last executing test programs:

23m37.175678683s ago: executing program 4 (id=18):
openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x10200, 0x80)
pipe2(&(0x7f0000000080)={0x0, <r0=>0x0}, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0x0, <r2=>0x0}, 0x0)
unshare(0x2c020400)
tee(r1, r0, 0xff, 0x0)
r3 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0)
read(r3, &(0x7f0000000040)=""/251, 0xfb)
vmsplice(r2, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x80006, 0x4000000000000e51, 0x101, 0x547a, 0x103d, 0x200000000006, 0x0, 0x3aa, 0x1, 0x1, 0x5, 0x40000000009, 0x40000000080a8c, 0x800000068], 0x6000, 0x4000})
socket$tipc(0x1e, 0x2, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

23m36.720910563s ago: executing program 4 (id=20):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, r0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, r2, 0xb97534d5fe9704cf, 0x800, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "07da"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3e7}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x8048) (fail_nth: 6)

23m36.052543646s ago: executing program 4 (id=21):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r6)
sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}}, 0x10)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r7, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4040000)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000001200), 0x0)
socket$inet(0x2b, 0x801, 0x0)

23m24.925870451s ago: executing program 4 (id=25):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e9000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x8000000000000000]}})

23m23.149805131s ago: executing program 4 (id=31):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='clear_refs\x00')
exit(0xffff)
write$binfmt_format(r1, &(0x7f00000002c0)='1\x00', 0x2)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$binfmt_script(r0, &(0x7f00000003c0), 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000900)={0x41}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r5 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$smackfs_change_rule(r5, &(0x7f0000000100)={'w\x00\x0fn0\x00', 0x20, '\xbb\xbb\xbb\xbb\xbb\xbb', 0x20, 'xal', 0x20, 'wxabl'}, 0x18)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2)

23m17.404750561s ago: executing program 4 (id=36):
r0 = getpid()
setreuid(0xee01, 0xee00)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000080001000c0c100000000000204e0000", 0x58}], 0x1)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
socket(0x1e, 0x4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e26}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
syz_init_net_socket$ax25(0x3, 0x3, 0xcd)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2802000, &(0x7f0000000140)=ANY=[])
tgkill(r0, r2, 0x6)

23m2.013439649s ago: executing program 32 (id=36):
r0 = getpid()
setreuid(0xee01, 0xee00)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000080001000c0c100000000000204e0000", 0x58}], 0x1)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
socket(0x1e, 0x4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e26}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
syz_init_net_socket$ax25(0x3, 0x3, 0xcd)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2802000, &(0x7f0000000140)=ANY=[])
tgkill(r0, r2, 0x6)

15m7.13445008s ago: executing program 2 (id=977):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0xd}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001304000000020000"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94)

15m6.465434645s ago: executing program 2 (id=978):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000002500010324bd7006fddbdf2515000000040050804c3803d99ec87775d6571f3b731f470d103b17259e8361a71486f918f57a990caf763e895b55c9ad2e50ba8e4bf1b1c3dc38aed5bf8f0451ee2f9e3c92479f24bf70277ba20e9fcf9c2afb9a55d25f41489a7b3c09dbed2b9c76f2bfe9edb0ed2b00000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000013c0)=ANY=[@ANYBLOB="90ed0b01756fd052c0aa39f77f000000bd1ab1e4c390ea8cf4a58d6ee04d0cbaf64e5a58f786afb8e87b1c4dc6a8c02873752043003640065643fc0cac95bf3c000000000000e51e49cba8375fad30a10b549ed730b53b8d495685dddd755de20916bba496a42fd69b231470aeca58208818208319b3a754d9b91cb6c46cbd26466e53fe7f9bb9f8598f4902c6b72d678945d400", @ANYRES16=r1, @ANYBLOB="000425bd7000fddbdf257b00000008000300", @ANYRES32=r2, @ANYBLOB="14000201314a9a993a4b268287006f05f702ecef140002012d3be2867036cea1db96d739062015e91400fe006aca2d186a4b693b575d36f4c86a43bc1400fe0069c5c6c81af13832b793b155d86b5c7d0a00060008021100000000000a00060008021100000100000a000600ffffffffffff0000"], 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x8004)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={<r3=>0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001380)={r3, 0x8}, 0x8)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x5}, 0x8)
setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612)

15m6.188933496s ago: executing program 2 (id=979):
openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$packet(0x11, 0x2, 0x300)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

15m4.766912932s ago: executing program 2 (id=984):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbdfbc04c8e600080001800400dd8008000380040001"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x10, 0x0, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x60)
close(r2)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000002000000b30000007f00000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000040000000007fff00"/28], 0x50)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x2, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x24008818)
write$P9_RREADDIR(r2, &(0x7f0000000200)={0x68, 0x29, 0x1, {0x0, [{{0x10, 0x1, 0x1}, 0xc, 0x3, 0x7, './file0'}, {{0x40, 0x1, 0x6}, 0xbc7, 0x40, 0x7, './file0'}, {{0x1, 0x2}, 0x2, 0x6, 0x7, './file0'}]}}, 0x68)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x3f, 0x4f, &(0x7f0000000340)="97ff496ae62e0599e9d5207942ea9bd2113b1dc70a27ada3e12b37cd2861bd963e5f88ff15b12715f487babb41d3af0a994ff981dccae4f93ec2f8231e89f7", &(0x7f0000000440)=""/79, 0x2, 0x0, 0x19, 0x8, &(0x7f0000000380)="99a57a0c815c6e8ef10915836d5d2a936fdf23dca4b6e819ef", &(0x7f00000004c0)="c19abd434c7b2a9b", 0x2, 0x0, 0x4}, 0x50)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000080)={0x9, 0x7, 0x3})
ppoll(&(0x7f0000000740)=[{r4, 0x104}], 0x1, 0x0, 0x0, 0x0)
pread64(r4, &(0x7f0000000480), 0x1, 0x2)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8002, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00\x00'])

15m1.055588836s ago: executing program 2 (id=988):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0xd}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001304000000020000"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94)

14m59.840651692s ago: executing program 2 (id=992):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000300)=0x80000000) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000ffff050004000000000010000300686173683a69702c6d616300050005"], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15030000b424000008000a00", @ANYRES32=r3, @ANYBLOB="280012800b000100697036746e6c000018000280140002090000000000000000000000000000000a"], 0x50}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) (async)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r5, &(0x7f00000002c0)='!', 0x1, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r6 = dup(r5)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0x400, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f0000000380)={0xdf, 0x0, 0x10800})
getsockopt$sock_int(r7, 0x1, 0x9, 0x0, &(0x7f00000000c0))
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0xc0) (async, rerun: 64)
r8 = socket(0x11, 0x2, 0x10001) (rerun: 64)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0x11, 0x30000080}]}}) (async)
connect$x25(r8, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)

14m43.882979526s ago: executing program 33 (id=992):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000300)=0x80000000) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000ffff050004000000000010000300686173683a69702c6d616300050005"], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15030000b424000008000a00", @ANYRES32=r3, @ANYBLOB="280012800b000100697036746e6c000018000280140002090000000000000000000000000000000a"], 0x50}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) (async)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r5, &(0x7f00000002c0)='!', 0x1, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r6 = dup(r5)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0x400, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f0000000380)={0xdf, 0x0, 0x10800})
getsockopt$sock_int(r7, 0x1, 0x9, 0x0, &(0x7f00000000c0))
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0xc0) (async, rerun: 64)
r8 = socket(0x11, 0x2, 0x10001) (rerun: 64)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0x11, 0x30000080}]}}) (async)
connect$x25(r8, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)

12m14.805518078s ago: executing program 5 (id=1319):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b80900000000000000002100"/48, 0xffffffffffffffe0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}, 0x1, 0x3f}, 0x0)
r3 = accept$alg(r1, 0x0, 0x0)
sendmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000180100000800000010000000000000001701"], 0x20}, 0x4004014)

12m14.385196376s ago: executing program 5 (id=1321):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0xc0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400))
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)

12m14.173620111s ago: executing program 5 (id=1323):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004"], 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2042, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000099}]})

12m13.901350946s ago: executing program 5 (id=1325):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91103c0000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

12m13.672026402s ago: executing program 5 (id=1328):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000072000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000002c0)="6766c7442400f16600006766c7442402720000006766c744240600000000670f011c242e6567f3af9a4aefda0064660f3a63c20b65f30fa7c028c90f3264f0831b5fbaf80c66b8ec8e4f8b66efbafc0c66edd9fc", 0x54}], 0x1, 0x54, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
socket$inet(0x2, 0x4000000000000001, 0x0)
mkdir(0x0, 0x22)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x9, 0x7, 0x3, 0x0, <r4=>0xffffffffffffffff})
close(r4)

12m11.932141889s ago: executing program 5 (id=1329):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000400)=""/102400, 0x19000)
syz_open_dev$sndpcmp(0x0, 0x0, 0x62302)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./file0\x00', 0x181)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x80, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
sendfile(r6, r5, 0x0, 0x7ffffffc)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x4d4ef}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x60}}, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20042, 0x0)
syz_open_dev$video(0x0, 0x7ff, 0x0)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000019400), 0x84040, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000019440)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x78000000})

11m55.295007815s ago: executing program 34 (id=1329):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000400)=""/102400, 0x19000)
syz_open_dev$sndpcmp(0x0, 0x0, 0x62302)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./file0\x00', 0x181)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x80, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
sendfile(r6, r5, 0x0, 0x7ffffffc)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x4d4ef}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x60}}, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20042, 0x0)
syz_open_dev$video(0x0, 0x7ff, 0x0)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000019400), 0x84040, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000019440)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x78000000})

7m56.720527106s ago: executing program 6 (id=1009):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

7m56.199779995s ago: executing program 6 (id=1807):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

7m55.977437267s ago: executing program 6 (id=1808):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x80, 0x100000}, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@ipv4_delroute={0x30, 0x19, 0x411, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_NH_ID={0x8, 0x1e, 0x9}]}, 0x30}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x3, 0x3}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000b000202000000"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40007}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x2, 0x1, &(0x7f0000000240)=""/225, &(0x7f0000000480)=""/194, &(0x7f0000000100)=""/113, 0x50000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x18)
getpid() (async)
syz_pidfd_open(r0, 0x0) (async)
setns(r1, 0x24020000) (async)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x80, 0x100000}, 0x20) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@ipv4_delroute={0x30, 0x19, 0x411, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_NH_ID={0x8, 0x1e, 0x9}]}, 0x30}}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x3, 0x3}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000b000202000000"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40007}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) (async)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x2, 0x1, &(0x7f0000000240)=""/225, &(0x7f0000000480)=""/194, &(0x7f0000000100)=""/113, 0x50000}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x18) (async)

7m55.760797194s ago: executing program 6 (id=1809):
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dsp(0xffffffffffffff9c, 0x0, 0x40240, 0x0)
sigaltstack(&(0x7f0000000200)={&(0x7f0000002200)=""/4097, 0x80000001, 0x1001}, 0x0)
sigaltstack(&(0x7f0000000280)={0x0, 0x1}, &(0x7f00000002c0)={0x0})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004)
sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000100)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x43, 0x8044051}, 0x801)
r5 = dup(r4)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x4}}, 0x20)

7m52.24555912s ago: executing program 6 (id=1818):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x16, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @empty}]}, &(0x7f0000000140)=0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d697400"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

7m30.092766617s ago: executing program 3 (id=1868):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10, 0xffffffff, 0x16}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r4, &(0x7f0000000280)}, 0x20)
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r5 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000005840)='\x00', 0x1}], 0x1)
preadv2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)=""/92, 0x5c}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x65, 0x8, 0x8)

7m29.437038958s ago: executing program 3 (id=1871):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff0}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6a4b, 0x10300, 0x3}, &(0x7f0000000100), &(0x7f0000000080))
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8}]}, 0x40}}, 0x40040d0)
io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111a1000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="e400000043000701fefffffffcdbdf25017c000004004580ca00018000005a00252b27272900000073fd", @ANYBLOB="f3892d7ef73f0ffd214c80e91b96a94c00aad6f8f5edf8f4fb231a63430a4e66e7b81c"], 0xe4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)

7m27.575601255s ago: executing program 3 (id=1876):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xe)
ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=ANY=[@ANYBLOB="5000000010000104fdfffffffedbdf2500000000182a9000b287e1b1289d4f1d396e84e8294a9e1ed09dcd6c248919a258dc9a54dda6dd6f1a9eb78fb5f0e478e9750311a6a4e007b1010842fbd7903e06862d92f19195c7a50babd5ad475432b119e49b2149b80eb9210a1abc06b4fe07407ee524859fa53c78c475b663ea57f1dcf94be070cd6a11fd56f9f2e8", @ANYRES32=0x0, @ANYBLOB="0315000000000000300012800c0001006d6163766c616e00200002800a000400da5e846ff44b0000100005800a0004000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r3)
sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf2512"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x10000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000200)={'sit0\x00', 0x0})
r6 = socket$inet6(0xa, 0x2, 0xe7)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e22, @broadcast}})
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001d00070f000000000000000007000000", @ANYRES32=r8, @ANYBLOB="4000467e14000100fe6000000000000000000000000000aa0a000100a2de75a089b10000060006"], 0x44}}, 0x4000000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)=0x5)
r9 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x9, @rand_addr=' \x01\x00', 0x2}}, {{0xa, 0x0, 0x0, @loopback, 0x4}}}, 0x108)
close(r9)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r9, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001e40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010125bd7000ffdbdf256300000008000300455883dbbb16fbe8381a272414a1e379b40ea6099188b9c5a3c1dcfc5aaf0b99dc8d9c537202ddda50e7f09b2840050516108d8cbd2965ebb50ec366c28004942ddbb4c341d40a5fe856b915dd2f52ad67a4faf93ce8bbfba5d181b9a564c68d15c5314d8bccfb3cdd52344dc025c8d2811806a2ecaf89e7bbf49c3892a34631565f053cde6c4bc2eb7f34d714aaae71678be314eb5f25666094c3478aabd3e8379c5652eece7d233b75095ca4141268e8d767b1b598fd58bfef193a1ef72668", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r11 = memfd_secret(0x80000)
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r13 = accept4(r0, 0x0, 0x0, 0x800)
ioctl$RFKILL_IOCTL_NOINPUT(r11, 0x5201)
sendmmsg$alg(r13, &(0x7f0000001d80)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000200)="ebe3a0e9796cfd1647e2990800000000000000b372219d205e81f4a7f71c1926aa5a65d7e01461b955", 0x29}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db7945d1032005eabe97b4dc33a47d3a158da988456d3", 0x37}], 0x114e, 0x0, 0x0, 0x40004}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)="1a95a338e4e828ab8d2049e88169215b964f901ec7810d94292ec2e2acc5712591bc5d87696f7407fceb29a79a0227987b5a8c11bdddb352e5e6b86ea6e8bfc4fd0d0eb452a471c0f825ea5f1a35b1ecd9681fde9ff20b23cb589823cd63b108c2b08fc114d1736eedd8ae2d8113ac240bd994fa7ed1a259e5efb552e99461a6a6ef5e5d3fde7ae0da8097065f2faad77e2e5a3771c29802aa86595c02a8", 0x9e}, {&(0x7f0000000480)="e0590ca9ee386f0c04af4c9e9d2cbbdaed22a2f9430dc03a67a9f2c7fa1fa274361d122ae7d8dc18c2b1fc2f7a99e7c3d1081bc8bd6907cc", 0x38}, {&(0x7f0000000540)="c9153fac340864e456008bc154effc4fdb7164ad858c41137eb94643fcb4766d0a0dde6395282732161b8b2a1d979db21a", 0x31}, {&(0x7f00000006c0)="54229208e8df3782a0a20a76219fd39ca1a212073a6dc1e7b6dbb19741bd1a55140eee2b9d25084d48ee699c9e11dc3ee80194108bc6d490e477bb21ad8fbe72f485fb0258548427a058105b2f67eb7dc049cdbf8ae84898e30da427e844973c3e4d7eb7a121b0cf1247e221497443960144a89b959dbed93ef642d0bcfa02c5", 0x80}], 0x4, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000740)="84df9346ab7a60a90b153f09e521d52df6b47e43b8b315efb6bb99feed6dfef879bf7213cdc0bf79b394c25fbdd380fbe95400aaa54717c9a23a3bbdc09a826b013776f8651b", 0x46}, {&(0x7f00000007c0)="3aa7e2069dd44d69c37539e5d1d8865c48e5d814543b1171793dfde0fcfa65412f58e9d7608edeb0591a13d5034b562fcf788535f1aa9ed15d7e518d4336efc05006b32e195a40c61428528b4c4b0528559b7ba9f5e40466d946e9c129da3e40d5e5db982d966cee0b47d6c4f93bf772d69c5af0b1968c0fcd2ed80897bee0eb80001247ea4092c550c282cd50689441977d71c6a6ef50ed596a28f89bd5e7271528adba3cee7c23710cbff18d55667948efa4c0f765e8b87bbeffd32c92103005e567472fc39b7c35cb6cafcb59009c17380b627d45a390a7bc40f347742ac02a2a86d69c9b800c26e37dec61ba3e4a55eea84f72", 0xf5}, {&(0x7f00000008c0)="4bfaa69904a556a71d1a153e57a0e29aac0ef427bf52a5008e3d526960f9d7f58159ad1a3fdd817495b7f2dcc4a0daaf9e3418eb039ff3a84ef09350805256d8cffc8e49f315763d08ab9148e6edd9196b454223955effad2958d2bb304b245506c15c5aef30a106b416ef6aa644c076ca87cb75023d59f88619e2900f9aa179cd6fddffec2b5113fe01baf28d64b19d", 0x90}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="5f82932f6944808d5dd08d441cbc2b366ff687149fc7090af6e9f26f58abcb885e89c5f41f29267f85091d351710963007d1cfb9b32841e07b9ab9c616ef98171b16d7d19212c620f5ea857d593311c4e5fb228e9c4cd5cf47fb4278f377f2a4211d18a984ba623c4161b1848811e9dae4da3ceb46", 0x75}], 0x5, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], 0x300, 0x11}], 0x3, 0x51)
recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000140)=""/83, 0x53}], 0x2}, 0x0)

7m14.517370016s ago: executing program 3 (id=1898):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff0}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6a4b, 0x10300, 0x3}, &(0x7f0000000100), &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8}]}, 0x40}}, 0x40040d0)
io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111a1000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="e400000043000701fefffffffcdbdf25017c000004004580ca00018000005a00252b27272900000073fd", @ANYBLOB="f3892d7ef73f0ffd214c80e91b96a94c00aad6f8f5edf8f4fb231a63430a4e66e7b81c"], 0xe4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)

7m13.419763566s ago: executing program 3 (id=1900):
syz_usb_connect(0x3, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000ba3f9340410e5850b8bf010203010902ef"], 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000000c0), 0x0, 0x1)
bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18)
sendmsg$SOCK_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20845)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x7ffe, 0x7, {0x3, 0xbb}, 0x3d, 0x2, 0x9})
syz_usb_connect$uac1(0x2, 0xa4, &(0x7f0000000880)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x1, 0x80, 0x3a, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x2}, [@extension_unit={0x9, 0x24, 0x8, 0x5, 0x5507, 0x3, "c9e3"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x3, 0x4, 0x8, 0x3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x34, 0x2}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x101, 0xd8c, 0x9, "52295a016cf448"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x8, 0x5, {0x2e, 0x25, 0x1, 0x82, 0xd8, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xa, 0x7, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf, 0x5, 0xfc, {0x7, 0x25, 0x1, 0x80, 0xe, 0x8}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x0, 0x8, 0x2, 0x7, 0xdf, 0x7f}, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="00697417f55189405315aa89"], 0xa})
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r8, &(0x7f0000000400)={0x27, 0x0, 0x2000000, 0x2, 0x0, 0x3, "c4070000004b7fefa0bf2cca6bebb363a680b652a86bcf56a1b9f4e6b34cc6beca54d2242c484c10ca538690d8d701a3ba6a6c0ce8b92eff449a761cdf6800", 0x1}, 0x60)
r9 = dup(r8)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)

7m8.478403113s ago: executing program 3 (id=1906):
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)
msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0)
shutdown(r0, 0x1)
msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0xa17}, 0x0, 0x0, 0x9, 0x7fffffffffffffff, 0x7, 0x4, 0x6, 0x5, 0x85c3, 0x3})
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
r3 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x257}, &(0x7f0000000dc0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108)

6m52.053315206s ago: executing program 35 (id=1906):
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)
msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0)
shutdown(r0, 0x1)
msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0xa17}, 0x0, 0x0, 0x9, 0x7fffffffffffffff, 0x7, 0x4, 0x6, 0x5, 0x85c3, 0x3})
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
r3 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x257}, &(0x7f0000000dc0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108)

3m29.601982936s ago: executing program 1 (id=2317):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="f0dd2517460d9a37726f6f746d6f64653d3030303030303030301881000400000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0180, 0x0)
ioctl$TUNSETSTEERINGEBPF(r4, 0x400454da, &(0x7f0000000000))
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0xf)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r8, 0xc0884123, &(0x7f0000000300)={0x7, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}})
sendmmsg$inet6(r6, &(0x7f0000000980)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @private0, 0x85}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x5}}], 0x1, 0x4000804)
syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f0689378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb280610c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be00", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="a800000000000000f9ffffffffffffff040000000000000002000000000000000500000000000000ffffffff00000000030000000700000001000000000000000700000000000000090000000000000003000000000000000200000000000000000000000000000000000000fcffffff0500000000c0000000000080", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="800000000700000000000000030000000000000003000000000000000000400009000000"], 0x0, 0x0, 0x0})
getdents64(r5, 0x0, 0x0)

3m28.508772049s ago: executing program 1 (id=2324):
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$smackfs_change_rule(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='}-),%^\\ 1 rwxal ra'], 0x14)

3m28.388227328s ago: executing program 1 (id=2325):
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
openat$cuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@local, @multicast1, 0x2, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4)

3m27.918283346s ago: executing program 1 (id=2326):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x63)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r0 = getpgrp(0x0)
r1 = socket(0x15, 0x6, 0xfffe)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000003c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xaeb, 0x7}, {0x11, 0x8}]}})
sched_setaffinity(r0, 0x8, &(0x7f0000000fc0)=0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r2, 0x560f, &(0x7f0000000100)={0x1, 0x5, 0x20, 0x1f, 0x95, 0x0})
execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000200)='./binderfs/binder0\x00']}, &(0x7f0000000340)={[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00']})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4, 0x0, 0x6}, 0x18)
getpgid(0xffffffffffffffff)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_GET_TSC(0x19, &(0x7f0000000040))
socket(0x10, 0x3, 0x0)
mount(&(0x7f0000001000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='udf\x00', 0x1000000, 0x0)

3m26.022223582s ago: executing program 1 (id=2329):
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe80000000000000000000000000001164010102000000000080000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x0)

3m25.884446435s ago: executing program 1 (id=2330):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x2, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@mmap={0x1, 0x1, 0x4, 0x40, 0x3, {}, {0x4, 0x8, 0x15, 0x3e, 0x64, 0xe, "03000800"}, 0xf7fffff7, 0x1, {}, 0x2, 0x0, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x40000)
r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card3/oss_mixer\x00', 0x2000, 0x0)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r11 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x1, 0x803, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r14, 0x0, 0x343}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(r11, 0x8, &(0x7f0000000240)=0x2)
read$FUSE(r0, &(0x7f0000000780)={0x2020, 0x0, 0x0, <r15=>0x0}, 0x2020)
statx(0xffffffffffffff9c, &(0x7f00000027c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x400, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
r17 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$sock_ax25_SIOCDELRT(r17, 0x890c, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000038c0)='./file0\x00', &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, <r18=>0x0}, 0x6000)
lstat(&(0x7f0000003980)='./file0\x00', &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0})
r20 = getpgid(0x0)
r21 = getgid()
sendmmsg$unix(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r6, r5]}}], 0x18, 0x50}}, {{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000240)="58d5117ed0360da8c6d933d3ffbb358d85fb40918649e948900df9d4ae31edb469c7b7a71f81b2a1c49f147efdfbb3da53fff9ba93c39c6f1e3ac83dcd03dcb9168a2ce9d2a225b2090ccdb47118d3c88545693ca505e39ba1e5c68269ddac7def0ca91dd4b978907c087a255847dd1aba5638b5f6a68cac770c389645a3ad9426b0a7b9b4af4464db9d6c92b684a69b34", 0x91}, {&(0x7f0000000540)="8844fb78a71d4bf87bf9af624451110a2757683c27f945f7755342ccc0383410423836cbac2509900330cf91f25823805476bb2af9b032ee31f9d5a85ab6b099d2738127fac82d7b16ea56ceb093a2d7f06367223a78fd2250ac094da0bb43a60f719605774d4058fddc36b4a8776d653412f8f3113fd4372065e642fdfc831133eee46c05dc507b4a9dfe1d7cdb78c787cc44cd2f5aaaa4fb6c3416c75a7ad6b00cfe75bf8ee5375d9f6afae3a59de4fdaff167893df5168c043c6607de4d21208267d7509518f5589dc82fbad68ecddf84532836a8f13c39c99c59e3236e3e67fc1c80d6644a2c9be194", 0xeb}, {&(0x7f0000000300)="0701ca1aeffb461d96756bf4b7ef2d7450dc1669716ed52213f6809e16dae432a6821442523570bad844e8fdd89183870f1686869b17029af5c1b95ee22a8302a7e69fbcfd27b4169100c66f3710b1f8c076fbe2ad1c175a", 0x58}, {&(0x7f0000000080)="63f28e84387e41d53a70cffa80ba90ea4a05530a9c2c4df8ad243577b47d1597a472f0f7a0242a6dd8f281ac1ea93a83ea3ba428c99f9ccafd8f004faa8b9785", 0x40}, {&(0x7f0000000680)="6a4c05febbd17f575dc285b033b3fde102206a90bebff8b1d55cfe6c5a8fc17ca7df07d4e473d186ea8b73549f55f78bb2784408244d126c812b405a81aa96943b185c1e582e2a2db1836818b18e2a4e2bfb681516c8cde3362f7ca06d277e05219acb8ebf1a9de11febe348284fbce84276139bc467890d360e5a647948adcd795a5e227e3c1b7b7aa3d6840f54669c1f4d6e4b88f8def41a363d4222957ac89e2da4e4cffe1718207cc04d0996799c80bcb79d8c2b697434", 0xb9}], 0x5, &(0x7f0000003a40)=[@rights={{0x38, 0x1, 0x1, [r0, r8, r7, r9, r7, 0xffffffffffffffff, r6, r1, r10, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r15, r16}}}, @rights={{0x24, 0x1, 0x1, [r6, r17, r6, r7, r4]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r20, 0xee00, r21}}}], 0xd8, 0x4000040}}], 0x2, 0x404c040)

3m10.452271325s ago: executing program 36 (id=2330):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x2, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@mmap={0x1, 0x1, 0x4, 0x40, 0x3, {}, {0x4, 0x8, 0x15, 0x3e, 0x64, 0xe, "03000800"}, 0xf7fffff7, 0x1, {}, 0x2, 0x0, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x40000)
r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card3/oss_mixer\x00', 0x2000, 0x0)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r11 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x1, 0x803, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r14, 0x0, 0x343}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(r11, 0x8, &(0x7f0000000240)=0x2)
read$FUSE(r0, &(0x7f0000000780)={0x2020, 0x0, 0x0, <r15=>0x0}, 0x2020)
statx(0xffffffffffffff9c, &(0x7f00000027c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x400, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
r17 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$sock_ax25_SIOCDELRT(r17, 0x890c, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000038c0)='./file0\x00', &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, <r18=>0x0}, 0x6000)
lstat(&(0x7f0000003980)='./file0\x00', &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0})
r20 = getpgid(0x0)
r21 = getgid()
sendmmsg$unix(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r6, r5]}}], 0x18, 0x50}}, {{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000240)="58d5117ed0360da8c6d933d3ffbb358d85fb40918649e948900df9d4ae31edb469c7b7a71f81b2a1c49f147efdfbb3da53fff9ba93c39c6f1e3ac83dcd03dcb9168a2ce9d2a225b2090ccdb47118d3c88545693ca505e39ba1e5c68269ddac7def0ca91dd4b978907c087a255847dd1aba5638b5f6a68cac770c389645a3ad9426b0a7b9b4af4464db9d6c92b684a69b34", 0x91}, {&(0x7f0000000540)="8844fb78a71d4bf87bf9af624451110a2757683c27f945f7755342ccc0383410423836cbac2509900330cf91f25823805476bb2af9b032ee31f9d5a85ab6b099d2738127fac82d7b16ea56ceb093a2d7f06367223a78fd2250ac094da0bb43a60f719605774d4058fddc36b4a8776d653412f8f3113fd4372065e642fdfc831133eee46c05dc507b4a9dfe1d7cdb78c787cc44cd2f5aaaa4fb6c3416c75a7ad6b00cfe75bf8ee5375d9f6afae3a59de4fdaff167893df5168c043c6607de4d21208267d7509518f5589dc82fbad68ecddf84532836a8f13c39c99c59e3236e3e67fc1c80d6644a2c9be194", 0xeb}, {&(0x7f0000000300)="0701ca1aeffb461d96756bf4b7ef2d7450dc1669716ed52213f6809e16dae432a6821442523570bad844e8fdd89183870f1686869b17029af5c1b95ee22a8302a7e69fbcfd27b4169100c66f3710b1f8c076fbe2ad1c175a", 0x58}, {&(0x7f0000000080)="63f28e84387e41d53a70cffa80ba90ea4a05530a9c2c4df8ad243577b47d1597a472f0f7a0242a6dd8f281ac1ea93a83ea3ba428c99f9ccafd8f004faa8b9785", 0x40}, {&(0x7f0000000680)="6a4c05febbd17f575dc285b033b3fde102206a90bebff8b1d55cfe6c5a8fc17ca7df07d4e473d186ea8b73549f55f78bb2784408244d126c812b405a81aa96943b185c1e582e2a2db1836818b18e2a4e2bfb681516c8cde3362f7ca06d277e05219acb8ebf1a9de11febe348284fbce84276139bc467890d360e5a647948adcd795a5e227e3c1b7b7aa3d6840f54669c1f4d6e4b88f8def41a363d4222957ac89e2da4e4cffe1718207cc04d0996799c80bcb79d8c2b697434", 0xb9}], 0x5, &(0x7f0000003a40)=[@rights={{0x38, 0x1, 0x1, [r0, r8, r7, r9, r7, 0xffffffffffffffff, r6, r1, r10, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r15, r16}}}, @rights={{0x24, 0x1, 0x1, [r6, r17, r6, r7, r4]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r20, 0xee00, r21}}}], 0xd8, 0x4000040}}], 0x2, 0x404c040)

10.194515408s ago: executing program 0 (id=2579):
r0 = io_uring_setup(0x115c, 0x0)
flock(r0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000200)={0xd2d4, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {0x0}], &(0x7f0000000100)=[0x4, 0x7fff, 0x800], 0x2}, 0x20)
write$UHID_CREATE2(r0, &(0x7f00000017c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x35, 0x4, 0xb, 0x7, 0x3, 0xffffff03, "4a051b93c48f221d00752b4a08f0cbb5582a0cf508caf8d2ec076867360fafa5bdf78f6c489a805e8235a1b3ef7e64dd4182d5a8ae"}}, 0x14d)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x8, @empty, 0x8, 0x3}, 0x20)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4001af84, &(0x7f00000001c0)={0xfdfdffff})
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x2c, r3, 0x705, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)

8.365097855s ago: executing program 7 (id=2580):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
syz_emit_ethernet(0xdf, &(0x7f0000000480)={@local, @broadcast, @val={@val={0x88a8, 0x5, 0x1}, {0x8100, 0x4, 0x1}}, {@ipv4={0x800, @igmp={{0xf, 0x4, 0x3, 0x0, 0xc9, 0x68, 0x0, 0x7f, 0x2, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x3d}, {[@timestamp_addr={0x44, 0xc, 0xf7, 0x1, 0x3, [{@empty, 0x7}]}, @rr={0x7, 0x1b, 0x37, [@dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x92}, @private=0xa010100, @broadcast, @rand_addr=0x64010100, @local]}]}}, {0x14, 0x5, 0x0, @loopback, "931cf74880c88afa28cd3f783e602ce80787fc32923b44382c3cb5b8dff309dc7c367894e372fffaf379924312e0e96e7e7dbda1eaad0c241051157b8f82f853787f1f3091889b720a85035a34f794345dae262e86cfa372911d11dfd5885e033aa363adfe30b0dc249fbdf5f3fff42eea4ad9d47af496c702f8e1bdcd59283258b894061e"}}}}}, 0x0)

8.229740609s ago: executing program 7 (id=2581):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x63)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r0 = getpgrp(0x0)
r1 = socket(0x15, 0x6, 0xfffe)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000003c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xaeb, 0x7}, {0x11, 0x8}]}})
sched_setaffinity(r0, 0x8, &(0x7f0000000fc0)=0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r2, 0x560f, &(0x7f0000000100)={0x1, 0x5, 0x20, 0x1f, 0x95, 0x0})
execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000200)='./binderfs/binder0\x00']}, &(0x7f0000000340)={[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00']})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3, 0x0, 0x6}, 0x18)
getpgid(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_GET_TSC(0x19, &(0x7f0000000040))

6.528868269s ago: executing program 7 (id=2582):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0xfc}, 0xc)
r1 = socket(0xa, 0x3, 0x3a)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r3=>0x0})
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r3}, 0xc)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)

6.38441902s ago: executing program 0 (id=2583):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0xfc}, 0xc)
r1 = socket(0xa, 0x3, 0x3a)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r3=>0x0})
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r3}, 0xc)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) (fail_nth: 1)

5.81761845s ago: executing program 0 (id=2584):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000700), 0x4)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x20000000, 0x0, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4)

4.505124441s ago: executing program 0 (id=2585):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

4.066824775s ago: executing program 0 (id=2586):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x63)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r0 = getpgrp(0x0)
r1 = socket(0x15, 0x6, 0xfffe)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000003c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xaeb, 0x7}, {0x11, 0x8}]}})
sched_setaffinity(r0, 0x8, &(0x7f0000000fc0)=0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r2, 0x560f, &(0x7f0000000100)={0x1, 0x5, 0x20, 0x1f, 0x95, 0x0})
execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000200)='./binderfs/binder0\x00']}, &(0x7f0000000340)={[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00']})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4, 0x0, 0x6}, 0x18)
getpgid(0xffffffffffffffff)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_GET_TSC(0x19, &(0x7f0000000040))
mount(&(0x7f0000001000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='udf\x00', 0x1000000, 0x0)

4.017957289s ago: executing program 7 (id=2587):
socket(0x22, 0x5, 0x5)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x800002, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{}, &(0x7f0000000700), &(0x7f0000000800)='%pK    \x00'}, 0x20)
epoll_create1(0x80000)
signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="030f0000000d000000000800ae63150001"], 0x2c}}, 0x0)

2.727433901s ago: executing program 7 (id=2588):
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x10, 0xffff0f3c, {<r1=>0xffffffffffffffff}, {0xee01}, 0x8000000000000000})
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x2000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10)
modify_ldt$read(0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

1.062668035s ago: executing program 0 (id=2589):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x63)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r0 = getpgrp(0x0)
r1 = socket(0x15, 0x6, 0xfffe)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000003c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xaeb, 0x7}, {0x11, 0x8}]}})
sched_setaffinity(r0, 0x8, &(0x7f0000000fc0)=0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r2, 0x560f, &(0x7f0000000100)={0x1, 0x5, 0x20, 0x1f, 0x95, 0x0})
execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000200)='./binderfs/binder0\x00']}, &(0x7f0000000340)={[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00']})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000001000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='udf\x00', 0x1000000, 0x0)

0s ago: executing program 7 (id=2590):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x63)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r0 = getpgrp(0x0)
r1 = socket(0x15, 0x6, 0xfffe)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000003c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xaeb, 0x7}, {0x11, 0x8}]}})
sched_setaffinity(r0, 0x8, &(0x7f0000000fc0)=0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r2, 0x560f, &(0x7f0000000100)={0x1, 0x5, 0x20, 0x1f, 0x95, 0x0})
execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000200)='./binderfs/binder0\x00']}, &(0x7f0000000340)={[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00']})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3, 0x0, 0x6}, 0x18)
getpgid(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_GET_TSC(0x19, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

41.196434][T14737] fuse: Bad value for 'fd'
[ 1341.268144][T14454] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1341.322811][T10808] Bluetooth: hci2: command tx timeout
[ 1341.371665][T14454] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1341.463545][T14454] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1341.513151][T14739] Falling back ldisc for ttyS3.
[ 1341.698703][T14454] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1341.968777][T14423] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1342.018501][T14423] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1342.068744][T14423] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1342.100173][T14748] fuse: Unknown parameter 'f'
[ 1342.143415][T14423] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1342.387849][T14454] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1342.469938][T14454] 8021q: adding VLAN 0 to HW filter on device team0
[ 1342.505494][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1342.506453][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1342.558619][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1342.558788][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1343.066232][T14423] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1343.167016][ T7699] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 1343.233365][T12102] hsr_slave_0: left promiscuous mode
[ 1343.300127][ T7699] usb 1-1: device descriptor read/64, error -71
[ 1343.300426][T12102] hsr_slave_1: left promiscuous mode
[ 1343.302262][T12102] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1343.326272][T12102] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1343.403140][T10808] Bluetooth: hci2: command tx timeout
[ 1343.532996][ T7699] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 1343.582809][ T5971] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[ 1343.662750][ T7699] usb 1-1: device descriptor read/64, error -71
[ 1343.732746][ T5971] usb 8-1: Using ep0 maxpacket: 16
[ 1343.734809][ T5971] usb 8-1: config 0 has an invalid interface number: 41 but max is 0
[ 1343.734836][ T5971] usb 8-1: config 0 has no interface number 0
[ 1343.734887][ T5971] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1343.734905][ T5971] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1343.734923][ T5971] usb 8-1: config 0 interface 41 has no altsetting 0
[ 1343.737552][ T5971] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1343.737583][ T5971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1343.737598][ T5971] usb 8-1: Product: syz
[ 1343.737610][ T5971] usb 8-1: Manufacturer: syz
[ 1343.737622][ T5971] usb 8-1: SerialNumber: syz
[ 1343.741277][ T5971] usb 8-1: config 0 descriptor??
[ 1343.742164][T14762] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1343.742308][T14762] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1343.841999][ T7699] usb usb1-port1: attempt power cycle
[ 1343.967295][T14762] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1343.967430][T14762] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1344.232745][ T7699] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 1344.264966][ T7699] usb 1-1: device descriptor read/8, error -71
[ 1344.299766][T12102] team0 (unregistering): Port device team_slave_1 removed
[ 1344.371576][ T5971] Error reading MAC address
[ 1344.379760][T14762] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1344.379920][T14762] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1344.484569][T12102] team0 (unregistering): Port device team_slave_0 removed
[ 1344.502727][ T7699] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 1344.544145][ T7699] usb 1-1: device descriptor read/8, error -71
[ 1344.653218][ T7699] usb usb1-port1: unable to enumerate USB device
[ 1344.716957][ T5971] sr9700 8-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[ 1344.732891][ T5971] usb 8-1: USB disconnect, device number 25
[ 1345.512999][T10808] Bluetooth: hci2: command tx timeout
[ 1345.698315][T14423] 8021q: adding VLAN 0 to HW filter on device team0
[ 1345.818097][T12917] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1345.818248][T12917] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1345.818922][ T7699] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[ 1345.907788][T14725] chnl_net:caif_netlink_parms(): no params data found
[ 1346.002737][ T7699] usb 8-1: Using ep0 maxpacket: 8
[ 1346.012523][ T7699] usb 8-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11
[ 1346.029071][ T7699] usb 8-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1346.029105][ T7699] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1346.029152][ T7699] usb 8-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[ 1346.029176][ T7699] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1346.070596][ T1356] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1346.070775][ T1356] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1346.100543][ T7699] usb 8-1: config 0 descriptor??
[ 1347.590374][T10808] Bluetooth: hci2: command tx timeout
[ 1348.072746][T13219] usb 1-1: new full-speed USB device number 115 using dummy_hcd
[ 1348.156534][T14725] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1348.156856][T14725] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1348.157139][T14725] bridge_slave_0: entered allmulticast mode
[ 1348.159831][T14725] bridge_slave_0: entered promiscuous mode
[ 1348.202146][T14725] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1348.202422][T14725] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1348.207456][T14725] bridge_slave_1: entered allmulticast mode
[ 1348.236003][T14725] bridge_slave_1: entered promiscuous mode
[ 1348.246633][T13219] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[ 1348.246661][T13219] usb 1-1: config 0 has no interface number 0
[ 1348.251139][T13219] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1348.251167][T13219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1348.251187][T13219] usb 1-1: Product: syz
[ 1348.251201][T13219] usb 1-1: Manufacturer: syz
[ 1348.251233][T13219] usb 1-1: SerialNumber: syz
[ 1348.299511][T13219] usb 1-1: config 0 descriptor??
[ 1348.622544][T14725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1348.656646][ T7699] usbhid 8-1:0.0: can't add hid device: -71
[ 1348.656773][ T7699] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1348.661244][ T7699] usb 8-1: USB disconnect, device number 26
[ 1348.719474][T13219] usb 1-1: Firmware: major: 0, minor: 107, hardware type: HULUSB (4)
[ 1348.768925][T14725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1349.078995][T12102] bridge_slave_1: left allmulticast mode
[ 1349.079022][T12102] bridge_slave_1: left promiscuous mode
[ 1349.079237][T12102] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1349.141366][T13219] usb 1-1: failed to fetch extended address, random address set
[ 1349.151883][T12102] bridge_slave_0: left allmulticast mode
[ 1349.151914][T12102] bridge_slave_0: left promiscuous mode
[ 1349.152195][T12102] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1349.262266][T14792] fuse: Bad value for 'fd'
[ 1349.504848][T12102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1349.584442][T12102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1349.629448][T12102] bond0 (unregistering): Released all slaves
[ 1349.679389][T14454] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1349.695923][T14725] team0: Port device team_slave_0 added
[ 1350.269906][T14725] team0: Port device team_slave_1 added
[ 1350.436255][T13219] usb 1-1: USB disconnect, device number 115
[ 1352.026619][T14797] Falling back ldisc for ttyS3.
[ 1353.870075][T14725] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1353.870095][T14725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1353.870125][T14725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1353.983643][T14725] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1353.983662][T14725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1353.983691][T14725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1354.484709][T14835] tmpfs: Bad value for 'mpol'
[ 1354.633718][T12102] hsr_slave_0: left promiscuous mode
[ 1354.672858][T12102] hsr_slave_1: left promiscuous mode
[ 1354.673659][T12102] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1354.725376][T12102] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1354.822724][ T5958] usb 8-1: new full-speed USB device number 27 using dummy_hcd
[ 1354.984946][ T5958] usb 8-1: config 0 has an invalid interface number: 128 but max is 0
[ 1354.984977][ T5958] usb 8-1: config 0 has no interface number 0
[ 1354.987666][ T5958] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1354.987695][ T5958] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1354.987717][ T5958] usb 8-1: Product: syz
[ 1354.987732][ T5958] usb 8-1: Manufacturer: syz
[ 1354.987755][ T5958] usb 8-1: SerialNumber: syz
[ 1354.991898][ T5958] usb 8-1: config 0 descriptor??
[ 1355.504538][ T5958] usb 8-1: Firmware: major: 0, minor: 107, hardware type: HULUSB (4)
[ 1355.593668][T12102] team0 (unregistering): Port device team_slave_1 removed
[ 1356.992786][ T5958] usb 8-1: failed to fetch extended address, random address set
[ 1357.343405][T12102] team0 (unregistering): Port device team_slave_0 removed
[ 1357.924929][T14852] fuse: Bad value for 'fd'
[ 1358.225768][T14725] hsr_slave_0: entered promiscuous mode
[ 1358.226971][T14725] hsr_slave_1: entered promiscuous mode
[ 1358.308924][ T5958] usb 8-1: USB disconnect, device number 27
[ 1358.803469][T14857] Falling back ldisc for ttyS3.
[ 1359.048980][T14868] bridge0: entered allmulticast mode
[ 1359.092734][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2381'.
[ 1359.421881][T14454] veth0_vlan: entered promiscuous mode
[ 1359.600754][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1359.693374][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1359.695178][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1359.739713][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1359.752025][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1361.268427][T14883] netlink: 'syz.0.2387': attribute type 1 has an invalid length.
[ 1361.268456][T14883] netlink: 'syz.0.2387': attribute type 2 has an invalid length.
[ 1361.887097][T10808] Bluetooth: hci0: command tx timeout
[ 1362.294406][T14890] Bluetooth: MGMT ver 1.23
[ 1362.294444][T14890] Bluetooth: hci0: unsupported parameter 256
[ 1362.294460][T14890] Bluetooth: hci0: invalid length 0, exp 2 for type 9
[ 1362.557906][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1362.577929][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1362.600519][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1362.602417][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1362.613759][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1362.657410][T14896] fuse: Bad value for 'fd'
[ 1363.140115][T14725] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1365.079156][T10808] Bluetooth: hci0: command tx timeout
[ 1365.079215][ T5801] Bluetooth: hci4: command tx timeout
[ 1365.378415][T14725] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1365.523310][T14725] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1365.584885][T14899] Falling back ldisc for ttyS3.
[ 1365.902775][T13312] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 1365.926288][T14725] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1366.052714][T13312] usb 1-1: Using ep0 maxpacket: 8
[ 1366.055125][T13312] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[ 1366.086340][T13312] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1366.086374][T13312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1366.086396][T13312] usb 1-1: Product: syz
[ 1366.086413][T13312] usb 1-1: Manufacturer: syz
[ 1366.086429][T13312] usb 1-1: SerialNumber: syz
[ 1366.091842][T13312] usb 1-1: config 0 descriptor??
[ 1366.154077][T13312] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1366.154147][T13312] usb 1-1: setting power ON
[ 1366.154768][T13312] dvb-usb: bulk message failed: -22 (2/0)
[ 1366.159369][T13312] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1366.160282][T13312] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1366.160335][T13312] usb 1-1: media controller created
[ 1366.304624][T13312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1366.339261][T13312] usb 1-1: selecting invalid altsetting 6
[ 1366.339287][T13312] usb 1-1: digital interface selection failed (-22)
[ 1366.339305][T13312] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1366.340697][T13312] usb 1-1: setting power OFF
[ 1366.341061][T13312] dvb-usb: bulk message failed: -22 (2/0)
[ 1366.341081][T13312] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1366.341097][T13312] (NULL device *): no alternate interface
[ 1366.398839][T14906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1366.399273][T14906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1366.428459][T14906] dvb-usb: bulk message failed: -22 (3/0)
[ 1366.428487][T14906] dvb-usb: bulk message failed: -22 (5/0)
[ 1366.635175][T14911] overlayfs: conflicting options: userxattr,metacopy=on
[ 1367.090190][ T5801] Bluetooth: hci4: command tx timeout
[ 1367.272680][ T5801] Bluetooth: hci0: command tx timeout
[ 1367.985721][T14929] FAULT_INJECTION: forcing a failure.
[ 1367.985721][T14929] name failslab, interval 1, probability 0, space 0, times 0
[ 1367.985762][T14929] CPU: 1 UID: 0 PID: 14929 Comm: syz.7.2395 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1367.985800][T14929] Tainted: [L]=SOFTLOCKUP
[ 1367.985809][T14929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1367.985823][T14929] Call Trace:
[ 1367.985833][T14929]  <TASK>
[ 1367.985843][T14929]  dump_stack_lvl+0xe8/0x150
[ 1367.985880][T14929]  should_fail_ex+0x46c/0x600
[ 1367.985917][T14929]  should_failslab+0xa8/0x100
[ 1367.985941][T14929]  __kmalloc_noprof+0xe0/0x7e0
[ 1367.985974][T14929]  ? kfree+0x4d/0x900
[ 1367.986001][T14929]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1367.986030][T14929]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1367.986056][T14929]  ? tomoyo_domain+0xd9/0x130
[ 1367.986085][T14929]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1367.986117][T14929]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1367.986164][T14929]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1367.986195][T14929]  ? __lock_acquire+0x6b6/0x2cf0
[ 1367.986228][T14929]  ? do_raw_spin_lock+0x121/0x290
[ 1367.986288][T14929]  ? __fget_files+0x2a/0x420
[ 1367.986316][T14929]  ? __fget_files+0x2a/0x420
[ 1367.986338][T14929]  ? __fget_files+0x3a6/0x420
[ 1367.986360][T14929]  ? __fget_files+0x2a/0x420
[ 1367.986387][T14929]  security_file_ioctl+0xcb/0x2d0
[ 1367.986421][T14929]  __se_sys_ioctl+0x47/0x170
[ 1367.986453][T14929]  do_syscall_64+0xec/0xf80
[ 1367.986476][T14929]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1367.986497][T14929]  ? trace_irq_disable+0x37/0x100
[ 1367.986520][T14929]  ? clear_bhb_loop+0x60/0xb0
[ 1367.986548][T14929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1367.986570][T14929] RIP: 0033:0x7fc7d0edf749
[ 1367.986590][T14929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1367.986608][T14929] RSP: 002b:00007fc7cf13e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1367.986631][T14929] RAX: ffffffffffffffda RBX: 00007fc7d1135fa0 RCX: 00007fc7d0edf749
[ 1367.986647][T14929] RDX: 0000200000000280 RSI: 0000000000004604 RDI: 0000000000000003
[ 1367.986662][T14929] RBP: 00007fc7cf13e090 R08: 0000000000000000 R09: 0000000000000000
[ 1367.986676][T14929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1367.986689][T14929] R13: 00007fc7d1136038 R14: 00007fc7d1135fa0 R15: 00007ffe4425d788
[ 1367.986728][T14929]  </TASK>
[ 1367.986840][T14929] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1369.820706][T10808] Bluetooth: hci0: command tx timeout
[ 1369.820758][ T5801] Bluetooth: hci4: command tx timeout
[ 1370.345516][T14880] chnl_net:caif_netlink_parms(): no params data found
[ 1370.637849][T14943] Bluetooth: hci0: unsupported parameter 256
[ 1370.637870][T14943] Bluetooth: hci0: invalid length 0, exp 2 for type 9
[ 1370.639399][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2399'.
[ 1370.716916][T12102] bridge_slave_1: left allmulticast mode
[ 1370.716946][T12102] bridge_slave_1: left promiscuous mode
[ 1370.717183][T12102] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1370.816859][T12102] bridge_slave_0: left allmulticast mode
[ 1370.816887][T12102] bridge_slave_0: left promiscuous mode
[ 1370.817128][T12102] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1370.861266][T14952] netlink: 'syz.7.2402': attribute type 1 has an invalid length.
[ 1370.914863][T14955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1370.915406][T14955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1370.917215][T14955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1370.917614][T14955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1370.984324][T14954] netlink: 144 bytes leftover after parsing attributes in process `syz.7.2403'.
[ 1372.051466][ T5801] Bluetooth: hci4: command tx timeout
[ 1372.086705][T14959] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1372.086971][T14959] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1372.086987][T14959] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1372.086996][T14959] UDF-fs: Scanning with blocksize 512 failed
[ 1372.122189][T14959] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1372.122353][T14959] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1372.122368][T14959] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1372.122378][T14959] UDF-fs: Scanning with blocksize 1024 failed
[ 1372.139938][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1372.140013][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1372.164351][T14959] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1372.164463][T14959] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1372.164478][T14959] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1372.164496][T14959] UDF-fs: Scanning with blocksize 2048 failed
[ 1372.164953][T14959] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1372.165036][T14959] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1372.165051][T14959] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1372.165075][T14959] UDF-fs: Scanning with blocksize 4096 failed
[ 1372.165083][T14959] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1)
[ 1372.743992][T14963] FAULT_INJECTION: forcing a failure.
[ 1372.743992][T14963] name failslab, interval 1, probability 0, space 0, times 0
[ 1372.744021][T14963] CPU: 1 UID: 0 PID: 14963 Comm: syz.7.2405 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1372.744044][T14963] Tainted: [L]=SOFTLOCKUP
[ 1372.744050][T14963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1372.744060][T14963] Call Trace:
[ 1372.744067][T14963]  <TASK>
[ 1372.744074][T14963]  dump_stack_lvl+0xe8/0x150
[ 1372.744100][T14963]  should_fail_ex+0x46c/0x600
[ 1372.744125][T14963]  ? getname_flags+0xb8/0x540
[ 1372.744141][T14963]  should_failslab+0xa8/0x100
[ 1372.744159][T14963]  ? getname_flags+0xb8/0x540
[ 1372.744173][T14963]  kmem_cache_alloc_noprof+0x84/0x6c0
[ 1372.744198][T14963]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1372.744225][T14963]  getname_flags+0xb8/0x540
[ 1372.744244][T14963]  user_path_at+0x24/0x60
[ 1372.744266][T14963]  __x64_sys_umount+0xee/0x160
[ 1372.744291][T14963]  ? __pfx___x64_sys_umount+0x10/0x10
[ 1372.744349][T14963]  do_syscall_64+0xec/0xf80
[ 1372.744372][T14963]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.744394][T14963]  ? trace_irq_disable+0x37/0x100
[ 1372.744419][T14963]  ? clear_bhb_loop+0x60/0xb0
[ 1372.744453][T14963]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.744476][T14963] RIP: 0033:0x7fc7d0edf749
[ 1372.744497][T14963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1372.744517][T14963] RSP: 002b:00007fc7cf13e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1372.744542][T14963] RAX: ffffffffffffffda RBX: 00007fc7d1135fa0 RCX: 00007fc7d0edf749
[ 1372.744560][T14963] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000040
[ 1372.744575][T14963] RBP: 00007fc7cf13e090 R08: 0000000000000000 R09: 0000000000000000
[ 1372.744589][T14963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1372.744603][T14963] R13: 00007fc7d1136038 R14: 00007fc7d1135fa0 R15: 00007ffe4425d788
[ 1372.744638][T14963]  </TASK>
[ 1376.643510][T12102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1376.713666][T12102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1376.736669][T12102] bond0 (unregistering): Released all slaves
[ 1376.943460][T14950] sit0: entered promiscuous mode
[ 1376.947475][T14950] netlink: 'syz.0.2401': attribute type 1 has an invalid length.
[ 1376.947491][T14950] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2401'.
[ 1377.125857][T14977] Bluetooth: hci0: unsupported parameter 256
[ 1377.125881][T14977] Bluetooth: hci0: invalid length 0, exp 2 for type 9
[ 1377.187288][T14980] FAULT_INJECTION: forcing a failure.
[ 1377.187288][T14980] name failslab, interval 1, probability 0, space 0, times 0
[ 1377.187316][T14980] CPU: 0 UID: 0 PID: 14980 Comm: syz.0.2409 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1377.187338][T14980] Tainted: [L]=SOFTLOCKUP
[ 1377.187343][T14980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1377.187353][T14980] Call Trace:
[ 1377.187360][T14980]  <TASK>
[ 1377.187366][T14980]  dump_stack_lvl+0xe8/0x150
[ 1377.187393][T14980]  should_fail_ex+0x46c/0x600
[ 1377.187419][T14980]  should_failslab+0xa8/0x100
[ 1377.187435][T14980]  __kmalloc_noprof+0xe0/0x7e0
[ 1377.187458][T14980]  ? kfree+0x4d/0x900
[ 1377.187477][T14980]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1377.187498][T14980]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1377.187514][T14980]  ? tomoyo_domain+0xd9/0x130
[ 1377.187534][T14980]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1377.187556][T14980]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1377.187580][T14980]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1377.187601][T14980]  ? __lock_acquire+0x6b6/0x2cf0
[ 1377.187624][T14980]  ? do_raw_spin_lock+0x121/0x290
[ 1377.187666][T14980]  ? __fget_files+0x2a/0x420
[ 1377.187685][T14980]  ? __fget_files+0x2a/0x420
[ 1377.187700][T14980]  ? __fget_files+0x3a6/0x420
[ 1377.187715][T14980]  ? __fget_files+0x2a/0x420
[ 1377.187735][T14980]  security_file_ioctl+0xcb/0x2d0
[ 1377.187759][T14980]  __se_sys_ioctl+0x47/0x170
[ 1377.187782][T14980]  do_syscall_64+0xec/0xf80
[ 1377.187797][T14980]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1377.187812][T14980]  ? trace_irq_disable+0x37/0x100
[ 1377.187830][T14980]  ? clear_bhb_loop+0x60/0xb0
[ 1377.187848][T14980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1377.187864][T14980] RIP: 0033:0x7ff0ce51f749
[ 1377.187878][T14980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1377.187892][T14980] RSP: 002b:00007ff0cc786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1377.187909][T14980] RAX: ffffffffffffffda RBX: 00007ff0ce775fa0 RCX: 00007ff0ce51f749
[ 1377.187920][T14980] RDX: 0000200000000100 RSI: 000000004008ae89 RDI: 0000000000000005
[ 1377.187931][T14980] RBP: 00007ff0cc786090 R08: 0000000000000000 R09: 0000000000000000
[ 1377.187941][T14980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1377.187950][T14980] R13: 00007ff0ce776038 R14: 00007ff0ce775fa0 R15: 00007fffbd19c1b8
[ 1377.187978][T14980]  </TASK>
[ 1377.188109][T14980] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1377.797270][T14880] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1377.797490][T14880] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1377.797703][T14880] bridge_slave_0: entered allmulticast mode
[ 1377.843070][T14880] bridge_slave_0: entered promiscuous mode
[ 1378.129435][T14880] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1378.129563][T14880] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1378.129763][T14880] bridge_slave_1: entered allmulticast mode
[ 1379.133313][T14880] bridge_slave_1: entered promiscuous mode
[ 1379.145198][T14893] chnl_net:caif_netlink_parms(): no params data found
[ 1379.461595][T14996] FAULT_INJECTION: forcing a failure.
[ 1379.461595][T14996] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1379.461668][T14996] CPU: 1 UID: 0 PID: 14996 Comm: syz.0.2414 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1379.461699][T14996] Tainted: [L]=SOFTLOCKUP
[ 1379.461708][T14996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1379.461723][T14996] Call Trace:
[ 1379.461733][T14996]  <TASK>
[ 1379.461742][T14996]  dump_stack_lvl+0xe8/0x150
[ 1379.461779][T14996]  should_fail_ex+0x46c/0x600
[ 1379.461813][T14996]  _copy_from_user+0x2d/0xb0
[ 1379.461854][T14996]  do_ipv6_setsockopt+0x23e/0x2eb0
[ 1379.461899][T14996]  ? rcu_is_watching+0x15/0xb0
[ 1379.461925][T14996]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[ 1379.461959][T14996]  ? __schedule+0x1475/0x5070
[ 1379.462018][T14996]  ? __lock_acquire+0x6b6/0x2cf0
[ 1379.462061][T14996]  ? __pfx___schedule+0x10/0x10
[ 1379.462103][T14996]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1379.462130][T14996]  ? __fget_files+0x2a/0x420
[ 1379.462167][T14996]  ? __fget_files+0x2a/0x420
[ 1379.462196][T14996]  ipv6_setsockopt+0x59/0x170
[ 1379.462217][T14996]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1379.462243][T14996]  do_sock_setsockopt+0x17c/0x1b0
[ 1379.462276][T14996]  __x64_sys_setsockopt+0x145/0x1b0
[ 1379.462310][T14996]  do_syscall_64+0xec/0xf80
[ 1379.462332][T14996]  ? rcu_is_watching+0x15/0xb0
[ 1379.462352][T14996]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1379.462375][T14996]  ? clear_bhb_loop+0x60/0xb0
[ 1379.462405][T14996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1379.462428][T14996] RIP: 0033:0x7ff0ce51f749
[ 1379.462448][T14996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1379.462469][T14996] RSP: 002b:00007ff0cc786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1379.462493][T14996] RAX: ffffffffffffffda RBX: 00007ff0ce775fa0 RCX: 00007ff0ce51f749
[ 1379.462510][T14996] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000005
[ 1379.462524][T14996] RBP: 00007ff0cc786090 R08: 0000000000000108 R09: 0000000000000000
[ 1379.462543][T14996] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[ 1379.462557][T14996] R13: 00007ff0ce776038 R14: 00007ff0ce775fa0 R15: 00007fffbd19c1b8
[ 1379.462589][T14996]  </TASK>
[ 1383.164633][T12102] hsr_slave_0: left promiscuous mode
[ 1383.204215][T12102] hsr_slave_1: left promiscuous mode
[ 1383.204959][T12102] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1383.226233][T12102] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1384.245941][T15010] FAULT_INJECTION: forcing a failure.
[ 1384.245941][T15010] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1384.245970][T15010] CPU: 1 UID: 0 PID: 15010 Comm: syz.0.2417 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1384.245992][T15010] Tainted: [L]=SOFTLOCKUP
[ 1384.245998][T15010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1384.246008][T15010] Call Trace:
[ 1384.246014][T15010]  <TASK>
[ 1384.246021][T15010]  dump_stack_lvl+0xe8/0x150
[ 1384.246047][T15010]  should_fail_ex+0x46c/0x600
[ 1384.246072][T15010]  _copy_to_user+0x31/0xb0
[ 1384.246090][T15010]  simple_read_from_buffer+0xe1/0x170
[ 1384.246110][T15010]  proc_fail_nth_read+0x1b6/0x220
[ 1384.246136][T15010]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1384.246161][T15010]  ? rw_verify_area+0x2ac/0x4e0
[ 1384.246183][T15010]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1384.246207][T15010]  vfs_read+0x206/0xa30
[ 1384.246234][T15010]  ? __pfx_vfs_read+0x10/0x10
[ 1384.246257][T15010]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1384.246273][T15010]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1384.246288][T15010]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1384.246303][T15010]  ? mutex_lock_nested+0x154/0x1d0
[ 1384.246323][T15010]  ? fdget_pos+0x253/0x320
[ 1384.246346][T15010]  ksys_read+0x14b/0x260
[ 1384.246369][T15010]  ? __pfx_ksys_read+0x10/0x10
[ 1384.246391][T15010]  ? ksys_dup3+0x7b/0x320
[ 1384.246415][T15010]  do_syscall_64+0xec/0xf80
[ 1384.246430][T15010]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1384.246446][T15010]  ? trace_irq_disable+0x37/0x100
[ 1384.246463][T15010]  ? clear_bhb_loop+0x60/0xb0
[ 1384.246482][T15010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1384.246496][T15010] RIP: 0033:0x7ff0ce51e15c
[ 1384.246510][T15010] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1384.246524][T15010] RSP: 002b:00007ff0cc765030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1384.246540][T15010] RAX: ffffffffffffffda RBX: 00007ff0ce776090 RCX: 00007ff0ce51e15c
[ 1384.246552][T15010] RDX: 000000000000000f RSI: 00007ff0cc7650a0 RDI: 0000000000000005
[ 1384.246562][T15010] RBP: 00007ff0cc765090 R08: 0000000000000000 R09: 0000000000000000
[ 1384.246572][T15010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1384.246581][T15010] R13: 00007ff0ce776128 R14: 00007ff0ce776090 R15: 00007fffbd19c1b8
[ 1384.246605][T15010]  </TASK>
[ 1384.637625][T15012] Bluetooth: hci0: unsupported parameter 256
[ 1384.637642][T15012] Bluetooth: hci0: invalid len left 3, exp >= 11
[ 1384.663831][T12102] team0 (unregistering): Port device team_slave_1 removed
[ 1384.798495][T15016] FAULT_INJECTION: forcing a failure.
[ 1384.798495][T15016] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1384.798534][T15016] CPU: 1 UID: 0 PID: 15016 Comm: syz.0.2420 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1384.798562][T15016] Tainted: [L]=SOFTLOCKUP
[ 1384.798570][T15016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1384.798583][T15016] Call Trace:
[ 1384.798591][T15016]  <TASK>
[ 1384.798601][T15016]  dump_stack_lvl+0xe8/0x150
[ 1384.798635][T15016]  should_fail_ex+0x46c/0x600
[ 1384.798669][T15016]  _copy_from_user+0x2d/0xb0
[ 1384.798692][T15016]  __sys_bpf+0x1e3/0x860
[ 1384.798720][T15016]  ? __pfx___sys_bpf+0x10/0x10
[ 1384.798741][T15016]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1384.798786][T15016]  ? ksys_write+0x230/0x260
[ 1384.798818][T15016]  ? __pfx_ksys_write+0x10/0x10
[ 1384.798856][T15016]  __x64_sys_bpf+0x7c/0x90
[ 1384.798879][T15016]  do_syscall_64+0xec/0xf80
[ 1384.798900][T15016]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1384.798920][T15016]  ? trace_irq_disable+0x37/0x100
[ 1384.798943][T15016]  ? clear_bhb_loop+0x60/0xb0
[ 1384.798970][T15016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1384.798989][T15016] RIP: 0033:0x7ff0ce51f749
[ 1384.799007][T15016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1384.799023][T15016] RSP: 002b:00007ff0cc786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1384.799043][T15016] RAX: ffffffffffffffda RBX: 00007ff0ce775fa0 RCX: 00007ff0ce51f749
[ 1384.799056][T15016] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000015
[ 1384.799067][T15016] RBP: 00007ff0cc786090 R08: 0000000000000000 R09: 0000000000000000
[ 1384.799078][T15016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1384.799088][T15016] R13: 00007ff0ce776038 R14: 00007ff0ce775fa0 R15: 00007fffbd19c1b8
[ 1384.799116][T15016]  </TASK>
[ 1385.073345][T12102] team0 (unregistering): Port device team_slave_0 removed
[ 1386.337180][T15023] FAULT_INJECTION: forcing a failure.
[ 1386.337180][T15023] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1386.337221][T15023] CPU: 1 UID: 0 PID: 15023 Comm: syz.0.2422 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1386.337259][T15023] Tainted: [L]=SOFTLOCKUP
[ 1386.337268][T15023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1386.337281][T15023] Call Trace:
[ 1386.337291][T15023]  <TASK>
[ 1386.337300][T15023]  dump_stack_lvl+0xe8/0x150
[ 1386.337336][T15023]  should_fail_ex+0x46c/0x600
[ 1386.337371][T15023]  _copy_from_user+0x2d/0xb0
[ 1386.337394][T15023]  __sys_sendto+0x262/0x520
[ 1386.337422][T15023]  ? __pfx___sys_sendto+0x10/0x10
[ 1386.337474][T15023]  ? ksys_write+0x230/0x260
[ 1386.337510][T15023]  ? __pfx_ksys_write+0x10/0x10
[ 1386.337545][T15023]  __x64_sys_sendto+0xde/0x100
[ 1386.337576][T15023]  do_syscall_64+0xec/0xf80
[ 1386.337598][T15023]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1386.337620][T15023]  ? trace_irq_disable+0x37/0x100
[ 1386.337643][T15023]  ? clear_bhb_loop+0x60/0xb0
[ 1386.337671][T15023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1386.337692][T15023] RIP: 0033:0x7ff0ce51f749
[ 1386.337712][T15023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1386.337732][T15023] RSP: 002b:00007ff0cc765038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1386.337755][T15023] RAX: ffffffffffffffda RBX: 00007ff0ce776090 RCX: 00007ff0ce51f749
[ 1386.337772][T15023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1386.337785][T15023] RBP: 00007ff0cc765090 R08: 0000200000001080 R09: 0000000000000010
[ 1386.337800][T15023] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000001
[ 1386.337813][T15023] R13: 00007ff0ce776128 R14: 00007ff0ce776090 R15: 00007fffbd19c1b8
[ 1386.337844][T15023]  </TASK>
[ 1388.842939][T14880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1388.968938][T14880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1391.832705][T15035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1391.832937][T15035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1391.832952][T15035] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1391.832963][T15035] UDF-fs: Scanning with blocksize 512 failed
[ 1391.833811][T15035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1391.833962][T15035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1391.833977][T15035] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1391.833986][T15035] UDF-fs: Scanning with blocksize 1024 failed
[ 1391.837569][T15035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1391.837673][T15035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1391.837688][T15035] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1391.837697][T15035] UDF-fs: Scanning with blocksize 2048 failed
[ 1391.838153][T15035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1391.838228][T15035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1391.838242][T15035] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1391.838251][T15035] UDF-fs: Scanning with blocksize 4096 failed
[ 1391.838258][T15035] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[ 1393.145698][T14880] team0: Port device team_slave_0 added
[ 1393.295364][T14880] team0: Port device team_slave_1 added
[ 1393.418177][T14725] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1393.564522][T14893] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1393.564670][T14893] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1393.564859][T14893] bridge_slave_0: entered allmulticast mode
[ 1393.630926][T14893] bridge_slave_0: entered promiscuous mode
[ 1393.773785][T14893] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1393.773933][T14893] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1393.774069][T14893] bridge_slave_1: entered allmulticast mode
[ 1393.775945][T14893] bridge_slave_1: entered promiscuous mode
[ 1393.780927][T14880] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1393.780939][T14880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1393.780958][T14880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1393.940888][T15039] overlayfs: overlapping lowerdir path
[ 1394.003794][T14880] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1394.003813][T14880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1394.003842][T14880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1394.133589][T15042] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2428'.
[ 1394.255310][T14893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1394.274028][   T37] kauditd_printk_skb: 5 callbacks suppressed
[ 1394.274047][   T37] audit: type=1326 audit(1766537339.501:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15043 comm="syz.7.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d0edf749 code=0x7ffc0000
[ 1394.274098][   T37] audit: type=1326 audit(1766537339.501:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15043 comm="syz.7.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d0edf749 code=0x7ffc0000
[ 1394.316199][T15044] kvm: user requested TSC rate below hardware speed
[ 1394.349970][   T37] audit: type=1326 audit(1766537339.531:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15043 comm="syz.7.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc7d0edf749 code=0x7ffc0000
[ 1394.350027][   T37] audit: type=1326 audit(1766537339.531:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15043 comm="syz.7.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d0edf749 code=0x7ffc0000
[ 1394.350072][   T37] audit: type=1326 audit(1766537339.531:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15043 comm="syz.7.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d0edf749 code=0x7ffc0000
[ 1394.350119][   T37] audit: type=1326 audit(1766537339.531:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15043 comm="syz.7.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc7d0edf749 code=0x7ffc0000
[ 1394.350165][   T37] audit: type=1326 audit(1766537339.531:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15043 comm="syz.7.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d0edf749 code=0x7ffc0000
[ 1394.350212][   T37] audit: type=1326 audit(1766537339.531:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15043 comm="syz.7.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d0edf749 code=0x7ffc0000
[ 1394.350259][   T37] audit: type=1326 audit(1766537339.531:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15043 comm="syz.7.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc7d0edf749 code=0x7ffc0000
[ 1394.350304][   T37] audit: type=1326 audit(1766537339.531:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15043 comm="syz.7.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d0edf749 code=0x7ffc0000
[ 1394.518586][T15049] FAULT_INJECTION: forcing a failure.
[ 1394.518586][T15049] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1394.518685][T15049] CPU: 0 UID: 0 PID: 15049 Comm: syz.0.2426 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1394.518763][T15049] Tainted: [L]=SOFTLOCKUP
[ 1394.518784][T15049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1394.518825][T15049] Call Trace:
[ 1394.518857][T15049]  <TASK>
[ 1394.518879][T15049]  dump_stack_lvl+0xe8/0x150
[ 1394.519012][T15049]  should_fail_ex+0x46c/0x600
[ 1394.519104][T15049]  _copy_from_user+0x2d/0xb0
[ 1394.519170][T15049]  __sys_bpf+0x1e3/0x860
[ 1394.519248][T15049]  ? __pfx___sys_bpf+0x10/0x10
[ 1394.519303][T15049]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1394.519436][T15049]  ? ksys_write+0x230/0x260
[ 1394.519556][T15049]  ? __pfx_ksys_write+0x10/0x10
[ 1394.519657][T15049]  __x64_sys_bpf+0x7c/0x90
[ 1394.519716][T15049]  do_syscall_64+0xec/0xf80
[ 1394.519780][T15049]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1394.519837][T15049]  ? trace_irq_disable+0x37/0x100
[ 1394.519916][T15049]  ? clear_bhb_loop+0x60/0xb0
[ 1394.519984][T15049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1394.520059][T15049] RIP: 0033:0x7ff0ce51f749
[ 1394.520123][T15049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1394.520171][T15049] RSP: 002b:00007ff0cc786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1394.520249][T15049] RAX: ffffffffffffffda RBX: 00007ff0ce775fa0 RCX: 00007ff0ce51f749
[ 1394.520293][T15049] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005
[ 1394.520336][T15049] RBP: 00007ff0cc786090 R08: 0000000000000000 R09: 0000000000000000
[ 1394.520370][T15049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1394.520403][T15049] R13: 00007ff0ce776038 R14: 00007ff0ce775fa0 R15: 00007fffbd19c1b8
[ 1394.520491][T15049]  </TASK>
[ 1394.957625][T14893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1396.110633][T14725] 8021q: adding VLAN 0 to HW filter on device team0
[ 1396.126678][ T5971] hid-generic 0005:0005:079A.0008: item fetching failed at offset 0/1
[ 1396.127527][ T5971] hid-generic 0005:0005:079A.0008: probe with driver hid-generic failed with error -22
[ 1396.170269][T14880] hsr_slave_0: entered promiscuous mode
[ 1396.171771][T14880] hsr_slave_1: entered promiscuous mode
[ 1396.173464][T14880] debugfs: 'hsr0' already exists in 'hsr'
[ 1396.173536][T14880] Cannot create hsr debugfs directory
[ 1396.286541][T14893] team0: Port device team_slave_0 added
[ 1397.655672][T14893] team0: Port device team_slave_1 added
[ 1397.917015][ T1356] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1397.917239][ T1356] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1398.391787][T15076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2437'.
[ 1398.406566][T14893] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1398.406584][T14893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1398.406613][T14893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1398.710335][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1398.710490][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1398.739231][T14893] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1398.739245][T14893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1398.739266][T14893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1399.106311][    C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank
[ 1400.316404][T10808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1400.346811][T10808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1400.349092][T10808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1400.370136][T10808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1400.370906][T10808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1400.711950][T14893] hsr_slave_0: entered promiscuous mode
[ 1400.725268][T14893] hsr_slave_1: entered promiscuous mode
[ 1400.726349][T14893] debugfs: 'hsr0' already exists in 'hsr'
[ 1400.726377][T14893] Cannot create hsr debugfs directory
[ 1401.402844][T15105] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1401.420884][T15105] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1401.420971][T15105] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1401.421050][T15105] UDF-fs: Scanning with blocksize 512 failed
[ 1401.524421][T15105] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1401.531200][T15105] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1401.531250][T15105] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1401.531287][T15105] UDF-fs: Scanning with blocksize 1024 failed
[ 1401.794046][T15105] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1401.794394][T15105] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1401.794411][T15105] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1401.794421][T15105] UDF-fs: Scanning with blocksize 2048 failed
[ 1401.796954][T15105] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1401.797296][T15105] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1401.797312][T15105] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1401.797321][T15105] UDF-fs: Scanning with blocksize 4096 failed
[ 1401.797339][T15105] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[ 1402.623176][T10808] Bluetooth: hci5: command tx timeout
[ 1403.526681][T15114] FAULT_INJECTION: forcing a failure.
[ 1403.526681][T15114] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1403.526713][T15114] CPU: 1 UID: 0 PID: 15114 Comm: syz.7.2447 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1403.526736][T15114] Tainted: [L]=SOFTLOCKUP
[ 1403.526742][T15114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1403.526753][T15114] Call Trace:
[ 1403.526759][T15114]  <TASK>
[ 1403.526767][T15114]  dump_stack_lvl+0xe8/0x150
[ 1403.526794][T15114]  should_fail_ex+0x46c/0x600
[ 1403.526821][T15114]  _copy_from_user+0x2d/0xb0
[ 1403.526838][T15114]  __sys_bind+0x19f/0x3e0
[ 1403.526857][T15114]  ? __pfx___sys_bind+0x10/0x10
[ 1403.526881][T15114]  ? __pfx_ksys_write+0x10/0x10
[ 1403.526923][T15114]  __x64_sys_bind+0x7a/0x90
[ 1403.526940][T15114]  do_syscall_64+0xec/0xf80
[ 1403.526956][T15114]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1403.526971][T15114]  ? trace_irq_disable+0x37/0x100
[ 1403.526989][T15114]  ? clear_bhb_loop+0x60/0xb0
[ 1403.527008][T15114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1403.527024][T15114] RIP: 0033:0x7fc7d0edf749
[ 1403.527039][T15114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1403.527053][T15114] RSP: 002b:00007fc7cf13e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 1403.527071][T15114] RAX: ffffffffffffffda RBX: 00007fc7d1135fa0 RCX: 00007fc7d0edf749
[ 1403.527084][T15114] RDX: 000000000000001c RSI: 0000200000f5dfe4 RDI: 0000000000000003
[ 1403.527095][T15114] RBP: 00007fc7cf13e090 R08: 0000000000000000 R09: 0000000000000000
[ 1403.527105][T15114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1403.527116][T15114] R13: 00007fc7d1136038 R14: 00007fc7d1135fa0 R15: 00007ffe4425d788
[ 1403.527151][T15114]  </TASK>
[ 1403.753617][T15116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2448'.
[ 1405.369907][ T5801] Bluetooth: hci5: command tx timeout
[ 1405.907249][T12728] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[ 1405.994298][T15127] FAULT_INJECTION: forcing a failure.
[ 1405.994298][T15127] name failslab, interval 1, probability 0, space 0, times 0
[ 1405.994326][T15127] CPU: 0 UID: 0 PID: 15127 Comm: syz.0.2452 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1405.994348][T15127] Tainted: [L]=SOFTLOCKUP
[ 1405.994354][T15127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1405.994364][T15127] Call Trace:
[ 1405.994371][T15127]  <TASK>
[ 1405.994378][T15127]  dump_stack_lvl+0xe8/0x150
[ 1405.994405][T15127]  should_fail_ex+0x46c/0x600
[ 1405.994431][T15127]  should_failslab+0xa8/0x100
[ 1405.994449][T15127]  __kmalloc_noprof+0xe0/0x7e0
[ 1405.994472][T15127]  ? kfree+0x4d/0x900
[ 1405.994491][T15127]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1405.994512][T15127]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1405.994529][T15127]  ? tomoyo_domain+0xd9/0x130
[ 1405.994550][T15127]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1405.994572][T15127]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1405.994597][T15127]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1405.994619][T15127]  ? __lock_acquire+0x6b6/0x2cf0
[ 1405.994643][T15127]  ? do_raw_spin_lock+0x121/0x290
[ 1405.994685][T15127]  ? __fget_files+0x2a/0x420
[ 1405.994704][T15127]  ? __fget_files+0x2a/0x420
[ 1405.994720][T15127]  ? __fget_files+0x3a6/0x420
[ 1405.994738][T15127]  ? __fget_files+0x2a/0x420
[ 1405.994758][T15127]  security_file_ioctl+0xcb/0x2d0
[ 1405.994783][T15127]  __se_sys_ioctl+0x47/0x170
[ 1405.994807][T15127]  do_syscall_64+0xec/0xf80
[ 1405.994823][T15127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1405.994838][T15127]  ? trace_irq_disable+0x37/0x100
[ 1405.994856][T15127]  ? clear_bhb_loop+0x60/0xb0
[ 1405.994876][T15127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1405.994891][T15127] RIP: 0033:0x7ff0ce51f749
[ 1405.994906][T15127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1405.994920][T15127] RSP: 002b:00007ff0cc786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1405.994936][T15127] RAX: ffffffffffffffda RBX: 00007ff0ce775fa0 RCX: 00007ff0ce51f749
[ 1405.994948][T15127] RDX: 0000200000000140 RSI: 00000000c01064b5 RDI: 0000000000000003
[ 1405.994959][T15127] RBP: 00007ff0cc786090 R08: 0000000000000000 R09: 0000000000000000
[ 1405.994969][T15127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1405.994978][T15127] R13: 00007ff0ce776038 R14: 00007ff0ce775fa0 R15: 00007fffbd19c1b8
[ 1405.995009][T15127]  </TASK>
[ 1405.995016][T15127] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1406.052803][T12728] usb 8-1: Using ep0 maxpacket: 8
[ 1406.084502][T12728] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1406.273400][T12728] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1406.273446][T12728] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[ 1406.273465][T12728] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[ 1406.275989][T12728] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1406.276018][T12728] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1406.276033][T12728] usb 8-1: Product: syz
[ 1406.276043][T12728] usb 8-1: Manufacturer: syz
[ 1406.276054][T12728] usb 8-1: SerialNumber: syz
[ 1407.296783][T12102] bridge_slave_1: left allmulticast mode
[ 1407.296813][T12102] bridge_slave_1: left promiscuous mode
[ 1407.297062][T12102] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1407.384457][T12102] bridge_slave_0: left allmulticast mode
[ 1407.384490][T12102] bridge_slave_0: left promiscuous mode
[ 1407.384738][T12102] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1407.404075][ T5801] Bluetooth: hci5: command tx timeout
[ 1407.514315][T15135] tmpfs: Bad value for 'mpol'
[ 1407.904010][T15137] FAULT_INJECTION: forcing a failure.
[ 1407.904010][T15137] name failslab, interval 1, probability 0, space 0, times 0
[ 1407.904045][T15137] CPU: 1 UID: 0 PID: 15137 Comm: syz.0.2455 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1407.904081][T15137] Tainted: [L]=SOFTLOCKUP
[ 1407.904091][T15137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1407.904105][T15137] Call Trace:
[ 1407.904114][T15137]  <TASK>
[ 1407.904124][T15137]  dump_stack_lvl+0xe8/0x150
[ 1407.904164][T15137]  should_fail_ex+0x46c/0x600
[ 1407.904199][T15137]  ? __alloc_skb+0x1dc/0x3a0
[ 1407.904236][T15137]  should_failslab+0xa8/0x100
[ 1407.904271][T15137]  ? __alloc_skb+0x1dc/0x3a0
[ 1407.904294][T15137]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[ 1407.904329][T15137]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1407.904353][T15137]  ? __alloc_skb+0x198/0x3a0
[ 1407.904381][T15137]  __alloc_skb+0x1dc/0x3a0
[ 1407.904402][T15137]  alloc_skb_with_frags+0xca/0x890
[ 1407.904440][T15137]  ? unwind_next_frame+0xa5/0x23d0
[ 1407.904476][T15137]  ? is_bpf_text_address+0x26/0x2b0
[ 1407.904512][T15137]  sock_alloc_send_pskb+0x859/0x990
[ 1407.904565][T15137]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 1407.904588][T15137]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[ 1407.904642][T15137]  ? __lock_acquire+0x6b6/0x2cf0
[ 1407.904680][T15137]  hci_sock_sendmsg+0x1fe/0xf30
[ 1407.904713][T15137]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[ 1407.904741][T15137]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[ 1407.904780][T15137]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1407.904812][T15137]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[ 1407.904845][T15137]  __sock_sendmsg+0x21c/0x270
[ 1407.904891][T15137]  sock_write_iter+0x27f/0x370
[ 1407.904925][T15137]  ? __pfx_sock_write_iter+0x10/0x10
[ 1407.904999][T15137]  vfs_write+0x5d5/0xb40
[ 1407.905037][T15137]  ? __pfx_sock_write_iter+0x10/0x10
[ 1407.905072][T15137]  ? __pfx_vfs_write+0x10/0x10
[ 1407.905107][T15137]  ? __fget_files+0x2a/0x420
[ 1407.905151][T15137]  ksys_write+0x14b/0x260
[ 1407.905188][T15137]  ? __pfx_ksys_write+0x10/0x10
[ 1407.905232][T15137]  do_syscall_64+0xec/0xf80
[ 1407.905258][T15137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1407.905275][T15137]  ? clear_bhb_loop+0x60/0xb0
[ 1407.905307][T15137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1407.905330][T15137] RIP: 0033:0x7ff0ce51f749
[ 1407.905366][T15137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1407.905386][T15137] RSP: 002b:00007ff0cc786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1407.905408][T15137] RAX: ffffffffffffffda RBX: 00007ff0ce775fa0 RCX: 00007ff0ce51f749
[ 1407.905435][T15137] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004
[ 1407.905450][T15137] RBP: 00007ff0cc786090 R08: 0000000000000000 R09: 0000000000000000
[ 1407.905459][T15137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1407.905468][T15137] R13: 00007ff0ce776038 R14: 00007ff0ce775fa0 R15: 00007fffbd19c1b8
[ 1407.905505][T15137]  </TASK>
[ 1408.372025][T15139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1408.372462][T15139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1408.642019][T12728] cdc_ncm 8-1:1.0: bind() failure
[ 1408.654972][T12728] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[ 1408.655021][T12728] cdc_ncm 8-1:1.1: bind() failure
[ 1408.661548][T12728] usb 8-1: USB disconnect, device number 28
[ 1409.485106][ T5801] Bluetooth: hci5: command tx timeout
[ 1409.794514][T15146] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2459'.
[ 1410.112777][T12728] usb 8-1: new full-speed USB device number 29 using dummy_hcd
[ 1410.300071][T12728] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1410.300101][T12728] usb 8-1: config 0 has no interface number 0
[ 1410.300156][T12728] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1410.300173][T12728] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1410.335631][T12728] usb 8-1: config 0 descriptor??
[ 1410.386689][T12728] usb 8-1: selecting invalid altsetting 1
[ 1410.386808][T12728] dvb_ttusb_budget: ttusb_init_controller: error
[ 1410.386817][T12728] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1410.477860][T12728] DVB: Unable to find symbol cx22700_attach()
[ 1410.544119][T12728] DVB: Unable to find symbol tda10046_attach()
[ 1410.544136][T12728] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1410.619730][T12728] usb 8-1: USB disconnect, device number 29
[ 1411.074482][T12102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1411.153888][T12102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1411.205505][T12102] bond0 (unregistering): Released all slaves
[ 1414.466511][T15163] FAULT_INJECTION: forcing a failure.
[ 1414.466511][T15163] name failslab, interval 1, probability 0, space 0, times 0
[ 1414.466553][T15163] CPU: 1 UID: 0 PID: 15163 Comm: syz.0.2463 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1414.466583][T15163] Tainted: [L]=SOFTLOCKUP
[ 1414.466591][T15163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1414.466605][T15163] Call Trace:
[ 1414.466614][T15163]  <TASK>
[ 1414.466624][T15163]  dump_stack_lvl+0xe8/0x150
[ 1414.466661][T15163]  should_fail_ex+0x46c/0x600
[ 1414.466696][T15163]  ? vm_area_dup+0x2b/0x670
[ 1414.466718][T15163]  should_failslab+0xa8/0x100
[ 1414.466741][T15163]  ? vm_area_dup+0x2b/0x670
[ 1414.466761][T15163]  kmem_cache_alloc_noprof+0x84/0x6c0
[ 1414.466793][T15163]  ? __lock_acquire+0x6b6/0x2cf0
[ 1414.466832][T15163]  vm_area_dup+0x2b/0x670
[ 1414.466859][T15163]  __split_vma+0x1ad/0x9e0
[ 1414.466888][T15163]  ? mas_next_slot+0xc23/0xd00
[ 1414.466931][T15163]  ? __pfx___split_vma+0x10/0x10
[ 1414.466972][T15163]  ? mas_find+0xb0e/0xd30
[ 1414.466999][T15163]  vms_gather_munmap_vmas+0x4c6/0x12f0
[ 1414.467048][T15163]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[ 1414.467086][T15163]  ? mas_find+0xa7d/0xd30
[ 1414.467114][T15163]  mmap_region+0x742/0x1d00
[ 1414.467155][T15163]  ? __lock_acquire+0x6b6/0x2cf0
[ 1414.467199][T15163]  ? __pfx_mmap_region+0x10/0x10
[ 1414.467321][T15163]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[ 1414.467364][T15163]  ? cap_mmap_addr+0xb0/0x100
[ 1414.467399][T15163]  ? bpf_lsm_mmap_addr+0x9/0x20
[ 1414.467434][T15163]  ? security_mmap_addr+0x71/0x270
[ 1414.467469][T15163]  ? shmem_mapping+0xd/0x50
[ 1414.467495][T15163]  ? memfd_check_seals_mmap+0x16e/0x210
[ 1414.467526][T15163]  do_mmap+0xc23/0x10c0
[ 1414.467564][T15163]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1414.467587][T15163]  ? __pfx_do_mmap+0x10/0x10
[ 1414.467615][T15163]  ? rwbase_write_lock+0x56f/0x750
[ 1414.467656][T15163]  vm_mmap_pgoff+0x2a9/0x4d0
[ 1414.467693][T15163]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1414.467730][T15163]  ? __fget_files+0x2a/0x420
[ 1414.467754][T15163]  ? __fget_files+0x3a6/0x420
[ 1414.467778][T15163]  ? __fget_files+0x2a/0x420
[ 1414.467807][T15163]  ksys_mmap_pgoff+0x4e9/0x720
[ 1414.467841][T15163]  ? __x64_sys_mmap+0x7f/0x140
[ 1414.467871][T15163]  do_syscall_64+0xec/0xf80
[ 1414.467893][T15163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1414.467915][T15163]  ? trace_irq_disable+0x37/0x100
[ 1414.467939][T15163]  ? clear_bhb_loop+0x60/0xb0
[ 1414.467968][T15163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1414.467990][T15163] RIP: 0033:0x7ff0ce51f749
[ 1414.468011][T15163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1414.468031][T15163] RSP: 002b:00007ff0cc786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1414.468055][T15163] RAX: ffffffffffffffda RBX: 00007ff0ce775fa0 RCX: 00007ff0ce51f749
[ 1414.468072][T15163] RDX: 0000000002000001 RSI: 0000000000001000 RDI: 0000200000000000
[ 1414.468088][T15163] RBP: 00007ff0cc786090 R08: 0000000000000006 R09: 0000000000000000
[ 1414.468107][T15163] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[ 1414.468121][T15163] R13: 00007ff0ce776038 R14: 00007ff0ce775fa0 R15: 00007fffbd19c1b8
[ 1414.468158][T15163]  </TASK>
[ 1417.383136][T15180] loop2: detected capacity change from 0 to 7
[ 1417.448097][T15180] Dev loop2: unable to read RDB block 7
[ 1417.448152][T15180]  loop2: unable to read partition table
[ 1417.448387][T15180] loop2: partition table beyond EOD, truncated
[ 1417.448408][T15180] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1418.482832][T12102] hsr_slave_0: left promiscuous mode
[ 1418.502796][T12102] hsr_slave_1: left promiscuous mode
[ 1418.503808][T12102] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1418.535597][T12102] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1418.650494][T12102] veth0_vlan: left promiscuous mode
[ 1420.258988][T10808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1420.267861][T10808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1420.269652][T10808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1420.325567][T10808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1420.326442][T10808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1420.613517][T12102] team0 (unregistering): Port device team_slave_1 removed
[ 1420.896800][T12102] team0 (unregistering): Port device team_slave_0 removed
[ 1422.442891][T10808] Bluetooth: hci2: command tx timeout
[ 1423.032076][ T5801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1423.050598][ T5801] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1423.063697][ T5801] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1423.100791][ T5801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1423.118842][ T5801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1423.946977][T15200] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2470'.
[ 1425.721434][ T8936] Bluetooth: hci6: command tx timeout
[ 1425.722281][T10808] Bluetooth: hci2: command tx timeout
[ 1425.771981][T15093] chnl_net:caif_netlink_parms(): no params data found
[ 1426.675490][T15093] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1426.675778][T15093] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1426.675979][T15093] bridge_slave_0: entered allmulticast mode
[ 1426.678656][T15093] bridge_slave_0: entered promiscuous mode
[ 1426.690966][T15093] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1426.691259][T15093] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1426.691895][T15093] bridge_slave_1: entered allmulticast mode
[ 1426.775558][T15093] bridge_slave_1: entered promiscuous mode
[ 1427.457426][T15212] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1427.457610][T15212] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1427.457624][T15212] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1427.457634][T15212] UDF-fs: Scanning with blocksize 512 failed
[ 1427.458421][T15212] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1427.458537][T15212] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1427.458568][T15212] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1427.458578][T15212] UDF-fs: Scanning with blocksize 1024 failed
[ 1427.459203][T15212] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1427.459295][T15212] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1427.459309][T15212] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1427.459318][T15212] UDF-fs: Scanning with blocksize 2048 failed
[ 1427.459731][T15212] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1427.459811][T15212] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1427.459825][T15212] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1427.459834][T15212] UDF-fs: Scanning with blocksize 4096 failed
[ 1427.459842][T15212] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[ 1428.204492][T10808] Bluetooth: hci6: command tx timeout
[ 1428.204594][ T5801] Bluetooth: hci2: command tx timeout
[ 1428.812737][ T6000] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[ 1428.917111][T15093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1428.971851][ T6000] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1428.971888][ T6000] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1428.971928][ T6000] usb 8-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[ 1428.971953][ T6000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1429.012192][ T6000] usb 8-1: config 0 descriptor??
[ 1429.191627][T15093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1429.453762][ T6000] hid-retrode 0003:0403:97C1.0009: item fetching failed at offset 3/5
[ 1429.454628][ T6000] hid-retrode 0003:0403:97C1.0009: probe with driver hid-retrode failed with error -22
[ 1430.287479][T10808] Bluetooth: hci6: command tx timeout
[ 1430.304078][ T5801] Bluetooth: hci2: command tx timeout
[ 1430.889295][T15093] team0: Port device team_slave_0 added
[ 1430.932899][T15093] team0: Port device team_slave_1 added
[ 1431.277768][ T5958] usb 8-1: USB disconnect, device number 30
[ 1432.389310][ T5801] Bluetooth: hci6: command tx timeout
[ 1432.453586][T15093] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1432.453602][T15093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1432.453624][T15093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1432.560466][T15239] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2480'.
[ 1434.096097][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1434.096163][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1434.284253][T15093] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1434.284273][T15093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1434.284304][T15093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1436.710986][T15259] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1436.723978][T15259] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1436.724056][T15259] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1436.724134][T15259] UDF-fs: Scanning with blocksize 512 failed
[ 1436.767198][T15259] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1436.774516][T15259] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1436.774570][T15259] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1436.774609][T15259] UDF-fs: Scanning with blocksize 1024 failed
[ 1436.804760][T15259] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1436.809454][T15259] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1436.809500][T15259] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1436.809543][T15259] UDF-fs: Scanning with blocksize 2048 failed
[ 1437.172980][T15259] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1437.173081][T15259] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1437.173095][T15259] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1437.173104][T15259] UDF-fs: Scanning with blocksize 4096 failed
[ 1437.173111][T15259] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1)
[ 1438.525991][T15264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1438.529246][T15264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1439.495282][T15093] hsr_slave_0: entered promiscuous mode
[ 1439.496803][T15093] hsr_slave_1: entered promiscuous mode
[ 1439.497808][T15093] debugfs: 'hsr0' already exists in 'hsr'
[ 1439.497834][T15093] Cannot create hsr debugfs directory
[ 1439.883061][T12728] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[ 1441.445265][T15195] chnl_net:caif_netlink_parms(): no params data found
[ 1441.934186][T15285] 9p: Bad value for 'wfdno'
[ 1441.980619][T15192] chnl_net:caif_netlink_parms(): no params data found
[ 1445.248015][T15302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1445.248339][T15302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1445.345515][T15195] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1445.350258][T15195] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1445.350427][T15195] bridge_slave_0: entered allmulticast mode
[ 1445.358191][T15195] bridge_slave_0: entered promiscuous mode
[ 1445.417091][T15195] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1445.417206][T15195] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1445.417369][T15195] bridge_slave_1: entered allmulticast mode
[ 1445.419214][T15195] bridge_slave_1: entered promiscuous mode
[ 1445.422718][ T6270] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[ 1445.574868][ T6270] usb 8-1: config index 0 descriptor too short (expected 239, got 18)
[ 1445.574931][ T6270] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1445.574946][ T6270] usb 8-1: config 0 has no interfaces?
[ 1445.577486][ T6270] usb 8-1: New USB device found, idVendor=0e41, idProduct=5058, bcdDevice=bf.b8
[ 1445.577521][ T6270] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1445.577535][ T6270] usb 8-1: Product: syz
[ 1445.577546][ T6270] usb 8-1: Manufacturer: syz
[ 1445.577557][ T6270] usb 8-1: SerialNumber: syz
[ 1445.581223][ T6270] usb 8-1: config 0 descriptor??
[ 1445.742137][T15195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1445.827263][T15195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1446.953943][T15311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1446.954433][T15311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1447.572114][T12102] bridge_slave_1: left allmulticast mode
[ 1447.572195][T12102] bridge_slave_1: left promiscuous mode
[ 1447.573056][T12102] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1447.666972][T12728] usb 8-1: USB disconnect, device number 32
[ 1447.705131][T12102] bridge_slave_0: left allmulticast mode
[ 1447.705156][T12102] bridge_slave_0: left promiscuous mode
[ 1447.705358][T12102] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1447.796207][T12102] bridge_slave_1: left allmulticast mode
[ 1447.796233][T12102] bridge_slave_1: left promiscuous mode
[ 1447.796465][T12102] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1447.863865][T12102] bridge_slave_0: left allmulticast mode
[ 1447.863891][T12102] bridge_slave_0: left promiscuous mode
[ 1447.864130][T12102] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1448.423883][T12102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1448.543674][T12102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1448.645944][T12102] bond0 (unregistering): Released all slaves
[ 1457.165426][T12102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1457.245819][T12102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1457.329634][T12102] bond0 (unregistering): Released all slaves
[ 1457.418426][T15192] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1457.418559][T15192] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1457.418812][T15192] bridge_slave_0: entered allmulticast mode
[ 1457.421445][T15192] bridge_slave_0: entered promiscuous mode
[ 1457.862671][ T5958] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[ 1457.931254][T15192] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1457.931377][T15192] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1457.931533][T15192] bridge_slave_1: entered allmulticast mode
[ 1457.943676][T15192] bridge_slave_1: entered promiscuous mode
[ 1458.254330][ T5958] usb 8-1: config index 0 descriptor too short (expected 239, got 18)
[ 1458.254361][ T5958] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1458.254382][ T5958] usb 8-1: config 0 has no interfaces?
[ 1459.398241][ T5958] usb 8-1: New USB device found, idVendor=0e41, idProduct=5058, bcdDevice=bf.b8
[ 1459.398274][ T5958] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1459.398296][ T5958] usb 8-1: Product: syz
[ 1459.398311][ T5958] usb 8-1: Manufacturer: syz
[ 1459.398326][ T5958] usb 8-1: SerialNumber: syz
[ 1459.622788][ T5958] usb 8-1: config 0 descriptor??
[ 1459.719647][T15195] team0: Port device team_slave_0 added
[ 1459.864760][T15356] FAULT_INJECTION: forcing a failure.
[ 1459.864760][T15356] name failslab, interval 1, probability 0, space 0, times 0
[ 1459.864801][T15356] CPU: 1 UID: 0 PID: 15356 Comm: syz.0.2509 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1459.864832][T15356] Tainted: [L]=SOFTLOCKUP
[ 1459.864841][T15356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1459.864856][T15356] Call Trace:
[ 1459.864865][T15356]  <TASK>
[ 1459.864876][T15356]  dump_stack_lvl+0xe8/0x150
[ 1459.864913][T15356]  should_fail_ex+0x46c/0x600
[ 1459.864949][T15356]  ? vm_area_dup+0x2b/0x670
[ 1459.864971][T15356]  should_failslab+0xa8/0x100
[ 1459.864994][T15356]  ? vm_area_dup+0x2b/0x670
[ 1459.865015][T15356]  kmem_cache_alloc_noprof+0x84/0x6c0
[ 1459.865048][T15356]  ? __lock_acquire+0x6b6/0x2cf0
[ 1459.865094][T15356]  vm_area_dup+0x2b/0x670
[ 1459.865122][T15356]  __split_vma+0x1ad/0x9e0
[ 1459.865156][T15356]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1459.865180][T15356]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1459.865204][T15356]  ? __pfx___split_vma+0x10/0x10
[ 1459.865230][T15356]  ? rt_mutex_slowunlock+0x493/0x8a0
[ 1459.865264][T15356]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1459.865303][T15356]  vms_gather_munmap_vmas+0x2e2/0x12f0
[ 1459.865345][T15356]  ? mtree_range_walk+0x6aa/0x840
[ 1459.865375][T15356]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[ 1459.865424][T15356]  ? mas_find+0xa7d/0xd30
[ 1459.865451][T15356]  mmap_region+0x742/0x1d00
[ 1459.865490][T15356]  ? __lock_acquire+0x6b6/0x2cf0
[ 1459.865526][T15356]  ? __pfx_mmap_region+0x10/0x10
[ 1459.865616][T15356]  ? __pfx_process_measurement+0x10/0x10
[ 1459.865672][T15356]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[ 1459.865707][T15356]  ? __lock_acquire+0x6b6/0x2cf0
[ 1459.865740][T15356]  ? cap_mmap_addr+0xb0/0x100
[ 1459.865773][T15356]  ? bpf_lsm_mmap_addr+0x9/0x20
[ 1459.865806][T15356]  ? security_mmap_addr+0x71/0x270
[ 1459.865841][T15356]  ? shmem_mapping+0xd/0x50
[ 1459.865868][T15356]  ? memfd_check_seals_mmap+0xcb/0x210
[ 1459.865897][T15356]  do_mmap+0xc23/0x10c0
[ 1459.865933][T15356]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1459.865956][T15356]  ? __pfx_do_mmap+0x10/0x10
[ 1459.865983][T15356]  ? rwbase_write_lock+0x56f/0x750
[ 1459.866023][T15356]  vm_mmap_pgoff+0x2a9/0x4d0
[ 1459.866060][T15356]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1459.866101][T15356]  ? __fget_files+0x2a/0x420
[ 1459.866124][T15356]  ? __fget_files+0x3a6/0x420
[ 1459.866147][T15356]  ? __fget_files+0x2a/0x420
[ 1459.866176][T15356]  ksys_mmap_pgoff+0x4e9/0x720
[ 1459.866209][T15356]  ? __x64_sys_mmap+0x7f/0x140
[ 1459.866238][T15356]  do_syscall_64+0xec/0xf80
[ 1459.866259][T15356]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1459.866281][T15356]  ? trace_irq_disable+0x37/0x100
[ 1459.866305][T15356]  ? clear_bhb_loop+0x60/0xb0
[ 1459.866333][T15356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1459.866354][T15356] RIP: 0033:0x7ff0ce51f749
[ 1459.866374][T15356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1459.866394][T15356] RSP: 002b:00007ff0cc786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1459.866417][T15356] RAX: ffffffffffffffda RBX: 00007ff0ce775fa0 RCX: 00007ff0ce51f749
[ 1459.866434][T15356] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000200000ffc000
[ 1459.866448][T15356] RBP: 00007ff0cc786090 R08: 0000000000000003 R09: 000000009eea4000
[ 1459.866463][T15356] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[ 1459.866477][T15356] R13: 00007ff0ce776038 R14: 00007ff0ce775fa0 R15: 00007fffbd19c1b8
[ 1459.866512][T15356]  </TASK>
[ 1460.960012][T15347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1460.960441][T15347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1461.903237][ T5958] usb 8-1: USB disconnect, device number 33
[ 1462.228124][T10808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1462.268959][T10808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1462.272487][T10808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1462.290445][T10808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1462.291274][T10808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1462.395392][T15195] team0: Port device team_slave_1 added
[ 1462.451062][T15192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1463.866621][T15192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1464.117140][T15195] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1464.117159][T15195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1464.117188][T15195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1464.352782][T12102] hsr_slave_0: left promiscuous mode
[ 1464.362778][ T5801] Bluetooth: hci0: command tx timeout
[ 1464.409759][T12102] hsr_slave_1: left promiscuous mode
[ 1464.410569][T12102] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1464.498413][T12102] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1464.734374][T12102] hsr_slave_0: left promiscuous mode
[ 1464.763252][T12102] hsr_slave_1: left promiscuous mode
[ 1464.771826][T12102] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1464.823749][T12102] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1466.815274][ T5801] Bluetooth: hci0: command tx timeout
[ 1467.833395][T12102] team0 (unregistering): Port device team_slave_1 removed
[ 1468.033648][T12102] team0 (unregistering): Port device team_slave_0 removed
[ 1468.842942][ T5801] Bluetooth: hci0: command tx timeout
[ 1469.333513][T12102] team0 (unregistering): Port device team_slave_1 removed
[ 1469.503627][T12102] team0 (unregistering): Port device team_slave_0 removed
[ 1470.923142][ T5801] Bluetooth: hci0: command tx timeout
[ 1471.914443][T15195] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1471.914463][T15195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1471.914492][T15195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1471.979867][T15192] team0: Port device team_slave_0 added
[ 1473.214223][T15192] team0: Port device team_slave_1 added
[ 1473.422021][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1473.422450][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1473.759854][T15192] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1473.759874][T15192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1473.759903][T15192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1473.763887][T15401] netlink: 'syz.7.2519': attribute type 7 has an invalid length.
[ 1473.763939][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2519'.
[ 1474.012075][T15192] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1474.012094][T15192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1474.012124][T15192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1474.126841][T15195] hsr_slave_0: entered promiscuous mode
[ 1474.128237][T15195] hsr_slave_1: entered promiscuous mode
[ 1474.366401][T15403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1474.366865][T15403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1475.467593][T15406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1475.468032][T15406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1479.901812][T15192] hsr_slave_0: entered promiscuous mode
[ 1479.909354][T15192] hsr_slave_1: entered promiscuous mode
[ 1479.910451][T15192] debugfs: 'hsr0' already exists in 'hsr'
[ 1479.910476][T15192] Cannot create hsr debugfs directory
[ 1480.509154][T15420] FAULT_INJECTION: forcing a failure.
[ 1480.509154][T15420] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1480.509195][T15420] CPU: 1 UID: 0 PID: 15420 Comm: syz.7.2523 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1480.509224][T15420] Tainted: [L]=SOFTLOCKUP
[ 1480.509231][T15420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1480.509245][T15420] Call Trace:
[ 1480.509253][T15420]  <TASK>
[ 1480.509263][T15420]  dump_stack_lvl+0xe8/0x150
[ 1480.509307][T15420]  should_fail_ex+0x46c/0x600
[ 1480.509342][T15420]  _copy_from_user+0x2d/0xb0
[ 1480.509363][T15420]  __sys_bpf+0x1e3/0x860
[ 1480.509391][T15420]  ? __pfx___sys_bpf+0x10/0x10
[ 1480.509414][T15420]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1480.509459][T15420]  ? ksys_write+0x230/0x260
[ 1480.509492][T15420]  ? __pfx_ksys_write+0x10/0x10
[ 1480.509531][T15420]  __x64_sys_bpf+0x7c/0x90
[ 1480.509553][T15420]  do_syscall_64+0xec/0xf80
[ 1480.509575][T15420]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1480.509596][T15420]  ? trace_irq_disable+0x37/0x100
[ 1480.509618][T15420]  ? clear_bhb_loop+0x60/0xb0
[ 1480.509644][T15420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1480.509664][T15420] RIP: 0033:0x7fc7d0edf749
[ 1480.509684][T15420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1480.509702][T15420] RSP: 002b:00007fc7cf13e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1480.509725][T15420] RAX: ffffffffffffffda RBX: 00007fc7d1135fa0 RCX: 00007fc7d0edf749
[ 1480.509741][T15420] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000004
[ 1480.509755][T15420] RBP: 00007fc7cf13e090 R08: 0000000000000000 R09: 0000000000000000
[ 1480.509768][T15420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1480.509781][T15420] R13: 00007fc7d1136038 R14: 00007fc7d1135fa0 R15: 00007ffe4425d788
[ 1480.509816][T15420]  </TASK>
[ 1480.759464][T15423] FAULT_INJECTION: forcing a failure.
[ 1480.759464][T15423] name failslab, interval 1, probability 0, space 0, times 0
[ 1480.759504][T15423] CPU: 1 UID: 0 PID: 15423 Comm: syz.0.2524 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1480.759534][T15423] Tainted: [L]=SOFTLOCKUP
[ 1480.759542][T15423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1480.759556][T15423] Call Trace:
[ 1480.759565][T15423]  <TASK>
[ 1480.759575][T15423]  dump_stack_lvl+0xe8/0x150
[ 1480.759610][T15423]  should_fail_ex+0x46c/0x600
[ 1480.759646][T15423]  should_failslab+0xa8/0x100
[ 1480.759670][T15423]  __kmalloc_noprof+0xe0/0x7e0
[ 1480.759702][T15423]  ? kfree+0x4d/0x900
[ 1480.759727][T15423]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1480.759756][T15423]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1480.759780][T15423]  ? tomoyo_domain+0xd9/0x130
[ 1480.759807][T15423]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1480.759838][T15423]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1480.759872][T15423]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1480.759901][T15423]  ? __lock_acquire+0x6b6/0x2cf0
[ 1480.759934][T15423]  ? do_raw_spin_lock+0x121/0x290
[ 1480.759994][T15423]  ? __fget_files+0x2a/0x420
[ 1480.760020][T15423]  ? __fget_files+0x2a/0x420
[ 1480.760042][T15423]  ? __fget_files+0x3a6/0x420
[ 1480.760064][T15423]  ? __fget_files+0x2a/0x420
[ 1480.760092][T15423]  security_file_ioctl+0xcb/0x2d0
[ 1480.760126][T15423]  __se_sys_ioctl+0x47/0x170
[ 1480.760159][T15423]  do_syscall_64+0xec/0xf80
[ 1480.760181][T15423]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1480.760204][T15423]  ? trace_irq_disable+0x37/0x100
[ 1480.760226][T15423]  ? clear_bhb_loop+0x60/0xb0
[ 1480.760261][T15423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1480.760283][T15423] RIP: 0033:0x7ff0ce51f749
[ 1480.760302][T15423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1480.760321][T15423] RSP: 002b:00007ff0cc765038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1480.760344][T15423] RAX: ffffffffffffffda RBX: 00007ff0ce776090 RCX: 00007ff0ce51f749
[ 1480.760360][T15423] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000003
[ 1480.760374][T15423] RBP: 00007ff0cc765090 R08: 0000000000000000 R09: 0000000000000000
[ 1480.760387][T15423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1480.760400][T15423] R13: 00007ff0ce776128 R14: 00007ff0ce776090 R15: 00007fffbd19c1b8
[ 1480.760435][T15423]  </TASK>
[ 1480.760444][T15423] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1481.425237][T15427] FAULT_INJECTION: forcing a failure.
[ 1481.425237][T15427] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1481.425279][T15427] CPU: 1 UID: 0 PID: 15427 Comm: syz.7.2526 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1481.425309][T15427] Tainted: [L]=SOFTLOCKUP
[ 1481.425318][T15427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1481.425332][T15427] Call Trace:
[ 1481.425341][T15427]  <TASK>
[ 1481.425351][T15427]  dump_stack_lvl+0xe8/0x150
[ 1481.425389][T15427]  should_fail_ex+0x46c/0x600
[ 1481.425426][T15427]  _copy_from_user+0x2d/0xb0
[ 1481.425450][T15427]  ___sys_sendmsg+0x158/0x2a0
[ 1481.425483][T15427]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1481.425549][T15427]  ? __fget_files+0x2a/0x420
[ 1481.425574][T15427]  ? __fget_files+0x3a6/0x420
[ 1481.425610][T15427]  __x64_sys_sendmsg+0x1a1/0x260
[ 1481.425642][T15427]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1481.425682][T15427]  ? __pfx_ksys_write+0x10/0x10
[ 1481.425727][T15427]  do_syscall_64+0xec/0xf80
[ 1481.425762][T15427]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1481.425783][T15427]  ? trace_irq_disable+0x37/0x100
[ 1481.425807][T15427]  ? clear_bhb_loop+0x60/0xb0
[ 1481.425833][T15427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1481.425855][T15427] RIP: 0033:0x7fc7d0edf749
[ 1481.425874][T15427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1481.425893][T15427] RSP: 002b:00007fc7cf13e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1481.425915][T15427] RAX: ffffffffffffffda RBX: 00007fc7d1135fa0 RCX: 00007fc7d0edf749
[ 1481.425930][T15427] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000003
[ 1481.425943][T15427] RBP: 00007fc7cf13e090 R08: 0000000000000000 R09: 0000000000000000
[ 1481.425956][T15427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1481.425968][T15427] R13: 00007fc7d1136038 R14: 00007fc7d1135fa0 R15: 00007ffe4425d788
[ 1481.426001][T15427]  </TASK>
[ 1481.788902][T10808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1481.817291][T10808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1481.819042][T10808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1481.821156][T10808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1481.839961][T10808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1482.242714][ T5958] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[ 1482.405277][ T5958] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1482.405341][ T5958] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[ 1482.405367][ T5958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1482.426847][ T5958] gspca_main: stv0680-2.14.0 probing 041e:4007
[ 1482.512037][T15363] chnl_net:caif_netlink_parms(): no params data found
[ 1482.618728][T15442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1482.618995][T15442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1483.089059][T15195] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1483.125616][T15195] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1483.202981][T15195] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1483.403289][T15195] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1483.484411][ T5958] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71
[ 1483.484430][ T5958] stv0680 8-1:4.0: STV(e): camera ping failed!!
[ 1483.484757][ T5958] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[ 1483.484771][ T5958] stv0680 8-1:4.0: last error: 0,  command = 0x0
[ 1483.486934][ T5958] usb 8-1: USB disconnect, device number 34
[ 1483.567978][T15363] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1483.568778][T15363] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1483.569010][T15363] bridge_slave_0: entered allmulticast mode
[ 1483.571666][T15363] bridge_slave_0: entered promiscuous mode
[ 1485.444810][T10808] Bluetooth: hci4: command tx timeout
[ 1485.520095][T15195] kthread_run failed with err -4
[ 1485.522820][ T5958] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[ 1485.535385][T15363] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1485.535551][T15363] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1485.535805][T15363] bridge_slave_1: entered allmulticast mode
[ 1485.574247][T15363] bridge_slave_1: entered promiscuous mode
[ 1485.682808][ T5958] usb 8-1: Using ep0 maxpacket: 8
[ 1485.704215][ T5958] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1485.705003][ T5958] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1485.705030][ T5958] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1485.705055][ T5958] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 1485.705084][ T5958] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1485.705124][ T5958] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1485.705149][ T5958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1485.718212][ T5958] usb 8-1: config 0 descriptor??
[ 1485.723223][T15450] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1486.005695][T10808] Bluetooth: hci2: Opcode 0x0c03 failed: -71
[ 1486.053477][ T5958] usb 8-1: USB disconnect, device number 35
[ 1486.224218][T15363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1486.316320][T15363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1486.352352][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1486.382348][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1486.438555][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1486.440312][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1486.441084][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1486.754713][ T5958] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[ 1486.902663][ T5958] usb 8-1: Using ep0 maxpacket: 8
[ 1486.903533][ T5958] usb 8-1: too many configurations: 121, using maximum allowed: 8
[ 1486.936365][ T5958] usb 8-1: unable to read config index 0 descriptor/start: -61
[ 1486.936405][ T5958] usb 8-1: can't read configurations, error -61
[ 1486.981524][T15467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1486.981794][T15467] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1487.062730][ T5958] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[ 1488.259089][T15471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1488.259358][T15471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1488.811676][T10808] Bluetooth: hci4: command tx timeout
[ 1488.811728][ T5801] Bluetooth: hci2: command tx timeout
[ 1488.856183][T15363] team0: Port device team_slave_0 added
[ 1488.874455][ T5958] usb 8-1: Using ep0 maxpacket: 8
[ 1488.875226][ T5958] usb 8-1: too many configurations: 121, using maximum allowed: 8
[ 1488.884525][ T5958] usb 8-1: unable to read config index 0 descriptor/start: -61
[ 1488.884565][ T5958] usb 8-1: can't read configurations, error -61
[ 1488.884983][ T5958] usb usb8-port1: attempt power cycle
[ 1489.017795][T15363] team0: Port device team_slave_1 added
[ 1489.259045][T15363] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1489.259064][T15363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1489.259090][T15363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1489.259223][T15479] FAULT_INJECTION: forcing a failure.
[ 1489.259223][T15479] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1489.259257][T15479] CPU: 0 UID: 0 PID: 15479 Comm: syz.7.2535 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1489.259287][T15479] Tainted: [L]=SOFTLOCKUP
[ 1489.259295][T15479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1489.259308][T15479] Call Trace:
[ 1489.259317][T15479]  <TASK>
[ 1489.259327][T15479]  dump_stack_lvl+0xe8/0x150
[ 1489.259362][T15479]  should_fail_ex+0x46c/0x600
[ 1489.259396][T15479]  _copy_from_user+0x2d/0xb0
[ 1489.259418][T15479]  ___sys_sendmsg+0x158/0x2a0
[ 1489.259450][T15479]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1489.259512][T15479]  ? __fget_files+0x2a/0x420
[ 1489.259535][T15479]  ? __fget_files+0x3a6/0x420
[ 1489.259567][T15479]  __x64_sys_sendmsg+0x1a1/0x260
[ 1489.259599][T15479]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1489.259637][T15479]  ? __pfx_ksys_write+0x10/0x10
[ 1489.259690][T15479]  do_syscall_64+0xec/0xf80
[ 1489.259710][T15479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1489.259731][T15479]  ? trace_irq_disable+0x37/0x100
[ 1489.259755][T15479]  ? clear_bhb_loop+0x60/0xb0
[ 1489.259781][T15479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1489.259803][T15479] RIP: 0033:0x7fc7d0edf749
[ 1489.259822][T15479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1489.259841][T15479] RSP: 002b:00007fc7cf13e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1489.259864][T15479] RAX: ffffffffffffffda RBX: 00007fc7d1135fa0 RCX: 00007fc7d0edf749
[ 1489.259880][T15479] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[ 1489.259893][T15479] RBP: 00007fc7cf13e090 R08: 0000000000000000 R09: 0000000000000000
[ 1489.259907][T15479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1489.259920][T15479] R13: 00007fc7d1136038 R14: 00007fc7d1135fa0 R15: 00007ffe4425d788
[ 1489.259953][T15479]  </TASK>
[ 1489.525883][T15363] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1489.525903][T15363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1489.525940][T15363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1490.376170][T15483] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1490.393156][T15483] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1490.393209][T15483] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1490.393225][T15483] UDF-fs: Scanning with blocksize 512 failed
[ 1490.443280][T15483] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1490.447067][T15483] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1490.447112][T15483] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1490.447149][T15483] UDF-fs: Scanning with blocksize 1024 failed
[ 1490.484281][T15483] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1490.822661][T15483] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1490.822684][T15483] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1490.822695][T15483] UDF-fs: Scanning with blocksize 2048 failed
[ 1490.823191][T15483] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1490.823287][T15483] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1490.823300][T15483] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1490.823310][T15483] UDF-fs: Scanning with blocksize 4096 failed
[ 1490.823317][T15483] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1)
[ 1491.422174][ T5801] Bluetooth: hci2: command tx timeout
[ 1491.430043][ T5801] Bluetooth: hci4: command tx timeout
[ 1491.998444][T12102] bridge_slave_1: left allmulticast mode
[ 1491.998481][T12102] bridge_slave_1: left promiscuous mode
[ 1491.998712][T12102] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1492.084236][T12102] bridge_slave_0: left allmulticast mode
[ 1492.084285][T12102] bridge_slave_0: left promiscuous mode
[ 1492.084567][T12102] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1492.176057][T12102] bridge_slave_1: left allmulticast mode
[ 1492.176089][T12102] bridge_slave_1: left promiscuous mode
[ 1492.176353][T12102] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1492.273976][T12102] bridge_slave_0: left allmulticast mode
[ 1492.274007][T12102] bridge_slave_0: left promiscuous mode
[ 1492.274284][T12102] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1492.756837][T15488] comedi comedi0: pcmda12: a I/O base address must be specified
[ 1492.805447][T12102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1492.904157][T12102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1492.996636][T12102] bond0 (unregistering): Released all slaves
[ 1494.153633][ T5801] Bluetooth: hci4: command tx timeout
[ 1494.153644][T10808] Bluetooth: hci2: command tx timeout
[ 1494.233320][T12102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1494.389292][T12102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1494.708486][T12102] bond0 (unregistering): Released all slaves
[ 1495.019211][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1495.019285][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1495.670145][T15363] hsr_slave_0: entered promiscuous mode
[ 1495.671179][T15363] hsr_slave_1: entered promiscuous mode
[ 1495.671890][T15363] debugfs: 'hsr0' already exists in 'hsr'
[ 1495.671907][T15363] Cannot create hsr debugfs directory
[ 1496.088114][T15516] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2545'.
[ 1496.217266][T10808] Bluetooth: hci2: command tx timeout
[ 1496.355115][T15518] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2546'.
[ 1496.355147][T15518] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2546'.
[ 1496.355165][T15518] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2546'.
[ 1496.583466][T15431] chnl_net:caif_netlink_parms(): no params data found
[ 1498.204999][T15544] netlink: 'syz.7.2552': attribute type 11 has an invalid length.
[ 1498.645141][T15549] FAULT_INJECTION: forcing a failure.
[ 1498.645141][T15549] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1498.645212][T15549] CPU: 0 UID: 0 PID: 15549 Comm: syz.0.2553 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1498.645250][T15549] Tainted: [L]=SOFTLOCKUP
[ 1498.645260][T15549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1498.645274][T15549] Call Trace:
[ 1498.645284][T15549]  <TASK>
[ 1498.645294][T15549]  dump_stack_lvl+0xe8/0x150
[ 1498.645331][T15549]  should_fail_ex+0x46c/0x600
[ 1498.645369][T15549]  _copy_from_user+0x2d/0xb0
[ 1498.645393][T15549]  do_tcp_setsockopt+0x47d/0x1f40
[ 1498.645434][T15549]  ? __pfx_do_tcp_setsockopt+0x10/0x10
[ 1498.645476][T15549]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1498.645512][T15549]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1498.645534][T15549]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1498.645556][T15549]  ? mutex_lock_nested+0x154/0x1d0
[ 1498.645583][T15549]  ? sock_common_setsockopt+0x36/0xc0
[ 1498.645604][T15549]  ? tcp_setsockopt+0x3d/0xe0
[ 1498.645633][T15549]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1498.645658][T15549]  smc_setsockopt+0x232/0xab0
[ 1498.645697][T15549]  ? __pfx_smc_setsockopt+0x10/0x10
[ 1498.645727][T15549]  ? __pfx_smc_setsockopt+0x10/0x10
[ 1498.645760][T15549]  ? do_sock_setsockopt+0x15e/0x1b0
[ 1498.645787][T15549]  ? __pfx_smc_setsockopt+0x10/0x10
[ 1498.645821][T15549]  do_sock_setsockopt+0x17c/0x1b0
[ 1498.645853][T15549]  __x64_sys_setsockopt+0x145/0x1b0
[ 1498.645886][T15549]  do_syscall_64+0xec/0xf80
[ 1498.645907][T15549]  ? rcu_is_watching+0x15/0xb0
[ 1498.645927][T15549]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1498.645949][T15549]  ? clear_bhb_loop+0x60/0xb0
[ 1498.645977][T15549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1498.646000][T15549] RIP: 0033:0x7ff0ce51f749
[ 1498.646020][T15549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1498.646040][T15549] RSP: 002b:00007ff0cc744038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1498.646063][T15549] RAX: ffffffffffffffda RBX: 00007ff0ce776180 RCX: 00007ff0ce51f749
[ 1498.646080][T15549] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000005
[ 1498.646093][T15549] RBP: 00007ff0cc744090 R08: 0000000000000004 R09: 0000000000000000
[ 1498.646107][T15549] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[ 1498.646121][T15549] R13: 00007ff0ce776218 R14: 00007ff0ce776180 R15: 00007fffbd19c1b8
[ 1498.646157][T15549]  </TASK>
[ 1499.434950][T12102] hsr_slave_0: left promiscuous mode
[ 1499.483242][T12102] hsr_slave_1: left promiscuous mode
[ 1499.484177][T12102] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1499.523550][T12102] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1499.662854][T12102] hsr_slave_0: left promiscuous mode
[ 1499.682751][T12102] hsr_slave_1: left promiscuous mode
[ 1499.683848][T12102] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1499.734742][T12102] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1500.503492][T12102] team0 (unregistering): Port device team_slave_1 removed
[ 1500.694264][T12102] team0 (unregistering): Port device team_slave_0 removed
[ 1501.953366][T12102] team0 (unregistering): Port device team_slave_1 removed
[ 1502.125208][T12102] team0 (unregistering): Port device team_slave_0 removed
[ 1503.210484][T15431] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1503.210572][T15431] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1503.210737][T15431] bridge_slave_0: entered allmulticast mode
[ 1503.212461][T15431] bridge_slave_0: entered promiscuous mode
[ 1503.261879][T15431] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1503.262094][T15431] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1503.262299][T15431] bridge_slave_1: entered allmulticast mode
[ 1503.319690][ T5972] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[ 1503.332982][T15431] bridge_slave_1: entered promiscuous mode
[ 1503.355972][T15558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1503.356421][T15558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1503.462766][ T5972] usb 8-1: Using ep0 maxpacket: 32
[ 1503.509416][ T5972] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1503.509451][ T5972] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255
[ 1503.513570][ T5972] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[ 1503.513593][ T5972] usb 8-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[ 1503.513608][ T5972] usb 8-1: Product: syz
[ 1503.513619][ T5972] usb 8-1: Manufacturer: syz
[ 1503.513631][ T5972] usb 8-1: SerialNumber: syz
[ 1503.578070][ T5972] usb 8-1: config 0 descriptor??
[ 1503.582024][T15553] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1503.664938][ T5972] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1504.062182][T15553] netlink: 65055 bytes leftover after parsing attributes in process `syz.7.2555'.
[ 1504.067225][T15431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1504.095749][T12214] usb 8-1: Failed to submit usb control message: -71
[ 1504.095795][T12214] usb 8-1: unable to send the bmi data to the device: -71
[ 1504.095816][T12214] usb 8-1: unable to get target info from device
[ 1504.095861][T12214] usb 8-1: could not get target info (-71)
[ 1504.096393][T12214] usb 8-1: could not probe fw (-71)
[ 1504.137238][ T6270] usb 8-1: USB disconnect, device number 39
[ 1504.156680][T15431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1504.554723][T15431] team0: Port device team_slave_0 added
[ 1504.616762][T15431] team0: Port device team_slave_1 added
[ 1504.617179][T15464] chnl_net:caif_netlink_parms(): no params data found
[ 1504.708403][ T5972] IPVS: starting estimator thread 0...
[ 1504.793120][T15569] IPVS: using max 9 ests per chain, 21600 per kthread
[ 1505.084137][T15431] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1505.084154][T15431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1505.084179][T15431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1505.285756][T15431] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1505.285775][T15431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1505.285805][T15431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1505.421197][T15363] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1505.446101][T15578] netlink: 'syz.0.2561': attribute type 1 has an invalid length.
[ 1505.472883][T15363] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1505.532221][T15363] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1506.819033][T15592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2564'.
[ 1507.095853][T15363] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1509.101664][T15600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1509.102044][T15600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1509.139615][T15600] FAULT_INJECTION: forcing a failure.
[ 1509.139615][T15600] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1509.139642][T15600] CPU: 0 UID: 0 PID: 15600 Comm: syz.0.2566 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1509.139663][T15600] Tainted: [L]=SOFTLOCKUP
[ 1509.139669][T15600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1509.139680][T15600] Call Trace:
[ 1509.139686][T15600]  <TASK>
[ 1509.139693][T15600]  dump_stack_lvl+0xe8/0x150
[ 1509.139720][T15600]  should_fail_ex+0x46c/0x600
[ 1509.139745][T15600]  _copy_to_user+0x31/0xb0
[ 1509.139761][T15600]  simple_read_from_buffer+0xe1/0x170
[ 1509.139781][T15600]  proc_fail_nth_read+0x1b6/0x220
[ 1509.139807][T15600]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1509.139832][T15600]  ? rw_verify_area+0x2ac/0x4e0
[ 1509.139853][T15600]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1509.139876][T15600]  vfs_read+0x206/0xa30
[ 1509.139903][T15600]  ? __pfx_vfs_read+0x10/0x10
[ 1509.139926][T15600]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1509.139942][T15600]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1509.139957][T15600]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1509.139972][T15600]  ? mutex_lock_nested+0x154/0x1d0
[ 1509.140011][T15600]  ? fdget_pos+0x253/0x320
[ 1509.140035][T15600]  ksys_read+0x14b/0x260
[ 1509.140056][T15600]  ? __fget_files+0x3a6/0x420
[ 1509.140074][T15600]  ? __pfx_ksys_read+0x10/0x10
[ 1509.140105][T15600]  do_syscall_64+0xec/0xf80
[ 1509.140135][T15600]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1509.140151][T15600]  ? trace_irq_disable+0x37/0x100
[ 1509.140167][T15600]  ? clear_bhb_loop+0x60/0xb0
[ 1509.140188][T15600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1509.140204][T15600] RIP: 0033:0x7ff0ce51e15c
[ 1509.140218][T15600] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1509.140232][T15600] RSP: 002b:00007ff0cc786030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1509.140248][T15600] RAX: ffffffffffffffda RBX: 00007ff0ce775fa0 RCX: 00007ff0ce51e15c
[ 1509.140260][T15600] RDX: 000000000000000f RSI: 00007ff0cc7860a0 RDI: 0000000000000004
[ 1509.140270][T15600] RBP: 00007ff0cc786090 R08: 0000000000000000 R09: 0000000000000000
[ 1509.140280][T15600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1509.140289][T15600] R13: 00007ff0ce776038 R14: 00007ff0ce775fa0 R15: 00007fffbd19c1b8
[ 1509.140313][T15600]  </TASK>
[ 1509.179352][T15464] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1509.179562][T15464] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1509.179809][T15464] bridge_slave_0: entered allmulticast mode
[ 1509.182418][T15464] bridge_slave_0: entered promiscuous mode
[ 1509.197690][T15431] hsr_slave_0: entered promiscuous mode
[ 1509.198791][T15431] hsr_slave_1: entered promiscuous mode
[ 1509.199522][T15431] debugfs: 'hsr0' already exists in 'hsr'
[ 1509.199540][T15431] Cannot create hsr debugfs directory
[ 1509.203122][T15464] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1509.203251][T15464] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1509.203471][T15464] bridge_slave_1: entered allmulticast mode
[ 1509.206283][T15464] bridge_slave_1: entered promiscuous mode
[ 1510.275052][T15610] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1510.275259][T15610] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1510.275275][T15610] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1510.275285][T15610] UDF-fs: Scanning with blocksize 512 failed
[ 1510.276140][T15610] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1510.276270][T15610] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1510.276284][T15610] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1510.276294][T15610] UDF-fs: Scanning with blocksize 1024 failed
[ 1510.276815][T15610] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1510.276939][T15610] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1510.276952][T15610] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1510.276961][T15610] UDF-fs: Scanning with blocksize 2048 failed
[ 1510.277390][T15610] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1510.277470][T15610] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1510.277484][T15610] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1510.277493][T15610] UDF-fs: Scanning with blocksize 4096 failed
[ 1510.277500][T15610] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1)
[ 1511.416423][T15464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1511.458440][T15464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1511.780730][T15615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1511.781034][T15615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1511.879120][T15618] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1511.892899][T15618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1511.894156][T15618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1513.715907][T15626] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1513.723920][T15626] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1513.723969][T15626] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1513.724006][T15626] UDF-fs: Scanning with blocksize 512 failed
[ 1513.769225][T15626] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1513.774753][T15626] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1513.774804][T15626] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1513.774842][T15626] UDF-fs: Scanning with blocksize 1024 failed
[ 1513.799796][T15626] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1513.804992][T15626] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1513.805041][T15626] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1513.805079][T15626] UDF-fs: Scanning with blocksize 2048 failed
[ 1513.827402][T15626] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1513.831140][T15626] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1513.831224][T15626] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1513.831261][T15626] UDF-fs: Scanning with blocksize 4096 failed
[ 1513.831298][T15626] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1)
[ 1515.156540][T15464] team0: Port device team_slave_0 added
[ 1516.635331][T15639] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2574'.
[ 1516.699094][T15464] team0: Port device team_slave_1 added
[ 1517.613337][T15643] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1517.614356][T15643] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1517.614397][T15643] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1517.614449][T15643] UDF-fs: Scanning with blocksize 512 failed
[ 1517.618042][T15643] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1517.618664][T15643] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1517.618701][T15643] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1517.618733][T15643] UDF-fs: Scanning with blocksize 1024 failed
[ 1517.621309][T15643] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1517.621725][T15643] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1517.621763][T15643] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1517.621797][T15643] UDF-fs: Scanning with blocksize 2048 failed
[ 1517.623931][T15643] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1517.624368][T15643] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1517.624414][T15643] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1517.624461][T15643] UDF-fs: Scanning with blocksize 4096 failed
[ 1517.624501][T15643] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1)
[ 1519.148310][T15464] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1519.148330][T15464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1519.148361][T15464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1519.297596][T15464] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1519.297610][T15464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1519.297631][T15464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1520.631608][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1520.649219][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1520.650931][ T5801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1520.687230][ T5801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1520.689355][ T5801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1522.500199][T15464] hsr_slave_0: entered promiscuous mode
[ 1522.501636][T15464] hsr_slave_1: entered promiscuous mode
[ 1522.516000][T15464] debugfs: 'hsr0' already exists in 'hsr'
[ 1522.516032][T15464] Cannot create hsr debugfs directory
[ 1522.743549][T15663] FAULT_INJECTION: forcing a failure.
[ 1522.743549][T15663] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1522.743582][T15663] CPU: 0 UID: 0 PID: 15663 Comm: syz.0.2583 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1522.743607][T15663] Tainted: [L]=SOFTLOCKUP
[ 1522.743614][T15663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1522.743625][T15663] Call Trace:
[ 1522.743633][T15663]  <TASK>
[ 1522.743641][T15663]  dump_stack_lvl+0xe8/0x150
[ 1522.743672][T15663]  should_fail_ex+0x46c/0x600
[ 1522.743702][T15663]  _copy_from_user+0x2d/0xb0
[ 1522.743720][T15663]  do_ipv6_setsockopt+0x23e/0x2eb0
[ 1522.743754][T15663]  ? kstrtoull+0x12f/0x1d0
[ 1522.743777][T15663]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[ 1522.743805][T15663]  ? kstrtouint+0x6e/0xe0
[ 1522.743829][T15663]  ? get_pid_task+0x20/0x1f0
[ 1522.743865][T15663]  ? __lock_acquire+0x6b6/0x2cf0
[ 1522.743899][T15663]  ? get_pid_task+0x20/0x1f0
[ 1522.743926][T15663]  ? get_pid_task+0x20/0x1f0
[ 1522.743972][T15663]  ? __lock_acquire+0x6b6/0x2cf0
[ 1522.744004][T15663]  ? do_raw_spin_lock+0x121/0x290
[ 1522.744042][T15663]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1522.744070][T15663]  ipv6_setsockopt+0x59/0x170
[ 1522.744094][T15663]  rawv6_setsockopt+0x23b/0x5b0
[ 1522.744121][T15663]  ? __pfx_rawv6_setsockopt+0x10/0x10
[ 1522.744146][T15663]  ? sock_common_setsockopt+0x36/0xc0
[ 1522.744167][T15663]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1522.744191][T15663]  do_sock_setsockopt+0x17c/0x1b0
[ 1522.744229][T15663]  __x64_sys_setsockopt+0x145/0x1b0
[ 1522.744287][T15663]  do_syscall_64+0xec/0xf80
[ 1522.744308][T15663]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1522.744331][T15663]  ? trace_irq_disable+0x37/0x100
[ 1522.744356][T15663]  ? clear_bhb_loop+0x60/0xb0
[ 1522.744384][T15663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1522.744406][T15663] RIP: 0033:0x7ff0ce51f749
[ 1522.744426][T15663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1522.744446][T15663] RSP: 002b:00007ff0cc744038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1522.744469][T15663] RAX: ffffffffffffffda RBX: 00007ff0ce776180 RCX: 00007ff0ce51f749
[ 1522.744486][T15663] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000004
[ 1522.744500][T15663] RBP: 00007ff0cc744090 R08: 0000000000000004 R09: 0000000000000000
[ 1522.744515][T15663] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[ 1522.744529][T15663] R13: 00007ff0ce776218 R14: 00007ff0ce776180 R15: 00007fffbd19c1b8
[ 1522.744565][T15663]  </TASK>
[ 1522.803013][T10808] Bluetooth: hci5: command tx timeout
[ 1523.119116][T15661] pim6reg: entered allmulticast mode
[ 1524.491488][T15674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2585'.
[ 1524.750594][T15670] pim6reg: entered allmulticast mode
[ 1524.750756][T15671] bridge0: entered allmulticast mode
[ 1524.750944][T15672] pim6reg: left allmulticast mode
[ 1524.751050][T15672] bridge0: left allmulticast mode
[ 1524.842679][T10808] Bluetooth: hci5: command tx timeout
[ 1526.908321][T15682] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1526.909248][T15682] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1526.909288][T15682] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1526.909333][T15682] UDF-fs: Scanning with blocksize 512 failed
[ 1526.913151][T15682] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1526.913693][T15682] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1526.913732][T15682] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1526.913778][T15682] UDF-fs: Scanning with blocksize 1024 failed
[ 1526.916388][T15682] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1526.917218][T15682] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1526.917256][T15682] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1526.917289][T15682] UDF-fs: Scanning with blocksize 2048 failed
[ 1526.919412][T15682] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1526.919757][T15682] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1526.919795][T15682] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1526.919830][T15682] UDF-fs: Scanning with blocksize 4096 failed
[ 1526.919864][T15682] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[ 1527.238063][T10808] Bluetooth: hci5: command tx timeout
[ 1527.959109][T12102] bridge_slave_1: left allmulticast mode
[ 1527.959132][T12102] bridge_slave_1: left promiscuous mode
[ 1527.959338][T12102] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1528.804272][T12102] bridge_slave_0: left allmulticast mode
[ 1528.804323][T12102] bridge_slave_0: left promiscuous mode
[ 1528.804650][T12102] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1529.093021][T12102] bridge_slave_1: left allmulticast mode
[ 1529.093052][T12102] bridge_slave_1: left promiscuous mode
[ 1529.093284][T12102] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1529.263232][T10808] Bluetooth: hci5: command tx timeout
[ 1530.339387][   T38] INFO: task kworker/1:1:13312 blocked for more than 144 seconds.
[ 1530.339417][   T38]       Tainted: G             L      syzkaller #0
[ 1530.339431][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1530.339443][   T38] task:kworker/1:1     state:D stack:21760 pid:13312 tgid:13312 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1530.339509][   T38] Workqueue: usb_hub_wq hub_event
[ 1530.339541][   T38] Call Trace:
[ 1530.339549][   T38]  <TASK>
[ 1530.339565][   T38]  __schedule+0x145f/0x5070
[ 1530.339617][   T38]  ? really_probe+0x26d/0xad0
[ 1530.339662][   T38]  ? __pfx___schedule+0x10/0x10
[ 1530.339714][   T38]  ? schedule+0x91/0x360
[ 1530.339752][   T38]  schedule+0x165/0x360
[ 1530.339790][   T38]  schedule_timeout+0x9a/0x270
[ 1530.339826][   T38]  ? __pfx_schedule_timeout+0x10/0x10
[ 1530.339861][   T38]  ? do_raw_spin_lock+0x121/0x290
[ 1530.339901][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1530.339923][   T38]  ? wait_for_completion+0x267/0x5d0
[ 1530.339947][   T38]  wait_for_completion+0x2bf/0x5d0
[ 1530.339984][   T38]  ? __pfx_wait_for_completion+0x10/0x10
[ 1530.340023][   T38]  i2c_del_adapter+0x591/0x760
[ 1530.340061][   T38]  ? __pfx_i2c_del_adapter+0x10/0x10
[ 1530.340084][   T38]  ? rcu_is_watching+0x15/0xb0
[ 1530.340107][   T38]  ? kfree+0x4d/0x900
[ 1530.340146][   T38]  dvb_usb_i2c_exit+0x64/0xb0
[ 1530.340181][   T38]  dvb_usb_device_exit+0x1be/0x350
[ 1530.340216][   T38]  ? __pfx_dvb_usb_device_exit+0x10/0x10
[ 1530.340259][   T38]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1530.340297][   T38]  cxusb_probe+0x603/0x700
[ 1530.340335][   T38]  ? __pfx_cxusb_probe+0x10/0x10
[ 1530.340371][   T38]  ? __pm_runtime_set_status+0x743/0xa20
[ 1530.340406][   T38]  usb_probe_interface+0x668/0xc90
[ 1530.340452][   T38]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1530.340484][   T38]  really_probe+0x26d/0xad0
[ 1530.340520][   T38]  __driver_probe_device+0x18c/0x320
[ 1530.340552][   T38]  driver_probe_device+0x4f/0x240
[ 1530.340585][   T38]  __device_attach_driver+0x279/0x430
[ 1530.340618][   T38]  bus_for_each_drv+0x254/0x2e0
[ 1530.340654][   T38]  ? __pfx___device_attach_driver+0x10/0x10
[ 1530.340689][   T38]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1530.340725][   T38]  ? rt_spin_unlock+0x161/0x200
[ 1530.340764][   T38]  __device_attach+0x2bb/0x430
[ 1530.340794][   T38]  ? __pfx___device_attach+0x10/0x10
[ 1530.340820][   T38]  ? rt_spin_unlock+0x161/0x200
[ 1530.340860][   T38]  device_initial_probe+0xa1/0xd0
[ 1530.340889][   T38]  bus_probe_device+0x12d/0x220
[ 1530.340921][   T38]  ? device_add+0x726/0xb80
[ 1530.340948][   T38]  device_add+0x7b6/0xb80
[ 1530.340977][   T38]  usb_set_configuration+0x1a87/0x2110
[ 1530.341040][   T38]  usb_generic_driver_probe+0x8d/0x150
[ 1530.341074][   T38]  usb_probe_device+0x1c4/0x3c0
[ 1530.341111][   T38]  ? __pfx_usb_probe_device+0x10/0x10
[ 1530.341142][   T38]  really_probe+0x26d/0xad0
[ 1530.341177][   T38]  __driver_probe_device+0x18c/0x320
[ 1530.341208][   T38]  driver_probe_device+0x4f/0x240
[ 1530.341240][   T38]  __device_attach_driver+0x279/0x430
[ 1530.341273][   T38]  bus_for_each_drv+0x254/0x2e0
[ 1530.341308][   T38]  ? __pfx___device_attach_driver+0x10/0x10
[ 1530.341336][   T38]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1530.341371][   T38]  ? rt_spin_unlock+0x161/0x200
[ 1530.341410][   T38]  __device_attach+0x2bb/0x430
[ 1530.341440][   T38]  ? __pfx___device_attach+0x10/0x10
[ 1530.341467][   T38]  ? rt_spin_unlock+0x161/0x200
[ 1530.341507][   T38]  device_initial_probe+0xa1/0xd0
[ 1530.341535][   T38]  bus_probe_device+0x12d/0x220
[ 1530.341566][   T38]  ? device_add+0x726/0xb80
[ 1530.341591][   T38]  device_add+0x7b6/0xb80
[ 1530.341620][   T38]  usb_new_device+0xa29/0x1710
[ 1530.341660][   T38]  ? __pfx_usb_new_device+0x10/0x10
[ 1530.341704][   T38]  hub_event+0x29de/0x4f30
[ 1530.341790][   T38]  ? __pfx_hub_event+0x10/0x10
[ 1530.341820][   T38]  ? process_scheduled_works+0x9ef/0x1770
[ 1530.341856][   T38]  ? process_scheduled_works+0x9ef/0x1770
[ 1530.341882][   T38]  ? process_scheduled_works+0x9ef/0x1770
[ 1530.341910][   T38]  process_scheduled_works+0xad1/0x1770
[ 1530.341970][   T38]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1530.341994][   T38]  ? do_raw_spin_lock+0x121/0x290
[ 1530.342039][   T38]  worker_thread+0x8a0/0xda0
[ 1530.342080][   T38]  ? __kthread_parkme+0x7b/0x200
[ 1530.342119][   T38]  kthread+0x711/0x8a0
[ 1530.342156][   T38]  ? __pfx_worker_thread+0x10/0x10
[ 1530.342182][   T38]  ? __pfx_kthread+0x10/0x10
[ 1530.342212][   T38]  ? rt_spin_unlock+0x150/0x200
[ 1530.342248][   T38]  ? rt_spin_unlock+0x161/0x200
[ 1530.342277][   T38]  ? __pfx_kthread+0x10/0x10
[ 1530.342311][   T38]  ret_from_fork+0x510/0xa50
[ 1530.342338][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1530.342362][   T38]  ? __switch_to+0xc9e/0x1480
[ 1530.342402][   T38]  ? __pfx_kthread+0x10/0x10
[ 1530.342437][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1530.342524][   T38]  </TASK>
[ 1530.342571][   T38] 
[ 1530.342571][   T38] Showing all locks held in the system:
[ 1530.342582][   T38] 3 locks held by kworker/u8:1/13:
[ 1530.342595][   T38]  #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 1530.342664][   T38]  #1: ffffc90000127bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 1530.342725][   T38]  #2: ffffffff8e8a58b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1530.342787][   T38] 7 locks held by ktimers/0/16:
[ 1530.342800][   T38]  #0: ffffffff8d44eac0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1530.342855][   T38]  #1: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1530.342908][   T38]  #2: ffff8880b8824358 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xb6/0x540
[ 1530.342967][   T38]  #3: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0
[ 1530.343023][   T38]  #4: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: ieee80211_rx_napi+0xca/0x3d0
[ 1530.343078][   T38]  #5: ffffffff8d44eac0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1530.343132][   T38]  #6: ffff88805c270228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_inform_single_bss_data+0xbca/0x1ab0
[ 1530.343190][   T38] 2 locks held by ktimers/1/29:
[ 1530.343203][   T38] 1 lock held by khungtaskd/38:
[ 1530.343216][   T38]  #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1530.343282][   T38] 4 locks held by kworker/u8:3/44:
[ 1530.343321][   T38] 2 locks held by getty/5555:
[ 1530.343334][   T38]  #0: ffff88814e62a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1530.343392][   T38]  #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460
[ 1530.343441][   T38] 1 lock held by syz-executor/5809:
[ 1530.343457][   T38] 3 locks held by kworker/1:11/6270:
[ 1530.343469][   T38]  #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 1530.343524][   T38]  #1: ffffc90007b2fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 1530.343577][   T38]  #2: ffffffff8e8a58b8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[ 1530.343629][   T38] 7 locks held by kworker/u8:20/7501:
[ 1530.343643][   T38] 4 locks held by kworker/u8:24/12102:
[ 1530.343656][   T38]  #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 1530.343714][   T38]  #1: ffffc9000412fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 1530.343767][   T38]  #2: ffffffff8e898780 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0
[ 1530.343819][   T38]  #3: ffffffff8e8a58b8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990
[ 1530.343872][   T38] 5 locks held by kworker/1:1/13312:
[ 1530.343885][   T38]  #0: ffff888141eca938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 1530.343939][   T38]  #1: ffffc9000415fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 1530.343996][   T38]  #2: ffff88802780a188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4f30
[ 1530.344052][   T38]  #3: ffff888058548188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430
[ 1530.344104][   T38]  #4: ffff88801f315150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430
[ 1530.344159][   T38] 7 locks held by syz-executor/15431:
[ 1530.344171][   T38]  #0: ffff888034e96480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40
[ 1530.344236][   T38]  #1: ffff88805a0ea478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1530.344292][   T38]  #2: ffff888026ae32d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1530.344351][   T38]  #3: ffffffff8e12c678 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[ 1530.344403][   T38]  #4: ffff8880335f40d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800
[ 1530.344457][   T38]  #5: ffff8880268d1300 (&devlink->lock_key#20){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[ 1530.344518][   T38]  #6: ffffffff8e8a58b8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xed/0x680
[ 1530.344567][   T38] 2 locks held by syz-executor/15464:
[ 1530.344580][   T38]  #0: ffffffff8edb50a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1530.344640][   T38]  #1: ffffffff8e8a58b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90
[ 1530.344701][   T38] 2 locks held by syz-executor/15653:
[ 1530.344714][   T38]  #0: ffffffff8e898780 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570
[ 1530.344763][   T38]  #1: ffffffff8e8a58b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60
[ 1530.344821][   T38] 
[ 1530.344828][   T38] =============================================
[ 1530.344828][   T38] 
[ 1530.344843][   T38] NMI backtrace for cpu 1
[ 1530.344863][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1530.344893][   T38] Tainted: [L]=SOFTLOCKUP
[ 1530.344902][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1530.344915][   T38] Call Trace:
[ 1530.344925][   T38]  <TASK>
[ 1530.344934][   T38]  dump_stack_lvl+0xe8/0x150
[ 1530.344968][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[ 1530.344998][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1530.345025][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1530.345060][   T38]  sys_info+0x135/0x170
[ 1530.345085][   T38]  watchdog+0xf95/0xfe0
[ 1530.345117][   T38]  ? watchdog+0x20a/0xfe0
[ 1530.345151][   T38]  kthread+0x711/0x8a0
[ 1530.345186][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1530.345212][   T38]  ? __pfx_kthread+0x10/0x10
[ 1530.345241][   T38]  ? rt_spin_unlock+0x150/0x200
[ 1530.345276][   T38]  ? rt_spin_unlock+0x161/0x200
[ 1530.345304][   T38]  ? __pfx_kthread+0x10/0x10
[ 1530.345336][   T38]  ret_from_fork+0x510/0xa50
[ 1530.345364][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1530.345388][   T38]  ? __switch_to+0xc9e/0x1480
[ 1530.345427][   T38]  ? __pfx_kthread+0x10/0x10
[ 1530.345461][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1530.345524][   T38]  </TASK>
[ 1530.345532][   T38] Sending NMI from CPU 1 to CPUs 0:
[ 1530.345563][    C0] NMI backtrace for cpu 0
[ 1530.345580][    C0] CPU: 0 UID: 0 PID: 5809 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1530.345607][    C0] Tainted: [L]=SOFTLOCKUP
[ 1530.345615][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1530.345627][    C0] RIP: 0010:__lock_acquire+0x2bf/0x2cf0
[ 1530.345656][    C0] Code: 24 18 0f 83 14 28 00 00 48 89 6c 24 28 48 8d 04 ad 00 00 00 00 48 01 e8 89 f1 81 e1 ff 1f 00 00 ba 00 e0 ff ff 41 23 54 c7 20 <09> ca 41 89 54 c7 20 4d 89 44 c7 08 4d 89 4c c7 10 48 8b 94 24 20
[ 1530.345674][    C0] RSP: 0018:ffffc90004bef050 EFLAGS: 00000006
[ 1530.345691][    C0] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 000000000000000b
[ 1530.345703][    C0] RDX: 0000000000020000 RSI: 000000000000000b RDI: 0000000000000000
[ 1530.345715][    C0] RBP: 0000000000000001 R08: ffffffff8173dd35 R09: ffffffff8d5ae940
[ 1530.345729][    C0] R10: ffffc90004bef358 R11: ffffffff81ab9830 R12: 0000000000000000
[ 1530.345743][    C0] R13: 0000000000000002 R14: ffff888024723c80 R15: ffff888024724810
[ 1530.345758][    C0] FS:  000055555bfc0500(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000
[ 1530.345775][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1530.345788][    C0] CR2: 000000110c3e1da8 CR3: 0000000041b5c000 CR4: 00000000003526f0
[ 1530.345806][    C0] Call Trace:
[ 1530.345813][    C0]  <TASK>
[ 1530.345823][    C0]  ? __lock_acquire+0x6b6/0x2cf0
[ 1530.345853][    C0]  ? unwind_next_frame+0xa5/0x23d0
[ 1530.345883][    C0]  ? unwind_next_frame+0xa5/0x23d0
[ 1530.345908][    C0]  lock_acquire+0x107/0x340
[ 1530.345938][    C0]  ? unwind_next_frame+0xa5/0x23d0
[ 1530.345967][    C0]  ? unwind_next_frame+0xa5/0x23d0
[ 1530.345991][    C0]  ? shmem_evict_inode+0x26e/0xa70
[ 1530.346010][    C0]  ? unwind_next_frame+0xa5/0x23d0
[ 1530.346034][    C0]  unwind_next_frame+0xc2/0x23d0
[ 1530.346059][    C0]  ? unwind_next_frame+0xa5/0x23d0
[ 1530.346087][    C0]  ? unwind_next_frame+0xa5/0x23d0
[ 1530.346112][    C0]  ? shmem_undo_range+0x49e/0x1490
[ 1530.346138][    C0]  ? shmem_evict_inode+0x26e/0xa70
[ 1530.346157][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1530.346183][    C0]  arch_stack_walk+0x11c/0x150
[ 1530.346210][    C0]  ? shmem_evict_inode+0x26e/0xa70
[ 1530.346230][    C0]  stack_trace_save+0x9c/0xe0
[ 1530.346253][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1530.346278][    C0]  ? stack_depot_save_flags+0x33/0x810
[ 1530.346307][    C0]  save_stack+0xf7/0x1f0
[ 1530.346336][    C0]  ? __pfx_save_stack+0x10/0x10
[ 1530.346362][    C0]  ? free_unref_folios+0xc28/0x1810
[ 1530.346391][    C0]  ? folios_put_refs+0x569/0x670
[ 1530.346408][    C0]  ? shmem_undo_range+0x49e/0x1490
[ 1530.346432][    C0]  ? shmem_evict_inode+0x26e/0xa70
[ 1530.346459][    C0]  __reset_page_owner+0x71/0x1f0
[ 1530.346488][    C0]  free_unref_folios+0xc28/0x1810
[ 1530.346523][    C0]  ? rt_spin_unlock+0x161/0x200
[ 1530.346550][    C0]  folios_put_refs+0x569/0x670
[ 1530.346572][    C0]  ? __pfx_folios_put_refs+0x10/0x10
[ 1530.346592][    C0]  ? folio_batch_remove_exceptionals+0x18c/0x1f0
[ 1530.346615][    C0]  shmem_undo_range+0x49e/0x1490
[ 1530.346648][    C0]  ? __pfx_shmem_undo_range+0x10/0x10
[ 1530.346705][    C0]  ? do_raw_spin_lock+0x121/0x290
[ 1530.346732][    C0]  shmem_evict_inode+0x26e/0xa70
[ 1530.346751][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1530.346770][    C0]  ? rt_mutex_slowunlock+0x493/0x8a0
[ 1530.346796][    C0]  ? __pfx_shmem_evict_inode+0x10/0x10
[ 1530.346816][    C0]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1530.346844][    C0]  ? rt_spin_unlock+0x150/0x200
[ 1530.346871][    C0]  ? rt_spin_unlock+0x161/0x200
[ 1530.346896][    C0]  ? __pfx_shmem_evict_inode+0x10/0x10
[ 1530.346915][    C0]  evict+0x5f4/0xae0
[ 1530.346950][    C0]  ? __pfx_evict+0x10/0x10
[ 1530.346974][    C0]  ? rt_spin_unlock+0x161/0x200
[ 1530.347002][    C0]  ? iput+0xcc6/0x1030
[ 1530.347026][    C0]  do_unlinkat+0x340/0x570
[ 1530.347058][    C0]  ? __pfx_do_unlinkat+0x10/0x10
[ 1530.347089][    C0]  ? getname_flags+0x1e5/0x540
[ 1530.347110][    C0]  __x64_sys_unlink+0x47/0x50
[ 1530.347138][    C0]  do_syscall_64+0xec/0xf80
[ 1530.347156][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1530.347175][    C0]  ? trace_irq_disable+0x37/0x100
[ 1530.347196][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1530.347218][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1530.347237][    C0] RIP: 0033:0x7ff0ce51ecf7
[ 1530.347253][    C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1530.347270][    C0] RSP: 002b:00007fffbd19b448 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[ 1530.347288][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff0ce51ecf7
[ 1530.347301][    C0] RDX: 00007fffbd19b470 RSI: 00007fffbd19b500 RDI: 00007fffbd19b500
[ 1530.347315][    C0] RBP: 00007fffbd19b500 R08: 0000000000000000 R09: 0000000000000000
[ 1530.347327][    C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fffbd19c590
[ 1530.347341][    C0] R13: 00007ff0ce5a3d7d R14: 0000000000174c0b R15: 00007fffbd19c5d0
[ 1530.347363][    C0]  </TASK>
[ 1530.347567][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 1530.347590][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1530.347619][   T38] Tainted: [L]=SOFTLOCKUP
[ 1530.347628][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1530.347642][   T38] Call Trace:
[ 1530.347650][   T38]  <TASK>
[ 1530.347660][   T38]  vpanic+0x1e0/0x670
[ 1530.347738][   T38]  panic+0xb9/0xc0
[ 1530.347769][   T38]  ? __pfx_panic+0x10/0x10
[ 1530.347813][   T38]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[ 1530.347848][   T38]  watchdog+0xfdf/0xfe0
[ 1530.347879][   T38]  ? watchdog+0x20a/0xfe0
[ 1530.347914][   T38]  kthread+0x711/0x8a0
[ 1530.347949][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1530.347974][   T38]  ? __pfx_kthread+0x10/0x10
[ 1530.348005][   T38]  ? rt_spin_unlock+0x150/0x200
[ 1530.348040][   T38]  ? rt_spin_unlock+0x161/0x200
[ 1530.348068][   T38]  ? __pfx_kthread+0x10/0x10
[ 1530.348102][   T38]  ret_from_fork+0x510/0xa50
[ 1530.348129][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1530.348152][   T38]  ? __switch_to+0xc9e/0x1480
[ 1530.348192][   T38]  ? __pfx_kthread+0x10/0x10
[ 1530.348226][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1530.348277][   T38]  </TASK>
[ 1530.348874][   T38] Kernel Offset: disabled