last executing test programs:

9m4.358885434s ago: executing program 1 (id=352):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000001280)) (fail_nth: 1)

9m4.081404591s ago: executing program 1 (id=357):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x10, 0x0, 0x4, 0x43, @loopback, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8, 0x0, 0x5, 0x6}})

9m3.722068894s ago: executing program 1 (id=360):
r0 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02)
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) (fail_nth: 1)

9m3.507523785s ago: executing program 1 (id=361):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x126c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1240, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x11dc, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x11cc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xa0}, @NFTA_BITWISE_MASK={0x14, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_BITWISE_DATA={0x184, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x80, 0x1, "9a8b511fa18f81b1526a77d2e11cc554d52b188dd80a4f999530280cf4f3187ead6814478e008c97747802b2b4006525737111be91155a044bed3549c3c061aeae5f82d5f4a34d8a56da5d79974132f353f19cbda62500bd84fba9a57f1dcf73e5d13f4ca6b60721d6c2cd49725b31f8c378ee6b7c6828e980a4a3ad"}, @NFTA_DATA_VALUE={0x90, 0x1, "baa4a3dca930829abb1778378d793d2905705df55302c166cef30c7ff304eb744408296385ab4685ee02169eddfffcecacd1e0ec8b3f333fea56eed3a89c1142662197171493ba62c179f3b112f9050f1dfc633a90e4495f8a877f4c3c645b865853df621d323658b98026689c3ab9d9ea8d078ab8c8cc4d15a45c0ded861313d7414ab2d31f5971da311bc9"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1f, 0x1, "45f519b1bc8833c9d37422611a9ab38f5602b5d9cada7634cece15"}]}, @NFTA_BITWISE_MASK={0x1018, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x9, 0x1, "f4772a191a"}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1294}, 0x1, 0x0, 0x0, 0x4040}, 0x200400c0)

9m3.153978016s ago: executing program 1 (id=365):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000000)="d4", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe7, @private2, 0x3}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="03", 0x1}], 0x1}}], 0x2, 0x20000050)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ff", 0x7)

9m2.54150065s ago: executing program 1 (id=371):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000)
rename(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
migrate_pages(0x0, 0x1, &(0x7f00000000c0)=0x5, &(0x7f0000000100))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
capget(&(0x7f0000002680)={0x20071026, r4}, &(0x7f00000026c0)={0x0, 0xe, 0x8001, 0xa, 0x5, 0x7})
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000040000701faffffff00000000017c000004004280180001"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

8m47.007033169s ago: executing program 32 (id=371):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000)
rename(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
migrate_pages(0x0, 0x1, &(0x7f00000000c0)=0x5, &(0x7f0000000100))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
capget(&(0x7f0000002680)={0x20071026, r4}, &(0x7f00000026c0)={0x0, 0xe, 0x8001, 0xa, 0x5, 0x7})
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000040000701faffffff00000000017c000004004280180001"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

1m29.521851529s ago: executing program 4 (id=2940):
syz_usb_connect(0x0, 0x48, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000183b9220b11342002b58010203010902360002000000000904ca57b67a8bb50009050200ff"], 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x5d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x3, 0x10, 0x7, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x523}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xb9, 0xfffc, 0x74}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x6, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x74, 0x5, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x1, 0x5}}}}}]}}]}}, 0x0)

1m27.217662765s ago: executing program 4 (id=2951):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x24004008}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000a0014", 0x23}], 0x1}, 0x0)
recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
r1 = socket(0x2b, 0x80801, 0x1)
syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0x9080)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r1, &(0x7f0000000540)="fd733e13a64442526bd69018ea9bb5479211417e07dc8a74ca442df202b0543d46139018efd834bc2d0520e39578a0eab23f0c55f37120357dd85d6a0b22c207d8ceb9ab0b18cf2d0321d59fda36032d7900fe5b5f6c03ba80bc0023f8028207e51f62d502e166a0c86b7d48a7efff799093125735b289652c6d9fcb58c8f3fb0a3a37d6ad1e532f4c57a200c3296e06aecf6e06411fe78547cca60c66cb29ac23e04d73377cf213d8b2f363e33657e9bdfd33d576d4a3fd071c097a0ff9ac6e672c00b5fa05950ac320b6975bcedf90df8972df7c963466089d26", 0xdb, 0x20000004, &(0x7f0000000640)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast]}, 0x80)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x7f, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x100, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0xf, 0xfffffffd, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x48, 0x200, 0xe936, 0x9, 0xf7, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0xfffffffd, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x4, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x0, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffc, 0x0, 0x100002, 0x2, 0x6, 0x21ff, 0x8, 0xffffffff, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x6, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10002, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0x401, 0xd], [0x8, 0x7, 0x8, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x4, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0x10, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0x8000c, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x26, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x26, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0)
listen(0xffffffffffffffff, 0x90004)
syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e130100c90001", @ANYRESHEX, @ANYBLOB="28cbc43f3f9e4a0769ec04073d62d51a0a9ffe243f458bb7dc848aaceb8f256ce2b527df3d43625c4ef8b1"], 0x16)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10)
modify_ldt$read(0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x29, 0x1f, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000280), 0x0, 0x40002000, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0)
preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1, 0x9, 0x6, 0x17)

1m21.825784076s ago: executing program 4 (id=2961):
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380"], 0xbc}}, 0xc0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
timer_settime(r4, 0x1, 0x0, 0x0)
r5 = openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0x7fffffff)
gettid()
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000000)={0x3, 0x0, [{0x2d3, 0x0, 0x1000}, {0x9c6, 0x0, 0xffffffff}, {0xdc0, 0x0, 0x1c00000000}]})
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
readv(r6, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x20)
r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a1401082cbd7000fddbdf250900020073797a300000000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_rxnfc={0x4b, 0x2f, 0x7, {0x6, @sctp_ip4_spec={@multicast1, @private=0xa010101, 0x4e22, 0x4a20}, {0x0, @remote, 0x56bd, 0xf8d, [0xfffffffc]}, @udp_ip4_spec={@broadcast, @private=0xa010102, 0x4e21, 0x4e21, 0xf2}, {0x0, @random="e36b73ef5788", 0x3, 0x3524, [0xffffffff, 0x4]}, 0x9, 0xa}}})

1m19.817422052s ago: executing program 4 (id=2973):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

1m16.550698246s ago: executing program 4 (id=2983):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x7f)

1m16.152683128s ago: executing program 4 (id=2984):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)

1m0.578277463s ago: executing program 33 (id=2984):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)

18.526164806s ago: executing program 2 (id=3136):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
r1 = syz_open_dev$dri(0x0, 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0))
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

16.59147493s ago: executing program 2 (id=3143):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}], 0x2}, 0x2000000}], 0x2, 0x101, 0x0) (fail_nth: 1)

15.833262691s ago: executing program 2 (id=3145):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x2c020400)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448dc, 0x0)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
syz_extract_tcp_res(&(0x7f0000000140), 0x406, 0x1)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x5000, 0x0)
ioctl$BLKZEROOUT(r4, 0xc0c0128e, &(0x7f0000000240)={0x4000000000002000, 0x2})

15.197593567s ago: executing program 2 (id=3147):
kexec_load(0x2, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x8000000000, 0x80000000}], 0x280000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r1, 0x40304580, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r2 = socket$inet6(0x10, 0x3, 0x6)
sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000b00)={@link_local, @remote, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x1, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @local, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x10}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xaf}]}, @ssrr={0x89, 0x7, 0x77, [@loopback]}, @generic={0x7, 0x2}]}}, {{0x4, 0x8000, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
clock_gettime(0x0, &(0x7f0000000240)={<r4=>0x0, <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002a80)=@acquire={0x1ac, 0x17, 0x1, 0x70bd2d, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x2b}, @in=@empty, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@rand_addr=0x64010100, 0x4e20, 0x8, 0x4e22, 0x1, 0xa, 0x80, 0x80, 0x3a}, {{@in6=@mcast2, @in6=@private2, 0x4e23, 0x0, 0x4e21, 0x40, 0xa, 0x80, 0x140, 0x73}, {0xfffffffffffffff8, 0x1, 0x4, 0x800, 0x3, 0x6, 0x35a6, 0x5}, {0xfffffffffffffff5, 0x3a73, 0x5, 0x800}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x10, 0x3, 0x70bd25}, [@tmpl={0x84, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x4d2, 0x32}, 0x2, @in6=@local, 0x3504, 0x4, 0x1, 0x1, 0x10001, 0x1ff, 0x40}, {{@in=@private=0xa010101, 0x4d2, 0x3c}, 0x2, @in6=@empty, 0x0, 0xae35aefd5c219cb0, 0x0, 0x81, 0x5, 0x40, 0x7}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000010)
pselect6(0x40, &(0x7f0000000180)={0x4, 0x8, 0xb6f6, 0x81, 0x51fe04fa, 0x9a72, 0x8, 0x800000000000000}, &(0x7f00000001c0)={0x6, 0x653, 0x7, 0x51, 0x100000000, 0x2, 0x4, 0x1}, &(0x7f0000000200)={0xe3, 0x1, 0x8, 0x2, 0x8c2d, 0x7, 0x0, 0x3}, &(0x7f00000002c0)={r4, r5+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x40]}, 0x8})
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000002061f000000000000000000070000000c0007800800124000000c8f05000100060000000500050002128baac2bbef9b5300000005000400000000000900020073797a310000000014000300686173683a69702cff07e772dae8b4fde8a687288f8d937809719a25d45ab2673e1d68061a0268e8c985095d0b1fdadbd078375ce71fe3639ec4b845f2811f735b11ae04c00a4d17c92d54b29ab396840636dc30e16012bc04298091aaeca74f88ee53591b21accb2d1d80ede2d04f6fe417e7fe4a1c1bbc8a9eff42766cfae6fe8f"], 0x58}}, 0x20004000)
syz_open_dev$MSR(&(0x7f0000000100), 0x204, 0x0)
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x10001}}}}}, 0x0)
write$tun(r7, 0x0, 0x2e)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'tunl0\x00', <r9=>0x0, 0x20, 0x20, 0x6, 0x593, {{0x9, 0x4, 0x2, 0x9, 0x24, 0x66, 0x0, 0x6, 0x2b, 0x0, @multicast1, @private=0xa010102, {[@ssrr={0x89, 0xf, 0xa6, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x24}]}]}}}}})
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x10000, 0x6, 0x1, 0x28, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0xd}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x25, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa27}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @ldst={0x3, 0x0, 0x4, 0xb, 0x8, 0x30, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x1a83}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit]}, &(0x7f0000000600)='GPL\x00', 0x1000, 0xbc, &(0x7f0000000700)=""/188, 0x41000, 0x10, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000008c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0x3, 0x46, 0x14}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000009c0)=[r11], &(0x7f0000000a00)=[{0x3, 0x4, 0x8, 0x1}, {0x3, 0x5, 0xe, 0x3}, {0x4, 0x1, 0xb, 0x4}], 0x10, 0x6}, 0x94)

14.985602218s ago: executing program 0 (id=3148):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x2c020400)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x5000, 0x0)
ioctl$BLKZEROOUT(r0, 0xc0c0128e, 0x0)

14.70579786s ago: executing program 6 (id=3150):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x66, {0x2, 0x400}}, 0x24)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
shutdown(r1, 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x3, 0xc, 0x0, 0x800006, r3}, &(0x7f0000000280)=0x10)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3, 0x2}, &(0x7f0000000040)=0x8)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0)

14.484190633s ago: executing program 0 (id=3151):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r3, 0x28, 0x1, 0x0, &(0x7f0000000000))
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
setuid(0xee01)
write(r4, &(0x7f0000000000)="f63954e3a44ef2fbb06c6f8ec156f612f6", 0x11)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc)
write$binfmt_elf64(r5, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x57, 0x4c, 0x80, 0x5, 0x2, 0x3b, 0x7fffffff, 0x31, 0x40, 0xe9, 0x5, 0x4, 0x38, 0x1, 0x800, 0x1, 0xeea5}, [{0x7, 0x5, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x8, 0x3}]}, 0x78)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@gettaction={0x58, 0x32, 0x200, 0x5, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4081}, 0x4c8c0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r6, 0x0, 0x10, &(0x7f0000000100)="17000000020001000003be8c5e687a8a6a003300020100ecff0300000a0001000098fc5a53d3f5b7e4bcdbefde1f30f661a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2d6cf725a1905052e298bf58037e3309c0f5bc080236e2b68c8eec25a02aff06011500000000010000000aff", 0xb8)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x1, 0x7, {0x19, 0x2, 0x8000, 0x3, 0x7}, {0x5, 0x1, 0xedf3, 0xfffa, 0xa9, 0xffffff00}, 0x91, 0x10001, 0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24041091}, 0x0)

14.216946924s ago: executing program 2 (id=3152):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xd, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x2e, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x2e, 0x5f, 0x0, 0x0]}}, 0x0, 0x31, 0x0, 0x6}, 0x28)
r0 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x9)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80000)
r2 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x80)
tee(r2, r3, 0x90, 0x8)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'team_slave_0\x00', {0x2, 0x4e20, @multicast1}})
r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000040)={0x2, 0x7}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000580)={0x2, 0xfc}, 0x2)
setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f00000000c0)=0xfffffffe, 0x4)

14.215682504s ago: executing program 6 (id=3153):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000004c0)="4c05950ddb19d1db3e079da63628c7b60f5e0db892658c4cfe", 0x19}], 0x1}, 0x20000000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = syz_open_procfs(0x0, &(0x7f0000000300)='ns\x00')
fchdir(r3)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r5 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000140)={'full', 0x20, 0x168}, 0x2f)
sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818)
r6 = accept$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10)
recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b00)=""/46, 0x2e}, {&(0x7f0000000980)=""/106, 0x6a}, {&(0x7f0000000bc0)=""/51, 0x33}, {&(0x7f0000000a00)=""/245, 0xf5}, {&(0x7f0000000d00)=""/103, 0x67}, {&(0x7f0000000c00)=""/243, 0xf3}, {&(0x7f0000000e80)=""/90, 0x5a}, {&(0x7f0000000f00)=""/50, 0x32}, {&(0x7f0000000000)=""/117, 0x75}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000140)=""/23, 0x17}, {&(0x7f0000000f80)=""/147, 0x93}], 0xc}, 0x3}], 0x1, 0x40, 0x0)
sendmmsg$alg(r6, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000240)="810cac7d48", 0x5}, {&(0x7f00000033c0)="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", 0x6ec}], 0x2, 0x0, 0x0, 0xc855}], 0x1, 0x4004004)
recvmsg(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/124, 0x12}, {&(0x7f00000006c0)=""/128}, {&(0x7f0000000740)=""/105}, {&(0x7f00000007c0)=""/16}, {&(0x7f0000000800)=""/4}], 0x189}, 0x102)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018010000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000070000000000000000000000090000000000000000000000090400000000000000000000090200"/150], 0x0, 0x96}, 0x28)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)

13.799805391s ago: executing program 3 (id=3154):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
pipe(0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = socket(0x840000000002, 0x3, 0xff)
sendmsg$rds(r0, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x8000}, 0x48004)

13.463862861s ago: executing program 0 (id=3156):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000a0014", 0x23}], 0x1}, 0x0)
recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
r1 = socket(0x2b, 0x80801, 0x1)
syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0x9080)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r1, &(0x7f0000000540)="fd733e13a64442526bd69018ea9bb5479211417e07dc8a74ca442df202b0543d46139018efd834bc2d0520e39578a0eab23f0c55f37120357dd85d6a0b22c207d8ceb9ab0b18cf2d0321d59fda36032d7900fe5b5f6c03ba80bc0023f8028207e51f62d502e166a0c86b7d48a7efff799093125735b289652c6d9fcb58c8f3fb0a3a37d6ad1e532f4c57a200c3296e06aecf6e06411fe78547cca60c66cb29ac23e04d73377cf213d8b2f363e33657e9bdfd33d576d4a3fd071c097a0ff9ac6e672c00b5fa05950ac320b6975bcedf90df8972df7c963466089d26", 0xdb, 0x20000004, &(0x7f0000000640)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast]}, 0x80)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x7f, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x100, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0xf, 0xfffffffd, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x48, 0x200, 0xe936, 0x9, 0xf7, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0xfffffffd, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x4, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x0, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffc, 0x0, 0x100002, 0x2, 0x6, 0x21ff, 0x8, 0xffffffff, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x6, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10002, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0x401, 0xd], [0x8, 0x7, 0x8, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x4, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0x10, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0x8000c, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x26, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x26, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0)
listen(0xffffffffffffffff, 0x90004)
syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e130100c90001", @ANYRESHEX, @ANYBLOB="28cbc43f3f9e4a0769ec04073d62d51a0a9ffe243f458bb7dc848aaceb8f256ce2b527df3d43625c4ef8b1"], 0x16)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10)
modify_ldt$read(0x0, 0x0, 0x0)

13.458360738s ago: executing program 3 (id=3157):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x2c020400)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448dc, 0x0)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
syz_extract_tcp_res(&(0x7f0000000140), 0x406, 0x1)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x5000, 0x0)
ioctl$BLKZEROOUT(r4, 0xc0c0128e, &(0x7f0000000240)={0x4000000000002000, 0x2})

12.740951397s ago: executing program 3 (id=3158):
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)

7.620681684s ago: executing program 5 (id=3159):
openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e1e, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001080)}, {&(0x7f00000010c0)="48d5bfbb28f67bd0bb65e38fc8295fde857c5b42b7ec2850b53526dbe194d68423f2e002e36537e45af9a115e7b3fbc6f9684e338e1be425b331213c70503e47776dc596e63d1974bc44e1715515f802d0ed518ea686f2eec92b778d9af8dd0cc26f65906b756b3b8ab6da3e373377d0873e81de3061c7aa88", 0x79}, {&(0x7f0000001140)="5d28c382d225e0420f3706e786664da7ba7e1d8d72fba1f1d1a292ef52fb6a55735f8094225e5374c544cd47860d56aad5384a802339bf13843f555a3b7739f75ec682f4bd5093f843fae6a9ac3d3f337388035e18c6764c4083709622addc56779f2c1330cc7da8fc292bda1d3c0eb9577fa53887f959da2e949cf634765a2afd627208ff6c5e263ba98bf2228c5df3fc01224e9d0c2d51354e2c8dc4f79f855b446acdb6d63b8da4ae18bddda901e1d73406d69b00a755b35bf6", 0xbb}, {&(0x7f0000001200)="27e4cec77ebff53b8340da68d5adb035652790a18448ad7066f445ac1fc68e52d43d9390dd1714a4588bca77406e1535bcf6f307166d0cc81a85d1cbc21584ace188", 0x42}, {&(0x7f0000001280)="4e5f95402b16f2360bd363d20e93592035240cf4e66151c74f54eb2a5704d07140bf6d42b003f9a55a3f59201511f213ca359d82cc3b5bbc0a6ea0ef6789c0996b0ea210", 0x44}, {&(0x7f0000001300)="0b970494deb8c65b26d6ef906b24d1a3d72389c39f1e09a785fd0bc598895541d6f2325bb0db68f5b7b0263c69326f1eb0fb3f124a1a2b77ad8910663b0931fee7ed6237b1e6df07af1d0cf3fc03130bed9a542fe3954551bba20aa0479f686011729c67a98aecfb9d58aa36558d1514e9323db95b02fb058da4", 0x7a}], 0x6, &(0x7f0000001400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x40, 0x4008f1c4320b2a6e}}, {{&(0x7f0000001440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001500)=[{&(0x7f00000014c0)="a8d0326a4ac3be2bf4a6c6360df5484cade5fec43b452f79a0b24238a942534f5a52b66863a18707593508675b4a9f13ca36697363768aaa3117", 0x3a}], 0x1, 0x0, 0x0, 0x80}}], 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x1e, 0x805, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r3, 0x3)
accept4$bt_l2cap(r3, &(0x7f0000000200), 0x0, 0x800)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)

7.620260524s ago: executing program 6 (id=3160):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x3, 0x0, [{0x2d3, 0x0, 0x1000}, {0x9c6, 0x0, 0xffffffff}, {0xdc0, 0x0, 0x1c00000000}]})
readv(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x20)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_rxnfc={0x4b, 0x2f, 0x7, {0x6, @sctp_ip4_spec={@multicast1, @private=0xa010101, 0x4e22, 0x4a20}, {0x0, @remote, 0x56bd, 0xf8d, [0xfffffffc]}, @udp_ip4_spec={@broadcast, @private=0xa010102, 0x4e21, 0x4e21, 0xf2}, {0x0, @random="e36b73ef5788", 0x3, 0x3524, [0xffffffff, 0x4]}, 0x9, 0xa}}})

7.546695236s ago: executing program 3 (id=3161):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f05ebbee4, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet(0x2, 0x80001, 0x84)
creat(0x0, 0xdafbe5d6891b6e4)
ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r3, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000004240)=""/4128, 0x1020}, {&(0x7f0000001680)=""/100, 0x64}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/48, 0x30}], 0x5}, 0xfffffffe}], 0x3, 0x2030, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2, 0x0)
llistxattr(0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x80000)

7.289976976s ago: executing program 5 (id=3162):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24004008}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000a0014", 0x23}], 0x1}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
r0 = socket(0x2b, 0x80801, 0x1)
syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0x9080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r0, &(0x7f0000000540)="fd733e13a64442526bd69018ea9bb5479211417e07dc8a74ca442df202b0543d46139018efd834bc2d0520e39578a0eab23f0c55f37120357dd85d6a0b22c207d8ceb9ab0b18cf2d0321d59fda36032d7900fe5b5f6c03ba80bc0023f8028207e51f62d502e166a0c86b7d48a7efff799093125735b289652c6d9fcb58c8f3fb0a3a37d6ad1e532f4c57a200c3296e06aecf6e06411fe78547cca60c66cb29ac23e04d73377cf213d8b2f363e33657e9bdfd33d576d4a3fd071c097a0ff9ac6e672c00b5fa05950ac320b6975bcedf90df8972df7c963466089d26", 0xdb, 0x20000004, &(0x7f0000000640)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast]}, 0x80)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x7f, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x100, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0xf, 0xfffffffd, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x48, 0x200, 0xe936, 0x9, 0xf7, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0xfffffffd, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x4, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x0, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffc, 0x0, 0x100002, 0x2, 0x6, 0x21ff, 0x8, 0xffffffff, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x6, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10002, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0x401, 0xd], [0x8, 0x7, 0x8, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x4, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0x10, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0x8000c, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x26, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x26, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0)
listen(0xffffffffffffffff, 0x90004)
syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e130100c90001", @ANYRESHEX, @ANYBLOB="28cbc43f3f9e4a0769ec04073d62d51a0a9ffe243f458bb7dc848aaceb8f256ce2b527df3d43625c4ef8b1"], 0x16)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10)
modify_ldt$read(0x0, 0x0, 0x0)

7.289467203s ago: executing program 2 (id=3163):
r0 = dup(0xffffffffffffffff)
write$cgroup_pressure(r0, &(0x7f0000000040)={'full', 0x20, 0x4, 0x20, 0x4}, 0x2f)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_emit_ethernet(0x0, 0x0, 0x0)
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd27, 0x25dfdbfc, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0xfffd, {@ip4=@multicast1, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="51dda7705623e23efab529e733ebcfebfe5741bcfff9a496190a9b67ef37102d856522ef981bea287794060e15a45807f649e3af5dfc2cf401066d66290de150e748df8ab374c33aaec7838ea4dcdc3980f8a5dc8c83d23bb83a0010376df3320b001da3047d483624cce0317a214b8f948e7a8b8c05d6e10c28141d01c187a011cb3d045558990137ea9d87076af4aa3681ffb109f28a7320e9643d7daca223089dfc37eb29a54dc7a811d833b0f3be24c9ccf6dedc0033d702a81d7890b9a120c9", 0xc2}, {&(0x7f0000000240)="c4c8530f10ac6fd9b562d0da87e3c40422a0d13944ac7311e4be5260040fe23dd26723ffa387d9b1d53e64d23b676ef1d08e2317ceab14eb200d1e929db2288bcfc5d714de5f18f646c3a06111d5d598519f4efc37fd0d6eba21ea", 0x5b}], 0x2, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x58}}], 0x18}, 0x0)
r8 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00')
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x4c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0)
openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4080)
getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r11, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r11], 0x40}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c00000010003904faffffff0000000000000000f33ad59ab9b97d27f92ddc39f300fafe898bf75ee231ca4e707cb4351dc3ef9292d5403e5f2a1557ab8a4da7f1d6bb39d83d2f709fd9e80996c05360364084d5246f50333aab2b5d22b633a195e580c9c10a87044dad75e827e710abd699b869a23c72fffb4b8dc3aaecfa06b9f1a1b26673e885b307931d29a26bd23cd2e8732a16f21619c4ad30bfae179f13c5167333128a19dd888d4ede735cf4856e734cd9f3678a52bcc5c50bb4d639eee05a19c8e47824802ed6f82aa292372f9866f1574e1d1161eef5a12ae8f4aba71a0ff4fdc666c73c7e83233bd2", @ANYRES32=r11, @ANYBLOB="40180200002000003c0012800800010067726500300002800500130000000000040012", @ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000240007012ebd7000fddbdf25027c00000c0001800800020001"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

7.186762168s ago: executing program 6 (id=3164):
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
userfaultfd(0x80001)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r1, 0x6, 0x7, 0x0, &(0x7f00000007c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0)

6.809045157s ago: executing program 3 (id=3165):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x24004008}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000a0014", 0x23}], 0x1}, 0x0)
recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
r1 = socket(0x2b, 0x80801, 0x1)
syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0x9080)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r1, &(0x7f0000000540)="fd733e13a64442526bd69018ea9bb5479211417e07dc8a74ca442df202b0543d46139018efd834bc2d0520e39578a0eab23f0c55f37120357dd85d6a0b22c207d8ceb9ab0b18cf2d0321d59fda36032d7900fe5b5f6c03ba80bc0023f8028207e51f62d502e166a0c86b7d48a7efff799093125735b289652c6d9fcb58c8f3fb0a3a37d6ad1e532f4c57a200c3296e06aecf6e06411fe78547cca60c66cb29ac23e04d73377cf213d8b2f363e33657e9bdfd33d576d4a3fd071c097a0ff9ac6e672c00b5fa05950ac320b6975bcedf90df8972df7c963466089d26", 0xdb, 0x20000004, &(0x7f0000000640)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast]}, 0x80)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x7f, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x100, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0xf, 0xfffffffd, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x48, 0x200, 0xe936, 0x9, 0xf7, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0xfffffffd, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x4, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x0, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffc, 0x0, 0x100002, 0x2, 0x6, 0x21ff, 0x8, 0xffffffff, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x6, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10002, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0x401, 0xd], [0x8, 0x7, 0x8, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x4, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0x10, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0x8000c, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x26, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x26, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0)
listen(0xffffffffffffffff, 0x90004)
syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e130100c90001", @ANYRESHEX, @ANYBLOB="28cbc43f3f9e4a0769ec04073d62d51a0a9ffe243f458bb7dc848aaceb8f256ce2b527df3d43625c4ef8b1"], 0x16)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10)
modify_ldt$read(0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x29, 0x1f, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000280), 0x0, 0x40002000, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0)
preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1, 0x9, 0x6, 0x17)

6.712032854s ago: executing program 0 (id=3166):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140), 0x0, 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2a, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x8}, {0x1, 0xfff1}, {0x0, 0x8}}}, 0x24}}, 0x20041840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2a, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x8}, {0x1, 0xfff1}, {0x0, 0x8}}}, 0x24}}, 0x20041840)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000001300)=""/136, 0x0, 0x7000}) (async)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000001300)=""/136, 0x0, 0x7000})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xb000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000900))
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000)
ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4028af11, &(0x7f00000001c0))
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x7a)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000007c0)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0910000000000055090100000001569500000000000000180100002020642500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be9100000700000000000000020000008500000005000000c0f2ffffff0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000005c0))
read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) (async)
read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020)
bind$x25(r0, 0x0, 0x0) (async)
bind$x25(r0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0x0)

6.333883631s ago: executing program 5 (id=3167):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
pipe(0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = socket(0x840000000002, 0x3, 0xff)
sendmsg$rds(r0, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x8000}, 0x48004)

5.402573453s ago: executing program 6 (id=3168):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x2c020400)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448dc, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0)
syz_extract_tcp_res(0x0, 0x406, 0x1)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x5000, 0x0)
ioctl$BLKZEROOUT(r4, 0xc0c0128e, &(0x7f0000000240)={0x4000000000002000, 0x2})

2.605880952s ago: executing program 5 (id=3169):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000a0014", 0x23}], 0x1}, 0x0)
recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
r1 = socket(0x2b, 0x80801, 0x1)
syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0x9080)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r1, &(0x7f0000000540)="fd733e13a64442526bd69018ea9bb5479211417e07dc8a74ca442df202b0543d46139018efd834bc2d0520e39578a0eab23f0c55f37120357dd85d6a0b22c207d8ceb9ab0b18cf2d0321d59fda36032d7900fe5b5f6c03ba80bc0023f8028207e51f62d502e166a0c86b7d48a7efff799093125735b289652c6d9fcb58c8f3fb0a3a37d6ad1e532f4c57a200c3296e06aecf6e06411fe78547cca60c66cb29ac23e04d73377cf213d8b2f363e33657e9bdfd33d576d4a3fd071c097a0ff9ac6e672c00b5fa05950ac320b6975bcedf90df8972df7c963466089d26", 0xdb, 0x20000004, &(0x7f0000000640)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast]}, 0x80)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x7f, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x100, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0xf, 0xfffffffd, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x48, 0x200, 0xe936, 0x9, 0xf7, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0xfffffffd, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x4, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x0, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffc, 0x0, 0x100002, 0x2, 0x6, 0x21ff, 0x8, 0xffffffff, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x6, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10002, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0x401, 0xd], [0x8, 0x7, 0x8, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x4, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0x10, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0x8000c, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x26, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x26, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0)
listen(0xffffffffffffffff, 0x90004)
syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e130100c90001", @ANYRESHEX, @ANYBLOB="28cbc43f3f9e4a0769ec04073d62d51a0a9ffe243f458bb7dc848aaceb8f256ce2b527df3d43625c4ef8b1"], 0x16)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10)
modify_ldt$read(0x0, 0x0, 0x0)

2.42203522s ago: executing program 5 (id=3170):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
signalfd(r1, &(0x7f0000000280)={[0xfffffff9]}, 0x8)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x50) (fail_nth: 1)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
openat$dlm_monitor(0xffffff9c, &(0x7f00000006c0), 0x4900, 0x0)
bind$can_raw(r3, 0x0, 0x0)
bind$can_raw(r3, &(0x7f0000000a00), 0x10)

2.380117465s ago: executing program 0 (id=3171):
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)

301.969124ms ago: executing program 5 (id=3172):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
r0 = socket(0x400000000010, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')
inotify_init1(0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_usb_connect(0x5, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12a783d038000000000f502012310112430109513b395845ea69d1cc04288d05e2abbfb9883fd022b26ad79419484bdbb01214e3c7e3f1bf5604d64102240001404020000904fe0c0289d8a50509050501"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

300.649838ms ago: executing program 6 (id=3173):
openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e1e, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001080)}, {&(0x7f00000010c0)="48d5bfbb28f67bd0bb65e38fc8295fde857c5b42b7ec2850b53526dbe194d68423f2e002e36537e45af9a115e7b3fbc6f9684e338e1be425b331213c70503e47776dc596e63d1974bc44e1715515f802d0ed518ea686f2eec92b778d9af8dd0cc26f65906b756b3b8ab6da3e373377d0873e81de3061c7aa88", 0x79}, {&(0x7f0000001140)="5d28c382d225e0420f3706e786664da7ba7e1d8d72fba1f1d1a292ef52fb6a55735f8094225e5374c544cd47860d56aad5384a802339bf13843f555a3b7739f75ec682f4bd5093f843fae6a9ac3d3f337388035e18c6764c4083709622addc56779f2c1330cc7da8fc292bda1d3c0eb9577fa53887f959da2e949cf634765a2afd627208ff6c5e263ba98bf2228c5df3fc01224e9d0c2d51354e2c8dc4f79f855b446acdb6d63b8da4ae18bddda901e1d73406d69b00a755b35bf6", 0xbb}, {&(0x7f0000001200)="27e4cec77ebff53b8340da68d5adb035652790a18448ad7066f445ac1fc68e52d43d9390dd1714a4588bca77406e1535bcf6f307166d0cc81a85d1cbc21584ace188", 0x42}, {&(0x7f0000001280)="4e5f95402b16f2360bd363d20e93592035240cf4e66151c74f54eb2a5704d07140bf6d42b003f9a55a3f59201511f213ca359d82cc3b5bbc0a6ea0ef6789c0996b0ea210", 0x44}, {&(0x7f0000001300)="0b970494deb8c65b26d6ef906b24d1a3d72389c39f1e09a785fd0bc598895541d6f2325bb0db68f5b7b0263c69326f1eb0fb3f124a1a2b77ad8910663b0931fee7ed6237b1e6df07af1d0cf3fc03130bed9a542fe3954551bba20aa0479f686011729c67a98aecfb9d58aa36558d1514e9323db95b02fb058da4", 0x7a}], 0x6, &(0x7f0000001400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x40, 0x4008f1c4320b2a6e}}, {{&(0x7f0000001440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001500)=[{&(0x7f00000014c0)="a8d0326a4ac3be2bf4a6c6360df5484cade5fec43b452f79a0b24238a942534f5a52b66863a18707593508675b4a9f13ca36697363768aaa3117", 0x3a}], 0x1, 0x0, 0x0, 0x80}}], 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x1e, 0x805, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r3, 0x3)
accept4$bt_l2cap(r3, &(0x7f0000000200), 0x0, 0x800)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)

274.652826ms ago: executing program 3 (id=3174):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x5, 0xb, 0x3, 0xc, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @private1, 0xbbc4}}, @sadb_sa={0x2, 0x1, 0xffffff7e, 0xb0, 0x0, 0x1, 0x1}, @sadb_address={0x3, 0x5, 0xfe, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x84)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10)
sendmmsg$alg(r4, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001b80)="5985d20392a438a118753a61ccd1d0e83101f02653a3db12a8785d9bcc59b58251f9ae571dc6a2", 0x27}], 0x1, 0x0, 0x0, 0x20000010}], 0x1, 0x20049001)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/39, 0x27}], 0x1}, 0x2)
close(r4)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6})
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0xd0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xbc, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0x6, "72201badc3c71d549a58e71ca1b52ee94b1939203de687d7f761397b569db495f30e0c870aefb7f03565735b9726e4ed18f6a6e5ed74969c4a3463807475d8c77303a176ad4c8ae994fed9d2101eaa2d8fee1d98aef3b394daa86505c63fe2eda3"}, {0xc}, {0xc}}}, @m_gact={0x88, 0x2, 0x0, 0x0, {{0xffffff7b}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x147}}]}, {0x4e, 0x6, "9af02c9c54c6d76fc290d9713279d2e6b9c5183e1831925c84acad84b6e969c63dde87f7740bc5291a8ddd04bd6feba6f42468fb12596c56d28b36558849b9bdfddf0b212fd17707ae30"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x100c4041}, 0x0)
fstatfs(r0, &(0x7f0000000000)=""/183)

0s ago: executing program 0 (id=3175):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r4 = socket$inet(0x2, 0x80001, 0x84)
r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000380)={<r6=>r4, &(0x7f0000000040)='\xb1:&\x00', 0x100, &(0x7f0000000180)={@align=0x6, {0x7, 0x2, 0x0, 0x8}}, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x3})
ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, &(0x7f00000003c0)={0x0, 0x6b, ""/107})
llistxattr(0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x80000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$AUDIT_ADD_RULE(r6, &(0x7f0000000d80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000900)={0x43c, 0x3f3, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0x3c, [0x9, 0xd, 0x8001, 0x1, 0x6, 0x5, 0xb, 0x80000001, 0x4, 0x1, 0x10000, 0x7, 0x10000, 0xffffffef, 0x8, 0x8, 0x8, 0x4000, 0x5, 0x8, 0x7fffffff, 0xd, 0x8, 0x0, 0x2, 0x8, 0x0, 0x2, 0x2, 0x2, 0x2, 0x4, 0x81, 0x1, 0x1000, 0x3, 0x400, 0x3, 0x0, 0x8, 0x3, 0x3a70, 0x80, 0xe96, 0x4, 0x4, 0x9, 0xddca, 0x1, 0x7, 0xff, 0x4, 0x0, 0x34a7, 0x3, 0x7f, 0x88, 0x0, 0x800, 0x7, 0x3, 0x2, 0x9eb, 0x401], [0x9, 0x6, 0x200, 0x10000, 0x9, 0xfffffff9, 0x1, 0x8000, 0x8, 0x3, 0x8, 0xff, 0xffffd5ab, 0x7, 0xc, 0x3, 0x0, 0x2, 0x9, 0x10001, 0x80000001, 0x10000, 0x0, 0x23, 0x5, 0x8cad, 0x53f, 0x5, 0x6, 0x8, 0x9, 0x2, 0x2, 0x6c5f, 0xb4e4, 0xffffffff, 0x1ff, 0x0, 0x9, 0xfffff0bc, 0x40, 0x40, 0x3bac, 0x7ff, 0x10001, 0xb2, 0x5, 0x1, 0x6, 0x10000, 0xbe9, 0x6, 0x1, 0xfffffffb, 0x7, 0x2, 0xfc54, 0x44, 0x3, 0x1, 0x6, 0x0, 0x4, 0x5], [0xffffcb54, 0xca, 0x1, 0x58, 0x8, 0x116f, 0x19, 0x8, 0x1, 0x54, 0x5, 0xf81, 0x7, 0x3, 0xff, 0x8, 0x2, 0x5, 0x6, 0x0, 0x4, 0xc9, 0x2, 0xfffff4e8, 0x800, 0x8, 0x10001, 0x9, 0x80000001, 0x7e4cd0f4, 0x2761, 0xffffffff, 0x8, 0x0, 0xff, 0x8c, 0x3, 0x6, 0x3e, 0x8, 0x400, 0x7ac43abe, 0x1, 0x401, 0x6da, 0x3c9, 0xfff, 0x2ad, 0x9f1, 0x3, 0x6b, 0x3ff, 0x7f, 0x4, 0x7, 0x2, 0x8, 0x8001, 0x1, 0x7ff, 0x6, 0x80, 0x3, 0x6], [0x2, 0x3, 0x8, 0x8, 0x1, 0x7, 0x2, 0x2, 0x349810df, 0x5, 0x7, 0xfff, 0x2, 0x48, 0x8, 0xf, 0x4, 0x7f, 0x7, 0x80000000, 0x9, 0x60128729, 0x9, 0x80000000, 0x3, 0xffff4ee1, 0xfffffff7, 0xffff0001, 0x2, 0x0, 0xba1, 0x52, 0x8, 0x69ee, 0x40, 0xffffffea, 0x5, 0x7bfa, 0x856, 0x5, 0x5e9e, 0x8, 0x0, 0xfff, 0x5, 0x40, 0x0, 0x4, 0xfffffffa, 0x2, 0x3, 0x2, 0x9, 0x1, 0x10, 0x0, 0x8, 0xab, 0x2, 0x66a9d90d, 0x4, 0x6, 0x6, 0x7], 0x19, ['^*$\x00', '\xb1:&\x00', 'vfat\x00', '\x00', '[)&^.)!%$*\x00']}, ["", "", "", "", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

33]  <TASK>
[  596.649635][T13633]  dump_stack_lvl+0xe8/0x150
[  596.649675][T13633]  should_fail_ex+0x46b/0x600
[  596.649705][T13633]  should_failslab+0xa8/0x100
[  596.649729][T13633]  __kmalloc_noprof+0xdf/0x7b0
[  596.649758][T13633]  ? kfree+0x4d/0x6c0
[  596.649783][T13633]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  596.649812][T13633]  tomoyo_realpath_from_path+0xe3/0x5d0
[  596.649835][T13633]  ? tomoyo_domain+0xd8/0x130
[  596.649865][T13633]  tomoyo_path_perm+0x283/0x560
[  596.649893][T13633]  ? tomoyo_path_perm+0x251/0x560
[  596.649921][T13633]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  596.649979][T13633]  ? __fget_files+0x2a/0x420
[  596.650009][T13633]  ? __fget_files+0x3a6/0x420
[  596.650040][T13633]  security_inode_getattr+0x12b/0x310
[  596.650069][T13633]  do_statx_fd+0x14e/0x3b0
[  596.650098][T13633]  ? __pfx_do_statx_fd+0x10/0x10
[  596.650142][T13633]  ? preempt_schedule_thunk+0x16/0x30
[  596.650171][T13633]  ? preempt_schedule_common+0x82/0xd0
[  596.650201][T13633]  __se_sys_statx+0x146/0x2a0
[  596.650241][T13633]  ? __pfx___se_sys_statx+0x10/0x10
[  596.650276][T13633]  ? fput+0xa0/0xd0
[  596.650305][T13633]  ? rcu_is_watching+0x15/0xb0
[  596.650338][T13633]  ? __x64_sys_statx+0x20/0xc0
[  596.650362][T13633]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.650385][T13633]  do_syscall_64+0x15f/0xf80
[  596.650413][T13633]  ? trace_irq_disable+0x3b/0x140
[  596.650435][T13633]  ? clear_bhb_loop+0x40/0x90
[  596.650461][T13633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.650481][T13633] RIP: 0033:0x7f6435f4c819
[  596.650502][T13633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  596.650521][T13633] RSP: 002b:00007f6434185028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c
[  596.650543][T13633] RAX: ffffffffffffffda RBX: 00007f64361c6090 RCX: 00007f6435f4c819
[  596.650558][T13633] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 0000000000000003
[  596.650571][T13633] RBP: 00007f6434185090 R08: ffffffffffffffff R09: 0000000000000000
[  596.650585][T13633] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001
[  596.650599][T13633] R13: 00007f64361c6128 R14: 00007f64361c6090 R15: 00007ffc624e83f8
[  596.650631][T13633]  </TASK>
[  596.653584][T13633] ERROR: Out of memory at tomoyo_realpath_from_path.
[  597.502695][ T5877] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  597.705499][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  597.705567][ T5877] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  597.705612][ T5877] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  597.705640][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.866702][ T5877] usb 5-1: config 0 descriptor??
[  599.150191][ T5877] usb 5-1: string descriptor 0 read error: -71
[  599.252556][ T5877] usb 5-1: USB disconnect, device number 9
[  599.528973][ T6036] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  599.678974][ T6036] usb 1-1: Using ep0 maxpacket: 16
[  599.681088][ T6036] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  599.681122][ T6036] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.687354][ T6036] usb 1-1: config 0 descriptor??
[  599.724807][ T6036] gspca_main: sonixj-2.14.0 probing 0471:0327
[  600.655505][ T6036] gspca_sonixj: reg_r err -110
[  600.655613][ T6036] sonixj 1-1:0.0: probe with driver sonixj failed with error -110
[  600.863663][ T5877] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  601.033189][ T5877] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  601.033229][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.068495][ T5877] usb 4-1: config 0 descriptor??
[  601.208966][ T6036] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  601.278218][ T5877] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  601.345019][   T10] usb 1-1: USB disconnect, device number 17
[  601.359684][ T6036] usb 5-1: Using ep0 maxpacket: 16
[  601.379820][ T6036] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  601.379856][ T6036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.379878][ T6036] usb 5-1: Product: syz
[  601.379893][ T6036] usb 5-1: Manufacturer: syz
[  601.379909][ T6036] usb 5-1: SerialNumber: syz
[  601.424507][ T6036] usb 5-1: config 0 descriptor??
[  601.447216][ T6036] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  601.627394][ T5877] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  601.627423][ T5877] [drm] Initialized udl on minor 2
[  601.643616][ T6036] ssu100 5-1:0.0: probe with driver ssu100 failed with error -5
[  601.691580][ T5877] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  601.691883][ T5877] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  601.894840][T13698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.895530][T13698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.921369][   T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  602.074269][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  602.074326][   T10] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  602.074351][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.150388][   T10] usb 6-1: config 0 descriptor??
[  602.152909][T13717] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  602.156755][T11986] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  602.211624][ T5884] usb 4-1: USB disconnect, device number 52
[  602.251998][T11986] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  602.575908][   T10] hid (null): unknown global tag 0xc
[  602.586869][   T10] hid (null): unknown global tag 0xd
[  602.620371][   T10] hid_parser_main: 239 callbacks suppressed
[  602.620403][   T10] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0
[  602.620435][   T10] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0
[  602.620461][   T10] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0
[  602.620489][   T10] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0
[  602.620517][   T10] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0
[  602.620544][   T10] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0
[  602.621348][   T10] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0
[  602.621384][   T10] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0
[  602.621410][   T10] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0
[  602.621438][   T10] asus 0003:0B05:1ABE.0025: unknown main item tag 0x0
[  602.621917][   T10] asus 0003:0B05:1ABE.0025: unknown global tag 0xc
[  602.621937][   T10] asus 0003:0B05:1ABE.0025: item 0 1 1 12 parsing failed
[  602.622951][   T10] asus 0003:0B05:1ABE.0025: Asus hid parse failed: -22
[  602.623077][   T10] asus 0003:0B05:1ABE.0025: probe with driver asus failed with error -22
[  602.789841][ T5884] usb 6-1: USB disconnect, device number 25
[  604.429040][   T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  604.472578][ T6036] usb 5-1: USB disconnect, device number 10
[  604.542211][ T5809] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  604.581872][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  604.581942][   T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  604.581969][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.622238][   T10] usb 6-1: config 0 descriptor??
[  604.654572][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  604.703189][T12796] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  604.703227][T12796] CPU: 1 UID: 0 PID: 12796 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  604.703262][T12796] Tainted: [L]=SOFTLOCKUP
[  604.703271][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  604.703286][T12796] Workqueue: hci1 hci_rx_work
[  604.703326][T12796] Call Trace:
[  604.703337][T12796]  <TASK>
[  604.703349][T12796]  dump_stack_lvl+0xe8/0x150
[  604.703390][T12796]  sysfs_create_dir_ns+0x271/0x2a0
[  604.703422][T12796]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  604.703451][T12796]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  604.703483][T12796]  ? rt_spin_unlock+0x160/0x200
[  604.703512][T12796]  kobject_add_internal+0x631/0xd10
[  604.703558][T12796]  kobject_add+0x163/0x240
[  604.703600][T12796]  ? __pfx_kobject_add+0x10/0x10
[  604.703640][T12796]  ? get_device_parent+0x370/0x3a0
[  604.703674][T12796]  device_add+0x408/0xb80
[  604.703705][T12796]  hci_conn_add_sysfs+0xd5/0x210
[  604.703740][T12796]  le_conn_complete_evt+0x10e6/0x16b0
[  604.703778][T12796]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  604.703805][T12796]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  604.703837][T12796]  ? lockdep_hardirqs_on+0x7a/0x110
[  604.703870][T12796]  ? skb_pull_data+0xfb/0x200
[  604.703903][T12796]  hci_le_conn_complete_evt+0x187/0x470
[  604.703949][T12796]  hci_event_packet+0x659/0xef0
[  604.703990][T12796]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  604.704023][T12796]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  604.704057][T12796]  ? __pfx_hci_event_packet+0x10/0x10
[  604.704088][T12796]  ? rt_spin_unlock+0x14f/0x200
[  604.704121][T12796]  ? hci_send_to_monitor+0xe2/0x590
[  604.704152][T12796]  hci_rx_work+0x3ee/0x1040
[  604.704194][T12796]  ? process_scheduled_works+0xa70/0x1860
[  604.704232][T12796]  process_scheduled_works+0xb5d/0x1860
[  604.704305][T12796]  ? __pfx_process_scheduled_works+0x10/0x10
[  604.704349][T12796]  ? assign_work+0x3d5/0x5e0
[  604.704390][T12796]  worker_thread+0xa53/0xfc0
[  604.704446][T12796]  kthread+0x388/0x470
[  604.704475][T12796]  ? __pfx_worker_thread+0x10/0x10
[  604.704496][T12796]  ? __pfx_kthread+0x10/0x10
[  604.704527][T12796]  ret_from_fork+0x514/0xb70
[  604.704567][T12796]  ? __pfx_ret_from_fork+0x10/0x10
[  604.704602][T12796]  ? __switch_to+0xc79/0x1410
[  604.704635][T12796]  ? __pfx_kthread+0x10/0x10
[  604.704664][T12796]  ret_from_fork_asm+0x1a/0x30
[  604.704711][T12796]  </TASK>
[  604.704773][T12796] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  604.704817][T12796] Bluetooth: hci1: failed to register connection device
[  605.109263][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[  605.115259][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[  605.117735][ T5809] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  605.117872][ T5809] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  605.117923][ T5809] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  605.118093][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.183713][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[  605.184944][   T10] pwc: recv_control_msg error -32 req 04 val 1000
[  605.188404][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[  605.213923][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[  605.218116][   T10] pwc: recv_control_msg error -32 req 02 val 2000
[  605.236290][   T10] pwc: recv_control_msg error -32 req 02 val 2100
[  605.237139][   T10] pwc: recv_control_msg error -32 req 04 val 1500
[  605.256080][   T10] pwc: recv_control_msg error -32 req 02 val 2500
[  605.268035][ T5809] usb 1-1: config 0 descriptor??
[  605.302205][ T5809] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  605.459099][T11986] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  605.612913][T11986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  605.612981][T11986] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  605.613010][T11986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.651689][T11986] usb 4-1: config 0 descriptor??
[  605.653368][T13779] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  605.671305][   T10] pwc: recv_control_msg error -71 req 02 val 2900
[  605.671918][   T10] pwc: recv_control_msg error -71 req 02 val 2800
[  605.672683][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[  605.673196][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  605.707825][   T10] pwc: Registered as video103.
[  605.717997][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input44
[  605.751131][   T10] usb 6-1: USB disconnect, device number 26
[  606.176921][T12796] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  606.177049][T12796] CPU: 1 UID: 0 PID: 12796 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  606.177087][T12796] Tainted: [L]=SOFTLOCKUP
[  606.177097][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  606.177113][T12796] Workqueue: hci4 hci_rx_work
[  606.177159][T12796] Call Trace:
[  606.177170][T12796]  <TASK>
[  606.177181][T12796]  dump_stack_lvl+0xe8/0x150
[  606.177235][T12796]  sysfs_create_dir_ns+0x271/0x2a0
[  606.177267][T12796]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  606.177296][T12796]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  606.177332][T12796]  ? rt_spin_unlock+0x160/0x200
[  606.177361][T12796]  kobject_add_internal+0x631/0xd10
[  606.177408][T12796]  kobject_add+0x163/0x240
[  606.177449][T12796]  ? __pfx_kobject_add+0x10/0x10
[  606.177493][T12796]  ? get_device_parent+0x370/0x3a0
[  606.177528][T12796]  device_add+0x408/0xb80
[  606.177563][T12796]  hci_conn_add_sysfs+0xd5/0x210
[  606.177601][T12796]  le_conn_complete_evt+0x10e6/0x16b0
[  606.177640][T12796]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  606.177668][T12796]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  606.177701][T12796]  ? lockdep_hardirqs_on+0x7a/0x110
[  606.177736][T12796]  ? skb_pull_data+0xfb/0x200
[  606.177772][T12796]  hci_le_conn_complete_evt+0x187/0x470
[  606.177821][T12796]  hci_event_packet+0x659/0xef0
[  606.177863][T12796]  ? __pfx____migrate_enable+0x10/0x10
[  606.177890][T12796]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  606.177923][T12796]  ? __pfx_hci_event_packet+0x10/0x10
[  606.177968][T12796]  ? hci_send_to_monitor+0xe2/0x590
[  606.178000][T12796]  hci_rx_work+0x3ee/0x1040
[  606.178042][T12796]  ? process_scheduled_works+0xa70/0x1860
[  606.178082][T12796]  process_scheduled_works+0xb5d/0x1860
[  606.178157][T12796]  ? __pfx_process_scheduled_works+0x10/0x10
[  606.178211][T12796]  ? assign_work+0x3d5/0x5e0
[  606.178256][T12796]  worker_thread+0xa53/0xfc0
[  606.178312][T12796]  kthread+0x388/0x470
[  606.178344][T12796]  ? __pfx_worker_thread+0x10/0x10
[  606.178366][T12796]  ? __pfx_kthread+0x10/0x10
[  606.178397][T12796]  ret_from_fork+0x514/0xb70
[  606.178439][T12796]  ? __pfx_ret_from_fork+0x10/0x10
[  606.178478][T12796]  ? __switch_to+0xc79/0x1410
[  606.178515][T12796]  ? __pfx_kthread+0x10/0x10
[  606.178547][T12796]  ret_from_fork_asm+0x1a/0x30
[  606.178595][T12796]  </TASK>
[  606.179324][T12796] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  606.179371][T12796] Bluetooth: hci4: failed to register connection device
[  606.280968][T11986] hid (null): unknown global tag 0xd
[  606.354080][T12796] Bluetooth: hci4: command 0x0406 tx timeout
[  606.994486][ T5884] usb 1-1: USB disconnect, device number 18
[  607.984037][T13804] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2830'.
[  607.984304][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2830'.
[  608.429153][  T815] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  608.531553][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[  608.758688][  T815] usb 3-1: device descriptor read/64, error -32
[  609.223159][  T815] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  609.227546][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[  609.685613][  T815] usb 3-1: device descriptor read/64, error -32
[  609.788578][T11986] hid_parser_main: 46 callbacks suppressed
[  609.788622][T11986] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  609.788740][T11986] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  609.799576][  T815] usb usb3-port1: attempt power cycle
[  609.808093][T11986] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  609.808137][T11986] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  609.808214][T11986] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  609.808283][T11986] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  609.808404][T11986] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  609.808491][T11986] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  609.808566][T11986] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  609.808630][T11986] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  609.963745][T11986] asus 0003:0B05:1ABE.0026: reserved main item tag 0xe
[  609.963869][T11986] asus 0003:0B05:1ABE.0026: ignoring exceeding usage max
[  609.997714][T11986] asus 0003:0B05:1ABE.0026: unknown global tag 0xd
[  609.997788][T11986] asus 0003:0B05:1ABE.0026: item 0 4 1 13 parsing failed
[  610.052156][T11986] asus 0003:0B05:1ABE.0026: Asus hid parse failed: -22
[  610.052593][T11986] asus 0003:0B05:1ABE.0026: probe with driver asus failed with error -22
[  610.910328][ T5815] Bluetooth: hci1: command 0x0406 tx timeout
[  610.961543][T11986] usb 4-1: USB disconnect, device number 53
[  612.718447][T13828] FAULT_INJECTION: forcing a failure.
[  612.718447][T13828] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  612.718487][T13828] CPU: 0 UID: 0 PID: 13828 Comm: syz.2.2838 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  612.718518][T13828] Tainted: [L]=SOFTLOCKUP
[  612.718526][T13828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  612.718540][T13828] Call Trace:
[  612.718549][T13828]  <TASK>
[  612.718560][T13828]  dump_stack_lvl+0xe8/0x150
[  612.718603][T13828]  should_fail_ex+0x46b/0x600
[  612.718635][T13828]  _copy_to_user+0x31/0xb0
[  612.718667][T13828]  simple_read_from_buffer+0xe1/0x170
[  612.718701][T13828]  proc_fail_nth_read+0x1be/0x230
[  612.718736][T13828]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  612.718771][T13828]  ? rw_verify_area+0x2ac/0x4e0
[  612.718809][T13828]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  612.718839][T13828]  vfs_read+0x212/0xa80
[  612.718879][T13828]  ? __pfx_vfs_read+0x10/0x10
[  612.718912][T13828]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  612.718941][T13828]  ? lockdep_hardirqs_on+0x7a/0x110
[  612.718967][T13828]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  612.718995][T13828]  ? mutex_lock_nested+0x152/0x1d0
[  612.719028][T13828]  ? fdget_pos+0x252/0x320
[  612.719069][T13828]  ksys_read+0x156/0x270
[  612.719107][T13828]  ? __pfx_ksys_read+0x10/0x10
[  612.719150][T13828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.719177][T13828]  do_syscall_64+0x15f/0xf80
[  612.719215][T13828]  ? trace_irq_disable+0x3b/0x140
[  612.719240][T13828]  ? clear_bhb_loop+0x40/0x90
[  612.719269][T13828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.719292][T13828] RIP: 0033:0x7ff7b713d04e
[  612.719316][T13828] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  612.719334][T13828] RSP: 002b:00007ff7b53cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  612.719358][T13828] RAX: ffffffffffffffda RBX: 00007ff7b53ce6c0 RCX: 00007ff7b713d04e
[  612.719375][T13828] RDX: 000000000000000f RSI: 00007ff7b53ce0a0 RDI: 0000000000000004
[  612.719391][T13828] RBP: 00007ff7b53ce090 R08: 0000000000000000 R09: 0000000000000000
[  612.719406][T13828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  612.719419][T13828] R13: 00007ff7b73f6038 R14: 00007ff7b73f5fa0 R15: 00007ffd9d3a3138
[  612.719456][T13828]  </TASK>
[  613.052221][T13830] mmap: syz.4.2839 (13830): VmData 37412864 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  613.506254][T13843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2844'.
[  613.626124][T13843] virtiofs: Bad value for 'dax'
[  614.000848][  T815] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  614.149098][  T815] usb 5-1: Using ep0 maxpacket: 16
[  614.153730][  T815] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  614.153766][  T815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.205753][  T815] usb 5-1: config 0 descriptor??
[  614.223121][  T815] gspca_main: sonixj-2.14.0 probing 0471:0327
[  614.509028][ T5809] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  614.721682][ T5809] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  614.721718][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.736624][ T5809] usb 4-1: config 0 descriptor??
[  614.946948][ T5809] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  615.191372][  T815] gspca_sonixj: reg_r err -110
[  615.191477][  T815] sonixj 5-1:0.0: probe with driver sonixj failed with error -110
[  615.380131][ T5809] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  615.380161][ T5809] [drm] Initialized udl on minor 2
[  615.470118][ T5809] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  615.470672][ T5809] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  615.687048][T13861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  615.688337][T13861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  615.936154][ T5809] usb 4-1: USB disconnect, device number 54
[  615.938979][ T6036] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  615.965243][ T6036] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  616.416549][ T5809] usb 5-1: USB disconnect, device number 11
[  617.261258][T13926] FAULT_INJECTION: forcing a failure.
[  617.261258][T13926] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  617.261303][T13926] CPU: 0 UID: 0 PID: 13926 Comm: syz.3.2875 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  617.261337][T13926] Tainted: [L]=SOFTLOCKUP
[  617.261346][T13926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  617.261360][T13926] Call Trace:
[  617.261371][T13926]  <TASK>
[  617.261381][T13926]  dump_stack_lvl+0xe8/0x150
[  617.261426][T13926]  should_fail_ex+0x46b/0x600
[  617.261458][T13926]  _copy_from_user+0x2d/0xb0
[  617.261489][T13926]  do_sock_getsockopt+0x200/0x7e0
[  617.261528][T13926]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  617.261572][T13926]  ? __fget_files+0x3a6/0x420
[  617.261602][T13926]  ? __fget_files+0x2a/0x420
[  617.261639][T13926]  __x64_sys_getsockopt+0x1aa/0x250
[  617.261672][T13926]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.261698][T13926]  do_syscall_64+0x15f/0xf80
[  617.261727][T13926]  ? trace_irq_disable+0x3b/0x140
[  617.261752][T13926]  ? clear_bhb_loop+0x40/0x90
[  617.261791][T13926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.261815][T13926] RIP: 0033:0x7f4265fdc819
[  617.261838][T13926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  617.261868][T13926] RSP: 002b:00007f4264215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  617.261894][T13926] RAX: ffffffffffffffda RBX: 00007f4266256090 RCX: 00007f4265fdc819
[  617.261913][T13926] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000005
[  617.261928][T13926] RBP: 00007f4264215090 R08: 00002000000002c0 R09: 0000000000000000
[  617.261944][T13926] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  617.261960][T13926] R13: 00007f4266256128 R14: 00007f4266256090 R15: 00007fffb9dc41d8
[  617.261994][T13926]  </TASK>
[  617.881789][T13941] FAULT_INJECTION: forcing a failure.
[  617.881789][T13941] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  617.881834][T13941] CPU: 0 UID: 0 PID: 13941 Comm: syz.4.2881 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  617.881868][T13941] Tainted: [L]=SOFTLOCKUP
[  617.881877][T13941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  617.881892][T13941] Call Trace:
[  617.881903][T13941]  <TASK>
[  617.881914][T13941]  dump_stack_lvl+0xe8/0x150
[  617.881959][T13941]  should_fail_ex+0x46b/0x600
[  617.881993][T13941]  _copy_to_user+0x31/0xb0
[  617.882026][T13941]  simple_read_from_buffer+0xe1/0x170
[  617.882063][T13941]  proc_fail_nth_read+0x1be/0x230
[  617.882108][T13941]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  617.882144][T13941]  ? rw_verify_area+0x2ac/0x4e0
[  617.882178][T13941]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  617.882211][T13941]  vfs_read+0x212/0xa80
[  617.882256][T13941]  ? __pfx_vfs_read+0x10/0x10
[  617.882293][T13941]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  617.882325][T13941]  ? lockdep_hardirqs_on+0x7a/0x110
[  617.882355][T13941]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  617.882385][T13941]  ? mutex_lock_nested+0x152/0x1d0
[  617.882420][T13941]  ? fdget_pos+0x252/0x320
[  617.882461][T13941]  ksys_read+0x156/0x270
[  617.882499][T13941]  ? __pfx_ksys_read+0x10/0x10
[  617.882544][T13941]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.882570][T13941]  do_syscall_64+0x15f/0xf80
[  617.882599][T13941]  ? trace_irq_disable+0x3b/0x140
[  617.882623][T13941]  ? clear_bhb_loop+0x40/0x90
[  617.882653][T13941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.882678][T13941] RIP: 0033:0x7fcf2c11d04e
[  617.882701][T13941] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  617.882722][T13941] RSP: 002b:00007fcf2a36bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  617.882749][T13941] RAX: ffffffffffffffda RBX: 00007fcf2a36c6c0 RCX: 00007fcf2c11d04e
[  617.882767][T13941] RDX: 000000000000000f RSI: 00007fcf2a36c0a0 RDI: 0000000000000008
[  617.882783][T13941] RBP: 00007fcf2a36c090 R08: 0000000000000000 R09: 0000000000000000
[  617.882798][T13941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  617.882814][T13941] R13: 00007fcf2c3d6218 R14: 00007fcf2c3d6180 R15: 00007ffead840fd8
[  617.882851][T13941]  </TASK>
[  619.588965][ T5809] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  620.881067][T13965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2892'.
[  620.883415][T13965] virtiofs: Bad value for 'dax'
[  621.212102][T13966] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  621.337289][ T5809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  621.337350][ T5809] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  621.337396][ T5809] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  621.337422][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.412327][T13966] bond1 (unregistering): Released all slaves
[  621.482490][ T5809] usb 1-1: config 0 descriptor??
[  621.502004][ T5809] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  621.739042][ T5967] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  621.739433][  T815] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  621.832268][T13977] FAULT_INJECTION: forcing a failure.
[  621.832268][T13977] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  621.835779][T13977] CPU: 1 UID: 0 PID: 13977 Comm: syz.2.2897 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  621.835820][T13977] Tainted: [L]=SOFTLOCKUP
[  621.835827][T13977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  621.835836][T13977] Call Trace:
[  621.835842][T13977]  <TASK>
[  621.835848][T13977]  dump_stack_lvl+0xe8/0x150
[  621.835875][T13977]  should_fail_ex+0x46b/0x600
[  621.835893][T13977]  _copy_from_user+0x2d/0xb0
[  621.835910][T13977]  get_timespec64+0x96/0x1b0
[  621.835927][T13977]  ? __pfx_get_timespec64+0x10/0x10
[  621.835957][T13977]  __x64_sys_recvmmsg+0x14b/0x250
[  621.835976][T13977]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  621.835990][T13977]  ? __task_pid_nr_ns+0x28/0x470
[  621.836010][T13977]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.836029][T13977]  do_syscall_64+0x15f/0xf80
[  621.836047][T13977]  ? clear_bhb_loop+0x40/0x90
[  621.836063][T13977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.836077][T13977] RIP: 0033:0x7ff7b717c819
[  621.836090][T13977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  621.836102][T13977] RSP: 002b:00007ff7b53ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  621.836119][T13977] RAX: ffffffffffffffda RBX: 00007ff7b73f5fa0 RCX: 00007ff7b717c819
[  621.836129][T13977] RDX: 0000000000000000 RSI: 0000200000005c80 RDI: 0000000000000003
[  621.836137][T13977] RBP: 00007ff7b53ce090 R08: 0000200000005dc0 R09: 0000000000000000
[  621.836146][T13977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.836154][T13977] R13: 00007ff7b73f6038 R14: 00007ff7b73f5fa0 R15: 00007ffd9d3a3138
[  621.836174][T13977]  </TASK>
[  621.888997][ T5967] usb 6-1: Using ep0 maxpacket: 16
[  621.899500][ T5967] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  621.899535][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.910747][ T5967] usb 6-1: config 0 descriptor??
[  621.936548][  T815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  621.936599][  T815] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  621.936622][  T815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.989668][  T815] usb 4-1: config 0 descriptor??
[  621.990820][T13970] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  621.994543][ T5967] gspca_main: sonixj-2.14.0 probing 0471:0327
[  622.419066][ T5967] gspca_sonixj: reg_w1 err -71
[  622.419758][ T5967] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  622.454376][  T815] hid (null): unknown global tag 0xc
[  622.458317][  T815] hid (null): unknown global tag 0xd
[  622.484282][  T815] hid_parser_main: 239 callbacks suppressed
[  622.484310][  T815] asus 0003:0B05:1ABE.0027: unknown main item tag 0x0
[  622.484341][  T815] asus 0003:0B05:1ABE.0027: unknown main item tag 0x0
[  622.484368][  T815] asus 0003:0B05:1ABE.0027: unknown main item tag 0x0
[  622.484396][  T815] asus 0003:0B05:1ABE.0027: unknown main item tag 0x0
[  622.484423][  T815] asus 0003:0B05:1ABE.0027: unknown main item tag 0x0
[  622.484451][  T815] asus 0003:0B05:1ABE.0027: unknown main item tag 0x0
[  622.484478][  T815] asus 0003:0B05:1ABE.0027: unknown main item tag 0x0
[  622.484506][  T815] asus 0003:0B05:1ABE.0027: unknown main item tag 0x0
[  622.489876][  T815] asus 0003:0B05:1ABE.0027: unknown main item tag 0x0
[  622.489934][  T815] asus 0003:0B05:1ABE.0027: unknown main item tag 0x0
[  622.490396][  T815] asus 0003:0B05:1ABE.0027: unknown global tag 0xc
[  622.490415][  T815] asus 0003:0B05:1ABE.0027: item 0 1 1 12 parsing failed
[  622.491305][  T815] asus 0003:0B05:1ABE.0027: Asus hid parse failed: -22
[  622.508778][  T815] asus 0003:0B05:1ABE.0027: probe with driver asus failed with error -22
[  622.518042][ T5967] usb 6-1: USB disconnect, device number 27
[  622.685834][ T6036] usb 4-1: USB disconnect, device number 55
[  623.116018][T13993] FAULT_INJECTION: forcing a failure.
[  623.116018][T13993] name failslab, interval 1, probability 0, space 0, times 0
[  623.116106][T13993] CPU: 0 UID: 0 PID: 13993 Comm: syz.5.2902 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  623.116140][T13993] Tainted: [L]=SOFTLOCKUP
[  623.116149][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  623.116163][T13993] Call Trace:
[  623.116174][T13993]  <TASK>
[  623.116187][T13993]  dump_stack_lvl+0xe8/0x150
[  623.116231][T13993]  should_fail_ex+0x46b/0x600
[  623.116264][T13993]  should_failslab+0xa8/0x100
[  623.116290][T13993]  __kvmalloc_node_noprof+0x170/0x8e0
[  623.116318][T13993]  ? proc_sys_call_handler+0x3d2/0x830
[  623.116362][T13993]  proc_sys_call_handler+0x3d2/0x830
[  623.116394][T13993]  ? vfs_write+0x22d/0xba0
[  623.116433][T13993]  ? __pfx_proc_sys_call_handler+0x10/0x10
[  623.116481][T13993]  vfs_write+0x629/0xba0
[  623.116525][T13993]  ? __pfx_vfs_write+0x10/0x10
[  623.116571][T13993]  ? mutex_lock_nested+0x152/0x1d0
[  623.116606][T13993]  ? fdget_pos+0x252/0x320
[  623.116647][T13993]  ksys_write+0x156/0x270
[  623.116685][T13993]  ? __pfx_ksys_write+0x10/0x10
[  623.116729][T13993]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.116756][T13993]  do_syscall_64+0x15f/0xf80
[  623.116788][T13993]  ? clear_bhb_loop+0x40/0x90
[  623.116818][T13993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.116842][T13993] RIP: 0033:0x7f6435f4c819
[  623.116866][T13993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  623.116887][T13993] RSP: 002b:00007f6434164028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  623.116914][T13993] RAX: ffffffffffffffda RBX: 00007f64361c6180 RCX: 00007f6435f4c819
[  623.116932][T13993] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000007
[  623.116947][T13993] RBP: 00007f6434164090 R08: 0000000000000000 R09: 0000000000000000
[  623.116962][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  623.116977][T13993] R13: 00007f64361c6218 R14: 00007f64361c6180 R15: 00007ffc624e83f8
[  623.117015][T13993]  </TASK>
[  623.914331][  T815] usb 1-1: USB disconnect, device number 19
[  623.948083][T12564] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  623.995131][T13995] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2905'.
[  624.338123][T14010] FAULT_INJECTION: forcing a failure.
[  624.338123][T14010] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  624.338163][T14010] CPU: 1 UID: 0 PID: 14010 Comm: syz.2.2909 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  624.338190][T14010] Tainted: [L]=SOFTLOCKUP
[  624.338198][T14010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  624.338210][T14010] Call Trace:
[  624.338218][T14010]  <TASK>
[  624.338226][T14010]  dump_stack_lvl+0xe8/0x150
[  624.338263][T14010]  should_fail_ex+0x46b/0x600
[  624.338288][T14010]  strncpy_from_user+0x36/0x2b0
[  624.338312][T14010]  path_setxattrat+0x191/0x440
[  624.338339][T14010]  ? __pfx_path_setxattrat+0x10/0x10
[  624.338380][T14010]  ? ksys_write+0x248/0x270
[  624.338410][T14010]  ? __pfx_ksys_write+0x10/0x10
[  624.338440][T14010]  __x64_sys_setxattr+0xbc/0xe0
[  624.338465][T14010]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.338491][T14010]  do_syscall_64+0x15f/0xf80
[  624.338513][T14010]  ? trace_irq_disable+0x3b/0x140
[  624.338532][T14010]  ? clear_bhb_loop+0x40/0x90
[  624.338555][T14010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.338573][T14010] RIP: 0033:0x7ff7b717c819
[  624.338590][T14010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  624.338607][T14010] RSP: 002b:00007ff7b53ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  624.338629][T14010] RAX: ffffffffffffffda RBX: 00007ff7b73f5fa0 RCX: 00007ff7b717c819
[  624.338644][T14010] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000200000000800
[  624.338657][T14010] RBP: 00007ff7b53ce090 R08: 0000000000000001 R09: 0000000000000000
[  624.338670][T14010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  624.338683][T14010] R13: 00007ff7b73f6038 R14: 00007ff7b73f5fa0 R15: 00007ffd9d3a3138
[  624.338714][T14010]  </TASK>
[  624.843568][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  626.599061][    T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  626.745163][T14037] blktrace: Concurrent blktraces are not allowed on nullb0
[  626.779688][ T5809] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  626.798566][ T9885] udevd[9885]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  626.799278][    T9] usb 4-1: Using ep0 maxpacket: 16
[  626.837057][    T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  626.837092][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.871171][    T9] usb 4-1: config 0 descriptor??
[  626.919900][    T9] gspca_main: sonixj-2.14.0 probing 0471:0327
[  626.965679][T14040] FAULT_INJECTION: forcing a failure.
[  626.965679][T14040] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  626.965719][T14040] CPU: 0 UID: 0 PID: 14040 Comm: syz.2.2921 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  626.965750][T14040] Tainted: [L]=SOFTLOCKUP
[  626.965758][T14040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  626.965771][T14040] Call Trace:
[  626.965779][T14040]  <TASK>
[  626.965793][T14040]  dump_stack_lvl+0xe8/0x150
[  626.965831][T14040]  should_fail_ex+0x46b/0x600
[  626.965860][T14040]  _copy_from_user+0x2d/0xb0
[  626.965885][T14040]  __sys_connect+0x156/0x450
[  626.965921][T14040]  ? __pfx___sys_connect+0x10/0x10
[  626.965964][T14040]  ? __pfx_ksys_write+0x10/0x10
[  626.965999][T14040]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.966022][T14040]  __x64_sys_connect+0x7a/0x90
[  626.966053][T14040]  do_syscall_64+0x15f/0xf80
[  626.966079][T14040]  ? trace_irq_disable+0x3b/0x140
[  626.966100][T14040]  ? clear_bhb_loop+0x40/0x90
[  626.966124][T14040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.966153][T14040] RIP: 0033:0x7ff7b717c819
[  626.966173][T14040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  626.966192][T14040] RSP: 002b:00007ff7b53ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  626.966216][T14040] RAX: ffffffffffffffda RBX: 00007ff7b73f5fa0 RCX: 00007ff7b717c819
[  626.966232][T14040] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000004
[  626.966246][T14040] RBP: 00007ff7b53ce090 R08: 0000000000000000 R09: 0000000000000000
[  626.966259][T14040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  626.966272][T14040] R13: 00007ff7b73f6038 R14: 00007ff7b73f5fa0 R15: 00007ffd9d3a3138
[  626.966306][T14040]  </TASK>
[  627.244624][ T5809] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  627.244809][ T5809] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  627.244929][ T5809] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  627.244958][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.431805][T14045] netlink: 1048 bytes leftover after parsing attributes in process `syz.0.2923'.
[  627.456372][ T5809] usb 5-1: config 0 descriptor??
[  627.457334][    T9] gspca_sonixj: reg_w1 err -110
[  627.457395][    T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -110
[  627.548586][ T5809] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  628.029298][ T5809] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  628.194753][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  628.194821][ T5809] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  628.194849][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.354256][T14066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2931'.
[  628.466650][T12564] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  628.466687][T12564] CPU: 1 UID: 0 PID: 12564 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  628.466722][T12564] Tainted: [L]=SOFTLOCKUP
[  628.466732][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  628.466755][T12564] Workqueue: hci5 hci_rx_work
[  628.466794][T12564] Call Trace:
[  628.466805][T12564]  <TASK>
[  628.466816][T12564]  dump_stack_lvl+0xe8/0x150
[  628.466858][T12564]  sysfs_create_dir_ns+0x271/0x2a0
[  628.466889][T12564]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  628.466917][T12564]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  628.466952][T12564]  ? rt_spin_unlock+0x160/0x200
[  628.466979][T12564]  kobject_add_internal+0x631/0xd10
[  628.467026][T12564]  kobject_add+0x163/0x240
[  628.467077][T12564]  ? __pfx_kobject_add+0x10/0x10
[  628.467121][T12564]  ? get_device_parent+0x370/0x3a0
[  628.467156][T12564]  device_add+0x408/0xb80
[  628.467190][T12564]  hci_conn_add_sysfs+0xd5/0x210
[  628.467246][T12564]  le_conn_complete_evt+0x10e6/0x16b0
[  628.467285][T12564]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  628.467314][T12564]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  628.467346][T12564]  ? lockdep_hardirqs_on+0x7a/0x110
[  628.467381][T12564]  ? skb_pull_data+0xfb/0x200
[  628.467419][T12564]  hci_le_conn_complete_evt+0x187/0x470
[  628.467468][T12564]  hci_event_packet+0x659/0xef0
[  628.467511][T12564]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  628.467535][T12564]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  628.467573][T12564]  ? __pfx_hci_event_packet+0x10/0x10
[  628.467606][T12564]  ? rt_spin_unlock+0x14f/0x200
[  628.467642][T12564]  ? hci_send_to_monitor+0xe2/0x590
[  628.467675][T12564]  hci_rx_work+0x3ee/0x1040
[  628.467718][T12564]  ? process_scheduled_works+0xa70/0x1860
[  628.467760][T12564]  process_scheduled_works+0xb5d/0x1860
[  628.467833][T12564]  ? __pfx_process_scheduled_works+0x10/0x10
[  628.467877][T12564]  ? assign_work+0x3d5/0x5e0
[  628.467920][T12564]  worker_thread+0xa53/0xfc0
[  628.467977][T12564]  kthread+0x388/0x470
[  628.468007][T12564]  ? __pfx_worker_thread+0x10/0x10
[  628.468029][T12564]  ? __pfx_kthread+0x10/0x10
[  628.468070][T12564]  ret_from_fork+0x514/0xb70
[  628.468113][T12564]  ? __pfx_ret_from_fork+0x10/0x10
[  628.468151][T12564]  ? __switch_to+0xc79/0x1410
[  628.468189][T12564]  ? __pfx_kthread+0x10/0x10
[  628.468220][T12564]  ret_from_fork_asm+0x1a/0x30
[  628.468268][T12564]  </TASK>
[  628.468596][T12564] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  628.483358][T12564] Bluetooth: hci5: failed to register connection device
[  629.499806][T11986] usb 5-1: USB disconnect, device number 12
[  630.378200][ T5809] usb 6-1: config 0 descriptor??
[  630.487483][T14051] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  631.594565][ T5809] usbhid 6-1:0.0: can't add hid device: -71
[  631.594710][ T5809] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  631.619559][ T5809] usb 6-1: USB disconnect, device number 28
[  631.766754][ T5884] usb 4-1: USB disconnect, device number 56
[  632.372146][ T5809] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  632.386763][ T5884] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  632.947148][ T9885] udevd[9885]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  632.978967][ T5809] usb 5-1: Using ep0 maxpacket: 32
[  632.986073][ T5809] usb 5-1: config 0 has an invalid interface number: 202 but max is 1
[  632.986105][ T5809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  632.986126][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  632.986149][ T5809] usb 5-1: config 0 has no interface number 0
[  632.986183][ T5809] usb 5-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30
[  632.986229][ T5809] usb 5-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64
[  632.986259][ T5809] usb 5-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182
[  632.986290][ T5809] usb 5-1: config 0 interface 202 has no altsetting 0
[  633.009710][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0
[  633.009846][ T5884] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  633.009874][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.015262][ T5884] usb 4-1: config 0 descriptor??
[  633.094695][ T5809] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b
[  633.094731][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.094755][ T5809] usb 5-1: Product: syz
[  633.094771][ T5809] usb 5-1: Manufacturer: syz
[  633.094788][ T5809] usb 5-1: SerialNumber: syz
[  633.168326][ T5809] usb 5-1: config 0 descriptor??
[  633.193397][ T5809] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  633.549287][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  633.575090][ T5809] usb 5-1: USB disconnect, device number 13
[  633.623129][ T7770] usb 5-1: Failed to submit usb control message: -32
[  633.623615][ T7770] usb 5-1: unable to send the bmi data to the device: -32
[  633.623641][ T7770] usb 5-1: unable to get target info from device
[  633.623659][ T7770] usb 5-1: could not get target info (-32)
[  633.688942][ T7770] usb 5-1: could not probe fw (-32)
[  633.828456][ T5884] video4linux radio48: keene_cmd_set failed (-71)
[  633.828480][ T5884] radio-keene 4-1:0.0: V4L2 device registered as radio48
[  633.833287][ T5884] usb 4-1: USB disconnect, device number 57
[  633.965080][T11986] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  634.162131][T11986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  634.162192][T11986] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  634.162220][T11986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.353550][T11986] usb 6-1: config 0 descriptor??
[  634.354771][T14110] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  634.464028][T14120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2951'.
[  634.588253][T14121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2951'.
[  634.588329][T12564] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  635.361196][T11986] hid (null): unknown global tag 0xc
[  635.389565][  T815] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  635.566735][T11986] hid (null): unknown global tag 0xd
[  635.569343][  T815] usb 1-1: Using ep0 maxpacket: 16
[  635.934168][  T815] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  635.934217][  T815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.311993][  T815] usb 1-1: config 0 descriptor??
[  636.666184][T11986] hid_parser_main: 46 callbacks suppressed
[  636.666421][T11986] asus 0003:0B05:1ABE.0028: unknown main item tag 0x0
[  636.666536][T11986] asus 0003:0B05:1ABE.0028: unknown main item tag 0x0
[  636.666639][T11986] asus 0003:0B05:1ABE.0028: unknown main item tag 0x0
[  636.666736][T11986] asus 0003:0B05:1ABE.0028: unknown main item tag 0x0
[  636.666871][T11986] asus 0003:0B05:1ABE.0028: unknown main item tag 0x0
[  636.666950][T11986] asus 0003:0B05:1ABE.0028: unknown main item tag 0x0
[  636.666978][T11986] asus 0003:0B05:1ABE.0028: unknown main item tag 0x0
[  636.667099][T11986] asus 0003:0B05:1ABE.0028: unknown main item tag 0x0
[  636.667178][T11986] asus 0003:0B05:1ABE.0028: unknown main item tag 0x0
[  636.667207][T11986] asus 0003:0B05:1ABE.0028: unknown main item tag 0x0
[  636.668732][T11986] asus 0003:0B05:1ABE.0028: unknown global tag 0xc
[  636.668753][T11986] asus 0003:0B05:1ABE.0028: item 0 1 1 12 parsing failed
[  636.671817][T11986] asus 0003:0B05:1ABE.0028: Asus hid parse failed: -22
[  636.674124][T11986] asus 0003:0B05:1ABE.0028: probe with driver asus failed with error -22
[  637.494590][  T815] gspca_main: sonixj-2.14.0 probing 0471:0327
[  637.517505][T11986] usb 6-1: USB disconnect, device number 29
[  638.060085][  T815] gspca_sonixj: reg_w1 err -110
[  638.060157][  T815] sonixj 1-1:0.0: probe with driver sonixj failed with error -110
[  639.755229][T14152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2960'.
[  639.769212][ T5816] usb 1-1: USB disconnect, device number 20
[  639.779548][ T5809] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  639.876788][T11519] udevd[11519]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  639.892257][ T9885] udevd[9885]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  639.967765][ T5809] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  639.967845][ T5809] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  639.967896][ T5809] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  639.967924][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.065425][ T5809] usb 4-1: config 0 descriptor??
[  640.343026][T12564] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  640.343067][T12564] CPU: 1 UID: 0 PID: 12564 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  640.343100][T12564] Tainted: [L]=SOFTLOCKUP
[  640.343109][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  640.343124][T12564] Workqueue: hci5 hci_rx_work
[  640.343161][T12564] Call Trace:
[  640.343170][T12564]  <TASK>
[  640.343181][T12564]  dump_stack_lvl+0xe8/0x150
[  640.343221][T12564]  sysfs_create_dir_ns+0x271/0x2a0
[  640.343252][T12564]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  640.343278][T12564]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  640.343318][T12564]  ? rt_spin_unlock+0x160/0x200
[  640.343345][T12564]  kobject_add_internal+0x631/0xd10
[  640.343387][T12564]  kobject_add+0x163/0x240
[  640.343423][T12564]  ? __pfx_kobject_add+0x10/0x10
[  640.343463][T12564]  ? get_device_parent+0x370/0x3a0
[  640.343496][T12564]  device_add+0x408/0xb80
[  640.343527][T12564]  hci_conn_add_sysfs+0xd5/0x210
[  640.343561][T12564]  le_conn_complete_evt+0x10e6/0x16b0
[  640.343597][T12564]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  640.343623][T12564]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  640.343652][T12564]  ? lockdep_hardirqs_on+0x7a/0x110
[  640.343685][T12564]  ? skb_pull_data+0xfb/0x200
[  640.343719][T12564]  hci_le_conn_complete_evt+0x187/0x470
[  640.343764][T12564]  hci_event_packet+0x659/0xef0
[  640.343811][T12564]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  640.343833][T12564]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  640.343866][T12564]  ? __pfx_hci_event_packet+0x10/0x10
[  640.343896][T12564]  ? rt_spin_unlock+0x14f/0x200
[  640.343930][T12564]  ? hci_send_to_monitor+0xe2/0x590
[  640.343960][T12564]  hci_rx_work+0x3ee/0x1040
[  640.343998][T12564]  ? process_scheduled_works+0xa70/0x1860
[  640.344034][T12564]  process_scheduled_works+0xb5d/0x1860
[  640.344102][T12564]  ? __pfx_process_scheduled_works+0x10/0x10
[  640.344144][T12564]  ? assign_work+0x3d5/0x5e0
[  640.344182][T12564]  worker_thread+0xa53/0xfc0
[  640.344237][T12564]  kthread+0x388/0x470
[  640.344264][T12564]  ? __pfx_worker_thread+0x10/0x10
[  640.344283][T12564]  ? __pfx_kthread+0x10/0x10
[  640.344313][T12564]  ret_from_fork+0x514/0xb70
[  640.344351][T12564]  ? __pfx_ret_from_fork+0x10/0x10
[  640.344386][T12564]  ? __switch_to+0xc79/0x1410
[  640.344418][T12564]  ? __pfx_kthread+0x10/0x10
[  640.344446][T12564]  ret_from_fork_asm+0x1a/0x30
[  640.344490][T12564]  </TASK>
[  640.344553][T12564] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  640.344596][T12564] Bluetooth: hci5: failed to register connection device
[  640.384487][ T5809] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  640.607070][T14152] 8021q: adding VLAN 0 to HW filter on device bond4
[  641.249005][ T5809] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  641.359013][ T6036] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  641.532148][ T6036] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  641.532184][ T6036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.556886][ T6036] usb 6-1: config 0 descriptor??
[  642.983637][ T6036] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  643.069063][T11986] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  643.133997][ T6036] [drm:udl_init] *ERROR* Selecting channel failed
[  643.303739][T11986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  643.303798][T11986] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  643.303825][T11986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.336664][ T6036] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2
[  643.336703][ T6036] [drm] Initialized udl on minor 2
[  643.338579][ T6036] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  643.340686][ T6036] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  643.343655][ T5809] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  643.344785][ T5809] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  643.345018][ T5809] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  643.543006][ T5979] usb 4-1: USB disconnect, device number 58
[  643.613881][ T6036] usb 6-1: USB disconnect, device number 30
[  643.692852][T11986] usb 5-1: config 0 descriptor??
[  643.693706][T14184] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  643.834751][T14197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2977'.
[  644.051746][T14204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2977'.
[  644.142798][T11986] hid_parser_main: 46 callbacks suppressed
[  644.142827][T11986] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0
[  644.142858][T11986] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0
[  644.142884][T11986] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0
[  644.142911][T11986] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0
[  644.142938][T11986] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0
[  644.142963][T11986] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0
[  644.143000][T11986] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0
[  644.143032][T11986] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0
[  644.143063][T11986] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0
[  644.143092][T11986] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0
[  644.176210][T14206] blktrace: Concurrent blktraces are not allowed on nullb0
[  644.189831][T14211] virtiofs: Bad value for 'dax'
[  644.248529][T11986] asus 0003:0B05:1ABE.0029: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.4-1/input0
[  644.274481][T14197] 8021q: adding VLAN 0 to HW filter on device bond2
[  644.348955][ T5816] usb 5-1: USB disconnect, device number 14
[  644.380647][T14200] bond1: (slave dummy0): Releasing backup interface
[  644.451833][ T6036] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  644.496397][T14214] FAULT_INJECTION: forcing a failure.
[  644.496397][T14214] name failslab, interval 1, probability 0, space 0, times 0
[  644.496426][T14214] CPU: 0 UID: 0 PID: 14214 Comm: syz.0.2982 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  644.496445][T14214] Tainted: [L]=SOFTLOCKUP
[  644.496451][T14214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  644.496459][T14214] Call Trace:
[  644.496464][T14214]  <TASK>
[  644.496470][T14214]  dump_stack_lvl+0xe8/0x150
[  644.496497][T14214]  should_fail_ex+0x46b/0x600
[  644.496522][T14214]  should_failslab+0xa8/0x100
[  644.496547][T14214]  __kmalloc_noprof+0xdf/0x7b0
[  644.496573][T14214]  ? kfree+0x4d/0x6c0
[  644.496590][T14214]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  644.496615][T14214]  tomoyo_realpath_from_path+0xe3/0x5d0
[  644.496630][T14214]  ? tomoyo_domain+0xd8/0x130
[  644.496648][T14214]  ? tomoyo_path_number_perm+0x219/0x630
[  644.496668][T14214]  tomoyo_path_number_perm+0x246/0x630
[  644.496688][T14214]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  644.496714][T14214]  ? __lock_acquire+0x6b5/0x2cf0
[  644.496731][T14214]  ? do_raw_spin_lock+0x12b/0x2f0
[  644.496765][T14214]  ? __fget_files+0x2a/0x420
[  644.496783][T14214]  ? __fget_files+0x2a/0x420
[  644.496798][T14214]  ? __fget_files+0x3a6/0x420
[  644.496814][T14214]  ? __fget_files+0x2a/0x420
[  644.496833][T14214]  security_file_ioctl+0xc3/0x2a0
[  644.496854][T14214]  __se_sys_ioctl+0x47/0x170
[  644.496875][T14214]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.496890][T14214]  do_syscall_64+0x15f/0xf80
[  644.496907][T14214]  ? trace_irq_disable+0x3b/0x140
[  644.496920][T14214]  ? clear_bhb_loop+0x40/0x90
[  644.496937][T14214]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.496953][T14214] RIP: 0033:0x7f447f70c819
[  644.496967][T14214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.496979][T14214] RSP: 002b:00007f447d966028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  644.497000][T14214] RAX: ffffffffffffffda RBX: 00007f447f985fa0 RCX: 00007f447f70c819
[  644.497018][T14214] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003
[  644.497032][T14214] RBP: 00007f447d966090 R08: 0000000000000000 R09: 0000000000000000
[  644.497047][T14214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  644.497062][T14214] R13: 00007f447f986038 R14: 00007f447f985fa0 R15: 00007ffeb0fa3538
[  644.497099][T14214]  </TASK>
[  644.511880][T14214] ERROR: Out of memory at tomoyo_realpath_from_path.
[  644.622398][ T6036] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  644.622452][ T6036] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  644.622476][ T6036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.652527][ T6036] usb 6-1: config 0 descriptor??
[  644.655943][T14201] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  645.070466][ T6036] hid (null): unknown global tag 0xc
[  645.076032][ T6036] hid (null): unknown global tag 0xd
[  645.121433][ T6036] asus 0003:0B05:1ABE.002A: unknown global tag 0xc
[  645.121465][ T6036] asus 0003:0B05:1ABE.002A: item 0 1 1 12 parsing failed
[  645.124174][ T6036] asus 0003:0B05:1ABE.002A: Asus hid parse failed: -22
[  645.124307][ T6036] asus 0003:0B05:1ABE.002A: probe with driver asus failed with error -22
[  645.239994][T14200] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  645.314293][T11986] usb 6-1: USB disconnect, device number 31
[  646.752589][ T5815] Bluetooth: hci5: command 0x0406 tx timeout
[  646.784818][ T6040] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  647.008061][ T6040] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  647.008098][ T6040] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  647.008114][ T6040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.103094][ T6040] usb 4-1: config 0 descriptor??
[  647.287532][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  647.326904][ T6040] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  647.348202][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  647.421309][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  647.422669][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  647.423540][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  648.291559][T14242] input: syz1 as /devices/virtual/input/input45
[  649.345280][T14251] FAULT_INJECTION: forcing a failure.
[  649.345280][T14251] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  649.345314][T14251] CPU: 0 UID: 0 PID: 14251 Comm: syz.5.2993 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  649.345334][T14251] Tainted: [L]=SOFTLOCKUP
[  649.345338][T14251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  649.345347][T14251] Call Trace:
[  649.345352][T14251]  <TASK>
[  649.345358][T14251]  dump_stack_lvl+0xe8/0x150
[  649.345383][T14251]  should_fail_ex+0x46b/0x600
[  649.345407][T14251]  _copy_from_user+0x2d/0xb0
[  649.345424][T14251]  do_sock_getsockopt+0x200/0x7e0
[  649.345442][T14251]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  649.345470][T14251]  ? __fget_files+0x3a6/0x420
[  649.345487][T14251]  ? __fget_files+0x2a/0x420
[  649.345506][T14251]  __x64_sys_getsockopt+0x1aa/0x250
[  649.345529][T14251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.345544][T14251]  do_syscall_64+0x15f/0xf80
[  649.345561][T14251]  ? trace_irq_disable+0x3b/0x140
[  649.345574][T14251]  ? clear_bhb_loop+0x40/0x90
[  649.345589][T14251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.345602][T14251] RIP: 0033:0x7f6435f4c819
[  649.345616][T14251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  649.345628][T14251] RSP: 002b:00007f64341a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  649.345643][T14251] RAX: ffffffffffffffda RBX: 00007f64361c5fa0 RCX: 00007f6435f4c819
[  649.345658][T14251] RDX: 0000000000000483 RSI: 0000000000000000 RDI: 0000000000000003
[  649.345667][T14251] RBP: 00007f64341a6090 R08: 0000200000000080 R09: 0000000000000000
[  649.345675][T14251] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  649.345683][T14251] R13: 00007f64361c6038 R14: 00007f64361c5fa0 R15: 00007ffc624e83f8
[  649.345702][T14251]  </TASK>
[  649.709167][ T5815] Bluetooth: hci3: command tx timeout
[  649.874757][ T6040] usb 4-1: USB disconnect, device number 59
[  650.442171][ T3701] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.442215][ T3701] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.789646][ T5815] Bluetooth: hci3: command tx timeout
[  652.049055][T11986] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  652.132680][ T3701] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  652.132708][ T3701] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.209015][T11986] usb 4-1: Using ep0 maxpacket: 32
[  652.213849][T11986] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  652.213878][T11986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.213894][T11986] usb 4-1: Product: syz
[  652.213905][T11986] usb 4-1: Manufacturer: syz
[  652.213914][T11986] usb 4-1: SerialNumber: syz
[  652.266535][T11986] usb 4-1: config 0 descriptor??
[  652.936919][T11986] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  652.936962][T11986] peak_usb 4-1:0.0 can0: sending command failure: -22
[  652.937080][T11986] peak_usb 4-1:0.0 can0: sending command failure: -22
[  652.955352][ T3701] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  652.955391][ T3701] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  653.272320][T11986] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22
[  653.878755][ T5815] Bluetooth: hci3: command tx timeout
[  654.553983][ T5816] usb 4-1: USB disconnect, device number 60
[  654.655274][ T3701] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  654.655317][ T3701] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.709018][ T5809] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  655.228442][T14232] chnl_net:caif_netlink_parms(): no params data found
[  655.648490][ T5809] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  655.648554][ T5809] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  655.648583][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.658070][ T5809] usb 1-1: config 0 descriptor??
[  655.675263][ T5809] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  655.727319][T14291] FAULT_INJECTION: forcing a failure.
[  655.727319][T14291] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  655.727362][T14291] CPU: 0 UID: 0 PID: 14291 Comm: syz.3.3008 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  655.727395][T14291] Tainted: [L]=SOFTLOCKUP
[  655.727404][T14291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  655.727417][T14291] Call Trace:
[  655.727427][T14291]  <TASK>
[  655.727437][T14291]  dump_stack_lvl+0xe8/0x150
[  655.727480][T14291]  should_fail_ex+0x46b/0x600
[  655.727511][T14291]  _copy_from_user+0x2d/0xb0
[  655.727542][T14291]  core_sys_select+0x57a/0xc30
[  655.727589][T14291]  ? __pfx_core_sys_select+0x10/0x10
[  655.727649][T14291]  ? __pfx_set_user_sigmask+0x10/0x10
[  655.727684][T14291]  ? rt_mutex_slowunlock+0x1cb/0x300
[  655.727708][T14291]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  655.727739][T14291]  __se_sys_pselect6+0x267/0x320
[  655.727772][T14291]  ? __pfx___se_sys_pselect6+0x10/0x10
[  655.727797][T14291]  ? __pfx_ksys_write+0x10/0x10
[  655.727828][T14291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.727858][T14291]  ? __x64_sys_pselect6+0x21/0xf0
[  655.727883][T14291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.727909][T14291]  do_syscall_64+0x15f/0xf80
[  655.727937][T14291]  ? trace_irq_disable+0x3b/0x140
[  655.727960][T14291]  ? clear_bhb_loop+0x40/0x90
[  655.727989][T14291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.728013][T14291] RIP: 0033:0x7f4265fdc819
[  655.728036][T14291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  655.728056][T14291] RSP: 002b:00007f4264236028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  655.728084][T14291] RAX: ffffffffffffffda RBX: 00007f4266255fa0 RCX: 00007f4265fdc819
[  655.728102][T14291] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040
[  655.728118][T14291] RBP: 00007f4264236090 R08: 0000000000000000 R09: 0000000000000000
[  655.728133][T14291] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  655.728148][T14291] R13: 00007f4266256038 R14: 00007f4266255fa0 R15: 00007fffb9dc41d8
[  655.728184][T14291]  </TASK>
[  656.033258][ T5815] Bluetooth: hci3: command tx timeout
[  656.419725][T14232] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.426656][T14232] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.426921][T14232] bridge_slave_0: entered allmulticast mode
[  656.434058][T14232] bridge_slave_0: entered promiscuous mode
[  656.503595][T14232] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.503808][T14232] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.504067][T14232] bridge_slave_1: entered allmulticast mode
[  656.507397][T14232] bridge_slave_1: entered promiscuous mode
[  656.600285][T14232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  656.606973][T14232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  656.918233][T14232] team0: Port device team_slave_0 added
[  656.943497][T14232] team0: Port device team_slave_1 added
[  657.170512][T14232] batman_adv: batadv0: Adding interface: batadv_slave_0
[  657.170526][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  657.170544][T14232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  657.281213][ T5979] usb 1-1: USB disconnect, device number 22
[  657.314850][T14232] batman_adv: batadv0: Adding interface: batadv_slave_1
[  657.314878][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  657.314905][T14232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  657.641990][T14321] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3017'.
[  658.315562][ T3701] bridge_slave_1: left allmulticast mode
[  658.315599][ T3701] bridge_slave_1: left promiscuous mode
[  658.315900][ T3701] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.485259][ T3701] bridge_slave_0: left allmulticast mode
[  658.485294][ T3701] bridge_slave_0: left promiscuous mode
[  658.485599][ T3701] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.730764][ T5884] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  658.974209][ T5884] usb 1-1: device descriptor read/64, error -71
[  659.919041][ T5884] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  660.049013][ T5884] usb 1-1: device descriptor read/64, error -71
[  660.159486][ T5884] usb usb1-port1: attempt power cycle
[  660.210052][T14355] netlink: 'syz.3.3029': attribute type 29 has an invalid length.
[  660.499132][ T5884] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  660.526611][ T5884] usb 1-1: device descriptor read/8, error -71
[  660.816011][ T5884] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  660.839598][ T5884] usb 1-1: device descriptor read/8, error -71
[  660.949354][ T5884] usb usb1-port1: unable to enumerate USB device
[  661.170338][  T815] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  661.176091][T12796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  661.234151][T12796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  661.243275][T12796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  661.340875][T12796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  661.343896][T12796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  661.359101][  T815] usb 4-1: device descriptor read/64, error -71
[  661.669042][  T815] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  661.799169][  T815] usb 4-1: device descriptor read/64, error -71
[  661.840061][ T3701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  661.900883][ T3701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  661.920833][  T815] usb usb4-port1: attempt power cycle
[  661.949059][ T5816] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  661.952672][ T3701] bond0 (unregistering): Released all slaves
[  661.974431][ T3701] bond1 (unregistering): Released all slaves
[  661.994739][ T3701] bond2 (unregistering): Released all slaves
[  662.015009][ T3701] bond3 (unregistering): Released all slaves
[  662.190780][ T5816] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  662.190816][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.190848][ T5816] usb 1-1: Product: syz
[  662.190865][ T5816] usb 1-1: Manufacturer: syz
[  662.190881][ T5816] usb 1-1: SerialNumber: syz
[  662.196528][T14232] hsr_slave_0: entered promiscuous mode
[  662.199190][T14232] hsr_slave_1: entered promiscuous mode
[  662.200106][T14232] debugfs: 'hsr0' already exists in 'hsr'
[  662.200127][T14232] Cannot create hsr debugfs directory
[  662.265265][ T5816] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  662.300782][ T6036] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  662.319027][  T815] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  662.348326][  T815] usb 4-1: device descriptor read/8, error -71
[  662.589104][ T5815] Bluetooth: hci5: command 0x0406 tx timeout
[  662.611020][  T815] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  662.638024][  T815] usb 4-1: device descriptor read/8, error -71
[  662.741029][  T815] usb usb4-port1: unable to enumerate USB device
[  662.979411][  T815] usb 1-1: USB disconnect, device number 27
[  663.312339][ T5816] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  663.477598][T12564] Bluetooth: hci0: command tx timeout
[  663.485545][ T5816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  663.485605][ T5816] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  663.485632][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.545813][ T5816] usb 6-1: config 0 descriptor??
[  663.559185][T14371] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  663.789241][ T6036] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  663.791361][ T6036] ath9k_htc: Failed to initialize the device
[  663.810502][T14373] netlink: 'syz.0.3035': attribute type 1 has an invalid length.
[  663.829275][  T815] usb 1-1: ath9k_htc: USB layer deinitialized
[  664.026162][ T5816] hid (null): unknown global tag 0xd
[  664.062398][ T5816] hid_parser_main: 526 callbacks suppressed
[  664.062428][ T5816] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0
[  664.062461][ T5816] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0
[  664.062489][ T5816] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0
[  664.062514][ T5816] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0
[  664.062541][ T5816] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0
[  664.062567][ T5816] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0
[  664.062591][ T5816] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0
[  664.062617][ T5816] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0
[  664.062644][ T5816] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0
[  664.062669][ T5816] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0
[  664.145786][ T5816] asus 0003:0B05:1ABE.002B: reserved main item tag 0xe
[  664.145817][ T5816] asus 0003:0B05:1ABE.002B: ignoring exceeding usage max
[  664.148356][ T5816] asus 0003:0B05:1ABE.002B: unknown global tag 0xd
[  664.148373][ T5816] asus 0003:0B05:1ABE.002B: item 0 4 1 13 parsing failed
[  664.179236][ T5816] asus 0003:0B05:1ABE.002B: Asus hid parse failed: -22
[  664.179311][ T5816] asus 0003:0B05:1ABE.002B: probe with driver asus failed with error -22
[  664.244586][ T5816] usb 6-1: USB disconnect, device number 32
[  665.109011][ T6040] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  665.287561][T14374] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  665.287592][T14374] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  665.287622][T14374] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  665.419529][ T6040] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  665.419569][ T6040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  665.419597][ T6040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  665.419621][ T6040] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  665.419669][ T6040] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  665.419695][ T6040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.441764][T14374] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  665.475940][ T6040] usb 4-1: config 0 descriptor??
[  665.552176][T12564] Bluetooth: hci0: command tx timeout
[  665.898224][T14374] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  665.983259][ T6040] usbhid 4-1:0.0: can't add hid device: -71
[  665.983405][ T6040] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  666.020609][ T3701] hsr_slave_0: left promiscuous mode
[  666.035210][ T6040] usb 4-1: USB disconnect, device number 65
[  666.073132][ T3701] hsr_slave_1: left promiscuous mode
[  666.091142][ T3701] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  666.091172][ T3701] batman_adv: batadv0: Removing interface: batadv_slave_0
[  666.125081][ T3701] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  666.125112][ T3701] batman_adv: batadv0: Removing interface: batadv_slave_1
[  666.221881][ T3701] veth1_macvtap: left promiscuous mode
[  666.222004][ T3701] veth0_macvtap: left promiscuous mode
[  666.222161][ T3701] veth1_vlan: left allmulticast mode
[  666.222294][ T3701] veth1_vlan: left promiscuous mode
[  666.222456][ T3701] veth0_vlan: left promiscuous mode
[  666.735990][ T5979] IPVS: starting estimator thread 0...
[  666.736541][T14383] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  666.879180][T14385] IPVS: using max 8 ests per chain, 19200 per kthread
[  666.915717][T14389] blktrace: Concurrent blktraces are not allowed on nullb0
[  667.486355][ T3701] team_slave_1 (unregistering): left allmulticast mode
[  667.513983][T14397] input: syz1 as /devices/virtual/input/input46
[  667.534964][ T3701] team0 (unregistering): Port device team_slave_1 removed
[  667.590382][ T3701] team_slave_0 (unregistering): left allmulticast mode
[  667.609763][ T3701] team0 (unregistering): Port device team_slave_0 removed
[  667.628890][T12564] Bluetooth: hci0: command tx timeout
[  668.064425][T14408] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3047'.
[  668.954333][T14420] blktrace: Concurrent blktraces are not allowed on nullb0
[  669.529091][  T815] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  669.682057][  T815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  669.682118][  T815] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  669.682143][  T815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.709026][T12564] Bluetooth: hci0: command tx timeout
[  669.733312][  T815] usb 1-1: config 0 descriptor??
[  669.734642][T14429] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  669.793111][T14361] chnl_net:caif_netlink_parms(): no params data found
[  670.188604][  T815] hid (null): unknown global tag 0xd
[  670.373210][  T815] hid_parser_main: 239 callbacks suppressed
[  670.373240][  T815] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0
[  670.373272][  T815] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0
[  670.373300][  T815] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0
[  670.373328][  T815] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0
[  670.373355][  T815] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0
[  670.373382][  T815] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0
[  670.373410][  T815] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0
[  670.373438][  T815] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0
[  670.373465][  T815] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0
[  670.373493][  T815] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0
[  670.376111][  T815] asus 0003:0B05:1ABE.002C: ignoring exceeding usage max
[  670.469306][  T815] asus 0003:0B05:1ABE.002C: unknown global tag 0xd
[  670.469333][  T815] asus 0003:0B05:1ABE.002C: item 0 4 1 13 parsing failed
[  670.470302][  T815] asus 0003:0B05:1ABE.002C: Asus hid parse failed: -22
[  670.472656][  T815] asus 0003:0B05:1ABE.002C: probe with driver asus failed with error -22
[  670.521625][  T815] usb 1-1: USB disconnect, device number 28
[  670.622608][T14439] input: syz1 as /devices/virtual/input/input47
[  670.676486][ T5467] 8021q: adding VLAN 0 to HW filter on device eth5
[  671.335944][T12564] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  671.375896][ T5815] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[  671.405793][T14458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3056'.
[  671.977032][T14456] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3057'.
[  672.046522][T14456] nbd: nbd64 already in use
[  672.306690][T14462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3058'.
[  672.492917][ T9885] udevd[9885]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  672.522132][T14361] bridge0: port 1(bridge_slave_0) entered blocking state
[  672.522279][T14361] bridge0: port 1(bridge_slave_0) entered disabled state
[  672.523314][T14361] bridge_slave_0: entered allmulticast mode
[  672.525920][T14361] bridge_slave_0: entered promiscuous mode
[  672.547801][T14361] bridge0: port 2(bridge_slave_1) entered blocking state
[  672.550713][T14361] bridge0: port 2(bridge_slave_1) entered disabled state
[  672.550977][T14361] bridge_slave_1: entered allmulticast mode
[  672.561750][T14361] bridge_slave_1: entered promiscuous mode
[  672.772019][T14361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  672.800747][T14361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  672.890558][T14361] team0: Port device team_slave_0 added
[  672.896743][T14361] team0: Port device team_slave_1 added
[  673.046196][T14361] batman_adv: batadv0: Adding interface: batadv_slave_0
[  673.046217][T14361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  673.046249][T14361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  673.054981][T14361] batman_adv: batadv0: Adding interface: batadv_slave_1
[  673.055001][T14361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  673.055030][T14361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  673.414723][T14361] hsr_slave_0: entered promiscuous mode
[  673.416800][T14361] hsr_slave_1: entered promiscuous mode
[  673.559141][ T5884] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  673.904077][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  673.904348][ T5884] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  673.904452][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  674.314595][ T5884] usb 4-1: config 0 descriptor??
[  674.318193][T14473] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  675.108564][ T5884] hid (null): unknown global tag 0xd
[  676.021506][ T5884] hid_parser_main: 241 callbacks suppressed
[  676.021534][ T5884] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0
[  676.021567][ T5884] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0
[  676.021595][ T5884] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0
[  676.021622][ T5884] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0
[  676.021648][ T5884] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0
[  676.021675][ T5884] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0
[  676.021702][ T5884] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0
[  676.021729][ T5884] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0
[  676.021755][ T5884] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0
[  676.021791][ T5884] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0
[  676.024190][ T5884] asus 0003:0B05:1ABE.002D: ignoring exceeding usage max
[  676.025633][ T5884] asus 0003:0B05:1ABE.002D: unknown global tag 0xd
[  676.025655][ T5884] asus 0003:0B05:1ABE.002D: item 0 4 1 13 parsing failed
[  676.026620][ T5884] asus 0003:0B05:1ABE.002D: Asus hid parse failed: -22
[  676.026738][ T5884] asus 0003:0B05:1ABE.002D: probe with driver asus failed with error -22
[  676.298501][ T5884] usb 4-1: USB disconnect, device number 66
[  676.983246][T14504] FAULT_INJECTION: forcing a failure.
[  676.983246][T14504] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  676.983317][T14504] CPU: 1 UID: 0 PID: 14504 Comm: syz.0.3073 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  676.983350][T14504] Tainted: [L]=SOFTLOCKUP
[  676.983359][T14504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  676.983384][T14504] Call Trace:
[  676.983394][T14504]  <TASK>
[  676.983405][T14504]  dump_stack_lvl+0xe8/0x150
[  676.983448][T14504]  should_fail_ex+0x46b/0x600
[  676.983480][T14504]  _copy_from_user+0x2d/0xb0
[  676.983520][T14504]  ___sys_sendmsg+0x1c6/0x360
[  676.983553][T14504]  ? __pfx____sys_sendmsg+0x10/0x10
[  676.983617][T14504]  ? __fget_files+0x2a/0x420
[  676.983646][T14504]  ? __fget_files+0x3a6/0x420
[  676.983686][T14504]  __x64_sys_sendmsg+0x1c3/0x2a0
[  676.983716][T14504]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  676.983751][T14504]  ? rcu_is_watching+0x15/0xb0
[  676.983791][T14504]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.983817][T14504]  do_syscall_64+0x15f/0xf80
[  676.983849][T14504]  ? clear_bhb_loop+0x40/0x90
[  676.983879][T14504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.983903][T14504] RIP: 0033:0x7f447f70c819
[  676.983925][T14504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  676.983946][T14504] RSP: 002b:00007f447d924028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  676.983972][T14504] RAX: ffffffffffffffda RBX: 00007f447f986180 RCX: 00007f447f70c819
[  676.983990][T14504] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005
[  676.984006][T14504] RBP: 00007f447d924090 R08: 0000000000000000 R09: 0000000000000000
[  676.984021][T14504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  676.984036][T14504] R13: 00007f447f986218 R14: 00007f447f986180 R15: 00007ffeb0fa3538
[  676.984072][T14504]  </TASK>
[  677.907947][T12564] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  679.536494][ T5979] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  679.709721][ T5979] usb 1-1: device descriptor read/64, error -71
[  680.000528][ T5979] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  680.209537][ T5979] usb 1-1: device descriptor read/64, error -71
[  680.327594][ T5979] usb usb1-port1: attempt power cycle
[  680.428270][T14511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3074'.
[  680.951949][ T5979] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  680.971294][ T5979] usb 1-1: device descriptor read/8, error -71
[  681.441361][T14232] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  681.503107][ T5979] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  681.551436][ T5979] usb 1-1: device descriptor read/8, error -71
[  681.684429][ T5979] usb usb1-port1: unable to enumerate USB device
[  681.902235][T14232] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  681.991524][T14232] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  682.302699][T14232] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  682.877129][T14232] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  682.933286][T14232] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  683.057559][T14232] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  683.082444][T14232] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  683.275235][ T5884] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  683.395716][ T9967] udevd[9967]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  683.431587][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  683.431644][ T5884] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  683.431669][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.503165][ T9885] udevd[9885]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  683.536525][ T5884] usb 4-1: config 0 descriptor??
[  683.537592][T14535] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  683.585733][T14551] FAULT_INJECTION: forcing a failure.
[  683.585733][T14551] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  683.585775][T14551] CPU: 0 UID: 0 PID: 14551 Comm: syz.5.3081 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  683.585809][T14551] Tainted: [L]=SOFTLOCKUP
[  683.585817][T14551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  683.585829][T14551] Call Trace:
[  683.585839][T14551]  <TASK>
[  683.585849][T14551]  dump_stack_lvl+0xe8/0x150
[  683.585890][T14551]  should_fail_ex+0x46b/0x600
[  683.585921][T14551]  _copy_from_user+0x2d/0xb0
[  683.585950][T14551]  ___sys_sendmsg+0x1c6/0x360
[  683.585977][T14551]  ? __lock_acquire+0x6b5/0x2cf0
[  683.586009][T14551]  ? __pfx____sys_sendmsg+0x10/0x10
[  683.586070][T14551]  ? __fget_files+0x2a/0x420
[  683.586096][T14551]  ? __fget_files+0x3a6/0x420
[  683.586135][T14551]  __x64_sys_sendmsg+0x1c3/0x2a0
[  683.586164][T14551]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  683.586199][T14551]  ? __pfx_ksys_write+0x10/0x10
[  683.586240][T14551]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.586265][T14551]  do_syscall_64+0x15f/0xf80
[  683.586293][T14551]  ? trace_irq_disable+0x3b/0x140
[  683.586316][T14551]  ? clear_bhb_loop+0x40/0x90
[  683.586344][T14551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.586367][T14551] RIP: 0033:0x7f6435f4c819
[  683.586388][T14551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  683.586408][T14551] RSP: 002b:00007f6434185028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  683.586433][T14551] RAX: ffffffffffffffda RBX: 00007f64361c6090 RCX: 00007f6435f4c819
[  683.586449][T14551] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000004
[  683.586464][T14551] RBP: 00007f6434185090 R08: 0000000000000000 R09: 0000000000000000
[  683.586480][T14551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  683.586494][T14551] R13: 00007f64361c6128 R14: 00007f64361c6090 R15: 00007ffc624e83f8
[  683.586530][T14551]  </TASK>
[  683.961528][ T5884] hid (null): unknown global tag 0xd
[  684.017139][ T5884] hid_parser_main: 241 callbacks suppressed
[  684.017165][ T5884] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0
[  684.017199][ T5884] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0
[  684.017224][ T5884] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0
[  684.017249][ T5884] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0
[  684.017275][ T5884] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0
[  684.017302][ T5884] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0
[  684.017328][ T5884] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0
[  684.017356][ T5884] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0
[  684.017382][ T5884] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0
[  684.017407][ T5884] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0
[  684.020073][ T5884] asus 0003:0B05:1ABE.002E: ignoring exceeding usage max
[  684.021583][ T5884] asus 0003:0B05:1ABE.002E: unknown global tag 0xd
[  684.021606][ T5884] asus 0003:0B05:1ABE.002E: item 0 4 1 13 parsing failed
[  684.022595][ T5884] asus 0003:0B05:1ABE.002E: Asus hid parse failed: -22
[  684.022725][ T5884] asus 0003:0B05:1ABE.002E: probe with driver asus failed with error -22
[  684.214068][ T5884] usb 4-1: USB disconnect, device number 67
[  685.393348][ T5816] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  685.542971][ T5816] usb 6-1: Using ep0 maxpacket: 16
[  685.546838][ T5816] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  685.546873][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.591150][ T5816] usb 6-1: config 0 descriptor??
[  685.625217][ T5816] gspca_main: sonixj-2.14.0 probing 0471:0327
[  685.735881][T14232] 8021q: adding VLAN 0 to HW filter on device bond0
[  686.004633][T14232] 8021q: adding VLAN 0 to HW filter on device team0
[  686.040745][  T109] bridge0: port 1(bridge_slave_0) entered blocking state
[  686.040962][  T109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  686.102966][ T5816] gspca_sonixj: reg_w1 err -71
[  686.103077][ T5816] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  686.129575][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  686.146623][ T7766] bridge0: port 2(bridge_slave_1) entered blocking state
[  686.146783][ T7766] bridge0: port 2(bridge_slave_1) entered forwarding state
[  686.164749][ T5816] usb 6-1: USB disconnect, device number 33
[  686.192736][T14361] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  686.263951][T14361] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  686.281959][T14361] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  686.358546][T14361] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  686.381137][T14361] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  686.454059][T14361] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  687.483456][T14361] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  687.607148][T14361] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  687.838974][ T5884] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  688.005969][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  688.006030][ T5884] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  688.006059][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.045972][ T5884] usb 6-1: config 0 descriptor??
[  688.047306][T14587] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  688.480392][T14361] 8021q: adding VLAN 0 to HW filter on device bond0
[  688.487250][ T5884] hid (null): unknown global tag 0xd
[  688.516124][ T5884] asus 0003:0B05:1ABE.002F: ignoring exceeding usage max
[  688.517562][ T5884] asus 0003:0B05:1ABE.002F: unknown global tag 0xd
[  688.517589][ T5884] asus 0003:0B05:1ABE.002F: item 0 4 1 13 parsing failed
[  688.518579][ T5884] asus 0003:0B05:1ABE.002F: Asus hid parse failed: -22
[  688.518714][ T5884] asus 0003:0B05:1ABE.002F: probe with driver asus failed with error -22
[  688.603778][T14232] 8021q: adding VLAN 0 to HW filter on device batadv0
[  688.661020][T14361] 8021q: adding VLAN 0 to HW filter on device team0
[  688.765781][  T109] bridge0: port 1(bridge_slave_0) entered blocking state
[  688.765900][ T5884] usb 6-1: USB disconnect, device number 34
[  688.773518][  T109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  688.820079][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state
[  688.820219][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state
[  688.966040][T14232] veth0_vlan: entered promiscuous mode
[  688.999003][ T6036] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  689.062252][T14232] veth1_vlan: entered promiscuous mode
[  689.190473][ T6036] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  689.190547][ T6036] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  689.190575][ T6036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.244119][ T6036] usb 4-1: config 0 descriptor??
[  689.245686][T14606] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  689.542019][T14232] veth0_macvtap: entered promiscuous mode
[  689.562626][T14232] veth1_macvtap: entered promiscuous mode
[  689.632067][T14232] batman_adv: batadv0: Interface activated: batadv_slave_0
[  689.713933][T14232] batman_adv: batadv0: Interface activated: batadv_slave_1
[  689.838149][ T6036] usbhid 4-1:0.0: can't add hid device: -71
[  689.838289][ T6036] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  689.869928][ T6036] usb 4-1: USB disconnect, device number 68
[  690.374930][ T1177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  690.376688][ T1177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  690.382103][ T1177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  690.421628][ T1177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  690.849796][ T6040] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  690.889003][ T5967] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  691.039323][ T5967] usb 1-1: Using ep0 maxpacket: 32
[  691.041771][ T5967] usb 1-1: config 0 has an invalid interface number: 202 but max is 1
[  691.041801][ T5967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  691.041829][ T5967] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  691.041853][ T5967] usb 1-1: config 0 has no interface number 0
[  691.041884][ T5967] usb 1-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30
[  691.041923][ T5967] usb 1-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64
[  691.041950][ T5967] usb 1-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182
[  691.041978][ T5967] usb 1-1: config 0 interface 202 has no altsetting 0
[  691.111921][ T6040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  691.111958][ T6040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  691.111996][ T6040] usb 6-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00
[  691.112020][ T6040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.143887][T14361] 8021q: adding VLAN 0 to HW filter on device batadv0
[  691.145265][ T6040] usb 6-1: config 0 descriptor??
[  691.240850][ T5967] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b
[  691.240887][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.240910][ T5967] usb 1-1: Product: syz
[  691.240927][ T5967] usb 1-1: Manufacturer: syz
[  691.240943][ T5967] usb 1-1: SerialNumber: syz
[  691.295645][ T5967] usb 1-1: config 0 descriptor??
[  691.475709][ T5967] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  691.945522][ T6036] usb 1-1: USB disconnect, device number 33
[  691.946346][ T6040] usbhid 6-1:0.0: can't add hid device: -71
[  691.946441][ T6040] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  691.952478][ T7765] usb 1-1: Failed to submit usb control message: -71
[  691.952515][ T7765] usb 1-1: unable to send the bmi data to the device: -71
[  691.952535][ T7765] usb 1-1: unable to get target info from device
[  691.952551][ T7765] usb 1-1: could not get target info (-71)
[  692.068536][ T7765] usb 1-1: could not probe fw (-71)
[  692.169565][ T6040] usb 6-1: USB disconnect, device number 35
[  692.302723][ T3701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  692.302748][ T3701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  692.687715][  T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  692.687738][  T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  693.138982][ T5967] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  693.291070][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  693.291130][ T5967] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  693.291157][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.327259][T14361] veth0_vlan: entered promiscuous mode
[  693.348552][ T5967] usb 4-1: config 0 descriptor??
[  693.362121][T14644] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  693.437346][T14654] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  693.437373][T14654] openvswitch: netlink: Message has 16 unknown bytes.
[  693.446916][T14361] veth1_vlan: entered promiscuous mode
[  693.608957][    T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  693.661896][T14361] veth0_macvtap: entered promiscuous mode
[  693.724305][T14361] veth1_macvtap: entered promiscuous mode
[  693.727769][T14658] netlink: 'syz.0.3110': attribute type 2 has an invalid length.
[  693.727795][T14658] netlink: 'syz.0.3110': attribute type 1 has an invalid length.
[  693.728154][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3110'.
[  693.875128][ T5967] hid (null): unknown global tag 0xd
[  693.891958][ T5967] hid_parser_main: 490 callbacks suppressed
[  693.891989][ T5967] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0
[  693.892028][ T5967] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0
[  693.892056][ T5967] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0
[  693.892085][ T5967] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0
[  693.892112][ T5967] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0
[  693.892140][ T5967] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0
[  693.892167][ T5967] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0
[  693.892196][ T5967] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0
[  693.892224][ T5967] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0
[  693.892252][ T5967] asus 0003:0B05:1ABE.0030: unknown main item tag 0x0
[  693.896401][ T5967] asus 0003:0B05:1ABE.0030: ignoring exceeding usage max
[  693.983553][ T5967] asus 0003:0B05:1ABE.0030: unknown global tag 0xd
[  693.983580][ T5967] asus 0003:0B05:1ABE.0030: item 0 4 1 13 parsing failed
[  693.986285][ T5967] asus 0003:0B05:1ABE.0030: Asus hid parse failed: -22
[  693.986474][ T5967] asus 0003:0B05:1ABE.0030: probe with driver asus failed with error -22
[  694.006991][    T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  694.007025][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.308723][T14361] batman_adv: batadv0: Interface activated: batadv_slave_0
[  694.336968][T14361] batman_adv: batadv0: Interface activated: batadv_slave_1
[  694.385495][    T9] usb 3-1: config 0 descriptor??
[  694.442591][ T5967] usb 4-1: USB disconnect, device number 69
[  694.501579][  T180] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  694.508591][  T180] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  694.509959][  T180] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  694.512706][ T7767] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  694.623419][    T9] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  694.959439][ T6040] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  695.106028][    T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  695.106062][    T9] [drm] Initialized udl on minor 2
[  695.192439][    T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  695.192933][    T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  695.242130][ T6040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  695.242182][ T6040] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  695.242206][ T6040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.315253][ T6040] usb 6-1: config 0 descriptor??
[  695.338327][T14665] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  695.652073][T14651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  695.658908][T14651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.217646][   T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  696.223025][   T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  696.223283][   T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  696.286498][  T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  696.286522][  T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  696.335174][  T815] usb 3-1: USB disconnect, device number 45
[  696.445937][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  696.445954][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  696.486524][ T6040] asus 0003:0B05:1ABE.0031: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.5-1/input0
[  696.567926][ T6040] usb 6-1: USB disconnect, device number 36
[  696.724840][T14678] fido_id[14678]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  697.018050][ T5815] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[  697.049960][T14681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3116'.
[  698.943282][ T9885] udevd[9885]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  699.088910][ T6040] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  699.262625][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3122'.
[  699.264001][ T6040] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  699.264039][ T6040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  699.264069][ T6040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  699.264096][ T6040] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  699.264142][ T6040] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  699.264169][ T6040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.353442][ T6040] usb 4-1: config 0 descriptor??
[  699.826710][T14710] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3122'.
[  699.958259][ T6040] usbhid 4-1:0.0: can't add hid device: -71
[  699.958405][ T6040] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  699.988854][ T6040] usb 4-1: USB disconnect, device number 70
[  700.032284][T14705] virtiofs: Bad value for 'dax'
[  700.632151][T14715] FAULT_INJECTION: forcing a failure.
[  700.632151][T14715] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  700.632196][T14715] CPU: 1 UID: 0 PID: 14715 Comm: syz.2.3124 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  700.632227][T14715] Tainted: [L]=SOFTLOCKUP
[  700.632236][T14715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  700.632250][T14715] Call Trace:
[  700.632260][T14715]  <TASK>
[  700.632271][T14715]  dump_stack_lvl+0xe8/0x150
[  700.632314][T14715]  should_fail_ex+0x46b/0x600
[  700.632347][T14715]  _copy_to_iter+0x1e4/0x17d0
[  700.632383][T14715]  ? rt_mutex_slowlock+0x1fd/0x780
[  700.632409][T14715]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  700.632430][T14715]  ? is_bpf_text_address+0x26/0x2b0
[  700.632469][T14715]  ? __pfx__copy_to_iter+0x10/0x10
[  700.632493][T14715]  ? anon_pipe_read+0x126/0x10a0
[  700.632523][T14715]  ? anon_pipe_read+0x126/0x10a0
[  700.632557][T14715]  copy_page_to_iter+0x247/0x340
[  700.632588][T14715]  anon_pipe_read+0x4ee/0x10a0
[  700.632640][T14715]  ? __pfx_anon_pipe_read+0x10/0x10
[  700.632688][T14715]  vfs_read+0x58b/0xa80
[  700.632731][T14715]  ? __pfx_vfs_read+0x10/0x10
[  700.632776][T14715]  ? __fget_files+0x2a/0x420
[  700.632813][T14715]  ksys_read+0x156/0x270
[  700.632851][T14715]  ? __pfx_ksys_read+0x10/0x10
[  700.632900][T14715]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.632926][T14715]  do_syscall_64+0x15f/0xf80
[  700.632952][T14715]  ? trace_irq_disable+0x3b/0x140
[  700.632974][T14715]  ? clear_bhb_loop+0x40/0x90
[  700.633004][T14715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.633027][T14715] RIP: 0033:0x7f53b78ec819
[  700.633050][T14715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  700.633069][T14715] RSP: 002b:00007f53b5afc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  700.633094][T14715] RAX: ffffffffffffffda RBX: 00007f53b7b66180 RCX: 00007f53b78ec819
[  700.633110][T14715] RDX: 0000000000002020 RSI: 0000200000000980 RDI: 0000000000000005
[  700.633125][T14715] RBP: 00007f53b5afc090 R08: 0000000000000000 R09: 0000000000000000
[  700.633141][T14715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  700.633155][T14715] R13: 00007f53b7b66218 R14: 00007f53b7b66180 R15: 00007fffe31ac9c8
[  700.633191][T14715]  </TASK>
[  700.690039][T14720] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3125'.
[  701.101896][ T6040] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  701.182936][T14729] FAULT_INJECTION: forcing a failure.
[  701.182936][T14729] name failslab, interval 1, probability 0, space 0, times 0
[  701.182973][T14729] CPU: 1 UID: 0 PID: 14729 Comm: syz.3.3128 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  701.182999][T14729] Tainted: [L]=SOFTLOCKUP
[  701.183006][T14729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  701.183017][T14729] Call Trace:
[  701.183030][T14729]  <TASK>
[  701.183039][T14729]  dump_stack_lvl+0xe8/0x150
[  701.183073][T14729]  should_fail_ex+0x46b/0x600
[  701.183097][T14729]  ? __pfx_sock_alloc_inode+0x10/0x10
[  701.183122][T14729]  should_failslab+0xa8/0x100
[  701.183142][T14729]  ? __pfx_sock_alloc_inode+0x10/0x10
[  701.183163][T14729]  kmem_cache_alloc_lru_noprof+0x8b/0x680
[  701.183191][T14729]  ? sock_alloc_inode+0x2c/0x190
[  701.183218][T14729]  ? __pfx_sock_alloc_inode+0x10/0x10
[  701.183242][T14729]  sock_alloc_inode+0x2c/0x190
[  701.183267][T14729]  ? __pfx_sock_alloc_inode+0x10/0x10
[  701.183289][T14729]  alloc_inode+0x6a/0x1b0
[  701.183311][T14729]  do_accept+0x144/0x760
[  701.183337][T14729]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  701.183372][T14729]  ? __pfx_do_accept+0x10/0x10
[  701.183417][T14729]  __sys_accept4+0x139/0x230
[  701.183446][T14729]  ? __pfx___sys_accept4+0x10/0x10
[  701.183476][T14729]  ? __pfx_ksys_write+0x10/0x10
[  701.183507][T14729]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.183526][T14729]  __x64_sys_accept+0x7d/0x90
[  701.183554][T14729]  do_syscall_64+0x15f/0xf80
[  701.183576][T14729]  ? trace_irq_disable+0x3b/0x140
[  701.183595][T14729]  ? clear_bhb_loop+0x40/0x90
[  701.183618][T14729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.183637][T14729] RIP: 0033:0x7f4265fdc819
[  701.183656][T14729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  701.183673][T14729] RSP: 002b:00007f42641f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  701.183705][T14729] RAX: ffffffffffffffda RBX: 00007f4266256180 RCX: 00007f4265fdc819
[  701.183719][T14729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a
[  701.183731][T14729] RBP: 00007f42641f4090 R08: 0000000000000000 R09: 0000000000000000
[  701.183742][T14729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  701.183754][T14729] R13: 00007f4266256218 R14: 00007f4266256180 R15: 00007fffb9dc41d8
[  701.183784][T14729]  </TASK>
[  701.425177][ T6040] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  701.425210][ T6040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.451703][ T6040] usb 6-1: config 0 descriptor??
[  701.659524][    T9] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  701.676597][ T6040] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  701.829561][    T9] usb 1-1: device descriptor read/64, error -71
[  702.039490][ T6040] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2
[  702.039520][ T6040] [drm] Initialized udl on minor 2
[  702.069119][    T9] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  702.087992][ T6040] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  702.088561][ T6040] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  702.209340][    T9] usb 1-1: device descriptor read/64, error -71
[  702.311915][T14721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  702.312636][T14721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  702.353851][    T9] usb usb1-port1: attempt power cycle
[  702.397159][T11986] usb 6-1: USB disconnect, device number 37
[  702.398203][T11785] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  702.516123][T11785] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  702.521506][T14743] blktrace: Concurrent blktraces are not allowed on nullb0
[  702.793478][    T9] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  702.814372][    T9] usb 1-1: device descriptor read/8, error -71
[  703.119795][    T9] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  703.494317][    T9] usb 1-1: device descriptor read/8, error -71
[  703.599551][    T9] usb usb1-port1: unable to enumerate USB device
[  704.736402][ T6036] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  704.798941][ T6040] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  704.909229][ T6036] usb 7-1: Using ep0 maxpacket: 32
[  704.913376][ T6036] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  704.913417][ T6036] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  704.913446][ T6036] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  704.913474][ T6036] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  704.913550][ T6036] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  704.922380][ T6036] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  704.922412][ T6036] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.922434][ T6036] usb 7-1: Product: syz
[  704.922449][ T6036] usb 7-1: Manufacturer: syz
[  704.922464][ T6036] usb 7-1: SerialNumber: syz
[  704.947988][ T6036] usb 7-1: config 0 descriptor??
[  705.002044][ T6040] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  705.002081][ T6040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  705.002108][ T6040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  705.002131][ T6040] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  705.002174][ T6040] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  705.002197][ T6040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.048078][ T6040] usb 4-1: config 0 descriptor??
[  705.159606][T14772] FAULT_INJECTION: forcing a failure.
[  705.159606][T14772] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  705.159650][T14772] CPU: 0 UID: 0 PID: 14772 Comm: syz.2.3143 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  705.159689][T14772] Tainted: [L]=SOFTLOCKUP
[  705.159699][T14772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  705.159714][T14772] Call Trace:
[  705.159723][T14772]  <TASK>
[  705.159734][T14772]  dump_stack_lvl+0xe8/0x150
[  705.159777][T14772]  should_fail_ex+0x46b/0x600
[  705.159805][T14772]  _copy_from_user+0x2d/0xb0
[  705.159831][T14772]  ___sys_recvmsg+0x175/0x590
[  705.159863][T14772]  ? __pfx____sys_recvmsg+0x10/0x10
[  705.159893][T14772]  ? __fget_files+0x2a/0x420
[  705.159941][T14772]  ? __fget_files+0x3a6/0x420
[  705.159980][T14772]  do_recvmmsg+0x33a/0x800
[  705.160016][T14772]  ? __pfx_do_recvmmsg+0x10/0x10
[  705.160056][T14772]  ? rt_mutex_slowunlock+0x1cb/0x300
[  705.160097][T14772]  __x64_sys_recvmmsg+0x198/0x250
[  705.160129][T14772]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  705.160165][T14772]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.160210][T14772]  do_syscall_64+0x15f/0xf80
[  705.160239][T14772]  ? trace_irq_disable+0x3b/0x140
[  705.160262][T14772]  ? clear_bhb_loop+0x40/0x90
[  705.160288][T14772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.160311][T14772] RIP: 0033:0x7f53b78ec819
[  705.160332][T14772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  705.160353][T14772] RSP: 002b:00007f53b5b3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  705.160378][T14772] RAX: ffffffffffffffda RBX: 00007f53b7b65fa0 RCX: 00007f53b78ec819
[  705.160396][T14772] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000004
[  705.160410][T14772] RBP: 00007f53b5b3e090 R08: 0000000000000000 R09: 0000000000000000
[  705.160425][T14772] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000001
[  705.160439][T14772] R13: 00007f53b7b66038 R14: 00007f53b7b65fa0 R15: 00007fffe31ac9c8
[  705.160475][T14772]  </TASK>
[  705.477024][T14761] netlink: 212 bytes leftover after parsing attributes in process `syz.6.3139'.
[  705.477056][T14761] openvswitch: netlink: Flow key attr not present in new flow.
[  705.509418][ T6036] input input48: Device does not respond to id packet M
[  705.568321][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3144'.
[  705.795229][ T6040] usbhid 4-1:0.0: can't add hid device: -71
[  705.795661][ T6040] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  705.865484][ T6040] usb 4-1: USB disconnect, device number 71
[  706.024022][ T6036] iforce 7-1:0.0: usb_submit_urb failed: -71
[  706.024086][ T6036] input input48: Device does not respond to id packet P
[  706.024945][ T6036] iforce 7-1:0.0: usb_submit_urb failed: -71
[  706.024998][ T6036] input input48: Device does not respond to id packet B
[  706.028478][ T6036] iforce 7-1:0.0: usb_submit_urb failed: -71
[  706.028543][ T6036] input input48: Device does not respond to id packet N
[  706.029885][ T6036] iforce 7-1:0.0: usb_submit_urb failed: -71
[  706.030336][ T6036] iforce 7-1:0.0: usb_submit_urb failed: -71
[  706.031849][ T6036] iforce 7-1:0.0: usb_submit_urb failed: -71
[  706.032336][ T6036] iforce 7-1:0.0: usb_submit_urb failed: -71
[  706.112782][T14777] blktrace: Concurrent blktraces are not allowed on nullb0
[  706.195335][ T6036] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input48
[  706.467306][ T6036] usb 7-1: USB disconnect, device number 2
[  706.913550][T14788] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3147'.
[  707.012894][T14789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3147'.
[  708.135136][T14818] blktrace: Concurrent blktraces are not allowed on nullb0
[  708.139052][  T815] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  708.266722][T12564] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[  708.358997][T14820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3156'.
[  708.469822][  T815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  708.470037][  T815] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  708.470128][  T815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.253662][  T815] usb 6-1: config 0 descriptor??
[  709.668187][T14813] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  713.750625][  T815] usbhid 6-1:0.0: can't add hid device: -71
[  713.750774][  T815] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  714.071663][  T815] usb 6-1: USB disconnect, device number 38
[  714.695251][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3163'.
[  714.713530][T14844] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3163'.
[  714.714386][T14844] netlink: 'syz.2.3163': attribute type 2 has an invalid length.
[  714.714409][T14844] netlink: 'syz.2.3163': attribute type 2 has an invalid length.
[  715.281690][ T5815] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  715.347070][T14855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3165'.
[  715.347212][T14855] nbd: device at index 64 is going down
[  719.013617][T14865] blktrace: Concurrent blktraces are not allowed on nullb0
[  719.491860][T14874] FAULT_INJECTION: forcing a failure.
[  719.491860][T14874] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  719.491942][T14874] CPU: 1 UID: 0 PID: 14874 Comm: syz.5.3170 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  719.491975][T14874] Tainted: [L]=SOFTLOCKUP
[  719.491984][T14874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  719.491998][T14874] Call Trace:
[  719.492008][T14874]  <TASK>
[  719.492018][T14874]  dump_stack_lvl+0xe8/0x150
[  719.492062][T14874]  should_fail_ex+0x46b/0x600
[  719.492094][T14874]  _copy_from_user+0x2d/0xb0
[  719.492126][T14874]  __sys_bpf+0x229/0x950
[  719.492153][T14874]  ? __pfx___sys_bpf+0x10/0x10
[  719.492174][T14874]  ? rt_mutex_slowunlock+0x1cb/0x300
[  719.492216][T14874]  ? ksys_write+0x248/0x270
[  719.492262][T14874]  ? __pfx_ksys_write+0x10/0x10
[  719.492294][T14874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.492325][T14874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.492350][T14874]  __x64_sys_bpf+0x7c/0x90
[  719.492385][T14874]  do_syscall_64+0x15f/0xf80
[  719.492416][T14874]  ? clear_bhb_loop+0x40/0x90
[  719.492445][T14874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.492469][T14874] RIP: 0033:0x7f6435f4c819
[  719.492491][T14874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.492512][T14874] RSP: 002b:00007f6434164028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  719.492539][T14874] RAX: ffffffffffffffda RBX: 00007f64361c6180 RCX: 00007f6435f4c819
[  719.492558][T14874] RDX: 0000000000000050 RSI: 0000200000000980 RDI: 0000000000000000
[  719.492573][T14874] RBP: 00007f6434164090 R08: 0000000000000000 R09: 0000000000000000
[  719.492589][T14874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  719.492604][T14874] R13: 00007f64361c6218 R14: 00007f64361c6180 R15: 00007ffc624e83f8
[  719.492640][T14874]  </TASK>
[  721.249376][ T9885] udevd[9885]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  721.338128][ T9885] udevd[9885]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  721.917866][T12564] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  721.917900][T12564] CPU: 1 UID: 0 PID: 12564 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  721.917934][T12564] Tainted: [L]=SOFTLOCKUP
[  721.917942][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  721.917957][T12564] Workqueue: hci0 hci_rx_work
[  721.917994][T12564] Call Trace:
[  721.918005][T12564]  <TASK>
[  721.918018][T12564]  dump_stack_lvl+0xe8/0x150
[  721.918054][T12564]  sysfs_create_dir_ns+0x271/0x2a0
[  721.918083][T12564]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  721.918106][T12564]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  721.918136][T12564]  ? rt_spin_unlock+0x160/0x200
[  721.918161][T12564]  kobject_add_internal+0x631/0xd10
[  721.918201][T12564]  kobject_add+0x163/0x240
[  721.918249][T12564]  ? __pfx_kobject_add+0x10/0x10
[  721.918285][T12564]  ? device_add+0x39f/0xb80
[  721.918318][T12564]  device_add+0x408/0xb80
[  721.918347][T12564]  hci_conn_add_sysfs+0xd5/0x210
[  721.918379][T12564]  le_conn_complete_evt+0x10e6/0x16b0
[  721.918413][T12564]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  721.918435][T12564]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  721.918463][T12564]  ? lockdep_hardirqs_on+0x7a/0x110
[  721.918492][T12564]  ? skb_pull_data+0xfb/0x200
[  721.918522][T12564]  hci_le_conn_complete_evt+0x187/0x470
[  721.918563][T12564]  hci_event_packet+0x659/0xef0
[  721.918599][T12564]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  721.918620][T12564]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  721.918651][T12564]  ? __pfx_hci_event_packet+0x10/0x10
[  721.918678][T12564]  ? rt_spin_unlock+0x14f/0x200
[  721.918710][T12564]  ? hci_send_to_monitor+0xe2/0x590
[  721.918746][T12564]  hci_rx_work+0x3ee/0x1040
[  721.918785][T12564]  ? process_scheduled_works+0xa70/0x1860
[  721.918822][T12564]  process_scheduled_works+0xb5d/0x1860
[  721.918885][T12564]  ? __pfx_process_scheduled_works+0x10/0x10
[  721.918923][T12564]  ? assign_work+0x3d5/0x5e0
[  721.918960][T12564]  worker_thread+0xa53/0xfc0
[  721.919010][T12564]  kthread+0x388/0x470
[  721.919036][T12564]  ? __pfx_worker_thread+0x10/0x10
[  721.919054][T12564]  ? __pfx_kthread+0x10/0x10
[  721.919081][T12564]  ret_from_fork+0x514/0xb70
[  721.919117][T12564]  ? __pfx_ret_from_fork+0x10/0x10
[  721.919148][T12564]  ? __switch_to+0xc79/0x1410
[  721.919180][T12564]  ? __pfx_kthread+0x10/0x10
[  721.919217][T12564]  ret_from_fork_asm+0x1a/0x30
[  721.919260][T12564]  </TASK>
[  721.920553][T12564] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  721.920962][T12564] Bluetooth: hci0: failed to register connection device
[  722.618534][T12564] ==================================================================
[  722.618557][T12564] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  722.618599][T12564] Read of size 8 at addr ffff8880242f87b0 by task kworker/u9:0/12564
[  722.618618][T12564] 
[  722.618633][T12564] CPU: 1 UID: 0 PID: 12564 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  722.618664][T12564] Tainted: [L]=SOFTLOCKUP
[  722.618673][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  722.618689][T12564] Workqueue: hci0 hci_rx_work
[  722.618720][T12564] Call Trace:
[  722.618731][T12564]  <TASK>
[  722.618749][T12564]  dump_stack_lvl+0xe8/0x150
[  722.618784][T12564]  print_address_description+0x55/0x1e0
[  722.618817][T12564]  ? l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  722.618844][T12564]  print_report+0x58/0x70
[  722.618872][T12564]  kasan_report+0x117/0x150
[  722.618906][T12564]  ? l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  722.618939][T12564]  l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  722.618970][T12564]  l2cap_connect_cfm+0x368/0x1560
[  722.619001][T12564]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  722.619026][T12564]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  722.619049][T12564]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  722.619073][T12564]  ? hci_connect_cfm+0x86/0x140
[  722.619105][T12564]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  722.619129][T12564]  hci_connect_cfm+0x95/0x140
[  722.619161][T12564]  le_conn_complete_evt+0x1134/0x16b0
[  722.619190][T12564]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  722.619212][T12564]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  722.619239][T12564]  ? lockdep_hardirqs_on+0x7a/0x110
[  722.619267][T12564]  ? skb_pull_data+0xfb/0x200
[  722.619296][T12564]  hci_le_conn_complete_evt+0x187/0x470
[  722.619333][T12564]  hci_event_packet+0x659/0xef0
[  722.619365][T12564]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  722.619386][T12564]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  722.619416][T12564]  ? __pfx_hci_event_packet+0x10/0x10
[  722.619442][T12564]  ? rt_spin_unlock+0x14f/0x200
[  722.619468][T12564]  ? hci_send_to_monitor+0xe2/0x590
[  722.619505][T12564]  hci_rx_work+0x3ee/0x1040
[  722.619539][T12564]  ? process_scheduled_works+0xa70/0x1860
[  722.619571][T12564]  process_scheduled_works+0xb5d/0x1860
[  722.619620][T12564]  ? __pfx_process_scheduled_works+0x10/0x10
[  722.619654][T12564]  ? assign_work+0x3d5/0x5e0
[  722.619687][T12564]  worker_thread+0xa53/0xfc0
[  722.619724][T12564]  kthread+0x388/0x470
[  722.619750][T12564]  ? __pfx_worker_thread+0x10/0x10
[  722.619769][T12564]  ? __pfx_kthread+0x10/0x10
[  722.619794][T12564]  ret_from_fork+0x514/0xb70
[  722.619827][T12564]  ? __pfx_ret_from_fork+0x10/0x10
[  722.619857][T12564]  ? __switch_to+0xc79/0x1410
[  722.619887][T12564]  ? __pfx_kthread+0x10/0x10
[  722.619910][T12564]  ret_from_fork_asm+0x1a/0x30
[  722.619944][T12564]  </TASK>
[  722.619953][T12564] 
[  722.619959][T12564] Allocated by task 12564:
[  722.619971][T12564]  kasan_save_track+0x3e/0x80
[  722.619999][T12564]  __kasan_kmalloc+0x93/0xb0
[  722.620026][T12564]  __kmalloc_noprof+0x3e7/0x7b0
[  722.620054][T12564]  sk_prot_alloc+0xe7/0x210
[  722.620072][T12564]  sk_alloc+0x3a/0x390
[  722.620110][T12564]  bt_sock_alloc+0x3b/0x310
[  722.620137][T12564]  l2cap_sock_new_connection_cb+0xe2/0x2e0
[  722.620161][T12564]  l2cap_connect_cfm+0x368/0x1560
[  722.620183][T12564]  hci_connect_cfm+0x95/0x140
[  722.620211][T12564]  le_conn_complete_evt+0x1134/0x16b0
[  722.620230][T12564]  hci_le_conn_complete_evt+0x187/0x470
[  722.620258][T12564]  hci_event_packet+0x659/0xef0
[  722.620283][T12564]  hci_rx_work+0x3ee/0x1040
[  722.620307][T12564]  process_scheduled_works+0xb5d/0x1860
[  722.620337][T12564]  worker_thread+0xa53/0xfc0
[  722.620353][T12564]  kthread+0x388/0x470
[  722.620374][T12564]  ret_from_fork+0x514/0xb70
[  722.620402][T12564]  ret_from_fork_asm+0x1a/0x30
[  722.620422][T12564] 
[  722.620428][T12564] Freed by task 14879:
[  722.620440][T12564]  kasan_save_track+0x3e/0x80
[  722.620465][T12564]  kasan_save_free_info+0x46/0x50
[  722.620487][T12564]  __kasan_slab_free+0x5c/0x80
[  722.620525][T12564]  kfree+0x1c5/0x6c0
[  722.620551][T12564]  __sk_destruct+0x74b/0x9d0
[  722.620571][T12564]  l2cap_sock_cleanup_listen+0xe0/0x440
[  722.620593][T12564]  l2cap_sock_release+0x6e/0x270
[  722.620614][T12564]  sock_close+0xc3/0x240
[  722.620638][T12564]  __fput+0x461/0xa70
[  722.620660][T12564]  task_work_run+0x1d9/0x270
[  722.620683][T12564]  get_signal+0x11c3/0x1310
[  722.620709][T12564]  arch_do_signal_or_restart+0xbc/0x830
[  722.620735][T12564]  exit_to_user_mode_loop+0x86/0x480
[  722.620756][T12564]  do_syscall_64+0x33e/0xf80
[  722.620779][T12564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.620800][T12564] 
[  722.620807][T12564] The buggy address belongs to the object at ffff8880242f8000
[  722.620807][T12564]  which belongs to the cache kmalloc-2k of size 2048
[  722.620827][T12564] The buggy address is located 1968 bytes inside of
[  722.620827][T12564]  freed 2048-byte region [ffff8880242f8000, ffff8880242f8800)
[  722.620851][T12564] 
[  722.620857][T12564] The buggy address belongs to the physical page:
[  722.620871][T12564] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x242f8
[  722.620894][T12564] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  722.620915][T12564] flags: 0x80000000000040(head|node=0|zone=1)
[  722.620934][T12564] page_type: f5(slab)
[  722.620955][T12564] raw: 0080000000000040 ffff88801a024000 dead000000000100 dead000000000122
[  722.620972][T12564] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[  722.620991][T12564] head: 0080000000000040 ffff88801a024000 dead000000000100 dead000000000122
[  722.621009][T12564] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[  722.621028][T12564] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  722.621046][T12564] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  722.621057][T12564] page dumped because: kasan: bad access detected
[  722.621068][T12564] page_owner tracks the page as allocated
[  722.621077][T12564] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12200079911, free_ts 6134933369
[  722.621116][T12564]  post_alloc_hook+0x231/0x280
[  722.621147][T12564]  get_page_from_freelist+0x27c8/0x2840
[  722.621166][T12564]  __alloc_frozen_pages_noprof+0x18d/0x380
[  722.621185][T12564]  allocate_slab+0x77/0x660
[  722.621206][T12564]  refill_objects+0x33c/0x3d0
[  722.621227][T12564]  __pcs_replace_empty_main+0x373/0x720
[  722.621250][T12564]  __kmalloc_cache_noprof+0x44e/0x690
[  722.621277][T12564]  usb_hub_create_port_device+0x7d/0xb90
[  722.621306][T12564]  hub_probe+0x26f8/0x3c30
[  722.621332][T12564]  usb_probe_interface+0x659/0xc70
[  722.621360][T12564]  really_probe+0x267/0xaf0
[  722.621384][T12564]  __driver_probe_device+0x18c/0x320
[  722.621407][T12564]  driver_probe_device+0x4f/0x240
[  722.621430][T12564]  __device_attach_driver+0x279/0x430
[  722.621454][T12564]  bus_for_each_drv+0x25b/0x2f0
[  722.621482][T12564]  __device_attach+0x2c8/0x450
[  722.621538][T12564] page last free pid 10 tgid 10 stack trace:
[  722.621551][T12564]  __free_frozen_pages+0xfa6/0x10f0
[  722.621581][T12564]  vfree+0x251/0x3b0
[  722.621606][T12564]  delayed_vfree_work+0x55/0x80
[  722.621623][T12564]  process_scheduled_works+0xb5d/0x1860
[  722.621651][T12564]  worker_thread+0xa53/0xfc0
[  722.621667][T12564]  kthread+0x388/0x470
[  722.621688][T12564]  ret_from_fork+0x514/0xb70
[  722.621715][T12564]  ret_from_fork_asm+0x1a/0x30
[  722.621735][T12564] 
[  722.621741][T12564] Memory state around the buggy address:
[  722.621756][T12564]  ffff8880242f8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  722.621771][T12564]  ffff8880242f8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  722.621784][T12564] >ffff8880242f8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  722.621795][T12564]                                      ^
[  722.621807][T12564]  ffff8880242f8800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  722.621822][T12564]  ffff8880242f8880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  722.621839][T12564] ==================================================================
[  722.624748][T12564] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  722.624774][T12564] CPU: 0 UID: 0 PID: 12564 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  722.624809][T12564] Tainted: [L]=SOFTLOCKUP
[  722.624819][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  722.624835][T12564] Workqueue: hci0 hci_rx_work
[  722.624869][T12564] Call Trace:
[  722.624878][T12564]  <TASK>
[  722.624888][T12564]  vpanic+0x56c/0xa60
[  722.624915][T12564]  ? __pfx_vpanic+0x10/0x10
[  722.624937][T12564]  ? __pfx___schedule+0x10/0x10
[  722.624968][T12564]  panic+0xc5/0xd0
[  722.624990][T12564]  ? __pfx_panic+0x10/0x10
[  722.625014][T12564]  ? preempt_schedule_common+0x82/0xd0
[  722.625043][T12564]  ? l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  722.625072][T12564]  check_panic_on_warn+0x89/0xb0
[  722.625101][T12564]  ? l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  722.625130][T12564]  end_report+0x73/0x170
[  722.625165][T12564]  ? l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  722.625195][T12564]  kasan_report+0x128/0x150
[  722.625232][T12564]  ? l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  722.625350][T12564]  l2cap_sock_new_connection_cb+0x1f9/0x2e0
[  722.625383][T12564]  l2cap_connect_cfm+0x368/0x1560
[  722.625415][T12564]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  722.625441][T12564]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  722.625467][T12564]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  722.625492][T12564]  ? hci_connect_cfm+0x86/0x140
[  722.625525][T12564]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  722.625551][T12564]  hci_connect_cfm+0x95/0x140
[  722.625588][T12564]  le_conn_complete_evt+0x1134/0x16b0
[  722.625618][T12564]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  722.625643][T12564]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  722.625673][T12564]  ? lockdep_hardirqs_on+0x7a/0x110
[  722.625703][T12564]  ? skb_pull_data+0xfb/0x200
[  722.625732][T12564]  hci_le_conn_complete_evt+0x187/0x470
[  722.625772][T12564]  hci_event_packet+0x659/0xef0
[  722.625803][T12564]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  722.625827][T12564]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  722.625861][T12564]  ? __pfx_hci_event_packet+0x10/0x10
[  722.625891][T12564]  ? rt_spin_unlock+0x14f/0x200
[  722.625918][T12564]  ? hci_send_to_monitor+0xe2/0x590
[  722.625946][T12564]  hci_rx_work+0x3ee/0x1040
[  722.625978][T12564]  ? process_scheduled_works+0xa70/0x1860
[  722.626014][T12564]  process_scheduled_works+0xb5d/0x1860
[  722.626065][T12564]  ? __pfx_process_scheduled_works+0x10/0x10
[  722.626103][T12564]  ? assign_work+0x3d5/0x5e0
[  722.626138][T12564]  worker_thread+0xa53/0xfc0
[  722.626173][T12564]  kthread+0x388/0x470
[  722.626199][T12564]  ? __pfx_worker_thread+0x10/0x10
[  722.626220][T12564]  ? __pfx_kthread+0x10/0x10
[  722.626262][T12564]  ret_from_fork+0x514/0xb70
[  722.626299][T12564]  ? __pfx_ret_from_fork+0x10/0x10
[  722.626334][T12564]  ? __switch_to+0xc79/0x1410
[  722.626363][T12564]  ? __pfx_kthread+0x10/0x10
[  722.626390][T12564]  ret_from_fork_asm+0x1a/0x30
[  722.626421][T12564]  </TASK>
[  722.626587][T12564] Kernel Offset: disabled