last executing test programs:

7m49.474369463s ago: executing program 3 (id=4):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000008b80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private2, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x240408d1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
wait4(r3, 0x0, 0xb, &(0x7f0000000580))
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0)
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r7, r6, 0x0, 0x3a)
ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, &(0x7f0000000200))
ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000340))
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000171401", @ANYBLOB="8ab5723583"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc)

7m46.977019357s ago: executing program 3 (id=6):
socket(0x10, 0x803, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
munmap(&(0x7f0000294000/0x1000)=nil, 0x1000)
syz_clone(0x400100, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
socket(0xa, 0xa, 0x8003a)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)

7m31.197428503s ago: executing program 32 (id=6):
socket(0x10, 0x803, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
munmap(&(0x7f0000294000/0x1000)=nil, 0x1000)
syz_clone(0x400100, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
socket(0xa, 0xa, 0x8003a)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)

7m0.812330893s ago: executing program 4 (id=60):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

6m59.442109358s ago: executing program 4 (id=62):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000008b80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private2, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x240408d1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
wait4(r3, 0x0, 0xb, &(0x7f0000000580))
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2a00}, 0x50)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0)
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r7, r6, 0x0, 0x3a)
ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, &(0x7f0000000200))
ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000340))
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="8ab5723583"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc)

6m56.632866874s ago: executing program 4 (id=65):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x840)

6m50.581373367s ago: executing program 4 (id=72):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x8f0c82, 0x0)
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/197, 0xc5}], 0x1)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)={0xa002, 0x2, 0x11}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r2 = fcntl$getown(r1, 0x9)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_aout(r3, &(0x7f0000000700)={{0x108, 0xc, 0xfe, 0x2fb, 0x112, 0x5, 0x169, 0x2}, "8215daf9f6bf9f0700ec2dc78ae6f4684306948d25778896cadf3e9feb9e1dcb5820fd54537329822c78ca17e2af43f601b3d775e5668e416c59c7a31966ecd77226526e6af77bc4d88ff90ebca6a31408bcd28df35db949660a4faf0e4038d25bb18fd1552769b9031531f0b5228fdc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x690)
sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x7)
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0xc14c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
keyctl$clear(0x3, 0xfffffffffffffffd)
r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
r7 = socket$inet(0x2, 0x2, 0x80000000)
setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="8d", 0x1, 0x40000, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r6}})

6m48.233726488s ago: executing program 4 (id=73):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_mreqn(r0, 0x0, 0x32, 0x0, &(0x7f00000005c0))

6m44.404042255s ago: executing program 4 (id=83):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153, 0x41000}, 0x94)
socket$kcm(0xa, 0x1, 0x106) (async)
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4)
recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000000)=""/217, 0xd9, 0x10042, 0x0, 0x0)

6m44.059184603s ago: executing program 33 (id=83):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153, 0x41000}, 0x94)
socket$kcm(0xa, 0x1, 0x106) (async)
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4)
recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000000)=""/217, 0xd9, 0x10042, 0x0, 0x0)

2m39.767082188s ago: executing program 0 (id=1340):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x48)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c081)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

2m37.370721717s ago: executing program 0 (id=1343):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0xfffffff7, 0x9, 0x0, 0x1, 0x2, 0x2, 0x55, 0xf, 0x800, 0xf1, 0x1fc000, 0x9, 0x7fff, 0xb, 0x11, 0x12, {0x100, 0xadd}, 0xc8, 0x1}})

2m35.156055939s ago: executing program 0 (id=1344):
socket$unix(0x1, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000)
sendmsg(0xffffffffffffffff, &(0x7f00000053c0)={0x0, 0x0, 0x0}, 0x80)
ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0))

2m35.080998386s ago: executing program 0 (id=1345):
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x65, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x1b, 0x1, 0x0, "d020670f6edd9a2ad5b4f84e565c6f0f30807278f8983c3c0a31965ebd9ca8ac"})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r5, 0x0, <r6=>0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r5, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x1000})
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
read$midi(r0, &(0x7f0000000580)=""/151, 0x97)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newsa={0x100, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9}, {0x5, 0xffffffffffffffff, 0x0, 0x3}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x100}}, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x48000)
close(r7)

2m33.386061817s ago: executing program 0 (id=1349):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10000, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r2, 0x6, 0x0, 0x0, 0x9, 0x74, 0xc45, 0x5500, 0x42, 0x0, 0x7, 'syz0\x00'})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

2m33.063881285s ago: executing program 0 (id=1350):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmmsg(r1, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f00000051c0)=""/264, 0x108}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000006980)=""/4097, 0x1001}, {&(0x7f0000003a40)=""/131, 0x83}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/139, 0x8b}, {&(0x7f0000004b80)=""/130, 0x82}, {&(0x7f0000004c40)=""/34, 0x22}], 0x8}, 0xd}], 0x1, 0x60, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) (async)
socket$kcm(0x10, 0x400000002, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async)
recvmmsg(r1, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f00000051c0)=""/264, 0x108}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000006980)=""/4097, 0x1001}, {&(0x7f0000003a40)=""/131, 0x83}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/139, 0x8b}, {&(0x7f0000004b80)=""/130, 0x82}, {&(0x7f0000004c40)=""/34, 0x22}], 0x8}, 0xd}], 0x1, 0x60, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async)
bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)

1m43.155948289s ago: executing program 1 (id=1476):
r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0)
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000000314010025bd7000ffdbdf250900020073797a31000000000800410073697700140055"], 0x38}, 0x1, 0x0, 0x0, 0x44011}, 0x4000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x10000}, 0x28)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80", @ANYRES16], 0x44}}, 0x2000800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)

1m43.059460323s ago: executing program 1 (id=1478):
setregid(0xee00, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000080)={0x233, 0x7d, 0x2, {{0x500, 0xf2, 0x0, 0x4, {0x0, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0xf, '\xcf\xc2m\xd7\xc5\xb4\x99\xbf\xb4+\x93\x80~\x8bZ', 0x5d, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\xa6\x1dR\xc3l\xde{\a\xdb\xda\xb2\x88K\xaf\x05\x00~\x04\xe6\x9d\xb0\xc3\xca\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x9e\x95?\xa5\xe0R\x15t\x80\xe8\x00'/93}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4U\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xee01}}, 0x233) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x33, r3, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async)
bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000e00)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
stat(&(0x7f0000002e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002f40)={0x0, <r8=>0x0}, &(0x7f0000002f80)=0xc)
write$P9_RSTATu(r5, &(0x7f0000003080)={0x71, 0x7d, 0x2, {{0x0, 0x5c, 0x6, 0x40, {0x20, 0x4, 0x2}, 0x5000000, 0x8, 0x8, 0xd48e, 0x19, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00', 0xe, 'verity=require', 0x2, '\\\x93'}, 0x0, '', r6, r7, r8}}, 0x71) (async)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r9) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r9, r9, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) (async)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x844000, &(0x7f0000000080)={[{@verity_require}], [{@smackfsroot={'smackfsroot', 0x3d, '@+\\&/'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, '\'%\\#]-\v'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@hash}]}) (async)
ioctl$SNDCTL_TMR_CONTINUE(r9, 0x5404)

1m42.908472659s ago: executing program 1 (id=1479):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) (fail_nth: 3)

1m42.886144531s ago: executing program 1 (id=1480):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = io_uring_setup(0x171d, &(0x7f0000000800)={0x0, 0x40748d, 0x2804, 0x3, 0x179})
io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f00000019c0)={&(0x7f0000001980)={&(0x7f0000001880), 0x0, 0x0, 0x1, 0xe7}}, 0x1)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
shutdown(r2, 0x1)
sendmsg$inet(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x4000040)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
fcntl$getflags(r3, 0x401)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002a80)={'syztnl2\x00', &(0x7f0000002a00)={'ip6tnl0\x00', <r4=>0x0, 0x2f, 0x3, 0xf, 0x4, 0x58, @dev={0xfe, 0x80, '\x00', 0x22}, @local, 0x8, 0x20, 0x101f, 0xd1}})
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r5, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
r6 = fcntl$dupfd(r5, 0x0, r5)
recvmsg$unix(r6, &(0x7f0000003180)={0x0, 0x0, 0x0}, 0x102)
readv(r6, &(0x7f00000034c0)=[{&(0x7f0000000180)=""/17, 0x11}, {&(0x7f00000001c0)=""/138, 0x8a}], 0x2)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02b0cf4ce235c5cd38e4cf6a470e77af05c5d1c3ccad03584728e4c9c7"], 0x3)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002ac0)=0xffffffffffffffff, 0x4)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000440)='./file1\x00', 0x0, 0x8, r2}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004500)={r8, 0x0, 0x66, 0x37, &(0x7f0000000600)="ca5d9e615d6361638f6703ba7336caf25cda996745c3e7072629d3221b9c81603754514abb90fe4ba2ce1da30be856ab076b8d9fb3d6bdbe3e0f4add5ff6f10606684881e90369191cb7a7bf85d5697dc87710ba17eaf13b317353b4ad8694e7a3316ce46098", &(0x7f0000000680)=""/55, 0x1, 0x0, 0xe1, 0x1000, &(0x7f00000006c0)="f582dd3e4f3e8b798e4f7d2f22279bd0fc3bd6f2f9d4dd2c36f48af796fa00d9f1dcd3b32906f174b96b73068c70130697a0e3b5ee3d1cc870749fd58dfaeb9f5b5d999bbf4ddb7764fc19643abf753a1bd4bff050dc3a1fe65cd3f551bd1ed759ca51e0a609916d8d47ca90dbc876cd969a4a2c3f08817e540e87215be86d3fb0f3a165fc261c3157cb5cb0b10210fd806c242bc58221dd9bec4719b91a6c1db1831080d47f1920b19e6fee5eaa6ffb39c4cd7cb8afcc9f31e46458e7e8e7b0f59f894befac1ac7b9a62e26bc26482c73835e18ea2d8ac97b5fb922d52dbefd36", &(0x7f0000003500)="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", 0x2, 0x0, 0x9}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002e00)={0xffffffffffffffff, 0xe0, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002b80), &(0x7f0000002bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0x53, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000002c40), &(0x7f0000002c80), 0x8, 0x2c, 0x8, 0x8, &(0x7f0000002cc0)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002f40)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ab000000000000000080000018230000", @ANYRES32=r0, @ANYBLOB="000000000200000085100000faffffff9500000000601900"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000001a00)=""/4096, 0x41100, 0x0, '\x00', r4, 0x1b, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002b00)={0x0, 0xe, 0xffff}, 0x10, r9, 0x0, 0xa, &(0x7f0000002e40)=[r0, r0, r0, r2], &(0x7f0000002e80)=[{0x2000002, 0x4, 0x2, 0x6}, {0x1, 0x2, 0xa, 0x8}, {0x5, 0x3, 0x10, 0x4}, {0x1, 0x4, 0x6, 0x9}, {0x4, 0x5, 0x7, 0xc}, {0x4, 0x1, 0x6, 0x6}, {0x3, 0x2, 0xd, 0x5}, {0x4, 0x4, 0x3, 0xb}, {0x3, 0x5, 0xd}, {0x2, 0x2, 0x3, 0x3}], 0x10, 0xab}, 0x94)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/profiling\x00', 0x2, 0x0)
write(r10, &(0x7f00000000c0)='k', 0x1)

1m42.612249012s ago: executing program 1 (id=1483):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setreuid(0x0, 0xee00)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=<r0=>0x0)
syz_clone3(&(0x7f0000000040)={0x104800000, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0]}, 0x58)
r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000004000000290000000800010008000000", @ANYRES32, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ffffffff7b8ae2ff00000000bfa200000000000000f8ffffff06000000080000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$XFS_IOC_FSGEOMETRY_V1(r5, 0x80705864, &(0x7f0000000300))
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000004d333000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000004c0014"], 0x184}, 0x1, 0x0, 0x0, 0x4044850}, 0x0)
sendmmsg$inet(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="ab40435f", 0x4}], 0x1}}], 0x1, 0x80)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r7, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}], 0x1, 0x45d1, 0x2000000, 0x22)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, 0xd, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x2400c004)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

1m39.668195229s ago: executing program 1 (id=1496):
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20)
r1 = socket$alg(0x26, 0x5, 0x0)
close(r0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x7d}, 0xff03}], 0x4000070, 0x8000)

1m39.130849922s ago: executing program 34 (id=1496):
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20)
r1 = socket$alg(0x26, 0x5, 0x0)
close(r0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x7d}, 0xff03}], 0x4000070, 0x8000)

1m24.979087413s ago: executing program 5 (id=1550):
r0 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280))
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
timer_create(0x7, &(0x7f00000002c0)={0x0, 0x41, 0x1}, &(0x7f0000000300)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x58)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000040)=0x8)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8a002, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98)
sendmsg$inet6(r5, &(0x7f0000002c00)={&(0x7f0000000040)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x14}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000700)="85", 0x1}], 0x1}, 0x200000c0)
write$rfkill(r4, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x1}, 0xcb)
r6 = socket(0x10, 0x80003, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000180), 0x101, 0x4400)
ioctl$BLKFRAGET(r7, 0x1265, &(0x7f0000000200))
r8 = getpid()
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a0033000201c600ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e9055406", 0xb8)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x22, 0x2, @tid=r8}, &(0x7f0000000140))
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f00000000c0)=0x80000)
ioctl$sock_ifreq(r6, 0x8911, &(0x7f0000000340)={'batadv0\x00', @ifru_ivalue=0x5})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x11, 0x2, {0xd, "00db0500000000000001fb4bc81700"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x104)
mount(&(0x7f0000000080)=@filename='./file0\x00', 0x0, &(0x7f00000001c0)='erofs\x00', 0x0, 0x0)

1m23.524262093s ago: executing program 5 (id=1553):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x82, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000021c0)={0x0, 0xfffffef1, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0xd8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r5, {0x0, 0x15}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x8c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0xd1a}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x3}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7ff}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7960, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xb}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}, @TCA_HTB_INIT={0x0, 0x2, {0x3, 0x47, 0x401}}]}}, @TCA_STAB={0x4}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}, @qdisc_kind_options=@q_qfg={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0xf8072eabe1d74d47}, 0x20000004)
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000100)={@mcast1, r5}, 0x14)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unshare(0x8000000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0)
setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000000000))
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xa2fab000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)

1m21.693229623s ago: executing program 5 (id=1559):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000100)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x14004004)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m19.562109169s ago: executing program 5 (id=1564):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x10000}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80", @ANYRES16], 0x44}}, 0x2000800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)

1m19.380203936s ago: executing program 5 (id=1566):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40000102, 0x0)
r4 = syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000540)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=<r8=>0x0)
syz_ublk_setup_queues(r4, r8, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0xd7}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x33ef, 0x40, 0x8000003, 0x3ab, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x100, 0xa, 0x2000008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ac4, 0x10, 0x42, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x5200, 0x2, 0x821b, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10)
bind$tipc(r0, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x1}}, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYRES32=r11, @ANYBLOB="85f4e4f509d73f69bf8f36e455e81d3336b44897cc11adbc2327eb76684c1cbc676367652f571136bab142ff9194b58de56b1418a5ef09278251c3da297ae1fccc737d890e29eb52c68b1d9746197f8272c607803c6da4f29520073e4b6490c66fb7fa1bc89cf7582baa135a8abaf629b16cebf8b73edd324168af2247869ef3bcce13cddd36433d85817997cb912bbd2f17ae369b55703d184673596dc7da3c550528f816c3857c4880021fac0874b2a9c5d54241af04f3be4c8755b56b851e818d03d6da73453cb8594a63ea1b76ecfbcbe083fd89a1f6e972"], 0x1c}}, 0x20000081)
sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)
mkdir(&(0x7f0000000100)='./mnt\x00', 0x0)
mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write(r12, &(0x7f0000000600)='stm32g0-typec 0x3', 0x11)
r13 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r13)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

1m18.096106034s ago: executing program 5 (id=1568):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000007b650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x2, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1c0c0}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x54}}, 0x4010)

1m2.801429712s ago: executing program 35 (id=1568):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x2, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1c0c0}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x54}}, 0x4010)

17.720750883s ago: executing program 2 (id=1632):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x6, 0x19, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb20d78e", 0x31}], 0x1}, 0x6400000c)

17.139333294s ago: executing program 2 (id=1634):
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000016c0)={'wlan0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000002280), 0xffffffffffffffff)
r7 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r7, 0x3554000)
recvmmsg(r3, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000005000)=[{0xfffffffffffffffe}], 0x1}, 0x4}], 0x2, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)=ANY=[], 0x30f8}}], 0x1, 0x4004044)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001a0001002d00010000000a0080000000", @ANYRES32=0x0, @ANYBLOB="000000000800020006000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x404c055}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
sendmmsg$inet(r0, &(0x7f0000000f00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="fcb6c6d54fa0ac9e375bee2466821d99269d03731ed42e1b3d9f2e0114f02d87fafd35badada758ee64b93c0c433bdc1d403b90a2d436e774f09551ec0d1da7e5e92424d6024a369160098d7553324cf917253876d6b329de6f4590fea3df96ed7ff95ac54b8fd0923ad131ff7b50b8c07a3d1e97f95c6bf79a1fdeb0a8def8319b307cf1de9de91cbe6389b3de24442a3e3f65a9deb14bd38803e837f5307e76fd961299b860e783d8c80f391e57c37ab525369bca626b68e5bbac004eaaa5ba721bb6b441769c6631c85e8", 0xcc}], 0x1, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}}, {{&(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000400)="223d62d14cbfce1594dfdf2f466375d82277165dfaff2f8c2e3761a89522c38bc457d0d64712d5ad97d92f9de762583f299092b2f50e6042b5dd67798aa33f154ca94f65526d5672734b4e9192beed0b456fcf74bd0574a5dd28e0abe8c5fa297969464dad923200c8562e4aec7f90daea2c1225dd2406029d439e06d4a7062f1db0903797189b346df0edf5e38fece78d34d351fd4b9948b612ea25ca", 0x9d}, {&(0x7f00000004c0)="2cd8aa6e62a1fb030400a46b198cb58a9d3f3fc3e16231be2f31c37ed76d604559b3e9e81331541b2c5eebb6b2962034ce93bb1f343f7dacbb4204bef52782b00d9187b221ac023063fdd2e0620897387a14ef5f5a601dbbcad5d9e4912bb77cc873bb793af0d9ffd9b78d79095a9cb4d0f43620c5c9020d64da7781bf83aeb1b9f3ff39fa283abc282d042a6bae2d2d2564bf01a7249dd2caa40392bd26d75e5bcda77df85139c9f47969113b4a9dbb91709a729e4f27a6f44a70a53f9b615dace6bbc28a22dfefce47c4b4c1b0f0", 0xcf}, {&(0x7f00000006c0)="7eb15d88ff8cde306888322e06d53baee67d621278baa7e5ea4fb8", 0x1b}, {&(0x7f0000000700)="2500f9cef961661e89a512c0c5cebe701040f5b33b17839818e23272070000000000000098723117c048df9fb0a95f710c201b351b77cc7d80bb81fa727dae87f9dde3a0154cb9671d45b7b54ee8b7f262d52e78df471a59050000000000000045312a4c2779b13269f67156604a8b3b5bb1aff3c34fe8268e81efe38636785b2a7865d1ba790be99e12b25aa139cf9c9db42eb5afe694013895650ce29d2a7c74e75b45907c992c974e2c2ccd3f05160c7afbab914c00"/192, 0xc0}, {&(0x7f00000007c0)="7e729e47111f59ebdb6d9231097af92a85e16fefde44e6f2101a65990a71aa87665080bd75fa6be22cd84e1158f3c3fef5328a4092e14dbc6d6a2b13cc6bbae0e0138975816e9c8dd6366db32e24e502a0f2973331c28d37d0e69c2c193db7bded0575e1771181f46dbd0ea93e25d84f7753bf19266231ed1f3a12070b57c7e2a657fa", 0x83}, {&(0x7f0000000940)="456f42aa62cd676ef229ad3b0338761884cb5ce32c4602d9b6cf901e10e772e87bd9b535c64c11fef3572a32f0a866531b9bd44502e2ed511c264a966025bbe28ecbf328c7e2a8aca78dea34f44c6421c386afe58076c7a5a4f1d4e1ca0b433bfe30f38b30c249f845f44356ab80f57f95f5323dc24f45e1f2a7302369958488369ee4232afd5f431b970186573cb558616e6f216c85066fa3a7c36080112afc21a76a7aa646b15af3de3e2dc14c4e332f300787865482d00db1ad16b64d52e16621e54ea9", 0xc5}, {&(0x7f0000000a40)="c9817cf7c1abfc8ce80188cfc5d3bdf8506555d50606413f427be5ec299a1c27691764aba1b8bfe03400a5cb450e361d5640d8aa82c6ef6110186a814c8ac1b23cb2315fb13bfffd2fcdb0c8b323f26867c1230fa221c21c2b44912aa29c5743cf6a0ba8a2a9ff541bed4aa2e27b89eed6f7ef9d630868ae32bb4c7ea573ef0d6d5141c262dda57663883d71d64edc868f56a236ee5c69aad878d5979d", 0x9d}, {&(0x7f0000000b00)="d31cd11cfb2453c14f2f916712c3087b23911cbd07dde9ecf0eb567cc9feabf690e66a800b8f2305781a251b9b8528d8a8ed527b9241dbc70abc0fa8f108b71c99afb68df94ee42899d6d5fb2a8ddab39289434a105e77cba8168b4c1803eeaf675cded9e3f65268ede11c91e0f6f1872048f41b3fd2cb5578c46f1a00cf4eb723d646c4c4e54b273152954a86340bc6aed068e46816b32bc260d9f3dd", 0x9d}], 0x8, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x68}}, {{&(0x7f0000000d00)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000d40)="21a1613e4e4bafb6896a9a9b52f65e85b0cab7f014a93c29fca3ebe6a633a03e3ebdcfb03c92a66f6574ee76345c02dea04c8f6c643be2036d0dce9a046457b323c1fbd24dc40d656d300588", 0x4c}, {&(0x7f0000000dc0)="5fb650c81ddb7ccaa5c772b2d06b43ecfe4431cf65932146c8f6629e4eb9a28f1fb9ae5b0e6d9081993d8ae3588d6105be748520a7d6dfefca06dd0dc0da544e9c5de4e156987f476f687f8907d204468e3f3a0c1f22ce4b", 0x58}, {&(0x7f0000000e40)="2cc3e7e5db9f073ef25fe636c6d6efe26ccf78cd3c91378effa4ecfd2931b64ae35ccae85f48606f0fab", 0x2a}], 0x3, &(0x7f0000000ec0)}}], 0x3, 0x800)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

12.678866838s ago: executing program 2 (id=1635):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0))
shutdown(r1, 0x1)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x7fff, 0x4)
syz_usb_control_io(r0, 0x0, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$RTC_AIE_ON(r3, 0x7001)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008005}, 0x10888)
unshare(0x2c020400)
r4 = socket$packet(0x11, 0x3, 0x300)
ppoll(&(0x7f00000004c0)=[{r4, 0x9487}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
ioctl$RTC_AIE_OFF(r3, 0x7002)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r7 = fcntl$dupfd(r6, 0x0, r6)
write$tun(r7, &(0x7f0000000000)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, '^\vB', 0x7c, 0x6, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x4, 0x0, 0x1, 0x11b, 0x5, 0x0, 0x4e23, 0x4e23, 0x1, 0x4, 0x0, 0x0, 0x1}, [{0x44, 0xff, 0x8, 0x5, 0x40, 0x5, 0xb, 0x1}, {0x7, 0x1fc, 0x8, 0x8, 0x7c70, 0x1, 0xa, 0xb3577d1}, {0x8, 0x71d, 0x7, 0x1, 0x4, 0x9, 0xf, 0x7}]}}}}}, 0xa4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000200)="268b64b957d08d5c07a4c143da2a9cf065d1ee5b3ca4f601e1fd6c4f2e92c6943ff93b5656b0cfb77b7394023a4b5ec72ff9a6dd291707da7881b8d4656c00f7c242f7aedba01388c3b4ed8e5ee60f088ef08cadb5f8870efc078d019a9d8e281defcd2c43c8b53854e51686a7d6eb6faef38da998ebd7e37613d7eb58fceb5a445e99fb2e4cb40e7165151ca02349d3b5f3f39c111f2a2214399a1f916e9b1fc087b54a1b1f590c22df3dd5b8cd7ab17954c86c00"/196, 0x7ff, r5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x80, r5}, 0x38)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0xc048aeca, &(0x7f00000000c0)={0x7, 0x0, [{0x9c7, 0x0, 0x8}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x9b5, 0x0, 0xb}, {0xa8f, 0x0, 0xfffffffffffffffe}, {0x247, 0x0, 0x6}, {0x865, 0x0, 0x100000000}]})

9.590419601s ago: executing program 2 (id=1640):
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x6, r0, 0x0, 0x13}])
creat(0x0, 0x6a)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000003180)={[0x2]}, 0x8)
syz_clone3(&(0x7f0000004440)={0x200200800, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, &(0x7f0000004400)=[0x0], 0x1, {r2}}, 0x58)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428})
r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003)
ioctl$NBD_CLEAR_SOCK(r4, 0xab20)
r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0)
close(r5)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r8 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xca200)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000001e40)={0xe9c, {"0d06d96fff2900", "3dfa7700", "0000ff4a70f300"}, 0x4000c, 0x4})
preadv(r8, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1004014, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r9}})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000b0e000/0x4000)=nil, 0x4000}, 0x1, 0x2})

9.295853936s ago: executing program 6 (id=1641):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x6, 0x19, 0x0, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x4000000)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb20d78e", 0x31}], 0x1}, 0x6400000c)

8.987989538s ago: executing program 6 (id=1642):
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x408000)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x3ff)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f00000000c0)={0x320, 0x600, 0x500, 0x258, 0xa, 0xd, 0x20, 0x2, {0x8, 0x3, 0x1}, {0x800, 0x10, 0x1}, {0x200, 0x10000, 0x1}, {0x4, 0x2642}, 0x1, 0x80, 0x4, 0x1, 0x0, 0x4, 0x7, 0x10001, 0x0, 0x6, 0x6, 0x6, 0x8, 0x100, 0x1, 0x6})
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000180))
ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x8c3f)
pwritev(r1, &(0x7f00000003c0)=[{&(0x7f00000001c0)="bcc4581fd735c72819f45e6098c6604457a557bb60f4d0ccbd2f40e3a4d5ec8788ec6939d142a0eec99e81021c647903d1ad472a84265672a2e995e17867c890516040d5c59007378d7ec06b3a5ab4a34a58c423390b435420ddcb39fb3cfdfd5433beafb2367b0f444504af21bb09aa5e6e195278b3e122eeb30812e7b5cf04017b356675a3616956b7a230fb0bfce6c894cd6004817fffb78948a20f940b42653ed06e8169bece34482dac1d049ff3e429cc45f2ed5cd415e49c54a364eaac637a1ce1898f5a64f128a0dd91392206c15be8d7988997146a270586", 0xdc}, {&(0x7f00000002c0)="32614e5eeb412a2e4c3bff5d9a2e4f903201b9c25e4d0a7a6f9c007039fce410b61d72f913a3092ebd5e4366097b2dd98f0c2fdd7eb0d4af67a5a55f6ebb634291c2af3729b48b8d68c194424072bc984a412b03d24db4a57406d6ba4851d7a7d4bfeddc2083283fd42c4e63296a6cb727a5654ecbb59ab910302a49b390ccfd20b0c133dbacffb9c8170daa57eb44664a3fdc2863098d0fa268c0a82d163743f6cc43afdaa97683b73407c7222d4f09dba65530a90fdd0eeaa0fc21c8e11b86da7e6df469f160f0df692bcd4716471430f002e67efdde6303652a127c7591926ed666edbc4c8ea355578481d0dbba2e41f6d5cd106c46", 0xf7}], 0x2, 0xfffffe01, 0x39c3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r2)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400440}, 0xc, &(0x7f0000000800)={&(0x7f00000004c0)={0x33c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "d660143bd1dde02bdda294ea24226db8eb4973ebfe8426017dc3d3048e8ae2"}}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xcf, 0x3, "76f857f14e2cd7cbef37a816faa5a97cd840eac3c5918f3a15a4136e340000e825a1cae94089f5e05a3be72bf63917149b6961675b2396bfd03242912d7435b411bd3564c98314446963aeb199b479eea74869d933387f3bf1dcefb9656f2eb192085f966885aabf30bd2b3c42b3cdafca317454c754c861c0034fab84e0649cb151446492982c3bdd1e1d4c5f4f771422c92687d9961de5a89c86e73956d2e42b012cd3b13e80ebd2ffc6284289d509d9221f16d76585642609b2248e3c0c07f4f07ae369c2c80f2fb9d8"}, @TIPC_NLA_NODE_ID={0x46, 0x3, "463c26ef41844bb5d6bae50d9f8d4fd0713cbdbc48258c7e8734e481e95a9a00d7512d9d9a927b55a2c97c35fab0e4687963fd4645bc82d303fe31301f5ee58c0b3b"}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0000000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96f2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e5e}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9b1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x15}, 0x4000)
getsockname$inet6(0xffffffffffffffff, &(0x7f0000000880)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000008c0)=0x1c)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000900), 0x400, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000a80)={'gretap0\x00', &(0x7f0000000980)={'syztnl2\x00', <r5=>0x0, 0x700, 0x700, 0x1383, 0x4000, {{0x29, 0x4, 0x3, 0x7, 0xa4, 0x68, 0x0, 0x40, 0x29, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x16, 0x1, [{0x6, 0x8, "5078934c7554"}, {0x7, 0x8, "7207cdced6f9"}]}, @cipso={0x86, 0x4d, 0xffffffffffffffff, [{0x4, 0xd, "736ad85f8046573ff2639d"}, {0x5, 0xa, "7ace9f360218bf6d"}, {0x6, 0x11, "856b73fcb0631edff71223fd5116b3"}, {0x2, 0xe, "cbc9b64f746c57110ff6018a"}, {0x6, 0xb, "87111e81b8cfd383cf"}, {0x5, 0x6, "c4ee6ba4"}]}, @timestamp={0x44, 0x2c, 0xf5, 0x0, 0xf, [0x86, 0x1, 0x0, 0x59f, 0x2, 0x1000, 0xc96, 0x10c, 0x6, 0x0]}]}}}}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000c00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xc4, 0x0, 0x10a, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa19b55c4504ee412}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008040)
getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000c40)=""/11, &(0x7f0000000c80)=0xb)
close_range(r1, r2, 0x0)
semget$private(0x0, 0x0, 0x400)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000cc0)={0x5, 0x0, 0x64, 0x4}, 0x10)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000d00)={0x0, 0x9, 0x8, [0x4, 0xd04, 0x6, 0x3, 0x2e, 0x2, 0x0, 0x4]}, &(0x7f0000000d40)=0x18)
socket$inet6(0xa, 0x5, 0x3)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r4, 0x3b70, &(0x7f0000000d80)={0xc0, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}})
r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000e40), 0x24d80, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000e80))
ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, &(0x7f0000000ec0)={0x5, 0xfffffffffffffffe, 0x5, 0x6, 0x4})
ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x2)
r7 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x2, 0x1000004, 0x40010, r4, 0x20000000)
r8 = mmap$IORING_OFF_CQ_RING(0x0, 0x3, 0x1000002, 0x20010, r4, 0x8000000)
syz_io_uring_submit(r7, r8, 0x0, &(0x7f00000012c0)=@IORING_OP_READ_FIXED={0x4, 0x1a, 0x4000, @fd=r6, 0x1ff, &(0x7f0000001140)=[{&(0x7f0000001040)=""/110, 0x6e}, {&(0x7f00000010c0)=""/52, 0x34}, {&(0x7f0000001100)=""/50, 0x32}], 0x3, 0x11, 0x0, {0x3, 0x0, 0x3, '\x00', &(0x7f0000001280)={0x5, 0x9, 0xd3, &(0x7f0000001180)="d6f63b4b40b00b87fb5c5da2f1a76e3502be09c14ffa398bb6037c45cdd7bb97e9026ba3125fc2ab5beae8e11a6bbd182347b996af31bed994eaebcb1d6a0abb9afd0e1b537e7df5c57fd4be831e0831bfbe057e8a2c3d7536d5a0f9e95a9a66603b5efae0d61ba7cfbf368d88f47a65f11da805f43832176d152b010ae313087c1946d9c5a55c0488df7b3e413b5864fbb3686c287c3ab2f586384e1d476b1ee32c5c75a1244c00ff0fec5337a7a1a720f6d83a5b44c5ea36b610b6c3f3c765966781ce239ffd8ea9881dc71b504cc8fe7383", 0x4}, 0x5}})

8.488560422s ago: executing program 6 (id=1643):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
file_setattr(r1, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140)={0x800, 0x800, 0x8, 0x6, 0x5}, 0x18, 0x1000)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d)
renameat(r3, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00')
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x15, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1011}, 0x20008080)
mkdir(&(0x7f0000000240)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r5, 0x5, 0x4)

4.5739546s ago: executing program 2 (id=1644):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1a000}}, 0x0)
r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000140), 0x400, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(r3, 0x80045105, &(0x7f0000000180))
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x1, &(0x7f0000000180)=[{0x40, 0x0, 0x9}]}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB="b3bb000000000000000000000000000000000000bcfa7f8e0078044f61cb7923c1f84dccbd07eda10c9912d72fabef24219b41a066b67b83ea2d43b07253c36c02cbc171a0442306e914f157f1062551d4a0d9f87e6de75d57a857a69f00c0ba73a2e4177f5a347259a0831251a9af7b523f5629f3557d5ba75cb865c75a7355ce62a7e967fcb812d20e56152287982fa6c81f022d11173e0ad83600e11967246e8a73a1ec6f0dbf440a71e9293c6016bead2d5b23178b01e6a1260156df0f1a408043f37a669c07c186ebae7a6fda07371f223def9331a4d93ea6ebf715ebcf534d8e4085642f80", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000180), &(0x7f0000000000), 0x2}, 0x20)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

3.333626743s ago: executing program 2 (id=1645):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x84ed}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000140)=0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x404e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80000)
fcntl$setpipe(r5, 0x407, 0x0)
write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50)
fcntl$setpipe(r5, 0x407, 0x2000000)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="40170000a49e4b6ea96fc6953000aca903222984dbe1e433f800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$vbi(&(0x7f0000000300), 0x1, 0x2)
ioctl$VIDIOC_ENUMOUTPUT(r6, 0xc0485630, &(0x7f0000000580)={0xfffffffe, "f61b1eedae0903b464833d1a6cbc5c30fef955196ca8a1c7d8b6961c504e4046", 0x2, 0x10000761, 0x20008, 0xc000c, 0x8})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x41100, 0xc}, 0x94)

2.831670611s ago: executing program 6 (id=1646):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x100, 0x5, 0xffffffca, 0x3, 0xe, 0x4, 0x79, 0x2, 0x80008, 0x0, 0x400, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x6, 0x8, 0x2, 0x3, 0xfffffff8]})
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0x4000000, 0x92, 0x0, 0x1, 0x4})
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0xc0015)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080007000100000080000000", @ANYRES64, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x1, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

1.510415518s ago: executing program 6 (id=1647):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000a0d000/0x14000)=nil, 0x14000, 0x1000009, 0x88033, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
kexec_load(0x20000000, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000, 0x3e0000}, {0x0, 0x4d, 0x0, 0x8000}], 0x0)
connect$can_bcm(r4, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801)

0s ago: executing program 6 (id=1648):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x149000)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0xfffffffd, 0x4, 0x0, 0x2, [<r4=>0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7})
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020642500000000202000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r6, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000600)="b9ff03076003008cb89e08f000a8e4", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0xeb})
r7 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0", 0x2, 0xfffffffffffffffe)
r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r8, r7}, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x34040854}, 0x60040000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x3f, r9})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000040000000000000e03000000000000000100000000000012000000000072159d9ce8837119cf59f51bcf7c0000040000000202000000000000613000"], 0x0, 0x46, 0x0, 0x2}, 0x28)
socket$xdp(0x2c, 0x3, 0x0)
r11 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r11, 0x0)

kernel console output (not intermixed with test programs):

n_adv: batadv0: Removing interface: batadv_slave_1
[  370.640712][ T5256] 8021q: adding VLAN 0 to HW filter on device eth11
[  371.158765][ T9750] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  371.326206][ T9753] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1199'.
[  371.326230][ T9753] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  371.389089][   T59] Bluetooth: hci2: unexpected event for opcode 0x1408
[  371.708584][ T9761] netlink: 2092 bytes leftover after parsing attributes in process `syz.2.1204'.
[  371.714706][ T9504] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.715007][ T9504] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.715603][ T9504] bridge_slave_0: entered allmulticast mode
[  371.760624][ T9766] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1204'.
[  371.762088][ T9766] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  371.762286][ T9766] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  371.762300][ T9766] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  371.762309][ T9766] UDF-fs: Scanning with blocksize 512 failed
[  371.764042][ T9766] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  371.764202][ T9766] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  371.764215][ T9766] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  371.764224][ T9766] UDF-fs: Scanning with blocksize 1024 failed
[  371.764766][ T9766] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  371.765759][ T9766] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  371.765774][ T9766] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  371.765784][ T9766] UDF-fs: Scanning with blocksize 2048 failed
[  371.766231][ T9766] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  371.766318][ T9766] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  371.766331][ T9766] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  371.766339][ T9766] UDF-fs: Scanning with blocksize 4096 failed
[  371.766346][ T9766] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  371.921206][ T9504] bridge_slave_0: entered promiscuous mode
[  372.038948][ T9504] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.039160][ T9504] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.039358][ T9504] bridge_slave_1: entered allmulticast mode
[  372.077547][ T9504] bridge_slave_1: entered promiscuous mode
[  372.134349][ T9777] FAULT_INJECTION: forcing a failure.
[  372.134349][ T9777] name failslab, interval 1, probability 0, space 0, times 0
[  372.134403][ T9777] CPU: 0 UID: 0 PID: 9777 Comm: syz.0.1208 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  372.134427][ T9777] Tainted: [L]=SOFTLOCKUP
[  372.134433][ T9777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  372.134443][ T9777] Call Trace:
[  372.134450][ T9777]  <TASK>
[  372.134457][ T9777]  dump_stack_lvl+0xe8/0x150
[  372.134490][ T9777]  should_fail_ex+0x467/0x600
[  372.134524][ T9777]  should_failslab+0xa8/0x100
[  372.134549][ T9777]  kmem_cache_alloc_node_noprof+0xae/0x670
[  372.134569][ T9777]  ? __alloc_skb+0x1d7/0x7a0
[  372.134585][ T9777]  ? __alloc_skb+0x1d7/0x7a0
[  372.134607][ T9777]  __alloc_skb+0x1d7/0x7a0
[  372.134627][ T9777]  netlink_sendmsg+0x5d4/0xb40
[  372.134656][ T9777]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.134692][ T9777]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  372.134723][ T9777]  ? __kernel_text_address+0xd/0x30
[  372.134744][ T9777]  ? unwind_get_return_address+0x4d/0x90
[  372.134769][ T9777]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.134792][ T9777]  sock_sendmsg_nosec+0x13a/0x180
[  372.134825][ T9777]  ____sys_sendmsg+0x565/0x870
[  372.134848][ T9777]  ? __might_fault+0xaf/0x130
[  372.134876][ T9777]  ? __pfx_____sys_sendmsg+0x10/0x10
[  372.134909][ T9777]  ? import_iovec+0x73/0xa0
[  372.134936][ T9777]  ___sys_sendmsg+0x2a5/0x360
[  372.134977][ T9777]  ? __lock_acquire+0x683/0x2ce0
[  372.135005][ T9777]  ? __pfx____sys_sendmsg+0x10/0x10
[  372.135072][ T9777]  ? __fget_files+0x2a/0x420
[  372.135095][ T9777]  ? __fget_files+0x3a8/0x420
[  372.135128][ T9777]  __x64_sys_sendmsg+0x1b7/0x290
[  372.135159][ T9777]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  372.135204][ T9777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.135229][ T9777]  do_syscall_64+0x174/0x580
[  372.135256][ T9777]  ? clear_bhb_loop+0x40/0x90
[  372.135283][ T9777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.135304][ T9777] RIP: 0033:0x7f08006dde99
[  372.135324][ T9777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  372.135343][ T9777] RSP: 002b:00007f07fe936028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  372.135380][ T9777] RAX: ffffffffffffffda RBX: 00007f0800965fa0 RCX: 00007f08006dde99
[  372.135420][ T9777] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000003
[  372.135434][ T9777] RBP: 00007f07fe936090 R08: 0000000000000000 R09: 0000000000000000
[  372.135447][ T9777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  372.135460][ T9777] R13: 00007f0800966038 R14: 00007f0800965fa0 R15: 00007ffc3710cb18
[  372.135495][ T9777]  </TASK>
[  372.311613][ T5613] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  372.505650][ T5613] usb 2-1: Using ep0 maxpacket: 8
[  372.520055][ T5613] usb 2-1: config 1 interface 0 altsetting 43 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  372.520087][ T5613] usb 2-1: config 1 interface 0 has no altsetting 0
[  372.540947][ T5613] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.40
[  372.541014][ T5613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.541061][ T5613] usb 2-1: Product: 龧둭㑹蘊椎�賵踼갬ꮜ�Ԅ�閖���䫭苦�箘ች峋癣亙햴ꥑ﷬庤뢨樮疓ॴ뻸鬺짺䶃뜕蹤೰煉ﴂ㳉䎬豎鲕ㅯ䮘䫛溻�㌳烷⓰霮
[  372.541123][ T5613] usb 2-1: Manufacturer: ж
[  372.541227][ T5613] usb 2-1: SerialNumber: syz
[  372.602248][ T8403] bridge_slave_1: left allmulticast mode
[  372.602283][ T8403] bridge_slave_1: left promiscuous mode
[  372.603659][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.888793][ T8403] bridge_slave_0: left allmulticast mode
[  372.889069][ T8403] bridge_slave_0: left promiscuous mode
[  372.889465][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.032691][   T37] audit: type=1326 audit(1785077856.508:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9786 comm="syz.2.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd526dade99 code=0x0
[  374.307866][   T37] audit: type=1326 audit(1785077856.798:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.2.1218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526dade99 code=0x50000
[  374.308170][   T37] audit: type=1326 audit(1785077856.798:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.2.1218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526dade99 code=0x50000
[  374.308554][   T37] audit: type=1326 audit(1785077856.798:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.2.1218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526dade99 code=0x50000
[  374.308838][   T37] audit: type=1326 audit(1785077856.798:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.2.1218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526dade99 code=0x50000
[  374.309120][   T37] audit: type=1326 audit(1785077856.798:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.2.1218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526dade99 code=0x50000
[  374.309368][   T37] audit: type=1326 audit(1785077856.798:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.2.1218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526dade99 code=0x50000
[  374.309728][   T37] audit: type=1326 audit(1785077856.798:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.2.1218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526dade99 code=0x50000
[  374.309982][   T37] audit: type=1326 audit(1785077856.798:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.2.1218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526dade99 code=0x50000
[  374.310245][   T37] audit: type=1326 audit(1785077856.798:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.2.1218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526dade99 code=0x50000
[  374.844681][ T5613] usbhid 2-1:1.0: can't add hid device: -71
[  374.844803][ T5613] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  374.859907][ T5613] usb 2-1: USB disconnect, device number 29
[  375.691332][ T5602] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  375.870734][  T823] kernel write not supported for file /input/mice (pid: 823 comm: kworker/1:2)
[  375.882309][ T5602] usb 3-1: Using ep0 maxpacket: 32
[  375.908731][ T5602] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  375.908767][ T5602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  375.908786][ T5602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  375.908803][ T5602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  375.908821][ T5602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  375.911061][ T5602] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  375.911090][ T5602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.911103][ T5602] usb 3-1: Product: syz
[  375.911112][ T5602] usb 3-1: Manufacturer: syz
[  375.911122][ T5602] usb 3-1: SerialNumber: syz
[  376.011943][ T5602] usb 3-1: config 0 descriptor??
[  376.319143][ T8403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  376.397268][ T8403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  376.462797][ T8403] bond0 (unregistering): Released all slaves
[  376.808757][ T9504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.867339][ T9504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  378.016943][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -110
[  378.017395][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.018380][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.018817][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.019268][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.019716][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.025369][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.028529][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.029864][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.037783][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.046711][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.050615][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.053842][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.061794][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.065506][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.073923][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.077271][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.081722][ T5602] iforce 3-1:0.0: usb_submit_urb failed: -32
[  378.081834][ T5602] input input11: Timeout waiting for response from device.
[  378.461111][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  378.473059][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  378.564006][ T9504] team0: Port device team_slave_0 added
[  378.655851][ T9856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1226'.
[  378.713324][ T9504] team0: Port device team_slave_1 added
[  378.744970][ T5602] usb 3-1: USB disconnect, device number 24
[  378.944917][ T8403] hsr_slave_0: left promiscuous mode
[  378.985551][ T8403] hsr_slave_1: left promiscuous mode
[  378.988073][ T8403] batman_adv: batadv0: Removing interface: batadv_slave_0
[  379.037484][ T8403] batman_adv: batadv0: Removing interface: batadv_slave_1
[  379.342890][ T8403] veth0_vlan: left promiscuous mode
[  381.795615][ T8403] team0 (unregistering): Port device team_slave_1 removed
[  381.892364][ T8403] team0 (unregistering): Port device team_slave_0 removed
[  382.526929][ T5256] 8021q: adding VLAN 0 to HW filter on device eth12
[  382.724140][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.724157][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.724184][ T9504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.734267][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.734370][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.734430][ T9504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.406504][ T9261] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  383.468634][ T9261] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  383.525979][ T9504] hsr_slave_0: entered promiscuous mode
[  383.527383][ T9504] hsr_slave_1: entered promiscuous mode
[  383.528319][ T9504] debugfs: 'hsr0' already exists in 'hsr'
[  383.528342][ T9504] Cannot create hsr debugfs directory
[  383.529813][ T9261] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  383.685965][ T9261] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  383.789997][ T9261] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  383.866396][ T9261] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  384.282466][ T9261] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  384.370186][ T9261] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  385.531512][ T9949] netlink: 'syz.1.1250': attribute type 12 has an invalid length.
[  388.158788][ T9261] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.264546][ T9261] 8021q: adding VLAN 0 to HW filter on device team0
[  389.145867][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.146395][ T8405] bridge0: port 1(bridge_slave_0) entered forwarding state
[  389.201348][ T5739] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[  389.208918][ T8399] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.209000][ T8399] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.341660][ T5739] usb 1-1: device descriptor read/64, error -71
[  389.861329][ T5739] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  389.991294][ T5739] usb 1-1: device descriptor read/64, error -71
[  390.101749][ T5739] usb usb1-port1: attempt power cycle
[  390.477472][ T5739] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[  390.505845][ T5739] usb 1-1: device descriptor read/8, error -71
[  390.751764][ T5739] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[  390.779152][ T5739] usb 1-1: device descriptor read/8, error -71
[  390.891789][ T5739] usb usb1-port1: unable to enumerate USB device
[  394.271753][ T9261] 8021q: adding VLAN 0 to HW filter on device batadv0
[  394.979846][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  395.470987][   T10] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  395.796194][ T9504] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  395.875900][ T9504] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  395.922768][ T9504] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  396.007605][ T9504] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  396.020110][ T9504] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  396.204541][ T9504] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  396.209210][ T9504] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  396.379679][ T9504] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  396.818627][ T9261] veth0_vlan: entered promiscuous mode
[  396.954551][ T9261] veth1_vlan: entered promiscuous mode
[  397.347211][ T9261] veth0_macvtap: entered promiscuous mode
[  397.488028][ T9261] veth1_macvtap: entered promiscuous mode
[  397.623046][ T9504] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.917956][ T9261] batman_adv: batadv0: Interface activated: batadv_slave_0
[  397.997797][ T9261] batman_adv: batadv0: Interface activated: batadv_slave_1
[  398.065846][ T9504] 8021q: adding VLAN 0 to HW filter on device team0
[  398.103708][ T8403] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.105958][ T8403] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.125432][ T8403] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.159885][ T8400] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.193086][ T8399] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.193414][ T8399] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.051797][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.051915][ T5837] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.968921][ T8399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.968940][ T8399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.264560][ T8408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.264581][ T8408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.829350][   T31] IPVS: starting estimator thread 0...
[  401.839273][T10138] netlink: 40 bytes leftover after parsing attributes in process `syz.6.84'.
[  401.911332][T10139] IPVS: using max 8 ests per chain, 19200 per kthread
[  403.309413][ T9504] 8021q: adding VLAN 0 to HW filter on device batadv0
[  404.275936][T10200] Invalid argument reading file caps for ./file0
[  404.360134][T10200] CUSE: info not properly terminated
[  404.856489][T10216] FAULT_INJECTION: forcing a failure.
[  404.856489][T10216] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  404.856527][T10216] CPU: 1 UID: 0 PID: 10216 Comm: syz.0.1323 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  404.856555][T10216] Tainted: [L]=SOFTLOCKUP
[  404.856563][T10216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  404.856576][T10216] Call Trace:
[  404.856584][T10216]  <TASK>
[  404.856593][T10216]  dump_stack_lvl+0xe8/0x150
[  404.856641][T10216]  should_fail_ex+0x467/0x600
[  404.856683][T10216]  _copy_to_user+0x31/0xb0
[  404.856713][T10216]  simple_read_from_buffer+0xe1/0x170
[  404.856744][T10216]  proc_fail_nth_read+0x1be/0x230
[  404.856771][T10216]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  404.856799][T10216]  ? rw_verify_area+0x250/0x4d0
[  404.856830][T10216]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  404.856853][T10216]  vfs_read+0x219/0xa90
[  404.856890][T10216]  ? __pfx_vfs_read+0x10/0x10
[  404.856920][T10216]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  404.856948][T10216]  ? lockdep_hardirqs_on+0x7a/0x110
[  404.856974][T10216]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  404.857000][T10216]  ? mutex_lock_nested+0x152/0x1d0
[  404.857030][T10216]  ? fdget_pos+0x252/0x320
[  404.857063][T10216]  ksys_read+0x156/0x270
[  404.857097][T10216]  ? __pfx_ksys_read+0x10/0x10
[  404.857134][T10216]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.857159][T10216]  do_syscall_64+0x174/0x580
[  404.857183][T10216]  ? trace_irq_disable+0x3b/0x140
[  404.857205][T10216]  ? clear_bhb_loop+0x40/0x90
[  404.857233][T10216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.857254][T10216] RIP: 0033:0x7f080069e6ce
[  404.857274][T10216] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  404.857292][T10216] RSP: 002b:00007f07fe935fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  404.857313][T10216] RAX: ffffffffffffffda RBX: 00007f07fe9366c0 RCX: 00007f080069e6ce
[  404.857328][T10216] RDX: 000000000000000f RSI: 00007f07fe9360a0 RDI: 0000000000000005
[  404.857340][T10216] RBP: 00007f07fe936090 R08: 0000000000000000 R09: 0000000000000000
[  404.857353][T10216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  404.857364][T10216] R13: 00007f0800966038 R14: 00007f0800965fa0 R15: 00007ffc3710cb18
[  404.857398][T10216]  </TASK>
[  405.705956][ T9504] veth0_vlan: entered promiscuous mode
[  405.820574][ T9504] veth1_vlan: entered promiscuous mode
[  406.166251][ T9504] veth0_macvtap: entered promiscuous mode
[  406.201586][ T9504] veth1_macvtap: entered promiscuous mode
[  406.308109][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.404499][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_1
[  406.477548][ T8402] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.492285][ T8402] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.492620][ T8402] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.492929][ T8402] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.616962][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'.
[  410.854624][T10263] FAULT_INJECTION: forcing a failure.
[  410.854624][T10263] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  410.854661][T10263] CPU: 1 UID: 0 PID: 10263 Comm: syz.1.1336 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  410.854689][T10263] Tainted: [L]=SOFTLOCKUP
[  410.854696][T10263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  410.854708][T10263] Call Trace:
[  410.854716][T10263]  <TASK>
[  410.854724][T10263]  dump_stack_lvl+0xe8/0x150
[  410.854760][T10263]  should_fail_ex+0x467/0x600
[  410.854797][T10263]  _copy_from_user+0x2d/0xb0
[  410.854824][T10263]  ___sys_sendmsg+0x1c6/0x360
[  410.854849][T10263]  ? __lock_acquire+0x683/0x2ce0
[  410.854876][T10263]  ? __pfx____sys_sendmsg+0x10/0x10
[  410.854935][T10263]  ? __fget_files+0x2a/0x420
[  410.854957][T10263]  ? __fget_files+0x3a8/0x420
[  410.854988][T10263]  __x64_sys_sendmsg+0x1b7/0x290
[  410.855016][T10263]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  410.855059][T10263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.855081][T10263]  do_syscall_64+0x174/0x580
[  410.855106][T10263]  ? trace_irq_disable+0x3b/0x140
[  410.855128][T10263]  ? clear_bhb_loop+0x40/0x90
[  410.855154][T10263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.855174][T10263] RIP: 0033:0x7f944210de99
[  410.855193][T10263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  410.855210][T10263] RSP: 002b:00007f9440366028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  410.855230][T10263] RAX: ffffffffffffffda RBX: 00007f9442395fa0 RCX: 00007f944210de99
[  410.855245][T10263] RDX: 0000000020000000 RSI: 0000200000000500 RDI: 0000000000000003
[  410.855257][T10263] RBP: 00007f9440366090 R08: 0000000000000000 R09: 0000000000000000
[  410.855269][T10263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.855280][T10263] R13: 00007f9442396038 R14: 00007f9442395fa0 R15: 00007ffe45b50d58
[  410.855310][T10263]  </TASK>
[  416.396448][ T5824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.396476][ T5824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.188097][ T5824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.188118][ T5824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.659793][T10318] binder: 10317:10318 ioctl c2604110 200000001680 returned -22
[  419.102747][T10324] netlink: 2092 bytes leftover after parsing attributes in process `syz.5.10'.
[  419.209173][T10330] netlink: 666 bytes leftover after parsing attributes in process `syz.5.10'.
[  420.058144][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  420.216358][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  420.255154][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  420.257927][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  420.258610][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  420.874452][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1358'.
[  420.900071][T10346] sctp: [Deprecated]: syz.1.1358 (pid 10346) Use of struct sctp_assoc_value in delayed_ack socket option.
[  420.900071][T10346] Use struct sctp_sack_info instead
[  421.569359][T10360] syz.5.1360: vmalloc error: size 70368744177852, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  421.569548][T10360] CPU: 1 UID: 0 PID: 10360 Comm: syz.5.1360 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  421.569580][T10360] Tainted: [L]=SOFTLOCKUP
[  421.569589][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  421.569602][T10360] Call Trace:
[  421.569611][T10360]  <TASK>
[  421.569620][T10360]  dump_stack_lvl+0xe8/0x150
[  421.569660][T10360]  warn_alloc+0x24c/0x270
[  421.569692][T10360]  ? __pfx_warn_alloc+0x10/0x10
[  421.569738][T10360]  __vmalloc_node_range_noprof+0x12c/0x1730
[  421.569793][T10360]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  421.569823][T10360]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  421.569851][T10360]  ? lockdep_hardirqs_on+0x7a/0x110
[  421.569878][T10360]  ? dvb_dvr_do_ioctl+0x12e/0x220
[  421.569910][T10360]  vmalloc_noprof+0xb2/0xe0
[  421.569933][T10360]  ? dvb_dvr_do_ioctl+0x12e/0x220
[  421.569967][T10360]  dvb_dvr_do_ioctl+0x12e/0x220
[  421.570006][T10360]  dvb_usercopy+0x199/0x2e0
[  421.570032][T10360]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[  421.570064][T10360]  ? __pfx_dvb_usercopy+0x10/0x10
[  421.570102][T10360]  ? __fget_files+0x3a8/0x420
[  421.570125][T10360]  ? __fget_files+0x2a/0x420
[  421.570151][T10360]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[  421.570188][T10360]  dvb_dvr_ioctl+0x29/0x40
[  421.570222][T10360]  __se_sys_ioctl+0xff/0x170
[  421.570253][T10360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.570278][T10360]  do_syscall_64+0x174/0x580
[  421.570303][T10360]  ? trace_irq_disable+0x3b/0x140
[  421.570325][T10360]  ? clear_bhb_loop+0x40/0x90
[  421.570353][T10360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.570375][T10360] RIP: 0033:0x7f0373c3de99
[  421.570417][T10360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  421.570437][T10360] RSP: 002b:00007f0371e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  421.570459][T10360] RAX: ffffffffffffffda RBX: 00007f0373ec5fa0 RCX: 00007f0373c3de99
[  421.570475][T10360] RDX: 00004000000000bc RSI: 0000000000006f2d RDI: 0000000000000003
[  421.570488][T10360] RBP: 00007f0373cd3eaf R08: 0000000000000000 R09: 0000000000000000
[  421.570501][T10360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  421.570514][T10360] R13: 00007f0373ec6038 R14: 00007f0373ec5fa0 R15: 00007ffdef364388
[  421.570549][T10360]  </TASK>
[  421.780520][T10360] Mem-Info:
[  421.780580][T10360] active_anon:193 inactive_anon:6655 isolated_anon:0
[  421.780580][T10360]  active_file:21517 inactive_file:40585 isolated_file:0
[  421.780580][T10360]  unevictable:768 dirty:86 writeback:0
[  421.780580][T10360]  slab_reclaimable:12231 slab_unreclaimable:103857
[  421.780580][T10360]  mapped:29970 shmem:1652 pagetables:1370
[  421.780580][T10360]  sec_pagetables:0 bounce:0
[  421.780580][T10360]  kernel_misc_reclaimable:0
[  421.780580][T10360]  free:1296983 free_pcp:3920 free_cma:0
[  421.780764][T10360] Node 0 active_anon:772kB inactive_anon:26620kB active_file:85872kB inactive_file:162340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119880kB dirty:344kB writeback:0kB shmem:5072kB kernel_stack:14044kB pagetables:5372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  421.780899][T10360] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  421.781067][T10360] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  421.994424][T10360] lowmem_reserve[]: 0 2500 2502 2502 2502
[  421.994459][T10360] Node 0 DMA32 free:1229272kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:772kB inactive_anon:26120kB active_file:85872kB inactive_file:162340kB unevictable:1536kB writepending:344kB zspages:0kB present:3129332kB managed:2560612kB mlocked:0kB bounce:0kB free_pcp:15140kB local_pcp:3220kB free_cma:0kB
[  421.994509][T10360] lowmem_reserve[]: 0 0 1 1 1
[  421.994534][T10360] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1856kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB
[  421.994577][T10360] lowmem_reserve[]: 0 0 0 0 0
[  421.994602][T10360] Node 1 Normal free:3944200kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  421.994647][T10360] lowmem_reserve[]: 0 0 0 0 0
[  421.994672][T10360] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  421.995023][T10360] Node 0 DMA32: 1327*4kB (UME) 1028*8kB (UME) 838*16kB (UME) 667*32kB (UME) 547*64kB (UME) 269*128kB (UME) 135*256kB (M) 39*512kB (ME) 10*1024kB (M) 9*2048kB (UME) 251*4096kB (UM) = 1229020kB
[  422.242409][T10360] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  422.242488][T10360] Node 1 Normal: 4*4kB (UM) 7*8kB (UM) 10*16kB (UM) 9*32kB (UM) 8*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3944200kB
[  422.242606][T10360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  422.242619][T10360] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  422.242631][T10360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  422.246140][T10360] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  422.246157][T10360] 63625 total pagecache pages
[  422.246172][T10360] 0 pages in swap cache
[  422.246177][T10360] Free swap  = 124996kB
[  422.246183][T10360] Total swap = 124996kB
[  422.246189][T10360] 2097051 pages RAM
[  422.246195][T10360] 0 pages HighMem/MovableOnly
[  422.246200][T10360] 424819 pages reserved
[  422.246205][T10360] 0 pages cma reserved
[  422.451577][   T59] Bluetooth: hci5: command tx timeout
[  422.702727][T10373] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10374] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10373]
[  423.422396][T10360] Smack: "smack_inode_setsecurity" netlbl error 2.
[  424.253730][T10398] /dev/nullb0: Can't open blockdev
[  424.308086][ T8399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  424.308124][ T8399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.542902][ T5599] Bluetooth: hci5: command tx timeout
[  425.345103][ T8399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  425.345140][ T8399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.552818][T10412] macsec0: entered allmulticast mode
[  425.552839][T10412] veth1_macvtap: entered allmulticast mode
[  426.464008][T10441] binder: 10438:10441 ioctl c0306201 200000000080 returned -14
[  426.470128][T10441] binder: 10438:10441 ioctl c0306201 2000000003c0 returned -14
[  426.611950][ T5599] Bluetooth: hci5: command tx timeout
[  426.632201][ T8399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  426.632238][ T8399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.799899][T10450] tmpfs: Unsupported parameter 'huge'
[  427.362626][T10437] syz.6.1380 (10437) used greatest stack depth: 17568 bytes left
[  428.216446][ T8399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.216473][ T8399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.766208][ T5599] Bluetooth: hci5: command tx timeout
[  429.291847][T10483] hsr0: entered promiscuous mode
[  429.365649][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'.
[  430.789201][T10503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1398'.
[  432.420064][T10510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1401'.
[  432.514315][T10332] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.515713][T10332] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.516538][T10332] bridge_slave_0: entered allmulticast mode
[  432.519576][T10332] bridge_slave_0: entered promiscuous mode
[  432.588144][T10332] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.588275][T10332] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.588459][T10332] bridge_slave_1: entered allmulticast mode
[  432.591064][T10332] bridge_slave_1: entered promiscuous mode
[  432.946357][T10332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  432.982050][T10332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  433.253582][ T8399] bridge_slave_1: left allmulticast mode
[  433.253607][ T8399] bridge_slave_1: left promiscuous mode
[  433.253783][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.435122][ T8399] bridge_slave_0: left allmulticast mode
[  433.435148][ T8399] bridge_slave_0: left promiscuous mode
[  433.436939][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.601332][   T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  437.690924][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1409'.
[  437.751256][   T31] usb 6-1: Using ep0 maxpacket: 32
[  437.754651][   T31] usb 6-1: config 0 has an invalid interface number: 180 but max is 0
[  437.754676][   T31] usb 6-1: config 0 has no interface number 0
[  437.754707][   T31] usb 6-1: too many endpoints for config 0 interface 180 altsetting 247: 46, using maximum allowed: 30
[  437.754746][   T31] usb 6-1: config 0 interface 180 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 46
[  437.754774][   T31] usb 6-1: config 0 interface 180 has no altsetting 0
[  437.757167][   T31] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  437.757198][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.757213][   T31] usb 6-1: Product: syz
[  437.757222][   T31] usb 6-1: Manufacturer: syz
[  437.757236][   T31] usb 6-1: SerialNumber: syz
[  437.905148][   T31] usb 6-1: config 0 descriptor??
[  438.201032][T10559] Mount JFS Failure: -5
[  438.244646][ T5724] kernel write not supported for file bpf-map (pid: 5724 comm: kworker/1:4)
[  438.701096][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1413'.
[  439.542845][ T8399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  439.627758][ T8399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  439.651995][ T8399] bond0 (unregistering): Released all slaves
[  439.879227][T10522] ip6gretap1: entered allmulticast mode
[  439.900364][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  439.900488][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  440.035443][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9
[  440.143187][T10332] team0: Port device team_slave_0 added
[  440.254604][T10332] team0: Port device team_slave_1 added
[  440.254785][ T8399] tipc: Left network mode
[  440.286939][   T31] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  440.288891][   T31] gspca_topro: reg_w err -71
[  440.311294][   T31] gspca_topro: Sensor soi763a
[  443.348388][   T31] usb 6-1: USB disconnect, device number 2
[  443.677833][T10579] netlink: 64859 bytes leftover after parsing attributes in process `syz.6.1416'.
[  445.314136][  T823] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  445.475974][  T823] usb 2-1: config index 0 descriptor too short (expected 132, got 72)
[  445.478432][  T823] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  445.478476][  T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.478496][  T823] usb 2-1: Product: syz
[  445.478511][  T823] usb 2-1: Manufacturer: syz
[  445.478525][  T823] usb 2-1: SerialNumber: syz
[  445.672123][T10332] batman_adv: batadv0: Adding interface: batadv_slave_0
[  445.672141][T10332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.672170][T10332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.768604][T10332] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.768622][T10332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.768650][T10332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  446.608718][ T5601] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  447.532877][  T823] usb 2-1: USB disconnect, device number 30
[  447.800888][T10615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  447.946694][ T5601] usb 2-1: ath9k_htc: Unable to allocate URBs
[  447.954540][  T823] usb 2-1: ath9k_htc: USB layer deinitialized
[  448.474938][T10605] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1424'.
[  448.548375][T10332] hsr_slave_0: entered promiscuous mode
[  448.587326][T10332] hsr_slave_1: entered promiscuous mode
[  448.589993][T10332] debugfs: 'hsr0' already exists in 'hsr'
[  448.590018][T10332] Cannot create hsr debugfs directory
[  448.920719][T10637] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1430'.
[  449.114275][ T8399] hsr_slave_0: left promiscuous mode
[  449.163279][ T8399] hsr_slave_1: left promiscuous mode
[  449.165213][ T8399] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  449.165240][ T8399] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.224030][ T8399] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  449.224059][ T8399] batman_adv: batadv0: Removing interface: batadv_slave_1
[  449.338245][T10632] sg_write: data in/out 455644/242 bytes for SCSI command 0x0-- guessing data in;
[  449.338245][T10632]    program syz.6.1429 not setting count and/or reply_len properly
[  449.487267][ T8399] veth1_macvtap: left promiscuous mode
[  449.487371][ T8399] veth0_macvtap: left promiscuous mode
[  449.487685][ T8399] veth1_vlan: left promiscuous mode
[  449.513772][ T8399] veth0_vlan: left promiscuous mode
[  449.531354][ T5860] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  449.683346][ T5860] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  449.683373][ T5860] usb 3-1: config 0 has no interface number 0
[  449.683413][ T5860] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  449.683430][ T5860] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  449.683446][ T5860] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  449.683463][ T5860] usb 3-1: config 0 interface 1 has no altsetting 0
[  449.683485][ T5860] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  449.683500][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.687435][ T5860] usb 3-1: config 0 descriptor??
[  450.317577][ T5860] uclogic 0003:145F:0212.0002: pen parameters not found
[  450.317613][ T5860] uclogic 0003:145F:0212.0002: interface is invalid, ignoring
[  450.385990][T10639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.409740][T10639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.500585][T10658] netlink: 'syz.6.1435': attribute type 1 has an invalid length.
[  450.500643][T10658] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1435'.
[  450.924690][T10662] netlink: 'syz.5.1437': attribute type 10 has an invalid length.
[  451.344465][T10664] hpfs: Bad magic ... probably not HPFS
[  451.908840][ T8399] team0 (unregistering): Port device team_slave_1 removed
[  451.991903][ T8399] team0 (unregistering): Port device team_slave_0 removed
[  452.467658][T10666] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  452.467679][T10666] CIFS mount error: No usable UNC path provided in device string!
[  452.467679][T10666] 
[  452.467820][T10666] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  452.536753][ T5256] 8021q: adding VLAN 0 to HW filter on device eth10
[  452.695771][T10662] 8021q: adding VLAN 0 to HW filter on device team0
[  452.792837][ T5739] usb 3-1: USB disconnect, device number 25
[  452.837551][T10662] bond0: (slave team0): Enslaving as an active interface with an up link
[  453.169409][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'.
[  454.802829][T10700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1448'.
[  454.802854][T10700] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1448'.
[  457.115437][T10729] FAULT_INJECTION: forcing a failure.
[  457.115437][T10729] name failslab, interval 1, probability 0, space 0, times 0
[  457.115521][T10729] CPU: 0 UID: 0 PID: 10729 Comm: syz.1.1454 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  457.115553][T10729] Tainted: [L]=SOFTLOCKUP
[  457.115561][T10729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  457.115588][T10729] Call Trace:
[  457.115594][T10729]  <TASK>
[  457.115600][T10729]  dump_stack_lvl+0xe8/0x150
[  457.115631][T10729]  should_fail_ex+0x467/0x600
[  457.115659][T10729]  should_failslab+0xa8/0x100
[  457.115680][T10729]  kmem_cache_alloc_noprof+0xa4/0x650
[  457.115696][T10729]  ? ovs_flow_alloc+0x24/0x200
[  457.115717][T10729]  ? ovs_flow_alloc+0x24/0x200
[  457.115743][T10729]  ovs_flow_alloc+0x24/0x200
[  457.115766][T10729]  ovs_flow_cmd_new+0x2b9/0xe80
[  457.115784][T10729]  ? trace_sched_exit_tp+0x3a/0x130
[  457.115803][T10729]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  457.115873][T10729]  genl_family_rcv_msg_doit+0x233/0x340
[  457.115899][T10729]  ? lockdep_hardirqs_on+0x7a/0x110
[  457.115920][T10729]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  457.115954][T10729]  ? bpf_lsm_capable+0x9/0x20
[  457.115969][T10729]  ? security_capable+0x7e/0x2c0
[  457.115994][T10729]  genl_rcv_msg+0x614/0x7a0
[  457.116022][T10729]  ? __pfx_genl_rcv_msg+0x10/0x10
[  457.116044][T10729]  ? ref_tracker_free+0x668/0x820
[  457.116058][T10729]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  457.116075][T10729]  ? __pfx_ref_tracker_free+0x10/0x10
[  457.116097][T10729]  netlink_rcv_skb+0x226/0x4a0
[  457.116116][T10729]  ? __pfx_genl_rcv_msg+0x10/0x10
[  457.116140][T10729]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  457.116175][T10729]  genl_rcv+0x28/0x40
[  457.116195][T10729]  netlink_unicast+0x7f5/0x990
[  457.116220][T10729]  netlink_sendmsg+0x813/0xb40
[  457.116238][T10729]  ? lockdep_hardirqs_on+0x7a/0x110
[  457.116261][T10729]  ? __pfx_netlink_sendmsg+0x10/0x10
[  457.116279][T10729]  ? __pfx_netlink_sendmsg+0x10/0x10
[  457.116306][T10729]  ? __pfx_netlink_sendmsg+0x10/0x10
[  457.116330][T10729]  sock_sendmsg_nosec+0x13a/0x180
[  457.116355][T10729]  ____sys_sendmsg+0x565/0x870
[  457.116385][T10729]  ? lockdep_hardirqs_on+0x7a/0x110
[  457.116406][T10729]  ? __pfx_____sys_sendmsg+0x10/0x10
[  457.116429][T10729]  ? import_iovec+0x73/0xa0
[  457.116449][T10729]  ___sys_sendmsg+0x2a5/0x360
[  457.116470][T10729]  ? __pfx____sys_sendmsg+0x10/0x10
[  457.116490][T10729]  ? preempt_schedule_thunk+0x16/0x40
[  457.116528][T10729]  ? __fget_files+0x2a/0x420
[  457.116543][T10729]  ? __fget_files+0x3a8/0x420
[  457.116565][T10729]  __x64_sys_sendmsg+0x1b7/0x290
[  457.116581][T10729]  ? lockdep_hardirqs_on+0x7a/0x110
[  457.116599][T10729]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  457.116629][T10729]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.116662][T10729]  do_syscall_64+0x174/0x580
[  457.116681][T10729]  ? clear_bhb_loop+0x40/0x90
[  457.116700][T10729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.116719][T10729] RIP: 0033:0x7f944210de99
[  457.116734][T10729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  457.116747][T10729] RSP: 002b:00007f9440345028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  457.116763][T10729] RAX: ffffffffffffffda RBX: 00007f9442396090 RCX: 00007f944210de99
[  457.116775][T10729] RDX: 00000000200080c4 RSI: 0000200000000340 RDI: 0000000000000004
[  457.116785][T10729] RBP: 00007f9440345090 R08: 0000000000000000 R09: 0000000000000000
[  457.116795][T10729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  457.116804][T10729] R13: 00007f9442396128 R14: 00007f9442396090 R15: 00007ffe45b50d58
[  457.116829][T10729]  </TASK>
[  458.291259][ T5739] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  458.567702][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1453'.
[  458.608318][ T5739] usb 6-1: Using ep0 maxpacket: 32
[  458.770069][ T5739] usb 6-1: unable to get BOS descriptor or descriptor too short
[  458.770151][ T5739] usb 6-1: too many configurations: 32, using maximum allowed: 8
[  458.785385][ T5739] usb 6-1: config 244 has an invalid descriptor of length 207, skipping remainder of the config
[  458.785410][ T5739] usb 6-1: config 244 has 0 interfaces, different from the descriptor's value: 3
[  458.791319][ T5739] usb 6-1: config 244 has an invalid descriptor of length 207, skipping remainder of the config
[  458.791344][ T5739] usb 6-1: config 244 has 0 interfaces, different from the descriptor's value: 3
[  458.796450][ T5739] usb 6-1: config 244 has an invalid descriptor of length 207, skipping remainder of the config
[  458.796477][ T5739] usb 6-1: config 244 has 0 interfaces, different from the descriptor's value: 3
[  458.803480][ T5739] usb 6-1: config 244 has an invalid descriptor of length 207, skipping remainder of the config
[  458.803507][ T5739] usb 6-1: config 244 has 0 interfaces, different from the descriptor's value: 3
[  458.819110][ T5739] usb 6-1: config 244 has an invalid descriptor of length 207, skipping remainder of the config
[  458.819135][ T5739] usb 6-1: config 244 has 0 interfaces, different from the descriptor's value: 3
[  458.837846][ T5739] usb 6-1: config 244 has an invalid descriptor of length 207, skipping remainder of the config
[  458.837952][ T5739] usb 6-1: config 244 has 0 interfaces, different from the descriptor's value: 3
[  458.853338][ T5739] usb 6-1: config 244 has an invalid descriptor of length 207, skipping remainder of the config
[  458.853366][ T5739] usb 6-1: config 244 has 0 interfaces, different from the descriptor's value: 3
[  458.856316][ T5739] usb 6-1: config 244 has an invalid descriptor of length 207, skipping remainder of the config
[  458.856340][ T5739] usb 6-1: config 244 has 0 interfaces, different from the descriptor's value: 3
[  458.877821][ T5739] usb 6-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40
[  458.878100][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.878153][ T5739] usb 6-1: Product: syz
[  458.878189][ T5739] usb 6-1: Manufacturer: syz
[  458.878226][ T5739] usb 6-1: SerialNumber: syz
[  459.364067][ T5739] usb 6-1: can't set config #244, error -71
[  459.380784][ T5739] usb 6-1: USB disconnect, device number 3
[  460.148273][T10756] openvswitch: netlink: Tunnel attr 157 out of range max 16
[  462.886678][ T5599] Bluetooth: hci2: unexpected event for opcode 0x200b
[  462.897268][T10780] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.1466'.
[  462.898989][T10780] netlink: 'syz.1.1466': attribute type 1 has an invalid length.
[  465.923929][T10801] FAULT_INJECTION: forcing a failure.
[  465.923929][T10801] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.923962][T10801] CPU: 0 UID: 0 PID: 10801 Comm: syz.2.1469 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  465.923985][T10801] Tainted: [L]=SOFTLOCKUP
[  465.923991][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  465.924001][T10801] Call Trace:
[  465.924007][T10801]  <TASK>
[  465.924014][T10801]  dump_stack_lvl+0xe8/0x150
[  465.924044][T10801]  should_fail_ex+0x467/0x600
[  465.924075][T10801]  _copy_from_user+0x2d/0xb0
[  465.924096][T10801]  ___sys_sendmsg+0x1c6/0x360
[  465.924117][T10801]  ? __lock_acquire+0x683/0x2ce0
[  465.924138][T10801]  ? __pfx____sys_sendmsg+0x10/0x10
[  465.924185][T10801]  ? __fget_files+0x2a/0x420
[  465.924202][T10801]  ? __fget_files+0x3a8/0x420
[  465.924227][T10801]  __x64_sys_sendmsg+0x1b7/0x290
[  465.924254][T10801]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  465.924288][T10801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.924307][T10801]  do_syscall_64+0x174/0x580
[  465.924328][T10801]  ? trace_irq_disable+0x3b/0x140
[  465.924345][T10801]  ? clear_bhb_loop+0x40/0x90
[  465.924366][T10801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.924383][T10801] RIP: 0033:0x7fd526dade99
[  465.924398][T10801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.924413][T10801] RSP: 002b:00007fd525006028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  465.924431][T10801] RAX: ffffffffffffffda RBX: 00007fd527035fa0 RCX: 00007fd526dade99
[  465.924443][T10801] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000003
[  465.924462][T10801] RBP: 00007fd525006090 R08: 0000000000000000 R09: 0000000000000000
[  465.924472][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  465.924481][T10801] R13: 00007fd527036038 R14: 00007fd527035fa0 R15: 00007ffffeb5c9e8
[  465.924506][T10801]  </TASK>
[  466.378950][T10811] netlink: 'syz.2.1470': attribute type 10 has an invalid length.
[  466.378975][T10811] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  466.378998][T10811] batman_adv: batadv0: Removing interface: batadv_slave_0
[  466.457996][T10811] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  466.458025][T10811] batman_adv: batadv0: Removing interface: batadv_slave_1
[  466.701345][T10816] batadv_slave_0: entered promiscuous mode
[  466.701514][T10816] macvlan2: entered allmulticast mode
[  466.701529][T10816] batadv_slave_0: entered allmulticast mode
[  466.806090][T10816] batadv_slave_0: left allmulticast mode
[  466.806152][T10816] batadv_slave_0: left promiscuous mode
[  467.258442][T10837] input: syz0 as /devices/virtual/input/input13
[  468.571231][ T5601] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  468.738737][ T5601] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  468.761949][ T5601] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41
[  468.761979][ T5601] usb 3-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2
[  468.762018][ T5601] usb 3-1: Product: syz
[  468.762032][ T5601] usb 3-1: SerialNumber: syz
[  468.810177][ T5601] usb 3-1: config 0 descriptor??
[  468.825457][ T5601] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  468.869176][ T5601] usb 3-1: Detected SIO
[  468.982795][ T5601] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  469.199618][ T5739] usb 3-1: USB disconnect, device number 26
[  469.463114][T10879] netlink: 'syz.5.1484': attribute type 10 has an invalid length.
[  469.596893][ T5739] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  469.604691][ T5739] ftdi_sio 3-1:0.0: device disconnected
[  469.908261][T10879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  469.908290][T10879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  469.953630][T10879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  469.953658][T10879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  471.415152][T10918] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1492'.
[  471.716829][T10927] syzkaller0: entered promiscuous mode
[  471.716850][T10927] syzkaller0: entered allmulticast mode
[  471.860541][T10925] tipc: Started in network mode
[  471.860573][T10925] tipc: Node identity d6ce691c6a2e, cluster identity 4711
[  471.888917][T10925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  471.889439][T10930] netlink: 'syz.5.1495': attribute type 11 has an invalid length.
[  471.889459][T10930] netlink: 'syz.5.1495': attribute type 4 has an invalid length.
[  472.541782][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  472.598889][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  472.600773][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  472.621670][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  472.626198][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  472.731633][ T8397] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.051655][T10929] tipc: Resetting bearer <eth:syzkaller0>
[  473.093639][   T59] Bluetooth: hci1: command 0x0401 tx timeout
[  473.296575][T10929] tipc: Disabling bearer <eth:syzkaller0>
[  473.556491][T10947] batadv_slave_0: entered promiscuous mode
[  473.556703][T10947] macvlan2: entered allmulticast mode
[  473.556717][T10947] batadv_slave_0: entered allmulticast mode
[  473.560830][T10947] batadv_slave_0: left allmulticast mode
[  473.560884][T10947] batadv_slave_0: left promiscuous mode
[  473.757541][ T5739] tipc: Node number set to 3168823580
[  473.783929][T10332] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  473.937862][T10332] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  474.168895][ T8397] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.432273][T10332] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  474.595067][T10332] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  474.652828][T10332] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  474.728568][T10332] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  474.738854][T10332] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  474.771295][ T5599] Bluetooth: hci0: command tx timeout
[  474.823610][T10332] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  475.029576][ T8397] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.381617][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1518'.
[  475.577001][T11012] FAULT_INJECTION: forcing a failure.
[  475.577001][T11012] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  475.577039][T11012] CPU: 0 UID: 0 PID: 11012 Comm: syz.5.1520 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  475.577071][T11012] Tainted: [L]=SOFTLOCKUP
[  475.577079][T11012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  475.577090][T11012] Call Trace:
[  475.577097][T11012]  <TASK>
[  475.577105][T11012]  dump_stack_lvl+0xe8/0x150
[  475.577143][T11012]  should_fail_ex+0x467/0x600
[  475.577198][T11012]  _copy_from_user+0x2d/0xb0
[  475.577226][T11012]  ___sys_sendmsg+0x1c6/0x360
[  475.577252][T11012]  ? __lock_acquire+0x683/0x2ce0
[  475.577279][T11012]  ? __pfx____sys_sendmsg+0x10/0x10
[  475.577304][T11012]  ? __lock_acquire+0x683/0x2ce0
[  475.577331][T11012]  ? kstrtouint+0x6e/0xe0
[  475.577406][T11012]  __sys_sendmmsg+0x279/0x4d0
[  475.577438][T11012]  ? __pfx___sys_sendmmsg+0x10/0x10
[  475.577474][T11012]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  475.577523][T11012]  ? ksys_write+0x248/0x270
[  475.577554][T11012]  ? __pfx_ksys_write+0x10/0x10
[  475.577587][T11012]  __x64_sys_sendmmsg+0xa0/0xc0
[  475.577614][T11012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.577635][T11012]  do_syscall_64+0x174/0x580
[  475.577660][T11012]  ? trace_irq_disable+0x3b/0x140
[  475.577682][T11012]  ? clear_bhb_loop+0x40/0x90
[  475.577707][T11012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.577729][T11012] RIP: 0033:0x7f0373c3de99
[  475.577749][T11012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.577768][T11012] RSP: 002b:00007f0371e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  475.577790][T11012] RAX: ffffffffffffffda RBX: 00007f0373ec5fa0 RCX: 00007f0373c3de99
[  475.577805][T11012] RDX: 0000000004000070 RSI: 0000200000003b80 RDI: 0000000000000005
[  475.577818][T11012] RBP: 00007f0371e96090 R08: 0000000000000000 R09: 0000000000000000
[  475.577830][T11012] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001
[  475.577842][T11012] R13: 00007f0373ec6038 R14: 00007f0373ec5fa0 R15: 00007ffdef364388
[  475.577874][T11012]  </TASK>
[  475.688664][ T8397] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.851412][ T5599] Bluetooth: hci0: command tx timeout
[  476.899507][T11024] bond0: (slave team_slave_0): Error: Device is in use and cannot be enslaved
[  477.291223][  T823] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  477.351982][ T8397] bridge_slave_1: left allmulticast mode
[  477.352009][ T8397] bridge_slave_1: left promiscuous mode
[  477.352204][ T8397] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.453329][  T823] usb 6-1: config 5 has an invalid interface number: 211 but max is 0
[  477.453359][  T823] usb 6-1: config 5 has an invalid descriptor of length 48, skipping remainder of the config
[  477.453379][  T823] usb 6-1: config 5 has no interface number 0
[  477.455800][  T823] usb 6-1: New USB device found, idVendor=813a, idProduct=22fe, bcdDevice=89.9c
[  477.455826][  T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.455853][  T823] usb 6-1: Product: syz
[  477.455866][  T823] usb 6-1: Manufacturer: syz
[  477.455880][  T823] usb 6-1: SerialNumber: syz
[  477.525855][ T8397] bridge_slave_0: left allmulticast mode
[  477.525889][ T8397] bridge_slave_0: left promiscuous mode
[  477.527680][ T8397] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.550885][  T823] rndis_host 6-1:5.211: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  477.710573][ T8397] macsec0: left allmulticast mode
[  477.710595][ T8397] veth1_macvtap: left allmulticast mode
[  477.752976][    T9] usb 6-1: USB disconnect, device number 4
[  478.933316][ T5599] Bluetooth: hci0: command tx timeout
[  479.037248][   T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  479.059934][   T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  479.061230][ T5860] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  479.091420][   T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  479.130915][   T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  479.138905][   T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  479.178730][ T8397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  479.252178][ T5860] usb 6-1: Using ep0 maxpacket: 32
[  479.254337][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  479.254368][ T5860] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  479.254394][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  479.257023][ T5860] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  479.257049][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.257068][ T5860] usb 6-1: Product: syz
[  479.257082][ T5860] usb 6-1: Manufacturer: syz
[  479.257095][ T5860] usb 6-1: SerialNumber: syz
[  479.344232][ T5860] usb 6-1: config 0 descriptor??
[  479.421927][ T8397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  479.468632][ T8397] bond0 (unregistering): Released all slaves
[  479.564646][ T5860] usb 6-1: USB disconnect, device number 5
[  479.711970][ T8397] tipc: Left network mode
[  480.410942][T11080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1537'.
[  481.123843][   T59] Bluetooth: hci0: command tx timeout
[  481.282500][   T59] Bluetooth: hci2: command tx timeout
[  481.695384][T11088] 9pnet_fd: Insufficient options for proto=fd
[  481.891737][T11093] netlink: 'syz.5.1536': attribute type 1 has an invalid length.
[  482.652919][T11100] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1540'.
[  483.732403][   T59] Bluetooth: hci2: command tx timeout
[  483.796642][T11121] FAULT_INJECTION: forcing a failure.
[  483.796642][T11121] name failslab, interval 1, probability 0, space 0, times 0
[  483.796677][T11121] CPU: 0 UID: 0 PID: 11121 Comm: syz.6.1544 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  483.796699][T11121] Tainted: [L]=SOFTLOCKUP
[  483.796705][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  483.796714][T11121] Call Trace:
[  483.796719][T11121]  <TASK>
[  483.796727][T11121]  dump_stack_lvl+0xe8/0x150
[  483.796756][T11121]  should_fail_ex+0x467/0x600
[  483.796806][T11121]  should_failslab+0xa8/0x100
[  483.796835][T11121]  __kmalloc_noprof+0xfe/0x780
[  483.796860][T11121]  ? ___neigh_create+0x719/0x2390
[  483.796893][T11121]  ? ___neigh_create+0x719/0x2390
[  483.796926][T11121]  ? nf_hook+0xa1/0x3a0
[  483.796955][T11121]  ___neigh_create+0x719/0x2390
[  483.797002][T11121]  ip6_finish_output2+0x6d6/0x1410
[  483.797022][T11121]  ? ip6_mtu+0x7d/0x490
[  483.797042][T11121]  ? ip6_output+0x11e/0x540
[  483.797057][T11121]  ip6_output+0x337/0x540
[  483.797075][T11121]  ip6_mr_output+0x53e/0x1170
[  483.797091][T11121]  ? __might_fault+0xaf/0x130
[  483.797108][T11121]  ? __might_fault+0xaf/0x130
[  483.797125][T11121]  ? ip6_mr_output+0x1f3/0x1170
[  483.797144][T11121]  ? __pfx_ip6_mr_output+0x10/0x10
[  483.797168][T11121]  ? _copy_from_iter+0x21b/0x1660
[  483.797203][T11121]  ? rawv6_send_hdrinc+0x9bb/0x1950
[  483.797223][T11121]  ? __pfx_ip6_mr_output+0x10/0x10
[  483.797239][T11121]  rawv6_send_hdrinc+0x1606/0x1950
[  483.797270][T11121]  ? __pfx_rawv6_send_hdrinc+0x10/0x10
[  483.797288][T11121]  ? txopt_get+0x343/0x3f0
[  483.797307][T11121]  ? __pfx_dst_output+0x10/0x10
[  483.797325][T11121]  ? __pfx_txopt_get+0x10/0x10
[  483.797350][T11121]  rawv6_sendmsg+0x12fb/0x18c0
[  483.797376][T11121]  ? smack_ipv6host_label+0x824/0x8e0
[  483.797400][T11121]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  483.797423][T11121]  ? smack_socket_sendmsg+0x4b4/0x590
[  483.797456][T11121]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[  483.797487][T11121]  ? sock_rps_record_flow+0x19/0x350
[  483.797512][T11121]  ? inet_sendmsg+0x298/0x320
[  483.797535][T11121]  ? __pfx_inet_sendmsg+0x10/0x10
[  483.797555][T11121]  sock_sendmsg_nosec+0x10e/0x180
[  483.797579][T11121]  ____sys_sendmsg+0x565/0x870
[  483.797602][T11121]  ? __pfx_____sys_sendmsg+0x10/0x10
[  483.797627][T11121]  ? import_iovec+0x73/0xa0
[  483.797646][T11121]  ___sys_sendmsg+0x2a5/0x360
[  483.797667][T11121]  ? __lock_acquire+0x683/0x2ce0
[  483.797686][T11121]  ? __pfx____sys_sendmsg+0x10/0x10
[  483.797728][T11121]  ? __fget_files+0x2a/0x420
[  483.797743][T11121]  ? __fget_files+0x3a8/0x420
[  483.797765][T11121]  __x64_sys_sendmsg+0x1b7/0x290
[  483.797784][T11121]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  483.797815][T11121]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.797831][T11121]  do_syscall_64+0x174/0x580
[  483.797847][T11121]  ? trace_irq_disable+0x3b/0x140
[  483.797862][T11121]  ? clear_bhb_loop+0x40/0x90
[  483.797880][T11121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.797894][T11121] RIP: 0033:0x7fef3fc6de99
[  483.797907][T11121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  483.797920][T11121] RSP: 002b:00007fef3dec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  483.797935][T11121] RAX: ffffffffffffffda RBX: 00007fef3fef5fa0 RCX: 00007fef3fc6de99
[  483.797945][T11121] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  483.797954][T11121] RBP: 00007fef3dec6090 R08: 0000000000000000 R09: 0000000000000000
[  483.797962][T11121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  483.797970][T11121] R13: 00007fef3fef6038 R14: 00007fef3fef5fa0 R15: 00007ffc9c113ae8
[  483.797993][T11121]  </TASK>
[  484.589670][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9
[  484.599040][T10941] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.599174][T10941] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.599390][T10941] bridge_slave_0: entered allmulticast mode
[  484.623676][T10941] bridge_slave_0: entered promiscuous mode
[  484.738165][T10941] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.760603][T10941] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.760832][T10941] bridge_slave_1: entered allmulticast mode
[  484.782707][ T5860] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  484.803149][T10941] bridge_slave_1: entered promiscuous mode
[  485.141255][ T5860] usb 3-1: device descriptor read/64, error -71
[  485.285094][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1547'.
[  485.818393][   T59] Bluetooth: hci2: command tx timeout
[  486.144432][ T5860] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  486.291237][ T5860] usb 3-1: device descriptor read/64, error -71
[  486.401645][ T5860] usb usb3-port1: attempt power cycle
[  486.489720][T11137] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1549'.
[  487.652958][ T5860] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  487.660233][T10941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.660330][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1550'.
[  487.850117][T10941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.871346][ T5860] usb 3-1: device not accepting address 29, error -71
[  487.891709][   T59] Bluetooth: hci2: command tx timeout
[  488.333467][ T8397] veth1_macvtap: left promiscuous mode
[  488.333570][ T8397] veth0_macvtap: left promiscuous mode
[  488.333824][ T8397] veth1_vlan: left promiscuous mode
[  488.334006][ T8397] veth0_vlan: left promiscuous mode
[  488.361627][T11158] syz.5.1553 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  488.491248][ T5860] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  488.541958][T11161] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  488.620906][ T5860] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  488.620933][ T5860] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  488.620951][ T5860] usb 3-1: config 220 has no interface number 2
[  488.621030][ T5860] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  488.621055][ T5860] usb 3-1: config 220 interface 0 has no altsetting 0
[  488.621090][ T5860] usb 3-1: config 220 interface 76 has no altsetting 0
[  488.621427][ T5860] usb 3-1: config 220 interface 1 has no altsetting 0
[  488.684396][ T5860] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  488.684425][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.684445][ T5860] usb 3-1: Product: syz
[  488.684461][ T5860] usb 3-1: Manufacturer: syz
[  488.684475][ T5860] usb 3-1: SerialNumber: syz
[  488.950225][T11144] program syz.2.1551 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  488.980214][ T5860] usb 3-1: selecting invalid altsetting 0
[  489.010438][ T5860] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  489.010494][ T5860] uvcvideo 3-1:220.0: No valid video chain found.
[  489.034867][ T5860] usb 3-1: selecting invalid altsetting 0
[  489.034901][ T5860] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  489.071875][ T5860] usb 3-1: USB disconnect, device number 30
[  489.244326][ T8397] team0 (unregistering): Port device team_slave_1 removed
[  489.269547][ T8397] team0 (unregistering): Port device team_slave_0 removed
[  489.491665][T11146] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1553'.
[  489.492799][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1553'.
[  489.552923][T11161] ªªªªªª: renamed from vlan0 (while UP)
[  489.711145][T10941] team0: Port device team_slave_0 added
[  489.772456][T10941] team0: Port device team_slave_1 added
[  489.787307][T11167] FAULT_INJECTION: forcing a failure.
[  489.787307][T11167] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  489.787340][T11167] CPU: 1 UID: 0 PID: 11167 Comm: syz.2.1560 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  489.787363][T11167] Tainted: [L]=SOFTLOCKUP
[  489.787369][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  489.787380][T11167] Call Trace:
[  489.787387][T11167]  <TASK>
[  489.787394][T11167]  dump_stack_lvl+0xe8/0x150
[  489.787427][T11167]  should_fail_ex+0x467/0x600
[  489.787462][T11167]  _copy_from_iter+0x1d3/0x1660
[  489.787481][T11167]  ? rcu_is_watching+0x15/0xb0
[  489.787504][T11167]  ? trace_kmem_cache_alloc+0x29/0xe0
[  489.787526][T11167]  ? __pfx__copy_from_iter+0x10/0x10
[  489.787541][T11167]  ? __alloc_skb+0x276/0x7a0
[  489.787568][T11167]  ? __alloc_skb+0x276/0x7a0
[  489.787588][T11167]  ? netlink_sendmsg+0x650/0xb40
[  489.787610][T11167]  ? skb_put+0x112/0x210
[  489.787630][T11167]  netlink_sendmsg+0x6c0/0xb40
[  489.787658][T11167]  ? __pfx_netlink_sendmsg+0x10/0x10
[  489.787682][T11167]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  489.787710][T11167]  ? __kernel_text_address+0xd/0x30
[  489.787730][T11167]  ? unwind_get_return_address+0x4d/0x90
[  489.787756][T11167]  ? __pfx_netlink_sendmsg+0x10/0x10
[  489.787775][T11167]  sock_sendmsg_nosec+0x13a/0x180
[  489.787802][T11167]  ____sys_sendmsg+0x565/0x870
[  489.787822][T11167]  ? __might_fault+0xaf/0x130
[  489.787844][T11167]  ? __pfx_____sys_sendmsg+0x10/0x10
[  489.787870][T11167]  ? import_iovec+0x73/0xa0
[  489.787892][T11167]  ___sys_sendmsg+0x2a5/0x360
[  489.787912][T11167]  ? __lock_acquire+0x683/0x2ce0
[  489.787933][T11167]  ? __pfx____sys_sendmsg+0x10/0x10
[  489.787982][T11167]  ? __fget_files+0x2a/0x420
[  489.788000][T11167]  ? __fget_files+0x3a8/0x420
[  489.788028][T11167]  __x64_sys_sendmsg+0x1b7/0x290
[  489.788054][T11167]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  489.788091][T11167]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.788109][T11167]  do_syscall_64+0x174/0x580
[  489.788127][T11167]  ? trace_irq_disable+0x3b/0x140
[  489.788144][T11167]  ? clear_bhb_loop+0x40/0x90
[  489.788164][T11167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.788180][T11167] RIP: 0033:0x7fd526dade99
[  489.788196][T11167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  489.788210][T11167] RSP: 002b:00007fd525006028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  489.788228][T11167] RAX: ffffffffffffffda RBX: 00007fd527035fa0 RCX: 00007fd526dade99
[  489.788240][T11167] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003
[  489.788251][T11167] RBP: 00007fd525006090 R08: 0000000000000000 R09: 0000000000000000
[  489.788261][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  489.788270][T11167] R13: 00007fd527036038 R14: 00007fd527035fa0 R15: 00007ffffeb5c9e8
[  489.788295][T11167]  </TASK>
[  490.165238][   T59] Bluetooth: hci1: unexpected event for opcode 0x200b
[  490.227986][T11171] netlink: 199784 bytes leftover after parsing attributes in process `syz.6.1561'.
[  490.228009][T11171] netlink: 'syz.6.1561': attribute type 1 has an invalid length.
[  490.291440][T10941] batman_adv: batadv0: Adding interface: batadv_slave_0
[  490.291456][T10941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  490.291482][T10941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  490.294344][T10941] batman_adv: batadv0: Adding interface: batadv_slave_1
[  490.294357][T10941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  490.294384][T10941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  491.704441][T10941] hsr_slave_0: entered promiscuous mode
[  491.710000][T10941] hsr_slave_1: entered promiscuous mode
[  491.725646][T10941] debugfs: 'hsr0' already exists in 'hsr'
[  491.725671][T10941] Cannot create hsr debugfs directory
[  492.120743][T11194] comedi: valid board names for 8255 driver are:
[  492.120757][T11194]  8255
[  492.120763][T11194] comedi: valid board names for vmk80xx driver are:
[  492.120772][T11194]  vmk80xx
[  492.120778][T11194] comedi: valid board names for usbduxsigma driver are:
[  492.120787][T11194]  usbduxsigma
[  492.120794][T11194] comedi: valid board names for usbduxfast driver are:
[  492.120802][T11194]  usbduxfast
[  492.120809][T11194] comedi: valid board names for usbdux driver are:
[  492.120825][T11194]  usbdux
[  492.120831][T11194] comedi: valid board names for ni6501 driver are:
[  492.120840][T11194]  ni6501
[  492.120846][T11194] comedi: valid board names for dt9812 driver are:
[  492.120854][T11194]  dt9812
[  492.120859][T11194] comedi: valid board names for ni_labpc_cs driver are:
[  492.120868][T11194]  ni_labpc_cs
[  492.120874][T11194] comedi: valid board names for ni_daq_700 driver are:
[  492.120882][T11194]  ni_daq_700
[  492.120888][T11194] comedi: valid board names for labpc_pci driver are:
[  492.120896][T11194]  labpc_pci
[  492.120903][T11194] comedi: valid board names for adl_pci9118 driver are:
[  492.120911][T11194]  pci9118dg
[  492.120916][T11194]  pci9118hg
[  492.120922][T11194]  pci9118hr
[  492.120927][T11194] comedi: valid board names for 8255_pci driver are:
[  492.120935][T11194]  8255_pci
[  492.120941][T11194] comedi: valid board names for s526 driver are:
[  492.120950][T11194]  s526
[  492.120956][T11194] comedi: valid board names for multiq3 driver are:
[  492.120964][T11194]  multiq3
[  492.120969][T11194] comedi: valid board names for pcmuio driver are:
[  492.120978][T11194]  pcmuio48
[  492.120983][T11194]  pcmuio96
[  492.120989][T11194] comedi: valid board names for pcmmio driver are:
[  492.120997][T11194]  pcmmio
[  492.121002][T11194] comedi: valid board names for pcmda12 driver are:
[  492.121010][T11194]  pcmda12
[  492.121016][T11194] comedi: valid board names for pcmad driver are:
[  492.121024][T11194]  pcmad12
[  492.121030][T11194]  pcmad16
[  492.121036][T11194] comedi: valid board names for ni_labpc driver are:
[  492.121044][T11194]  lab-pc-1200
[  492.121050][T11194]  lab-pc-1200ai
[  492.121056][T11194]  lab-pc+
[  492.121062][T11194] comedi: valid board names for atmio16 driver are:
[  492.121070][T11194]  atmio16
[  492.121167][T11194]  atmio16d
[  492.121175][T11194] comedi: valid board names for ni_at_ao driver are:
[  492.121183][T11194]  at-ao-6
[  492.121189][T11194]  at-ao-10
[  492.121195][T11194] comedi: valid board names for ni_at_a2150 driver are:
[  492.121204][T11194]  ni_at_a2150
[  492.121210][T11194] comedi: valid board names for adq12b driver are:
[  492.121219][T11194]  adq12b
[  492.121224][T11194] comedi: valid board names for mpc624 driver are:
[  492.121233][T11194]  mpc624
[  492.121240][T11194] comedi: valid board names for c6xdigio driver are:
[  492.121248][T11194]  c6xdigio
[  492.121254][T11194] comedi: valid board names for aio_iiro_16 driver are:
[  492.121262][T11194]  aio_iiro_16
[  492.121268][T11194] comedi: valid board names for aio_aio12_8 driver are:
[  492.121277][T11194]  aio_aio12_8
[  492.121282][T11194]  aio_ai12_8
[  492.121289][T11194]  aio_ao12_4
[  492.121294][T11194] comedi: valid board names for fl512 driver are:
[  492.121302][T11194]  fl512
[  492.121307][T11194] comedi: valid board names for dmm32at driver are:
[  492.121315][T11194]  dmm32at
[  492.121321][T11194] comedi: valid board names for dt282x driver are:
[  492.121329][T11194]  dt2821
[  492.121335][T11194]  dt2821-f
[  492.121341][T11194]  dt2821-g
[  492.121347][T11194]  dt2823
[  492.121351][T11194]  dt2824-pgh
[  492.121357][T11194]  dt2824-pgl
[  492.121363][T11194]  dt2825
[  492.121368][T11194]  dt2827
[  492.121374][T11194]  dt2828
[  492.121380][T11194]  dt2829
[  492.121386][T11194]  dt21-ez
[  492.121391][T11194]  dt23-ez
[  492.121397][T11194]  dt24-ez
[  492.121403][T11194]  dt24-ez-pgl
[  492.121409][T11194] comedi: valid board names for dt2817 driver are:
[  492.121417][T11194]  dt2817
[  492.121423][T11194] comedi: valid board names for dt2815 driver are:
[  492.121432][T11194]  dt2815
[  492.121437][T11194] comedi: valid board names for dt2814 driver are:
[  492.121444][T11194]  dt2814
[  492.121450][T11194] comedi: valid board names for dt2811 driver are:
[  492.121458][T11194]  dt2811-pgh
[  492.121464][T11194]  dt2811-pgl
[  492.121470][T11194] comedi: valid board names for dt2801 driver are:
[  492.121478][T11194]  dt2801
[  492.121484][T11194] comedi: valid board names for das6402 driver are:
[  492.121492][T11194]  das6402-12
[  492.121517][T11194]  das6402-16
[  492.121523][T11194] comedi: valid board names for das1800 driver are:
[  492.121532][T11194]  das-1701st
[  492.121538][T11194]  das-1701st-da
[  492.121544][T11194]  das-1702st
[  492.121551][T11194]  das-1702st-da
[  492.121557][T11194]  das-1702hr
[  492.121573][T11194]  das-1702hr-da
[  492.121581][T11194]  das-1701ao
[  492.121588][T11194]  das-1702ao
[  492.121594][T11194]  das-1801st
[  492.121601][T11194]  das-1801st-da
[  492.121608][T11194]  das-1802st
[  492.121615][T11194]  das-1802st-da
[  492.121621][T11194]  das-1802hr
[  492.121627][T11194]  das-1802hr-da
[  492.121634][T11194]  das-1801hc
[  492.121639][T11194]  das-1802hc
[  492.121645][T11194]  das-1801ao
[  492.121650][T11194]  das-1802ao
[  492.121656][T11194] comedi: valid board names for das800 driver are:
[  492.121664][T11194]  das-800
[  492.121670][T11194]  cio-das800
[  492.121676][T11194]  das-801
[  492.121683][T11194]  cio-das801
[  492.121689][T11194]  das-802
[  492.121695][T11194]  cio-das802
[  492.121701][T11194]  cio-das802/16
[  492.121707][T11194] comedi: valid board names for isa-das08 driver are:
[  492.121716][T11194]  isa-das08
[  492.121722][T11194]  das08-pgm
[  492.121728][T11194]  das08-pgh
[  492.121734][T11194]  das08-pgl
[  492.121740][T11194]  das08-aoh
[  492.121746][T11194]  das08-aol
[  492.121752][T11194]  das08-aom
[  492.121757][T11194]  das08/jr-ao
[  492.121764][T11194]  das08jr-16-ao
[  492.121770][T11194]  pc104-das08
[  492.121775][T11194]  das08jr/16
[  492.121782][T11194] comedi: valid board names for das16m1 driver are:
[  492.121790][T11194]  das16m1
[  492.121796][T11194] comedi: valid board names for dac02 driver are:
[  492.121804][T11194]  dac02
[  492.121810][T11194] comedi: valid board names for rti802 driver are:
[  492.121827][T11194]  rti802
[  492.121833][T11194] comedi: valid board names for rti800 driver are:
[  492.121841][T11194]  rti800
[  492.121848][T11194]  rti815
[  492.121854][T11194] comedi: valid board names for pcm3724 driver are:
[  492.121863][T11194]  pcm3724
[  492.121869][T11194] comedi: valid board names for pcl818 driver are:
[  492.121877][T11194]  pcl818l
[  492.121883][T11194]  pcl818h
[  492.121889][T11194]  pcl818hd
[  492.121895][T11194]  pcl818hg
[  492.121901][T11194]  pcl818
[  492.121907][T11194]  pcl718
[  492.121913][T11194]  pcm3718
[  492.121919][T11194] comedi: valid board names for pcl816 driver are:
[  492.121928][T11194]  pcl816
[  492.121934][T11194]  pcl814b
[  492.121940][T11194] comedi: valid board names for pcl812 driver are:
[  492.121949][T11194]  pcl812
[  492.121955][T11194]  pcl812pg
[  492.121961][T11194]  acl8112pg
[  492.121968][T11194]  acl8112dg
[  492.121975][T11194]  acl8112hg
[  492.121981][T11194]  a821pgl
[  492.121987][T11194]  a821pglnda
[  492.121993][T11194]  a821pgh
[  492.121999][T11194]  a822pgl
[  492.122005][T11194]  a822pgh
[  492.122010][T11194]  a823pgl
[  492.122016][T11194]  a823pgh
[  492.122022][T11194]  pcl813
[  492.122027][T11194]  pcl813b
[  492.122050][T11194]  acl8113
[  492.122057][T11194]  iso813
[  492.122063][T11194]  acl8216
[  492.122069][T11194]  a826pg
[  492.122076][T11194] comedi: valid board names for pcl730 driver are:
[  492.122085][T11194]  pcl730
[  492.122091][T11194]  iso730
[  492.122098][T11194]  acl7130
[  492.122104][T11194]  pcm3730
[  492.122110][T11194]  pcl725
[  492.122116][T11194]  p8r8dio
[  492.122122][T11194]  acl7225b
[  492.122129][T11194]  p16r16dio
[  492.122135][T11194]  pcl733
[  492.122142][T11194]  pcl734
[  492.122151][T11194]  opmm-1616-xt
[  492.122159][T11194]  pearl-mm-p
[  492.123788][T11194]  ir104-pbf
[  492.123798][T11194] comedi: valid board names for pcl726 driver are:
[  492.123815][T11194]  pcl726
[  492.123850][T11194]  pcl727
[  492.123868][T11194]  pcl728
[  492.123893][T11194]  acl6126
[  492.123919][T11194]  acl6128
[  492.123938][T11194] comedi: valid board names for pcl724 driver are:
[  492.123972][T11194]  pcl724
[  492.123992][T11194]  pcl722
[  492.124004][T11194]  pcl731
[  492.124023][T11194]  acl7122
[  492.124041][T11194]  acl7124
[  492.124053][T11194]  pet48dio
[  492.124071][T11194]  pcmio48
[  492.124090][T11194]  onyx-mm-dio
[  492.124103][T11194] comedi: valid board names for pcl711 driver are:
[  492.124129][T11194]  pcl711
[  492.124141][T11194]  pcl711b
[  492.124160][T11194]  acl8112hg
[  492.124178][T11194]  acl8112dg
[  492.124191][T11194] comedi: valid board names for amplc_pc263 driver are:
[  492.124220][T11194]  pc263
[  492.124238][T11194] comedi: valid board names for amplc_pc236 driver are:
[  492.124272][T11194]  pc36at
[  492.124279][T11194] comedi: valid board names for amplc_dio200 driver are:
[  492.124289][T11194]  pc212e
[  492.124297][T11194]  pc214e
[  492.124303][T11194]  pc215e
[  492.124310][T11194]  pc218e
[  492.124318][T11194]  pc272e
[  492.124325][T11194] comedi: valid board names for comedi_parport driver are:
[  492.124335][T11194]  comedi_parport
[  492.124342][T11194] comedi: valid board names for comedi_test driver are:
[  492.124372][T11194]  comedi_test
[  492.124385][T11194] comedi: valid board names for comedi_bond driver are:
[  492.124412][T11194]  comedi_bond
[  492.291958][T11199] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: 0
[  492.295209][T11199] ucsi-stm32g0-i2c 0-0003: probe with driver ucsi-stm32g0-i2c failed with error -5
[  492.302868][T11199] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03
[  493.700757][T11209] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1569'.
[  494.609919][T11222] ip6erspan0: entered allmulticast mode
[  494.667394][ T5256] 8021q: adding VLAN 0 to HW filter on device eth10
[  494.684432][T11055] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.684547][T11055] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.684713][T11055] bridge_slave_0: entered allmulticast mode
[  494.735012][T11055] bridge_slave_0: entered promiscuous mode
[  494.752799][T11055] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.756337][T11055] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.756477][T11055] bridge_slave_1: entered allmulticast mode
[  494.791329][T11055] bridge_slave_1: entered promiscuous mode
[  495.553916][T11055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.587112][T11055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  497.090514][T11055] team0: Port device team_slave_0 added
[  497.258557][T11055] team0: Port device team_slave_1 added
[  497.534386][T10941] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  498.251572][T10941] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  498.301063][T11055] batman_adv: batadv0: Adding interface: batadv_slave_0
[  498.301182][T11055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  498.301209][T11055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  498.461449][T11242] netlink: 'syz.6.1576': attribute type 1 has an invalid length.
[  498.461475][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1576'.
[  499.635371][T10941] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  499.681479][T10941] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  499.684097][T11055] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.684111][T11055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.684139][T11055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.688452][ T5256] 8021q: adding VLAN 0 to HW filter on device eth11
[  499.693883][T10941] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  500.049885][T10941] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  501.397597][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  501.397667][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  501.658111][   T59] Bluetooth: hci1: unexpected event for opcode 0x200b
[  501.852668][T11257] netlink: 199784 bytes leftover after parsing attributes in process `syz.6.1577'.
[  501.852693][T11257] netlink: 'syz.6.1577': attribute type 1 has an invalid length.
[  502.432912][T11260] netlink: 'syz.2.1575': attribute type 1 has an invalid length.
[  502.928867][T10941] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  503.140392][T10941] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  504.060980][T11055] hsr_slave_0: entered promiscuous mode
[  504.080821][T11055] hsr_slave_1: entered promiscuous mode
[  504.092982][T11055] debugfs: 'hsr0' already exists in 'hsr'
[  504.093000][T11055] Cannot create hsr debugfs directory
[  504.807930][T11274] netlink: 'syz.6.1579': attribute type 1 has an invalid length.
[  509.036954][   T59] Bluetooth: hci1: unexpected event for opcode 0x200b
[  509.080664][T11306] netlink: 199784 bytes leftover after parsing attributes in process `syz.6.1586'.
[  509.080687][T11306] netlink: 'syz.6.1586': attribute type 1 has an invalid length.
[  509.754835][ T5599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  509.839772][ T5599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  509.865397][ T5599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  509.884676][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  509.889091][ T5599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  509.995660][ T5256] 8021q: adding VLAN 0 to HW filter on device eth12
[  510.778380][T10941] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.019324][T10941] 8021q: adding VLAN 0 to HW filter on device team0
[  512.061292][   T59] Bluetooth: hci4: command tx timeout
[  512.180744][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.195043][ T5832] bridge0: port 1(bridge_slave_0) entered forwarding state
[  512.277535][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.277631][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state
[  512.545388][ T8397] bridge_slave_1: left allmulticast mode
[  512.545424][ T8397] bridge_slave_1: left promiscuous mode
[  512.545678][ T8397] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.714513][ T8397] bridge_slave_0: left allmulticast mode
[  512.714548][ T8397] bridge_slave_0: left promiscuous mode
[  512.714843][ T8397] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.221612][   T59] Bluetooth: hci4: command tx timeout
[  515.653396][ T8397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  515.772051][ T8397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  515.833033][ T8397] bond0 (unregistering): Released all slaves
[  515.897035][T11335] batadv_slave_0: entered promiscuous mode
[  515.897208][T11335] macvlan2: entered allmulticast mode
[  515.897221][T11335] batadv_slave_0: entered allmulticast mode
[  515.899367][T11335] batadv_slave_0: left allmulticast mode
[  515.899408][T11335] batadv_slave_0: left promiscuous mode
[  516.094604][ T5256] 8021q: adding VLAN 0 to HW filter on device eth13
[  516.787445][ T8397] hsr_slave_0: left promiscuous mode
[  516.826583][ T8397] hsr_slave_1: left promiscuous mode
[  516.836983][ T8397] batman_adv: batadv0: Removing interface: batadv_slave_0
[  516.902272][ T8397] batman_adv: batadv0: Removing interface: batadv_slave_1
[  517.251510][   T59] Bluetooth: hci4: command tx timeout
[  518.393276][   T59] Bluetooth: hci1: unexpected event for opcode 0x200b
[  518.410279][T11368] netlink: 199784 bytes leftover after parsing attributes in process `syz.6.1594'.
[  518.410301][T11368] netlink: 'syz.6.1594': attribute type 1 has an invalid length.
[  519.765555][   T59] Bluetooth: hci4: command tx timeout
[  519.905280][ T8397] team0 (unregistering): Port device team_slave_1 removed
[  519.972831][ T8397] team0 (unregistering): Port device team_slave_0 removed
[  520.251305][ T5601] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  520.405005][ T5601] usb 3-1: config 0 has an invalid interface number: 70 but max is 0
[  520.405033][ T5601] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  520.405051][ T5601] usb 3-1: config 0 has no interface number 0
[  520.405092][ T5601] usb 3-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[  520.405118][ T5601] usb 3-1: config 0 interface 70 altsetting 5 endpoint 0xB has invalid maxpacket 65535, setting to 64
[  520.405136][ T5601] usb 3-1: config 0 interface 70 has no altsetting 0
[  520.407419][ T5601] usb 3-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e
[  520.407442][ T5601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.407458][ T5601] usb 3-1: Product: syz
[  520.407472][ T5601] usb 3-1: Manufacturer: syz
[  520.407514][ T5601] usb 3-1: SerialNumber: syz
[  520.420177][ T5601] usb 3-1: config 0 descriptor??
[  520.464299][T11373] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  520.786765][ T5601] ti_usb_3410_5052 3-1:0.70: TI USB 3410 1 port adapter converter detected
[  520.787065][ T5601] ti_usb_3410_5052 3-1:0.70: missing endpoints
[  520.849400][ T5601] usb 3-1: USB disconnect, device number 31
[  521.851203][ T5727] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  521.928856][T11389] batadv_slave_0: entered promiscuous mode
[  521.929031][T11389] macvlan2: entered allmulticast mode
[  521.929047][T11389] batadv_slave_0: entered allmulticast mode
[  521.998411][T11389] batadv_slave_0: left allmulticast mode
[  521.998474][T11389] batadv_slave_0: left promiscuous mode
[  522.001225][ T5727] usb 3-1: Using ep0 maxpacket: 32
[  522.011078][ T5727] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  522.011244][ T5727] usb 3-1: config 0 has no interface number 0
[  522.014522][ T5727] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  522.014549][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.014570][ T5727] usb 3-1: Product: syz
[  522.014585][ T5727] usb 3-1: Manufacturer: syz
[  522.014600][ T5727] usb 3-1: SerialNumber: syz
[  522.094741][ T5727] usb 3-1: config 0 descriptor??
[  522.100728][ T5727] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  522.847274][T11403] mmap: syz.2.1596 (11403) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  522.906447][T11384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.989271][T11384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  523.079747][ T5727] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  523.081097][T10941] 8021q: adding VLAN 0 to HW filter on device batadv0
[  523.150942][ T5727] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  523.544767][T11309] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.546045][T11309] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.547339][T11309] bridge_slave_0: entered allmulticast mode
[  523.590625][T11309] bridge_slave_0: entered promiscuous mode
[  523.861272][ T5860] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  523.995959][ T8397] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.039663][ T5860] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  524.039724][ T5860] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  524.039749][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.063517][ T5860] usb 7-1: config 0 descriptor??
[  524.092939][ T5860] pwc: Askey VC010 type 2 USB webcam detected.
[  524.496330][ T5860] pwc: recv_control_msg error -32 req 02 val 2b00
[  524.605413][ T5860] pwc: recv_control_msg error -32 req 02 val 2700
[  524.606403][ T5860] pwc: recv_control_msg error -32 req 02 val 2c00
[  524.608153][ T5860] pwc: recv_control_msg error -32 req 04 val 1000
[  524.611047][ T5860] pwc: recv_control_msg error -32 req 04 val 1300
[  524.644403][ T5860] pwc: recv_control_msg error -32 req 04 val 1400
[  524.659339][ T5860] pwc: recv_control_msg error -32 req 02 val 2000
[  524.816728][ T5860] pwc: recv_control_msg error -32 req 02 val 2100
[  524.823284][ T5860] pwc: recv_control_msg error -32 req 04 val 1500
[  524.842321][ T5860] pwc: recv_control_msg error -32 req 02 val 2500
[  525.150253][T11309] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.150653][T11309] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.151000][T11309] bridge_slave_1: entered allmulticast mode
[  525.185065][T11309] bridge_slave_1: entered promiscuous mode
[  525.282310][ T5860] pwc: recv_control_msg error -71 req 02 val 2600
[  525.282819][ T5860] pwc: recv_control_msg error -71 req 02 val 2900
[  525.284982][ T5860] pwc: recv_control_msg error -71 req 02 val 2800
[  525.286537][ T5860] pwc: recv_control_msg error -71 req 04 val 1100
[  525.286996][ T5860] pwc: recv_control_msg error -71 req 04 val 1200
[  525.469815][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  525.475402][ T5602] usb 3-1: USB disconnect, device number 32
[  525.521146][ T5860] pwc: Registered as video103.
[  525.565960][ T5602] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  525.567501][ T5860] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input14
[  525.720173][ T5602] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  525.724623][ T5602] quatech2 3-1:0.51: device disconnected
[  525.835975][ T5860] usb 7-1: USB disconnect, device number 2
[  526.967040][ T8397] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.288165][T11438] netlink: 'syz.2.1604': attribute type 10 has an invalid length.
[  527.464071][T11309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.322664][T11309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.694372][ T8397] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.721235][ T5739] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  528.884535][ T5739] usb 3-1: config 0 has an invalid interface number: 127 but max is 1
[  528.884564][ T5739] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  528.884584][ T5739] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  528.884605][ T5739] usb 3-1: config 0 has no interface number 0
[  528.890652][ T5739] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  528.890679][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.890698][ T5739] usb 3-1: Product: syz
[  528.890711][ T5739] usb 3-1: Manufacturer: syz
[  528.890724][ T5739] usb 3-1: SerialNumber: syz
[  528.973475][ T5739] usb 3-1: config 0 descriptor??
[  528.988095][ T5739] usb-storage 3-1:0.127: USB Mass Storage device detected
[  529.030641][ T5739] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000
[  529.060494][T11309] team0: Port device team_slave_0 added
[  529.078572][T11309] team0: Port device team_slave_1 added
[  529.216181][ T5727] usb 3-1: USB disconnect, device number 33
[  529.520128][ T8397] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.606109][T11055] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  529.634486][T11055] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  529.637129][T11309] batman_adv: batadv0: Adding interface: batadv_slave_0
[  529.637140][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  529.637160][T11309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  529.640396][T11055] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  529.716990][T11055] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  529.722388][T11309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  529.722402][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  529.722424][T11309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  529.778635][T11055] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  529.828193][T11055] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  529.858553][T11055] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  529.886337][T11055] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  529.971204][ T5727] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  530.059714][T11309] hsr_slave_0: entered promiscuous mode
[  530.060890][T11309] hsr_slave_1: entered promiscuous mode
[  530.076744][T11309] debugfs: 'hsr0' already exists in 'hsr'
[  530.076769][T11309] Cannot create hsr debugfs directory
[  530.131348][ T5727] usb 7-1: Using ep0 maxpacket: 16
[  530.133858][ T5727] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  530.133882][ T5727] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  530.136977][ T5727] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  530.137005][ T5727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.137034][ T5727] usb 7-1: Product: syz
[  530.137049][ T5727] usb 7-1: Manufacturer: syz
[  530.137065][ T5727] usb 7-1: SerialNumber: syz
[  530.240272][ T5727] usb 7-1: 0:2 : does not exist
[  530.457503][ T5727] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  531.004777][ T5727] usb 7-1: USB disconnect, device number 3
[  531.165674][T10941] veth0_vlan: entered promiscuous mode
[  531.274938][ T9983] udevd[9983]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  531.631697][T10941] veth1_vlan: entered promiscuous mode
[  532.235963][T10941] veth0_macvtap: entered promiscuous mode
[  532.294492][T10941] veth1_macvtap: entered promiscuous mode
[  532.452835][T11055] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.480847][T10941] batman_adv: batadv0: Interface activated: batadv_slave_0
[  532.869904][T11055] 8021q: adding VLAN 0 to HW filter on device team0
[  533.105429][ T3343] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.107237][ T3343] bridge0: port 1(bridge_slave_0) entered forwarding state
[  533.149295][T11498] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  533.202680][T11498] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  533.214259][T11498] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  533.256094][T11498] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  533.258152][T11498] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  533.567336][ T8401] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.567537][ T8401] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.751997][T11309] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  533.971633][ T5599] Bluetooth: hci4: command 0x0405 tx timeout
[  534.270602][T11309] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  534.339328][ T5256] 8021q: adding VLAN 0 to HW filter on device eth13
[  534.542023][T11513] netlink: 'syz.6.1612': attribute type 10 has an invalid length.
[  534.884674][ T8397] bridge_slave_1: left allmulticast mode
[  534.884711][ T8397] bridge_slave_1: left promiscuous mode
[  534.884960][ T8397] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.040665][ T8397] bridge_slave_0: left allmulticast mode
[  535.040690][ T8397] bridge_slave_0: left promiscuous mode
[  535.042497][ T8397] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.953217][ T5599] Bluetooth: hci5: command tx timeout
[  537.071816][ T8397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  537.152873][ T8397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  537.221847][ T8397] bond0 (unregistering): (slave team0): Releasing backup interface
[  537.231308][  T823] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  537.256457][ T8397] bond0 (unregistering): Released all slaves
[  537.291516][T11309] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  537.316889][T11309] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  537.377618][T11513] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  537.377647][T11513] batman_adv: batadv0: Removing interface: batadv_slave_0
[  537.399916][  T823] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  537.399937][  T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.399952][  T823] usb 3-1: Product: syz
[  537.399963][  T823] usb 3-1: Manufacturer: syz
[  537.399973][  T823] usb 3-1: SerialNumber: syz
[  537.433452][  T823] usb 3-1: config 0 descriptor??
[  537.447031][T11513] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  537.447049][T11513] batman_adv: batadv0: Removing interface: batadv_slave_1
[  537.657162][ T5613] usb 3-1: USB disconnect, device number 34
[  537.840929][ T9921] udevd[9921]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  539.285780][   T59] Bluetooth: hci5: command tx timeout
[  539.625287][T11309] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  539.739675][T11309] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  540.061191][  T823] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  540.211183][  T823] usb 3-1: Using ep0 maxpacket: 16
[  540.214434][  T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11
[  540.214476][  T823] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[  540.214496][  T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.273339][  T823] usb 3-1: config 0 descriptor??
[  540.375085][T11309] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  540.440227][T11309] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  540.610615][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  540.709566][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  540.722815][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  540.775138][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  540.783358][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  541.054044][  T823] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[  541.054082][  T823] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[  541.054111][  T823] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[  541.054138][  T823] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[  541.054165][  T823] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[  541.054191][  T823] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[  541.054218][  T823] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[  541.054255][  T823] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[  541.054278][  T823] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[  541.054302][  T823] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[  541.139577][  T823] apple 0003:05AC:027D.0003: unknown global tag 0xe
[  541.139600][  T823] apple 0003:05AC:027D.0003: item 0 4 1 14 parsing failed
[  541.157503][  T823] apple 0003:05AC:027D.0003: parse failed
[  541.157589][  T823] apple 0003:05AC:027D.0003: probe with driver apple failed with error -22
[  541.364206][   T59] Bluetooth: hci5: command tx timeout
[  541.458415][T11556] loop5: detected capacity change from 0 to 7
[  541.500815][T11556] Dev loop5: unable to read RDB block 7
[  541.500855][T11556]  loop5: AHDI p2
[  541.500881][T11556] loop5: partition table partially beyond EOD, truncated
[  542.851737][   T59] Bluetooth: hci0: command tx timeout
[  543.381273][ T5724] usb 3-1: USB disconnect, device number 35
[  543.423241][   T59] Bluetooth: hci5: command tx timeout
[  544.941230][   T59] Bluetooth: hci0: command tx timeout
[  545.407214][T11569] configfs: Unknown parameter 'autocell'
[  545.806937][T11571] netlink: 'syz.6.1624': attribute type 10 has an invalid length.
[  546.218574][T11582] FAULT_INJECTION: forcing a failure.
[  546.218574][T11582] name failslab, interval 1, probability 0, space 0, times 0
[  546.218615][T11582] CPU: 0 UID: 0 PID: 11582 Comm: syz.6.1625 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  546.218643][T11582] Tainted: [L]=SOFTLOCKUP
[  546.218651][T11582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  546.218665][T11582] Call Trace:
[  546.218673][T11582]  <TASK>
[  546.218682][T11582]  dump_stack_lvl+0xe8/0x150
[  546.218724][T11582]  should_fail_ex+0x467/0x600
[  546.218765][T11582]  should_failslab+0xa8/0x100
[  546.218796][T11582]  kmem_cache_alloc_noprof+0xa4/0x650
[  546.218820][T11582]  ? skb_clone+0x212/0x3a0
[  546.218847][T11582]  ? skb_clone+0x212/0x3a0
[  546.218882][T11582]  skb_clone+0x212/0x3a0
[  546.218914][T11582]  __netlink_deliver_tap+0x413/0x860
[  546.218955][T11582]  ? netlink_deliver_tap+0x2e/0x1b0
[  546.218985][T11582]  netlink_deliver_tap+0x19c/0x1b0
[  546.219014][T11582]  __netlink_sendskb+0x47/0x90
[  546.219038][T11582]  netlink_dump+0xa8c/0xee0
[  546.219076][T11582]  ? __netlink_lookup+0xc6/0x8b0
[  546.219115][T11582]  ? __pfx_netlink_dump+0x10/0x10
[  546.219165][T11582]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  546.219197][T11582]  __netlink_dump_start+0x589/0x7b0
[  546.219227][T11582]  rtnetlink_rcv_msg+0xa48/0xc00
[  546.219250][T11582]  ? __pfx_inet_dump_ifaddr+0x10/0x10
[  546.219279][T11582]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  546.219299][T11582]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  546.219318][T11582]  ? ref_tracker_free+0x668/0x820
[  546.219337][T11582]  ? __pfx_rtnl_dumpit+0x10/0x10
[  546.219357][T11582]  ? __pfx_inet_dump_ifaddr+0x10/0x10
[  546.219396][T11582]  netlink_rcv_skb+0x226/0x4a0
[  546.219421][T11582]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  546.219450][T11582]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  546.219472][T11582]  ? lockdep_hardirqs_on+0x7a/0x110
[  546.219541][T11582]  netlink_unicast+0x7f5/0x990
[  546.219576][T11582]  netlink_sendmsg+0x813/0xb40
[  546.219613][T11582]  ? __pfx_netlink_sendmsg+0x10/0x10
[  546.219643][T11582]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  546.219676][T11582]  ? __kernel_text_address+0xd/0x30
[  546.219699][T11582]  ? unwind_get_return_address+0x4d/0x90
[  546.219727][T11582]  ? __pfx_netlink_sendmsg+0x10/0x10
[  546.219754][T11582]  sock_sendmsg_nosec+0x13a/0x180
[  546.219790][T11582]  ____sys_sendmsg+0x565/0x870
[  546.219816][T11582]  ? __might_fault+0xaf/0x130
[  546.219847][T11582]  ? __pfx_____sys_sendmsg+0x10/0x10
[  546.219883][T11582]  ? import_iovec+0x73/0xa0
[  546.219913][T11582]  ___sys_sendmsg+0x2a5/0x360
[  546.219938][T11582]  ? __lock_acquire+0x683/0x2ce0
[  546.219966][T11582]  ? __pfx____sys_sendmsg+0x10/0x10
[  546.220034][T11582]  ? __fget_files+0x2a/0x420
[  546.220057][T11582]  ? __fget_files+0x3a8/0x420
[  546.220093][T11582]  __x64_sys_sendmsg+0x1b7/0x290
[  546.220122][T11582]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  546.220169][T11582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.220194][T11582]  do_syscall_64+0x174/0x580
[  546.220219][T11582]  ? trace_irq_disable+0x3b/0x140
[  546.220241][T11582]  ? clear_bhb_loop+0x40/0x90
[  546.220268][T11582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.220290][T11582] RIP: 0033:0x7fef3fc6de99
[  546.220309][T11582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  546.220328][T11582] RSP: 002b:00007fef3dec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  546.220349][T11582] RAX: ffffffffffffffda RBX: 00007fef3fef5fa0 RCX: 00007fef3fc6de99
[  546.220365][T11582] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  546.220377][T11582] RBP: 00007fef3dec6090 R08: 0000000000000000 R09: 0000000000000000
[  546.220389][T11582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  546.220402][T11582] R13: 00007fef3fef6038 R14: 00007fef3fef5fa0 R15: 00007ffc9c113ae8
[  546.220443][T11582]  </TASK>
[  546.825141][ T8397] hsr_slave_0: left promiscuous mode
[  546.871989][ T8397] hsr_slave_1: left promiscuous mode
[  546.952754][ T5739] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  547.021283][   T59] Bluetooth: hci0: command tx timeout
[  547.136500][ T8397] veth1_macvtap: left promiscuous mode
[  547.136621][ T8397] veth0_macvtap: left promiscuous mode
[  547.136862][ T8397] veth1_vlan: left promiscuous mode
[  547.139780][ T8397] veth0_vlan: left promiscuous mode
[  547.161735][ T5739] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  547.161807][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.236430][ T5739] usb 3-1: USB2VGA dongle found at address 36
[  547.306134][ T5739] usb 3-1: Allocated 8 output buffers
[  547.332391][T11599] overlayfs: conflicting options: userxattr,metacopy=on
[  547.365088][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1628'.
[  548.172620][ T8397] team0 (unregistering): Port device team_slave_1 removed
[  548.231760][ T8397] team0 (unregistering): Port device team_slave_0 removed
[  549.013480][ T5739] usb 3-1: Failed to early initialize device
[  549.091360][   T59] Bluetooth: hci0: command tx timeout
[  549.153611][ T5739] usb 3-1: USB disconnect, device number 36
[  550.253747][T11309] 8021q: adding VLAN 0 to HW filter on device bond0
[  550.536794][ T5256] 8021q: adding VLAN 0 to HW filter on device eth14
[  550.669374][T11496] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.669602][T11496] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.670148][T11496] bridge_slave_0: entered allmulticast mode
[  550.703627][T11496] bridge_slave_0: entered promiscuous mode
[  550.718015][T11309] 8021q: adding VLAN 0 to HW filter on device team0
[  550.761981][T11496] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.762134][T11496] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.762333][T11496] bridge_slave_1: entered allmulticast mode
[  550.766926][T11496] bridge_slave_1: entered promiscuous mode
[  550.953709][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.955410][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  550.983993][T11496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  551.064863][T11496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  551.127277][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.127536][ T5832] bridge0: port 2(bridge_slave_1) entered forwarding state
[  551.279590][T11496] team0: Port device team_slave_0 added
[  551.303117][T11496] team0: Port device team_slave_1 added
[  552.306756][T11496] batman_adv: batadv0: Adding interface: batadv_slave_0
[  552.306774][T11496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  552.306801][T11496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  552.333799][T11496] batman_adv: batadv0: Adding interface: batadv_slave_1
[  552.333815][T11496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  552.333843][T11496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  553.063154][T11496] hsr_slave_0: entered promiscuous mode
[  553.064567][T11496] hsr_slave_1: entered promiscuous mode
[  553.065544][T11496] debugfs: 'hsr0' already exists in 'hsr'
[  553.065566][T11496] Cannot create hsr debugfs directory
[  553.070206][T11540] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.070343][T11540] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.070526][T11540] bridge_slave_0: entered allmulticast mode
[  553.078255][T11540] bridge_slave_0: entered promiscuous mode
[  553.597645][T11540] bridge0: port 2(bridge_slave_1) entered blocking state
[  553.597801][T11540] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.598025][T11540] bridge_slave_1: entered allmulticast mode
[  553.611664][T11540] bridge_slave_1: entered promiscuous mode
[  553.995355][T11540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.056656][T11663] netlink: 'syz.2.1632': attribute type 10 has an invalid length.
[  554.175575][T11540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  554.413954][T11540] team0: Port device team_slave_0 added
[  554.434110][T11540] team0: Port device team_slave_1 added
[  555.274029][T11677] netlink: 'syz.2.1634': attribute type 1 has an invalid length.
[  555.825145][T11540] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.825158][T11540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  555.825178][T11540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  555.937878][T11540] batman_adv: batadv0: Adding interface: batadv_slave_1
[  555.937895][T11540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  555.937923][T11540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  556.578064][T11540] hsr_slave_0: entered promiscuous mode
[  556.591031][T11540] hsr_slave_1: entered promiscuous mode
[  556.603197][T11540] debugfs: 'hsr0' already exists in 'hsr'
[  556.603224][T11540] Cannot create hsr debugfs directory
[  557.081472][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  557.302773][    T9] usb 7-1: Using ep0 maxpacket: 32
[  557.340436][    T9] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[  557.340463][    T9] usb 7-1: config 0 has no interface number 0
[  557.340505][    T9] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  557.340530][    T9] usb 7-1: config 0 interface 85 has no altsetting 0
[  557.378508][    T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  557.378537][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.378555][    T9] usb 7-1: Product: syz
[  557.378572][    T9] usb 7-1: Manufacturer: syz
[  557.378582][    T9] usb 7-1: SerialNumber: syz
[  557.448252][    T9] usb 7-1: config 0 descriptor??
[  558.003586][ T5256] 8021q: adding VLAN 0 to HW filter on device eth15
[  558.265801][    T9] appletouch 7-1:0.85: Geyser mode initialized.
[  558.321329][    T9] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input15
[  558.342501][    C0] appletouch 7-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  558.631887][    T9] usb 7-1: USB disconnect, device number 4
[  558.850874][    T9] appletouch 7-1:0.85: input: appletouch disconnected
[  559.001297][   T36] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  559.172842][   T36] usb 3-1: Using ep0 maxpacket: 8
[  559.191286][   T36] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  559.191317][   T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.191337][   T36] usb 3-1: Product: syz
[  559.191351][   T36] usb 3-1: Manufacturer: syz
[  559.191366][   T36] usb 3-1: SerialNumber: syz
[  559.266679][   T36] usb 3-1: config 0 descriptor??
[  559.490775][   T36] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244)
[  560.775927][T11694] sg_write: data in/out 424924/122 bytes for SCSI command 0x0-- guessing data in;
[  560.775927][T11694]    program syz.2.1635 not setting count and/or reply_len properly
[  561.129700][T11309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.518060][   T36] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -32
[  561.518529][   T36] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  561.759310][ T5724] usb 3-1: USB disconnect, device number 37
[  561.839041][T11717] FAULT_INJECTION: forcing a failure.
[  561.839041][T11717] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  561.839089][T11717] CPU: 1 UID: 0 PID: 11717 Comm: syz.6.1639 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  561.839116][T11717] Tainted: [L]=SOFTLOCKUP
[  561.839123][T11717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  561.839134][T11717] Call Trace:
[  561.839142][T11717]  <TASK>
[  561.839150][T11717]  dump_stack_lvl+0xe8/0x150
[  561.839187][T11717]  should_fail_ex+0x467/0x600
[  561.839224][T11717]  _copy_from_user+0x2d/0xb0
[  561.839249][T11717]  memdup_user+0x5e/0xd0
[  561.839278][T11717]  strndup_user+0x68/0xd0
[  561.839306][T11717]  __se_sys_mount+0x9d/0x420
[  561.839333][T11717]  ? ksys_write+0x248/0x270
[  561.839369][T11717]  ? __pfx___se_sys_mount+0x10/0x10
[  561.839397][T11717]  ? __x64_sys_mount+0x20/0xc0
[  561.839418][T11717]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.839441][T11717]  do_syscall_64+0x174/0x580
[  561.839465][T11717]  ? trace_irq_disable+0x3b/0x140
[  561.839485][T11717]  ? clear_bhb_loop+0x40/0x90
[  561.839511][T11717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.839532][T11717] RIP: 0033:0x7fef3fc6de99
[  561.839550][T11717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  561.839568][T11717] RSP: 002b:00007fef3dec6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  561.839588][T11717] RAX: ffffffffffffffda RBX: 00007fef3fef5fa0 RCX: 00007fef3fc6de99
[  561.839602][T11717] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000
[  561.839615][T11717] RBP: 00007fef3dec6090 R08: 0000200000000180 R09: 0000000000000000
[  561.839626][T11717] R10: 0000000000000084 R11: 0000000000000246 R12: 0000000000000001
[  561.839637][T11717] R13: 00007fef3fef6038 R14: 00007fef3fef5fa0 R15: 00007ffc9c113ae8
[  561.839668][T11717]  </TASK>
[  562.207767][T11725] netlink: 'syz.6.1641': attribute type 10 has an invalid length.
[  562.785528][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  562.787263][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  565.015009][T11747] 9pnet_virtio: no channels available for device syz
[  566.829355][T11746] pim6reg: entered allmulticast mode
[  566.830628][T11744] pim6reg: left allmulticast mode
[  567.754180][T11309] veth0_vlan: entered promiscuous mode
[  567.777802][T11309] veth1_vlan: entered promiscuous mode
[  567.853544][T11309] veth0_macvtap: entered promiscuous mode
[  567.879268][T11309] veth1_macvtap: entered promiscuous mode
[  567.917752][T11309] batman_adv: batadv0: Interface activated: batadv_slave_0
[  567.938320][T11309] batman_adv: batadv0: Interface activated: batadv_slave_1
[  567.974296][ T5828] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  567.974536][ T5828] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  567.974734][ T5828] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  567.974921][ T5828] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  568.138838][ T5256] 8021q: adding VLAN 0 to HW filter on device eth16
[  568.573519][    T9] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  568.794997][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  568.795027][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.795047][    T9] usb 3-1: Product: syz
[  568.795060][    T9] usb 3-1: Manufacturer: syz
[  568.795074][    T9] usb 3-1: SerialNumber: syz
[  568.885291][    T9] usb 3-1: config 0 descriptor??
[  569.246700][    T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  571.311659][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  571.379670][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  571.397063][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  571.445679][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  571.446846][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  571.626412][T11790] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size.
[  572.281493][ T8397] bridge_slave_1: left allmulticast mode
[  572.281529][ T8397] bridge_slave_1: left promiscuous mode
[  572.281899][ T8397] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.358763][    T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  572.557201][   T31] ------------[ cut here ]------------
[  572.557215][   T31] workqueue: cannot queue hci_conn_timeout on wq hci4
[  572.557246][   T31] WARNING: kernel/workqueue.c:2306 at __queue_work+0xd91/0x10f0, CPU#1: kworker/1:0/31
[  572.557296][   T31] Modules linked in:
[  572.557317][   T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  572.557344][   T31] Tainted: [L]=SOFTLOCKUP
[  572.557351][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  572.557364][   T31] Workqueue: events l2cap_chan_timeout
[  572.557385][   T31] RIP: 0010:__queue_work+0xdae/0x10f0
[  572.557412][   T31] Code: 81 c3 68 01 00 00 4c 8d 35 af c8 24 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 7c 6f a1 00 49 8b 77 18 4c 89 f7 48 89 da <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff
[  572.557429][   T31] RSP: 0018:ffffc90000a5f8b8 EFLAGS: 00010046
[  572.557444][   T31] RAX: 1ffff110074ae95b RBX: ffff888038732168 RCX: ffff88801d2e8000
[  572.557459][   T31] RDX: ffff888038732168 RSI: ffffffff8a378cd0 RDI: ffffffff8fb29270
[  572.557473][   T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  572.557484][   T31] R10: dffffc0000000000 R11: ffffed10074ae959 R12: dffffc0000000000
[  572.557497][   T31] R13: ffff888038732000 R14: ffffffff8fb29270 R15: ffff88803a574ac0
[  572.557511][   T31] FS:  0000000000000000(0000) GS:ffff888125d42000(0000) knlGS:0000000000000000
[  572.557526][   T31] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  572.557537][   T31] CR2: 00007ffd44aa4e08 CR3: 000000003785a000 CR4: 00000000003526f0
[  572.557553][   T31] Call Trace:
[  572.557561][   T31]  <TASK>
[  572.557569][   T31]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  572.557606][   T31]  ? rcu_is_watching+0x7f/0xb0
[  572.557638][   T31]  queue_delayed_work_on+0x11a/0x1e0
[  572.557676][   T31]  l2cap_chan_del+0x286/0x600
[  572.557703][   T31]  l2cap_chan_close+0x4d7/0x770
[  572.557727][   T31]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  572.557752][   T31]  ? __pfx_l2cap_chan_close+0x10/0x10
[  572.557775][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  572.557802][   T31]  ? l2cap_chan_timeout+0xf8/0x470
[  572.557828][   T31]  l2cap_chan_timeout+0x21e/0x470
[  572.557853][   T31]  ? process_scheduled_works+0xa20/0x14e0
[  572.557880][   T31]  process_scheduled_works+0xa8e/0x14e0
[  572.557939][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  572.557972][   T31]  ? assign_work+0x3cf/0x5d0
[  572.558004][   T31]  worker_thread+0xa47/0xfb0
[  572.558063][   T31]  kthread+0x388/0x470
[  572.558095][   T31]  ? __pfx_worker_thread+0x10/0x10
[  572.558119][   T31]  ? __pfx_kthread+0x10/0x10
[  572.558152][   T31]  ret_from_fork+0x514/0xb70
[  572.558189][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  572.558222][   T31]  ? __switch_to+0xc89/0x1420
[  572.558252][   T31]  ? __pfx_kthread+0x10/0x10
[  572.558291][   T31]  ret_from_fork_asm+0x1a/0x30
[  572.558331][   T31]  </TASK>
[  572.558341][   T31] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  572.558358][   T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  572.558403][   T31] Tainted: [L]=SOFTLOCKUP
[  572.558411][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  572.558424][   T31] Workqueue: events l2cap_chan_timeout
[  572.558446][   T31] Call Trace:
[  572.558454][   T31]  <TASK>
[  572.558462][   T31]  vpanic+0x56c/0xa60
[  572.558485][   T31]  ? __pfx__printk+0x10/0x10
[  572.558512][   T31]  ? __pfx_vpanic+0x10/0x10
[  572.558532][   T31]  ? is_bpf_text_address+0x292/0x2b0
[  572.558560][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  572.558597][   T31]  panic+0xc5/0xd0
[  572.558619][   T31]  ? __pfx_panic+0x10/0x10
[  572.558654][   T31]  ? ret_from_fork_asm+0x1a/0x30
[  572.558683][   T31]  __warn+0x315/0x4c0
[  572.558715][   T31]  ? __queue_work+0xd91/0x10f0
[  572.558746][   T31]  ? __queue_work+0xd91/0x10f0
[  572.558773][   T31]  __report_bug+0x276/0x570
[  572.558803][   T31]  ? __queue_work+0xd91/0x10f0
[  572.558833][   T31]  ? __pfx___report_bug+0x10/0x10
[  572.558857][   T31]  ? __pfx_hci_conn_timeout+0x10/0x10
[  572.558884][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  572.558927][   T31]  report_bug_entry+0x19a/0x290
[  572.558953][   T31]  ? __queue_work+0xdae/0x10f0
[  572.558977][   T31]  ? __queue_work+0xdb3/0x10f0
[  572.559003][   T31]  handle_bug+0xce/0x200
[  572.559032][   T31]  exc_invalid_op+0x1a/0x50
[  572.559061][   T31]  asm_exc_invalid_op+0x1a/0x20
[  572.559082][   T31] RIP: 0010:__queue_work+0xdae/0x10f0
[  572.559108][   T31] Code: 81 c3 68 01 00 00 4c 8d 35 af c8 24 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 7c 6f a1 00 49 8b 77 18 4c 89 f7 48 89 da <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff
[  572.559126][   T31] RSP: 0018:ffffc90000a5f8b8 EFLAGS: 00010046
[  572.559142][   T31] RAX: 1ffff110074ae95b RBX: ffff888038732168 RCX: ffff88801d2e8000
[  572.559159][   T31] RDX: ffff888038732168 RSI: ffffffff8a378cd0 RDI: ffffffff8fb29270
[  572.559175][   T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  572.559186][   T31] R10: dffffc0000000000 R11: ffffed10074ae959 R12: dffffc0000000000
[  572.559201][   T31] R13: ffff888038732000 R14: ffffffff8fb29270 R15: ffff88803a574ac0
[  572.559227][   T31]  ? __pfx_hci_conn_timeout+0x10/0x10
[  572.559252][   T31]  ? __queue_work+0x10a1/0x10f0
[  572.559284][   T31]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  572.559320][   T31]  ? rcu_is_watching+0x7f/0xb0
[  572.559351][   T31]  queue_delayed_work_on+0x11a/0x1e0
[  572.559389][   T31]  l2cap_chan_del+0x286/0x600
[  572.559415][   T31]  l2cap_chan_close+0x4d7/0x770
[  572.559440][   T31]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  572.559465][   T31]  ? __pfx_l2cap_chan_close+0x10/0x10
[  572.559489][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  572.559515][   T31]  ? l2cap_chan_timeout+0xf8/0x470
[  572.559542][   T31]  l2cap_chan_timeout+0x21e/0x470
[  572.559567][   T31]  ? process_scheduled_works+0xa20/0x14e0
[  572.559593][   T31]  process_scheduled_works+0xa8e/0x14e0
[  572.559662][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  572.559711][   T31]  ? assign_work+0x3cf/0x5d0
[  572.559742][   T31]  worker_thread+0xa47/0xfb0
[  572.559801][   T31]  kthread+0x388/0x470
[  572.559834][   T31]  ? __pfx_worker_thread+0x10/0x10
[  572.559859][   T31]  ? __pfx_kthread+0x10/0x10
[  572.559893][   T31]  ret_from_fork+0x514/0xb70
[  572.559930][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  572.559963][   T31]  ? __switch_to+0xc89/0x1420
[  572.559994][   T31]  ? __pfx_kthread+0x10/0x10
[  572.560029][   T31]  ret_from_fork_asm+0x1a/0x30
[  572.560069][   T31]  </TASK>
[  572.560669][   T31] Kernel Offset: disabled