to 127.0.0.1
[  317.248474][ T7742] 9p: Bad value for 'port'
[  318.363147][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  318.363210][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  319.265771][ T7757] openvswitch: netlink: Message has 8 unknown bytes.
[  319.265794][ T7757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  319.386046][ T5628] usb 8-1: Direct firmware load for emi26/bitstream.fw failed with error -2
[  319.386072][ T5628] usb 8-1: Falling back to sysfs fallback for: emi26/bitstream.fw
[  319.599274][ T7765] gtp0: entered promiscuous mode
[  321.168680][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  321.194615][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  321.199035][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  321.217869][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  321.218663][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  321.221205][ T5812] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  321.453452][ T5812] usb 9-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
[  321.453481][ T5812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.503843][ T5812] emi26 - firmware loader 9-1:1.0: emi26_probe start
[  322.665241][ T7818] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.665409][ T7818] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.665578][ T7818] bridge_slave_0: entered allmulticast mode
[  322.706745][ T7818] bridge_slave_0: entered promiscuous mode
[  322.740119][ T7818] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.740309][ T7818] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.740464][ T7818] bridge_slave_1: entered allmulticast mode
[  322.743622][ T7818] bridge_slave_1: entered promiscuous mode
[  322.940793][ T7818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.946872][ T7818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  323.178767][ T7818] team0: Port device team_slave_0 added
[  323.202534][ T7818] team0: Port device team_slave_1 added
[  323.303301][ T7818] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.303319][ T7818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.303346][ T7818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.325972][ T7818] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.326009][ T7818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.326070][ T7818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.360155][ T5621] Bluetooth: hci4: command tx timeout
[  323.634101][ T7818] hsr_slave_0: entered promiscuous mode
[  323.635564][ T7818] hsr_slave_1: entered promiscuous mode
[  323.636549][ T7818] debugfs: 'hsr0' already exists in 'hsr'
[  323.636574][ T7818] Cannot create hsr debugfs directory
[  324.330096][ T7818] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  324.376017][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  324.377518][ T7818] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  324.419565][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  324.431972][ T7818] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  324.475872][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  324.477565][ T7818] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  324.524759][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  324.623680][ T7818] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.695580][ T7818] 8021q: adding VLAN 0 to HW filter on device team0
[  324.709606][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.709686][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.764504][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.765115][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state
[  325.352934][ T7818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.450705][ T5621] Bluetooth: hci4: command tx timeout
[  325.761910][ T7818] veth0_vlan: entered promiscuous mode
[  325.794257][ T7818] veth1_vlan: entered promiscuous mode
[  325.826929][ T7818] veth0_macvtap: entered promiscuous mode
[  325.835832][ T7818] veth1_macvtap: entered promiscuous mode
[  325.858353][ T7818] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.881045][ T7818] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.887890][ T3398] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.888120][ T3398] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.888160][ T3398] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.888195][ T3398] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.525329][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.525350][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.706900][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.706922][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  327.461602][ T7980] gtp0: entered promiscuous mode
[  327.520032][ T5621] Bluetooth: hci4: command tx timeout
[  328.641528][  T199] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  328.770044][  T199] usb 10-1: device descriptor read/64, error -71
[  329.010038][  T199] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  329.140044][  T199] usb 10-1: device descriptor read/64, error -71
[  329.252069][  T199] usb usb10-port1: attempt power cycle
[  329.590036][  T199] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  329.599996][ T5621] Bluetooth: hci4: command tx timeout
[  329.619208][  T199] usb 10-1: device descriptor read/8, error -71
[  329.863692][  T199] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  329.881730][  T199] usb 10-1: device descriptor read/8, error -71
[  329.990286][  T199] usb usb10-port1: unable to enumerate USB device
[  331.262304][ T8111] gtp0: entered promiscuous mode
[  332.310262][ T8155] gtp0: entered promiscuous mode
[  333.512210][ T8191] gtp0: entered promiscuous mode
[  334.445875][ T8218] gtp0: entered promiscuous mode
[  335.457427][ T8259] gtp0: entered promiscuous mode
[  336.397698][ T8299] gtp0: entered promiscuous mode
[  337.355715][ T8333] gtp0: entered promiscuous mode
[  338.724951][ T8369] gtp0: entered promiscuous mode
[  339.529965][ T1008] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  339.681763][ T1008] usb 10-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
[  339.681792][ T1008] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.762187][ T1008] emi26 - firmware loader 10-1:1.0: emi26_probe start
[  339.919902][ T4914] Bluetooth: hci5: command 0x0406 tx timeout
[  339.919943][ T5621] Bluetooth: hci6: command 0x0406 tx timeout
[  340.694585][ T8442] gtp0: entered promiscuous mode
[  341.687840][ T8473] gtp0: entered promiscuous mode
[  342.447214][ T8500] openvswitch: netlink: Message has 8 unknown bytes.
[  342.447250][ T8500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.647967][ T8578] gtp0: entered promiscuous mode
[  347.544584][ T8678] gtp0: entered promiscuous mode
[  348.590304][ T8719] openvswitch: netlink: Message has 8 unknown bytes.
[  348.590326][ T8719] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  349.576010][ T8756] openvswitch: netlink: Message has 8 unknown bytes.
[  349.576034][ T8756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.159989][ T5626] Bluetooth: hci2: command 0x0406 tx timeout
[  350.598485][ T8787] gtp0: entered promiscuous mode
[  350.827099][ T8797] openvswitch: netlink: Message has 8 unknown bytes.
[  350.827139][ T8797] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.074541][ T8838] openvswitch: netlink: Message has 8 unknown bytes.
[  352.074575][ T8838] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.429699][ T8875] openvswitch: netlink: Message has 8 unknown bytes.
[  353.429732][ T8875] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.810565][ T8881] gtp0: entered promiscuous mode
[  355.288634][ T5623] Bluetooth: hci0: command 0x0406 tx timeout
[  355.438997][ T8908] openvswitch: netlink: Message has 8 unknown bytes.
[  355.439019][ T8908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.384304][ T8954] openvswitch: netlink: Message has 8 unknown bytes.
[  357.384325][ T8954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.609153][ T8989] openvswitch: netlink: Message has 8 unknown bytes.
[  358.609175][ T8989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.482983][ T9022] openvswitch: netlink: Message has 8 unknown bytes.
[  359.483015][ T9022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.367064][ T9049] openvswitch: netlink: Message has 8 unknown bytes.
[  360.367237][ T9049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.562370][ T9056] (syz.9.1052,9056,0):o2hb_bio_end_io:499 ERROR: IO Error 10
[  360.562457][ T9056] (syz.9.1052,9056,0):o2hb_region_dev_store:1850 ERROR: status = -5
[  362.282742][ T9063] 9pnet_fd: p9_fd_create_tcp (9063): problem connecting socket to 127.0.0.1
[  365.558070][ T9120] ubi0: attaching mtd0
[  365.618403][ T9120] ubi0: scanning is finished
[  365.618453][ T9120] ubi0: empty MTD device detected
[  366.202052][ T9124] gtp0: entered promiscuous mode
[  366.427754][ T9120] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  368.577146][ T9161] 9pnet_fd: p9_fd_create_tcp (9161): problem connecting socket to 127.0.0.1
[  371.739167][ T9209] ubi0: attaching mtd0
[  371.766558][ T9209] ubi0: scanning is finished
[  372.557827][ T9209] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  376.732978][ T9270] ubi0: attaching mtd0
[  376.755515][ T9270] ubi0: scanning is finished
[  378.598571][ T9270] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  378.840511][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  378.840575][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  380.270799][ T9290] 9pnet_fd: p9_fd_create_tcp (9290): problem connecting socket to 127.0.0.1
[  381.608050][ T9299] 9pnet_fd: p9_fd_create_tcp (9299): problem connecting socket to 127.0.0.1
[  383.239013][ T9321] ubi0: attaching mtd0
[  383.263277][ T9321] ubi0: scanning is finished
[  383.957680][ T9326] openvswitch: netlink: Message has 8 unknown bytes.
[  383.957719][ T9326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.010260][   T10] usb 5-1: emi26_load_firmware - request_firmware() failed
[  384.010268][ T1008] usb 10-1: emi26_load_firmware - request_firmware() failed
[  384.010284][ T1008] usb 10-1: emi26_load_firmware - error loading firmware: error = -2
[  384.010284][   T10] usb 5-1: emi26_load_firmware - error loading firmware: error = -2
[  384.011331][   T10] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5
[  384.011331][ T1008] emi26 - firmware loader 10-1:1.0: probe with driver emi26 - firmware loader failed with error -5
[  384.012709][ T1255] usb 2-1: emi26_load_firmware - request_firmware() failed
[  384.012727][ T1255] usb 2-1: emi26_load_firmware - error loading firmware: error = -2
[  384.012803][ T1255] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5
[  384.012874][ T5812] usb 9-1: emi26_load_firmware - request_firmware() failed
[  384.012888][ T5812] usb 9-1: emi26_load_firmware - error loading firmware: error = -2
[  384.012960][ T5812] emi26 - firmware loader 9-1:1.0: probe with driver emi26 - firmware loader failed with error -5
[  384.179594][ T5628] usb 8-1: emi26_load_firmware - request_firmware() failed
[  384.179611][ T5628] usb 8-1: emi26_load_firmware - error loading firmware: error = -110
[  384.179742][ T5628] emi26 - firmware loader 8-1:1.0: probe with driver emi26 - firmware loader failed with error -5
[  386.007217][   T10] usb 5-1: USB disconnect, device number 11
[  386.089001][ T9321] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  387.188129][ T1255] usb 2-1: USB disconnect, device number 8
[  387.230281][ T5628] usb 8-1: USB disconnect, device number 4
[  387.234855][ T5812] usb 9-1: USB disconnect, device number 2
[  387.362812][ T1008] usb 10-1: USB disconnect, device number 6
[  391.055678][ T9373] ubi0: attaching mtd0
[  391.080186][ T9373] ubi0: scanning is finished
[  392.652318][ T9373] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  394.960142][ T5902] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  396.057657][ T5902] usb 8-1: Using ep0 maxpacket: 32
[  396.662055][ T9421] 9pnet_fd: p9_fd_create_tcp (9421): problem connecting socket to 127.0.0.1
[  397.831803][ T5902] usb 8-1: device descriptor read/all, error -71
[  405.472164][ T5812] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  407.549900][ T5812] usb 5-1: Using ep0 maxpacket: 32
[  407.551958][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.551984][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  407.552020][ T5812] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  407.552040][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.590651][ T5812] usb 5-1: config 0 descriptor??
[  410.058451][ T5812] usbhid 5-1:0.0: can't add hid device: -71
[  410.058562][ T5812] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  410.215891][ T5812] usb 5-1: USB disconnect, device number 12
[  415.209963][ T1008] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  415.369896][ T1008] usb 9-1: Using ep0 maxpacket: 32
[  415.375406][ T1008] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  415.375426][ T1008] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  415.375456][ T1008] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  415.375472][ T1008] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.437667][ T1008] usb 9-1: config 0 descriptor??
[  416.597318][ T1008] usbhid 9-1:0.0: can't add hid device: -71
[  416.653269][ T1008] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  416.656858][ T1008] usb 9-1: USB disconnect, device number 3
[  418.284114][ T9561] 9pnet_fd: p9_fd_create_tcp (9561): problem connecting socket to 127.0.0.1
[  418.388017][ T5626] Bluetooth: hci1: command 0x0406 tx timeout
[  421.735744][ T9601] 9pnet_fd: p9_fd_create_tcp (9601): problem connecting socket to 127.0.0.1
[  423.986664][ T9605] ceph: No mds server is up or the cluster is laggy
[  424.387180][ T6767] libceph: connect (1)[c::]:6789 error -101
[  424.387381][ T5628] libceph: connect (1)[c::]:6789 error -101
[  424.387845][ T6767] libceph: mon0 (1)[c::]:6789 connect error
[  424.427886][ T5628] libceph: mon0 (1)[c::]:6789 connect error
[  424.440600][ T6767] libceph: connect (1)[c::]:6789 error -101
[  424.440764][ T6767] libceph: mon0 (1)[c::]:6789 connect error
[  425.516938][ T9589] ceph: No mds server is up or the cluster is laggy
[  425.560707][ T6767] libceph: connect (1)[c::]:6789 error -101
[  425.560836][ T6767] libceph: mon0 (1)[c::]:6789 connect error
[  425.682017][   T10] libceph: connect (1)[c::]:6789 error -101
[  425.682199][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  426.724963][ T6767] libceph: connect (1)[c::]:6789 error -101
[  426.725140][ T6767] libceph: mon0 (1)[c::]:6789 connect error
[  426.754061][ T5628] libceph: connect (1)[c::]:6789 error -101
[  426.754238][ T5628] libceph: mon0 (1)[c::]:6789 connect error
[  431.246810][ T9652] ubi0: attaching mtd0
[  431.269201][ T9652] ubi0: scanning is finished
[  431.312137][   T37] INFO: task syz.5.276:6924 blocked for more than 144 seconds.
[  431.312191][   T37]       Not tainted syzkaller #0
[  431.312225][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  431.312266][   T37] task:syz.5.276       state:D stack:28968 pid:6924  tgid:6920  ppid:6016   task_flags:0x400040 flags:0x00080002
[  431.312652][   T37] Call Trace:
[  431.312683][   T37]  <TASK>
[  431.312746][   T37]  __schedule+0x16dc/0x5500
[  431.312851][   T37]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  431.312991][   T37]  ? __pfx_sched_clock_cpu+0x10/0x10
[  431.313153][   T37]  ? __pfx___schedule+0x10/0x10
[  431.313196][   T37]  ? rt_mutex_slowlock_block+0x33a/0x680
[  431.313380][   T37]  rt_mutex_schedule+0x76/0xf0
[  431.313431][   T37]  rt_mutex_slowlock_block+0x55c/0x680
[  431.313549][   T37]  ? rt_mutex_slowlock_block+0x33a/0x680
[  431.313646][   T37]  rt_mutex_slowlock+0x2d4/0x780
[  431.313727][   T37]  ? rt_mutex_slowlock+0x1f2/0x780
[  431.313806][   T37]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  431.313942][   T37]  ? write_versions+0x95/0xe30
[  431.314128][   T37]  ? write_versions+0x95/0xe30
[  431.314235][   T37]  ? write_versions+0x95/0xe30
[  431.314287][   T37]  mutex_lock_nested+0x168/0x1d0
[  431.314394][   T37]  write_versions+0x95/0xe30
[  431.314502][   T37]  ? __pfx_write_versions+0x10/0x10
[  431.314640][   T37]  ? _copy_from_user+0x94/0xb0
[  431.314691][   T37]  ? simple_transaction_get+0x130/0x170
[  431.314776][   T37]  nfsctl_transaction_write+0x112/0x160
[  431.314832][   T37]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  431.314887][   T37]  vfs_write+0x29f/0xbb0
[  431.314993][   T37]  ? __pfx_vfs_write+0x10/0x10
[  431.315123][   T37]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  431.315173][   T37]  ? lockdep_hardirqs_on+0x7a/0x110
[  431.315221][   T37]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  431.315271][   T37]  ? mutex_lock_nested+0x152/0x1d0
[  431.315324][   T37]  ? fdget_pos+0x252/0x320
[  431.315426][   T37]  ksys_write+0x156/0x270
[  431.315548][   T37]  ? __pfx_ksys_write+0x10/0x10
[  431.315598][   T37]  ? __pfx_kcov_ioctl+0x10/0x10
[  431.315709][   T37]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.315755][   T37]  do_syscall_64+0x174/0x580
[  431.315816][   T37]  ? trace_irq_disable+0x3b/0x140
[  431.315861][   T37]  ? clear_bhb_loop+0x40/0x90
[  431.315936][   T37]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.316065][   T37] RIP: 0033:0x7f086f00de99
[  431.316159][   T37] RSP: 002b:00007f086d245028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  431.316238][   T37] RAX: ffffffffffffffda RBX: 00007f086f296090 RCX: 00007f086f00de99
[  431.316278][   T37] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004
[  431.316343][   T37] RBP: 00007f086f0a3eaf R08: 0000000000000000 R09: 0000000000000000
[  431.316432][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  431.316471][   T37] R13: 00007f086f296128 R14: 00007f086f296090 R15: 00007ffcef086788
[  431.337696][   T37]  </TASK>
[  431.338111][   T37] 
[  431.338111][   T37] Showing all locks held in the system:
[  431.338198][   T37] 5 locks held by rcuc/1/28:
[  431.338235][   T37] 1 lock held by khungtaskd/37:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  431.338269][   T37]  #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  431.338576][   T37] 3 locks held by kworker/u8:3/56:
[  431.338640][   T37] 6 locks held by kworker/u8:8/711:
[  431.338703][   T37] 3 locks held by kworker/u8:11/1147:
[  431.338738][   T37]  #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  431.504118][   T37]  #1: ffffc90006127c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  431.504118][   T37]  #1: ffffc90006127c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  431.504172][   T37]  #2: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_write_lock+0x86/0x220
[  431.504226][   T37] 8 locks held by kworker/u8:15/3398:
[  431.504239][   T37] 2 locks held by klogd/4954:
[  431.504250][   T37] 1 lock held by udevd/4965:
[  431.504262][   T37] 2 locks held by getty/5350:
[  431.504272][   T37]  #0: ffff888035cf50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  431.504323][   T37]  #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[  431.504380][   T37] 5 locks held by dhcpcd/5362:
[  431.504392][   T37] 1 lock held by syz-executor/5613:
[  431.504406][   T37] 2 locks held by syz-executor/6057:
[  431.504417][   T37]  #0: ffff88805e9980d0 (&type->s_umount_key#56){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[  431.504470][   T37]  #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0
[  431.504522][   T37] 2 locks held by syz-executor/6173:
[  431.504541][   T37] 3 locks held by syz.5.276/6922:
[  431.504552][   T37]  #0: ffff88803ca88328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  431.504600][   T37]  #1: ffff88803938c500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  431.504656][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  431.504711][   T37] 3 locks held by syz.5.276/6924:
[  431.504722][   T37]  #0: ffff88803ca89528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  431.504769][   T37]  #1: ffff88803938c500 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  431.504821][   T37]  #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  431.504877][   T37] 1 lock held by syz-executor/7225:
[  431.504893][   T37] 3 locks held by syz.8.1230/9629:
[  431.504905][   T37] 3 locks held by syz.7.1235/9652:
[  431.504915][   T37]  #0: ffffffff8ecc85d8 (ubi_devices_mutex){+.+.}-{4:4}, at: ctrl_cdev_ioctl+0x298/0x480
[  431.504962][   T37]  #1: ffffffff8e051b70 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x34/0x180
[  431.505010][   T37]  #2: ffffffff8e2f2498 (flush_lock){+.+.}-{4:4}, at: flush_rcu_sheaves_on_cache+0x26/0x160
[  431.505063][   T37] 4 locks held by syz-executor/9650:
[  431.505075][   T37] 
[  431.505080][   T37] =============================================
[  431.505080][   T37] 
[  431.505089][   T37] NMI backtrace for cpu 1
[  431.505116][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  431.505142][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  431.505159][   T37] Call Trace:
[  431.505167][   T37]  <TASK>
[  431.505175][   T37]  dump_stack_lvl+0xe8/0x150
[  431.505205][   T37]  nmi_cpu_backtrace+0x274/0x2d0
[  431.505224][   T37]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  431.505257][   T37]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  431.505290][   T37]  sys_info+0x135/0x170
[  431.505317][   T37]  watchdog+0xfd7/0x1030
[  431.505342][   T37]  ? watchdog+0x1c7/0x1030
[  431.505366][   T37]  kthread+0x388/0x470
[  431.505397][   T37]  ? __pfx_watchdog+0x10/0x10
[  431.505414][   T37]  ? __pfx_kthread+0x10/0x10
[  431.505444][   T37]  ret_from_fork+0x514/0xb70
[  431.505477][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[  431.505507][   T37]  ? __switch_to+0xc89/0x1420
[  431.505537][   T37]  ? __pfx_kthread+0x10/0x10
[  431.505567][   T37]  ret_from_fork_asm+0x1a/0x30
[  431.505599][   T37]  </TASK>
[  431.505624][   T37] Sending NMI from CPU 1 to CPUs 0:
[  431.505652][    C0] NMI backtrace for cpu 0
[  431.505665][    C0] CPU: 0 UID: 0 PID: 9651 Comm: syz.7.1235 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  431.505683][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  431.505692][    C0] RIP: 0010:kfree+0x4d/0x6c0
[  431.505708][    C0] Code: 8b 6c 24 58 0f 1f 44 00 00 65 8b 05 51 89 7a 10 83 f8 08 0f 83 e6 03 00 00 89 c0 48 0f a3 05 3a 30 8c 0d 73 0d e8 d3 2f 87 ff <84> c0 0f 84 d6 03 00 00 49 83 fc 11 0f 82 9c 03 00 00 48 8b 1d fa
[  431.505723][    C0] RSP: 0018:ffffc900098d7a00 EFLAGS: 00000202
[  431.505736][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000001
[  431.505747][    C0] RDX: 0000000000000002 RSI: ffffffff8bca7760 RDI: ffffffff8bca7720
[  431.505757][    C0] RBP: ffffc900098d7c50 R08: 0000000000000000 R09: 0000000000000000
[  431.505767][    C0] R10: dffffc0000000000 R11: fffffbfff1f5f2e7 R12: 0000000000000000
[  431.505778][    C0] R13: ffffffff890e90f2 R14: 1ffff9200131af54 R15: dffffc0000000000
[  431.505791][    C0] FS:  00007f43aee456c0(0000) GS:ffff888125c41000(0000) knlGS:0000000000000000
[  431.505804][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  431.505815][    C0] CR2: 00007f43aee44ff8 CR3: 0000000029f96000 CR4: 00000000003526f0
[  431.505829][    C0] Call Trace:
[  431.505834][    C0]  <TASK>
[  431.505840][    C0]  ? import_iovec+0x73/0xa0
[  431.505861][    C0]  ___sys_recvmsg+0x222/0x5a0
[  431.505886][    C0]  ? __pfx____sys_recvmsg+0x10/0x10
[  431.505907][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  431.505926][    C0]  ? irqentry_exit+0x218/0x8f0
[  431.505957][    C0]  do_recvmmsg+0x320/0x7f0
[  431.505981][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[  431.506001][    C0]  ? do_futex+0x3e7/0x4e0
[  431.506033][    C0]  __x64_sys_recvmmsg+0x198/0x250
[  431.506055][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  431.506080][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.506097][    C0]  do_syscall_64+0x174/0x580
[  431.506116][    C0]  ? trace_irq_disable+0x3b/0x140
[  431.506131][    C0]  ? clear_bhb_loop+0x40/0x90
[  431.506149][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.506165][    C0] RIP: 0033:0x7f43b0c0de99
[  431.506178][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.506192][    C0] RSP: 002b:00007f43aee45028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  431.506207][    C0] RAX: ffffffffffffffda RBX: 00007f43b0e96090 RCX: 00007f43b0c0de99
[  431.506219][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004
[  431.506229][    C0] RBP: 00007f43b0ca3eaf R08: 0000000000000000 R09: 0000000000000000
[  431.506239][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  431.506249][    C0] R13: 00007f43b0e96128 R14: 00007f43b0e96090 R15: 00007ffe9661a8f8
[  431.506268][    C0]  </TASK>
[  431.767134][   T37] Kernel panic - not syncing: hung_task: blocked tasks
[  431.767154][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  431.767176][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  431.767189][   T37] Call Trace:
[  431.767197][   T37]  <TASK>
[  431.767205][   T37]  vpanic+0x56c/0xa60
[  431.767248][   T37]  ? __pfx___schedule+0x10/0x10
[  431.767272][   T37]  ? __pfx_vpanic+0x10/0x10
[  431.767302][   T37]  panic+0xc5/0xd0
[  431.767321][   T37]  ? __pfx_panic+0x10/0x10
[  431.767339][   T37]  ? preempt_schedule_common+0x82/0xd0
[  431.767363][   T37]  ? preempt_schedule_thunk+0x16/0x40
[  431.767392][   T37]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  431.767427][   T37]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  431.767463][   T37]  watchdog+0x1030/0x1030
[  431.767490][   T37]  ? watchdog+0x1c7/0x1030
[  431.767524][   T37]  kthread+0x388/0x470
[  431.767557][   T37]  ? __pfx_watchdog+0x10/0x10
[  431.767575][   T37]  ? __pfx_kthread+0x10/0x10
[  431.767629][   T37]  ret_from_fork+0x514/0xb70
[  431.767666][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[  431.767700][   T37]  ? __switch_to+0xc89/0x1420
[  431.767733][   T37]  ? __pfx_kthread+0x10/0x10
[  431.767768][   T37]  ret_from_fork_asm+0x1a/0x30
[  431.767806][   T37]  </TASK>
[  431.768407][   T37] Kernel Offset: disabled