last executing test programs:

4m22.815748889s ago: executing program 4 (id=38):
socket$kcm(0x10, 0x2, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8003a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0xe3, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x5, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x9, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x5, 0x8004, 0x5, 0xfffffff3, 0x129432e5, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x7, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x1000008, 0x9, 0x6, 0x47, 0x4, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x100bc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0xba, 0xfffffffe, 0x102, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0xfffffff9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1c9, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x7, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x0, 0x7fff, 0x101, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x40, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x8, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x10007, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x80000200, 0xffff3441, 0xfff]}, 0x45c)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x1f000000, 0x0)

4m21.652216744s ago: executing program 4 (id=41):
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = msgget(0x2, 0x600)
msgrcv(r2, 0xfffffffffffffffe, 0x0, 0x0, 0x1000)
msgsnd(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000000000034291496c7d03dfffe49d27c99f89795"], 0x8, 0x0) (fail_nth: 1)

4m20.429808035s ago: executing program 4 (id=43):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x53b0}, {}, 0x0, 0x9, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x2, 0xb7}}, 0xe8)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={<r3=>r0, 0x207, 0x2, 0x3})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x60, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xd6b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x234}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
r8 = msgget(0x2, 0x600)
msgrcv(r8, 0xfffffffffffffffe, 0x0, 0x0, 0x1000)
msgsnd(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000000000034291496c7d03dfffe49d27c99f89795"], 0x8, 0x0)

4m17.440316455s ago: executing program 4 (id=50):
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, &(0x7f0000001300)='\x00', 0x1)

4m14.332138737s ago: executing program 4 (id=58):
r0 = syz_open_dev$vcsu(&(0x7f00000010c0), 0x5, 0x20040)
ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001100)={0x4, "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"})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x1, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "20bb7e"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x0, 0x7f7d, 0xe8}, {0x6, 0x24, 0x1a, 0x9, 0x13}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x8}, @dmm={0x7, 0x24, 0x14, 0x3, 0xc}, @mbim_extended={0x8, 0x24, 0x1c, 0x7ff, 0x0, 0x5e01}, @country_functional={0x10, 0x24, 0x7, 0x2, 0xa, [0x0, 0xba9, 0x4, 0x7, 0xf5]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x9, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x9, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xf3, 0x1, 0x29}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x300, 0x1, 0x2, 0x7, 0x40, 0x6}, 0x1c, &(0x7f00000009c0)={0x5, 0xf, 0x1c, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1e, 0x91, 0x2, 0x200}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x3, 0x1, 0x7}]}, 0x4, [{0x23, &(0x7f0000000a00)=@string={0x23, 0x3, "215bc0a9e7d696181f4d40874b5b8287ede04d6dd7e137d67eadaa7cde2f1340c7"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x240a}}, {0xab, &(0x7f0000000ac0)=@string={0xab, 0x3, "e39653c1cf6237776cbda78e3ef0e2f41ba38f75b2e465ac09613c6ccb6382f538f8a972d0bebb2008888bfc2952cb3168a5dc1e998ce0c6f024d2d8815122f9a1eccff33f66e2610c1135d4e04a3bb633a30a1c1436decfd78d932c879244b55969d80b102c57835c2c2540c92a81a3d6b8988e2fd9727d1107232d040456ad62c82150c8fbececb2fc049457ea30f56c5bc9d6f29eeff3bc3c72229089f1dfeff08e0bf77ee7f9bf"}}]})
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000d40)={0x14, &(0x7f0000000cc0)={0x40, 0x31, 0xc, {0xc, 0x24, "e89fa3bdd7683de5f78f"}}, &(0x7f0000000d00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001040)={0x44, &(0x7f0000000d80)={0x40, 0x12, 0xeb, "a7fcfc3aeab839785ed6d58fd39da708c640e958cb1f8c396efb0618af971f53d00d1288f236f5eb2342fae2ec84f85ae68ce5ccbb2bd3dacb78d36f39a7f9e061ab7ce6a4efb918ab22205815f0e0026a57d67e48547451eab70f3fbebbaf537e0c45d7660cdc6c1f05efbe140957237ec486d01b4b07aeed360770411ecb583938256b64d7026c165e61ffd1c6d3b1c614228ccc2681da72e866118a5caa161dd098d19fb4f74aea0d8b1e7ecfd6eb2d5799dc039487461555c545ef8cab552385511067baa0a9163ae9ac6c0c3327f9d560b949f1b9bf031eff6a11708e7b6dba56f9c83daf533eb2fb"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000f00)={0x20, 0x80, 0x1c, {0x5, 0xfc00, 0x91, 0x7, 0x8001, 0x7, 0x2c8f, 0x9, 0x37, 0x800, 0x3, 0x101}}, &(0x7f0000000f40)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000f80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000fc0)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000001000)={0x20, 0x89, 0x2, 0x1}})
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340))
write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x68)
syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x40, 0x23, 0xa4, {0xa4, 0x23, "357568633cc53ed83c6ca7ebbe5ad3c815d524db94874a0dfeb8a8faa234cfaaf915c83c4bf0f90b84f5660016f7dc7ae4e72e44d5ebb4d6e990aec93b6299b4c1e5b99622e314b93a53ad4f02914d15249a2f32f550d1e052498c79e7e51fd2fafe57db875e525c0c7f727409b57cc788c45775aebea7d27851a0b3536fa438a7badf4a687bd4f185854d23292af85efa43bf24ebcb197a9933a0d39dfec577a44c"}}, &(0x7f00000000c0)={0x0, 0x3, 0x33, @string={0x33, 0x3, "c8a2c64f0df5ec19498dd87efd60d964fc5702569f0bb9d2e47bbc8d86fa7ca001ec2808e4f1c4ee7240f164cf07403c98"}}, &(0x7f0000000140)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x4, 0xf00, 0xb0af, [0x30, 0x0, 0xffcf, 0xd57c777a6cbcc279, 0xff3f00, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "6dd9e78f05299c64b5df72bf8aaf16d8"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfb, 0x1a, 0x8, 0x9, "91fd850a", "6bbebcde"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe4, 0x4, 0x0, 0xa, 0x7f, 0xfffd, 0x3}}}, &(0x7f0000000840)={0x84, &(0x7f0000000300)={0x40, 0xe, 0x3c, "639e7e29171ed612d496c4782e9763f7f290673b3198e3105773660c7fd5a4286d9eb473e6c27e84c617b9b202212379f69864405b610b8dfe6f74a9"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xec}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x20, 0x21}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000580)={0x40, 0xb, 0x2, '\bO'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f0000000680)={0x40, 0x19, 0x2, "df4b"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x86}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x9e}})
r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
readv(r4, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1)
ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0)

4m8.777507128s ago: executing program 1 (id=72):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0)

4m8.624382283s ago: executing program 4 (id=73):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x2}, 0x18)
r1 = fanotify_init(0x10, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x28)
fanotify_mark(r1, 0x455, 0x40001000, r2, 0x0)
fanotify_mark(r1, 0x80, 0x22, r2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe)
listen(0xffffffffffffffff, 0xa1)
epoll_create1(0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
write$snddsp(0xffffffffffffffff, &(0x7f0000000600)="000092466d1f", 0x6)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

4m8.561274495s ago: executing program 1 (id=74):
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000020c0)={'\x00', 0x0, 0xaf54, 0x5, 0x0, 0x100000005})

4m7.849627469s ago: executing program 1 (id=76):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x1, 0x22, 0x335}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x322, 0x0, 0xfc, 0x9, 0x90, @random="48bd00"}, 0x10)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x604003, 0x0)
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

4m6.755867891s ago: executing program 1 (id=80):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2a, 0x1, 0x3, "fff6000000000000000000b967351bca40ba3e41837eefad00", 0x3032344d})
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2a, {0x3, 0x0, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2000000020, 0xfffffffffffffffd, 0x80000000000, 0x0, 0x4, 0x5, 0x0, 0x8000, 0x2, r1, r2, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c)
shutdown(r4, 0x1)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x8}, 0x8)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket$inet(0xa, 0x1, 0x85)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x4e1d, @local}, 0x10)
sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x210, 0x40000001, 0x0, 0x0)
r7 = syz_open_procfs(r3, &(0x7f0000000300)='net/dev_mcast\x00')
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
shutdown(r8, 0x2)
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r7, &(0x7f0000003680)={0x2020}, 0x2020)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
setresuid(0xee00, 0x0, 0x0)
ioprio_set$uid(0x3, 0xee00, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)

4m4.600396141s ago: executing program 1 (id=83):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000003280)={0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m1.632501403s ago: executing program 1 (id=88):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000c0000000800000002"], 0x50)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0)
syz_open_dev$I2C(0x0, 0x80, 0x14000)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x8000, 0x1, 0x2, 0x4, {{0x9, 0x4, 0x1, 0x9, 0x24, 0x64, 0x0, 0x40, 0x29, 0x0, @local, @empty, {[@ra={0x94, 0x4}, @generic={0x82, 0x5, "dbe50e"}, @timestamp_prespec={0x44, 0x4, 0x52, 0x3, 0x2}]}}}}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r7=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r7, &(0x7f0000000240), 0x0}, 0x20)

3m50.447773629s ago: executing program 32 (id=73):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x2}, 0x18)
r1 = fanotify_init(0x10, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x28)
fanotify_mark(r1, 0x455, 0x40001000, r2, 0x0)
fanotify_mark(r1, 0x80, 0x22, r2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe)
listen(0xffffffffffffffff, 0xa1)
epoll_create1(0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
write$snddsp(0xffffffffffffffff, &(0x7f0000000600)="000092466d1f", 0x6)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

3m46.115642425s ago: executing program 33 (id=88):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000c0000000800000002"], 0x50)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0)
syz_open_dev$I2C(0x0, 0x80, 0x14000)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x8000, 0x1, 0x2, 0x4, {{0x9, 0x4, 0x1, 0x9, 0x24, 0x64, 0x0, 0x40, 0x29, 0x0, @local, @empty, {[@ra={0x94, 0x4}, @generic={0x82, 0x5, "dbe50e"}, @timestamp_prespec={0x44, 0x4, 0x52, 0x3, 0x2}]}}}}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r7=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r7, &(0x7f0000000240), 0x0}, 0x20)

3m22.488357603s ago: executing program 2 (id=135):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x7fffffff, 0x34324152, 0x0, 0xb}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xe2, &(0x7f0000000480)={&(0x7f0000000100)={0x20, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x20000840)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r3, 0x82081fc)
write$FUSE_GETXATTR(r3, &(0x7f0000000440)={0x18, 0xfffffffffffffffe, 0x0, {0x40000001}}, 0x14)
r4 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r4, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1)

3m19.812307606s ago: executing program 2 (id=140):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xc, @remote, 'ip6tnl0\x00'}}, 0x1e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0)

3m17.37420279s ago: executing program 2 (id=143):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x18, &(0x7f00000006c0)={0x20, 0x9, 0x6, "0000eaff0000"}, 0x0, 0x0, 0x0, 0x0})
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="d00360be", 0x100000}], 0x1, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x30}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000180))
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f000000aac0)={'ip6_vti0\x00', 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
syz_emit_vhci(0x0, 0xd)
mmap$IORING_OFF_SQ_RING(&(0x7f00002d6000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000140)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m8.290480162s ago: executing program 2 (id=161):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x7fffffff, 0x34324152, 0x0, 0xb}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xe2, &(0x7f0000000480)={&(0x7f0000000100)={0x20, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x20000840)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r3, 0x82081fc)
write$FUSE_GETXATTR(r3, &(0x7f0000000440)={0x18, 0xfffffffffffffffe, 0x0, {0x40000001}}, 0x14)
r4 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r4, 0x0)

3m5.47988955s ago: executing program 2 (id=166):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x1, 0x22, 0x335}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x322, 0x0, 0xfc, 0x9, 0x90, @random="48bd00"}, 0x10)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x604003, 0x0)
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

3m1.824383175s ago: executing program 2 (id=170):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x0) (async)
lseek(r3, 0x3, 0x0)
getdents64(r3, 0x0, 0x22)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=r1], 0x64}}, 0x0)

3m0.878102342s ago: executing program 34 (id=170):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x0) (async)
lseek(r3, 0x3, 0x0)
getdents64(r3, 0x0, 0x22)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=r1], 0x64}}, 0x0)

1m10.026741424s ago: executing program 3 (id=418):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x7fffffff, 0x34324152, 0x0, 0xb}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xe2, &(0x7f0000000480)={&(0x7f0000000100)={0x20, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x20000840)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r3, 0x82081fc)
write$FUSE_GETXATTR(r3, &(0x7f0000000440)={0x18, 0xfffffffffffffffe, 0x0, {0x40000001}}, 0x14)
r4 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r4, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1)
socket$nl_audit(0x10, 0x3, 0x9)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0)

1m9.368139943s ago: executing program 6 (id=419):
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./bus\x00', 0x100)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x8, 0x0, &(0x7f0000000000)=0x4)
r3 = socket$inet6(0xa, 0x3, 0x7)
r4 = socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r3}, 0x2)
sendmsg$inet6(r4, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, <r5=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1m8.90774745s ago: executing program 6 (id=421):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000091000/0x4000)=nil, 0x4000, 0x9)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000e10000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="891271755e69b1418b116b5e1c7f71c2157cfb90026576b5960bd3d9b3a8b481188e22c9615cbe119d870d2f7036b07696", @ANYBLOB="000000001100"/28], 0x48)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x80)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000080)={&(0x7f0000000e00)={{@any, 0x7e5}, {@any, 0xc}, 0x400, "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"}, 0x418, 0xc})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x5, 0x3, 0x1, &(0x7f00000001c0))
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005001700000000"], 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x0)

1m8.213451728s ago: executing program 3 (id=423):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2a, 0x1, 0x3, "fff6000000000000000000b967351bca40ba3e41837eefad00", 0x3032344d})
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e523a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3351c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda451852e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2a, {0x3, 0x0, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2000000020, 0xfffffffffffffffd, 0x80000000000, 0x0, 0x4, 0x5, 0x0, 0x8000, 0x2, r1, r2, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_procfs(r3, &(0x7f0000000300)='net/dev_mcast\x00')
read$FUSE(r6, &(0x7f0000003680)={0x2020}, 0x2020)

1m6.863732308s ago: executing program 6 (id=425):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000a84000/0x2000)=nil, 0x2000}, 0x1})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)

1m5.469672317s ago: executing program 3 (id=428):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x18, &(0x7f00000007c0)=ANY=[@ANYBLOB="000306"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a80)={0x98, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m3.981487072s ago: executing program 6 (id=429):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32)

1m3.666041752s ago: executing program 5 (id=431):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="53000000dedcf3b4534b2a1f8f9bf0f590d5ed0544ff2a9771c0f4fb0b5d337c882e634b254973c12202b9f66e53fd24f1288e20ec099ce6d4706c88056f7f2c2d4a6fd0aaa6eeccbf916be25218956905eafaa14eec1a7b", 0x58}], 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000304000000080000000093603e16", @ANYRES32=0x0, @ANYBLOB="1100000000000000300012800900010069ff695b0000130005000a0000000000050004000500000005000541587de3a8412c2adc781474325442b390055bc37d13b58e58fb5ea76eefe53d797a35b46dd4cdd13ad74b1e3c6704a686402338db5406fc67fe8483bec7f343770fc4949698727ff05dbf16a3334861c0edf5e02fe9114daf19ce2fc48bccbba64935"], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000003f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1m1.438690465s ago: executing program 5 (id=433):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@echo=0x1ff) (async)
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3})

1m1.246384017s ago: executing program 6 (id=434):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078)
r5 = accept4$inet6(r4, &(0x7f0000000280), &(0x7f0000000380)=0x1c, 0x80800)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000400)=0x40, 0x4)

1m1.05199017s ago: executing program 5 (id=435):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_io_uring_setup(0x364d, &(0x7f0000000180)={0x0, 0xd25d, 0x13900}, &(0x7f0000000000), &(0x7f0000000200))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r1}, 0x18)
write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0x12)

1m0.74256381s ago: executing program 3 (id=436):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_io_uring_setup(0x37, 0x0, &(0x7f0000000000), &(0x7f0000000100))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="10"], 0x20}}], 0x1, 0x4000)
r6 = syz_open_procfs(0x0, &(0x7f0000000940)='net/igmp6\x00')
lseek(r6, 0x2027da, 0x0)

58.248425805s ago: executing program 5 (id=437):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
openat$cgroup_pressure(r5, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0)
r7 = openat$cgroup_pressure(r5, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r7, &(0x7f00000001c0)={'some', 0x20, 0x6, 0x20, 0x10000100ffffd}, 0x2f)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)

55.477099684s ago: executing program 3 (id=438):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, @void, @value}, 0x94)
setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000})
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=@delqdisc={0x44, 0x25, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0x1b, 0x5}, {0xffff, 0xffe0}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
mprotect(&(0x7f000073d000/0x4000)=nil, 0x4000, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
syz_open_dev$sndmidi(&(0x7f0000000600), 0x4, 0x201)
r5 = io_uring_setup(0x3eb0, &(0x7f0000000300)={0x0, 0x3da2, 0x0, 0xfffffffc, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
futex(&(0x7f0000000180)=0x1, 0x80, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000280)=0x2, 0x2)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x58400, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unlink(&(0x7f0000000000)='./file1\x00')
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800)

54.967042518s ago: executing program 6 (id=439):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14)
recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)=""/99, 0x63}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000440)=""/224, 0xe0}, {&(0x7f0000000540)=""/216, 0xd8}], 0x6, &(0x7f0000001700)=""/221, 0xdd}, 0x7}], 0x1, 0x141, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)
sched_setaffinity(0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

54.343578374s ago: executing program 3 (id=441):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x10)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xb9, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88caffff4018632f77fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca578", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4140aecd, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="de6a84400f005f00440f20c0350a000000440f22c0c442c9a73b33aa00400000460f00d40f01df0f20d835080000000f22d80f0164120066b804000f00d8", 0x3e}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1)

54.001859936s ago: executing program 5 (id=442):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x2}, 0x18)
r1 = fanotify_init(0x10, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x28)
fanotify_mark(r1, 0x455, 0x40001000, r2, 0x0)
fanotify_mark(r1, 0x80, 0x22, r2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe)
listen(0xffffffffffffffff, 0xa1)
epoll_create1(0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
write$snddsp(0xffffffffffffffff, &(0x7f0000000600)="000092466d1f4ae7d01870e4", 0xc)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

53.948608607s ago: executing program 0 (id=443):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x5d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfd, 0x7fff7ffc}]})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37, 0x20})
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
syz_emit_ethernet(0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0)
setitimer(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7f, 0x100, 0x3}, 0x10)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0)
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="1600000065ffff0010000008003950323030302e75"], 0x15)
syz_open_dev$tty20(0xc, 0x4, 0x0)

50.169480257s ago: executing program 5 (id=445):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00')
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000002adfdc61240aecba0000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x48)
r6 = socket$rds(0x15, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x18)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x31}}], 0x30}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x10, &(0x7f000001b700)=ANY=[@ANYRES64=r3, @ANYRES32=r4, @ANYRES64=r6, @ANYRES16=r5, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)=ANY=[@ANYBLOB="140000001000010000000000000000659200000000000000120a01020000000000000000020000000900adb141bdb1e95348020073007a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000fb5ad0233bfc4e1ff7a53947b4d055da69d4"], 0x64}}, 0x0)
accept4(r1, 0x0, &(0x7f0000000040), 0x800)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

44.672812882s ago: executing program 0 (id=446):
r0 = socket(0x15, 0x80005, 0x0)
getsockopt(r0, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000)
r1 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0xa2a00)
ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000040)=""/108)

44.384945844s ago: executing program 0 (id=448):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_CONNECTINFO(r4, 0xc0105502, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00')
preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/197, 0xc5}], 0x1, 0x0, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0xd0, 0x300, 0x3d0, 0xd0, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'bridge_slave_1\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'netdevsim0\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r7)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r8, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x2000004)

43.21784432s ago: executing program 0 (id=450):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x1, 0x22, 0x335}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
connect$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x322, 0x0, 0xfc, 0x9, 0x90, @random="48bd00"}, 0x10)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x604003, 0x0)
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

40.625298253s ago: executing program 0 (id=451):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000a84000/0x2000)=nil, 0x2000}, 0x1})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)

34.08397765s ago: executing program 35 (id=439):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14)
recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)=""/99, 0x63}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000440)=""/224, 0xe0}, {&(0x7f0000000540)=""/216, 0xd8}], 0x6, &(0x7f0000001700)=""/221, 0xdd}, 0x7}], 0x1, 0x141, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)
sched_setaffinity(0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

33.874729257s ago: executing program 36 (id=441):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x10)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xb9, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88caffff4018632f77fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca578", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4140aecd, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="de6a84400f005f00440f20c0350a000000440f22c0c442c9a73b33aa00400000460f00d40f01df0f20d835080000000f22d80f0164120066b804000f00d8", 0x3e}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1)

33.771242648s ago: executing program 37 (id=445):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00')
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000002adfdc61240aecba0000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x48)
r6 = socket$rds(0x15, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x18)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x31}}], 0x30}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x10, &(0x7f000001b700)=ANY=[@ANYRES64=r3, @ANYRES32=r4, @ANYRES64=r6, @ANYRES16=r5, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)=ANY=[@ANYBLOB="140000001000010000000000000000659200000000000000120a01020000000000000000020000000900adb141bdb1e95348020073007a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000fb5ad0233bfc4e1ff7a53947b4d055da69d4"], 0x64}}, 0x0)
accept4(r1, 0x0, &(0x7f0000000040), 0x800)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

33.711666991s ago: executing program 0 (id=456):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
r1 = syz_clone(0x100, &(0x7f0000000040)="430ba2eb66bf70c9efd0e59c0287a7827f9b9bfde31f", 0x16, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="6e2c827c5b")
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$rds(0x15, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x3, 0x5004)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
unshare(0x20000400)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000240)={0x1, r0})
vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000440)=0xc)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
io_setup(0x4, &(0x7f0000000280))

28.202567071s ago: executing program 7 (id=457):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="a614fc91753ede5129fd11352ea85175", 0xfffffeab, 0x840, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4)
poll(&(0x7f00000003c0)=[{r0, 0x7004}], 0x1, 0x80)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f000000a880)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x4, @private0, 0xe0}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x2f}}}, @dontfrag={{0x14}}], 0x30}}], 0x1, 0x0)

27.941491822s ago: executing program 7 (id=458):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}})

27.711453774s ago: executing program 7 (id=459):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_io_uring_setup(0x364d, &(0x7f0000000180)={0x0, 0xd25d, 0x13900}, &(0x7f0000000000), &(0x7f0000000200))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r1}, 0x18)
write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0x12)

27.481314787s ago: executing program 7 (id=460):
socket$inet6_sctp(0xa, 0x1, 0x84)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
socket$inet6(0x10, 0x4, 0x0)
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x13)
r6 = syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/cgroup\x00')
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000140)={0x20000000})
epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x1000)

17.683573884s ago: executing program 38 (id=456):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
r1 = syz_clone(0x100, &(0x7f0000000040)="430ba2eb66bf70c9efd0e59c0287a7827f9b9bfde31f", 0x16, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="6e2c827c5b")
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$rds(0x15, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x3, 0x5004)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
unshare(0x20000400)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000240)={0x1, r0})
vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000440)=0xc)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
io_setup(0x4, &(0x7f0000000280))

15.630518774s ago: executing program 7 (id=462):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000a84000/0x2000)=nil, 0x2000}, 0x1})
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
close(r6)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000f940)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f00000003c0)="7a3fbd22bbc8b3c68030b9e9d2b67b6765ba383103582a8231aba7e1f0ac8f7b115183651d074b8ab3126f2946b84c89ad98399de03b78a5b1f9383b5db8e71c55a7081b05cd1f92df9623d66d6c15be43bf82b10bf311fd2d208758718e33bc7f275068bebd62", 0x67}], 0x1, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r4, r3, r0, r3, r3]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r3, 0xffffffffffffffff, r2]}}], 0x118, 0x40840}}, {{&(0x7f0000000ac0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000b40)="8c575c29dc31", 0x6}], 0x2, &(0x7f0000000d80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}], 0xb0, 0x4008000}}, {{&(0x7f0000000e40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000000ec0)="f383b3fae6a787", 0x7}, {&(0x7f0000000f00)="d96f56aef36966662932c7caadab29e91bf1d8c31456d7ad69d9d6971d56bffc2e6f9d4f899b9e4cde23b72fbb3331cd8218e5904697620d3a22f2809e6d8f703b419876296a6749365a93b1f99ee589c4777d60265da0af5c38738c51274b9a035f1a5b2644eb76bf21c63ba8dbd08eccc2efbc16649ffc", 0x78}], 0x2, &(0x7f0000002080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f000000c280), 0x0, &(0x7f000000e540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f000000e680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000eb40)=[{&(0x7f000000e700)="9e8648706a9c28a5fb7fb9e64960b0469a70541b4e162a03cd7d564edc57e8402d30bad99e727acb76ddb17b78bd548ff8e68615ea2aea7687fa9d7a4801c5006a745534aee9cf7435158c985068cf3c7fa627eb82ed1f30fa15972148168e5dccbe5195a5bfdb18839b847dd9d1693383c41c7f784fead16626b0b8ed9b013c8f932eb211dc26161dbf6f1a37cf0d564067df03e6d4be0b32d56310d53649292565653f52a34fa1323c360bd51d082f46597d8399a29a67cab90e01fdca8b7761aac480cfe385921bbe84dd524fdc51fc51ed10e627424623d1d3ae5ffab2b8181ce0e22b8ba627963350a16b971df9138ae6cc4a", 0xf5}, {&(0x7f000000e800)="9b91e01460739149b876eae60714540389c721ccbabcb10b1aafb4a35493b71dd7c8e5", 0x23}, {&(0x7f000000e840)="a9a3e32b89d6abfee5873c54e7e8144e16baf8648dc872601d720775462a609ec07bdd12f76e285d99cbaaafd213a5105621a903b21ce1e532db730d17e6f36b653fe26b7074ab165be7cc1e9ab4855cede48d0cadf91226d3855d07d555676c0595cbd479f6bc3a93f597995ab6dc0027a7a80bd8d80ac956bb2adbfddfdb836c53e7547f40cdf63b2ad1ceb1d79683b5654dd378645c0ae71eb9fc6141de745c92a441a4e06822dd79311de9088cbad39b68ccb334d98ca5d8df91584fcdd152a8e6db64f7d8d26588f4d5512073a33235b6df99c3e5f695d798", 0xdb}, {&(0x7f000000e940)="297b28ab47c15ead521feba83ba0b99860457013fe6359be543ab052001972ad8c7ced0c1e02777551ee644ca6938a5b1b1f67c96a8f1457bfcbe38086a973124f58335c4af6133c17401b76c9adf5b26288d4220a72bcccd874e80a9f0635ba911006f4a7f2731db8098b2d5b2cf36146a4b2ffb03687bf8bd5192965236c760c6e9d1b1548e54c6b8cf149630f824e12bcfbfe7c51ea6321a7b01aef3513a3b7a201911cfe4086c1", 0xa9}, {&(0x7f000000ea00)="d0b6734e47aabfebf90e40012eed26354069f0f9ed24e182249e681e2437226ab93d793b1348a8e057c0c11d3052f4449fe2d6d6a38ef7632e977fc41000a3c3984eab901eda289310c5df4bcb96dd975d58e52756bdcc589a1c1feb673598c714ce58fec631ab6e04c545f74fed87b5614aa2b763ebbdd1bdc3e428a2dacccc1185f6c4fc69ceea5e0b135e", 0x8c}, {&(0x7f000000eac0)="881e7a41e956cdd87fe54b713fe366f279b4d64bdfa96d5246e731c35e350164b607a9c25625f4d28c99f559c4e02d7771d1c0d3f0", 0x35}, {&(0x7f000000eb00)="21a35c95c7b0702662f5409bad3cf047952b390c32be705d567e4c0b", 0x1c}], 0x7, &(0x7f000000ec00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8, 0x10}}, {{&(0x7f000000ed00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000ef40)=[{&(0x7f000000ed80)="46d2fe9e9e6ce261554e0c470c3d82d7484d6155626d2f99bf9161a39b2903a1c1ff71cdd891b8b5ebb9dcc1579305fc52572a1b3298dc19a5cf20f207dac622a0a10bbd4b7820f3026a044b9dfefe9826f80fdb6b52f2cbad0de081c422983010461b55a35c1868d0e3a6413f3fd5b77b8e11846525a57f2694b14e315f4bfb819e0a400fbce9e5a99b47f2b704ea0bce791e32d640b13647c0890f2e8b491fc282", 0xa2}, {&(0x7f000000ee40)="91f5ad265de02d6229f0002419951e83cfcf36e6233f9ae04ad583cb53f703f77ba34ae89ffcb7369139b5c5281b16a57a0bc6266287c519cd31f8d105d999330f99a92f0914d673b5cd353a1144dc749e074304", 0x54}, {&(0x7f000000eec0)="eb0bba45acf73253d3ee4bfad728dbec2f2831df7e869300f2214a47d06da2fd347ef2787471bb1fa070a62e9dfb9d125a017534c8c4f586faa7141754ddbcb7f0b9d021a57150ccd07a91c390bdb08c45a9ea506a", 0x55}], 0x3, &(0x7f000000f040)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88, 0x20000804}}, {{&(0x7f000000f100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000f300)=[{&(0x7f000000f180)="96ac10e348cbe779f48955a7d7e92c0b537ce1618de954aac3cadbbfbf526e0fbbe5069062d7805aa9e7cfea4e0a3191c413927e05a73ace82906d11dc5dc2b49d48f2d8b41f268ed6890c2d8d4ce132d4", 0x51}, {&(0x7f000000f200)="3404e8f965ca761acd49dfa57ab45942bbda8bccfdd79d10e6a81fe779cf0c0fe15034983ea3949393864fda", 0x2c}, {&(0x7f000000f240)="d117d52f3ad8b83093b378a3ec552cf4fabde51e30c1287260c5289932a61d927653633bb4cab7b76a28bd057690dad3cc6894999d7c2f66977724e6efd0e3935ccf4bfce161cb52fb146ca696c2d90be00f9dd4785d09b64387aaf1b4600cdddb1bff4949f3ab3a339699475d245c1e3b9e71a72c48fede96b89f9d07f8b2a7527d92ccfee54db2ce0d9b21e07b313455fd1b399ef3388134", 0x99}], 0x3, &(0x7f000000f380), 0x0, 0x2400c815}}, {{&(0x7f000000f440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000f640)=[{&(0x7f000000f4c0)="84c252c7b086615b8c7b1c708ef47f1b4937274117b9383022994ad1f18bab28a1d2b8e026cc464347bda3898d09dea6a4395f0f06160d6aa8c10358645ee14e9f9d72c1d2ea878267abcf3c5d93d2d7b607bd23509a82de163bb32e345e29bd1551f985e23a280b14b3b2f52ee35f24f3cb897ac53562ea745eb5533798c1d3d5dd8c9e30894009ea83a504a140dbed0a23659c821945189d9e88ee0ec25cffabbea53baa1499386269cb6229722d2acac0082bf21f04fe60847b20a5173124c70a94f23bea8e61c1f84648ba3693658cd7c8431d3f5e54a429e2365d096ed1", 0xe0}, {&(0x7f000000f5c0)="6c6b0ff093a820b8590218b3e081cc616f60c0f09562291f0fd7701c679d308d0df3b48ccc4e14ff15ce1550bbfef1fee493ae6cae0d5b89b8926e70b0509e16427bb5ad70b1569d5cb6b71b32465d614b6b5f0310a9dcb100791159983bbe661fa9ae", 0x63}], 0x2, &(0x7f000000f840)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0, 0x34040804}}], 0x8, 0x0)

15.054084787s ago: executing program 7 (id=463):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000001180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4)
connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsetxattr$security_capability(r3, 0x0, 0x0, 0x0, 0x1)
r4 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, {0x0, 0x1}}}, 0x24}}, 0x4014)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x4000000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
lseek(r10, 0x2007, 0x3)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x53b0}, {}, 0x0, 0x9, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x2, 0xb7}}, 0xe8)
socket(0x1d, 0x6, 0x3)

0s ago: executing program 39 (id=463):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000001180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4)
connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsetxattr$security_capability(r3, 0x0, 0x0, 0x0, 0x1)
r4 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, {0x0, 0x1}}}, 0x24}}, 0x4014)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x4000000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
lseek(r10, 0x2007, 0x3)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x53b0}, {}, 0x0, 0x9, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x2, 0xb7}}, 0xe8)
socket(0x1d, 0x6, 0x3)

kernel console output (not intermixed with test programs):

syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7dc118e169 code=0x7ffc0000
[  111.438223][ T6135] sctp: [Deprecated]: syz.3.51 (pid 6135) Use of int in max_burst socket option.
[  111.438223][ T6135] Use struct sctp_assoc_value instead
[  112.041791][   T30] audit: type=1326 audit(1745268800.152:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7dc118e169 code=0x7ffc0000
[  112.064275][ T3082] usb 5-1: Using ep0 maxpacket: 8
[  112.143967][ T3082] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  112.168635][ T3082] usb 5-1: config 0 has no interface number 0
[  112.235555][ T3082] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  112.253277][ T3082] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  112.282791][ T3082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.308262][ T3082] usb 5-1: config 0 descriptor??
[  112.400379][ T3082] iowarrior 5-1:0.1: no interrupt-in endpoint found
[  112.918573][    T9] usb 5-1: USB disconnect, device number 2
[  113.327653][ T6150] netlink: 'syz.0.56': attribute type 21 has an invalid length.
[  113.337076][ T6150] netlink: 132 bytes leftover after parsing attributes in process `syz.0.56'.
[  113.769516][ T6155] netlink: 52 bytes leftover after parsing attributes in process `syz.3.55'.
[  114.150092][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  114.358611][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  114.882319][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  114.903525][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  114.950593][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  114.993897][    T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  115.011409][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.034970][    T9] usb 5-1: config 0 descriptor??
[  116.404250][    T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  116.461763][   T30] kauditd_printk_skb: 123 callbacks suppressed
[  116.461783][   T30] audit: type=1326 audit(1745268805.592:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6178 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e18e169 code=0x7ffc0000
[  116.501564][    T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  116.605749][   T30] audit: type=1326 audit(1745268805.592:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6178 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f0f3e18e169 code=0x7ffc0000
[  116.846204][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.868407][   T30] audit: type=1326 audit(1745268805.592:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6178 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e18e169 code=0x7ffc0000
[  116.903199][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.937808][ T6192] sctp: [Deprecated]: syz.0.65 (pid 6192) Use of int in max_burst socket option.
[  116.937808][ T6192] Use struct sctp_assoc_value instead
[  116.953772][   T30] audit: type=1326 audit(1745268805.592:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6178 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0f3e18e169 code=0x7ffc0000
[  117.141439][ T6184] capability: warning: `syz.4.58' uses deprecated v2 capabilities in a way that may be insecure
[  117.173278][   T30] audit: type=1326 audit(1745268805.592:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6178 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e18e169 code=0x7ffc0000
[  117.204150][   T30] audit: type=1326 audit(1745268805.592:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6178 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e18e169 code=0x7ffc0000
[  117.236128][   T30] audit: type=1326 audit(1745268805.592:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6178 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f3e18cad0 code=0x7ffc0000
[  117.356230][ T6194] netlink: 'syz.1.67': attribute type 4 has an invalid length.
[  117.396260][   T30] audit: type=1326 audit(1745268805.592:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6178 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3e18e169 code=0x7ffc0000
[  117.449245][   T30] audit: type=1326 audit(1745268805.592:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6178 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f0f3e18e169 code=0x7ffc0000
[  117.470477][    C1] vkms_vblank_simulate: vblank timer overrun
[  117.519045][   T30] audit: type=1326 audit(1745268805.632:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6178 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f0f3e18e169 code=0x7ffc0000
[  117.634259][ T6201] netlink: 52 bytes leftover after parsing attributes in process `syz.1.69'.
[  117.804135][ T5907] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  117.983164][ T6208] netlink: 'syz.2.70': attribute type 21 has an invalid length.
[  117.994648][ T6208] netlink: 132 bytes leftover after parsing attributes in process `syz.2.70'.
[  118.119122][ T5907] usb 1-1: Using ep0 maxpacket: 8
[  118.872390][ T5880] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[  119.210841][ T5907] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  119.218899][ T5907] usb 1-1: config 0 has no interface number 0
[  119.227358][ T5907] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  119.353182][ T5907] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  119.363605][ T5907] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  119.374832][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.406229][ T5907] usb 1-1: config 0 descriptor??
[  119.426643][ T5907] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[  120.161859][ T5907] usb 1-1: USB disconnect, device number 2
[  120.276895][ T5910] usb 5-1: USB disconnect, device number 3
[  121.144501][ T6228] IPv6: addrconf: prefix option has invalid lifetime
[  121.499162][ T5907] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  121.584954][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  121.585005][   T30] audit: type=1326 audit(1745268810.712:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6230 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7dc118e169 code=0x7ffc0000
[  121.689135][ T5907] usb 3-1: Using ep0 maxpacket: 8
[  121.753147][ T5907] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  122.060671][ T6234] sctp: [Deprecated]: syz.3.78 (pid 6234) Use of int in max_burst socket option.
[  122.060671][ T6234] Use struct sctp_assoc_value instead
[  122.072362][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.109146][   T30] audit: type=1326 audit(1745268810.772:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6230 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7dc118e169 code=0x7ffc0000
[  122.487312][ T5907] usb 3-1: config 0 descriptor??
[  122.536153][   T30] audit: type=1326 audit(1745268810.792:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6230 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7dc118e169 code=0x7ffc0000
[  122.559823][   T30] audit: type=1326 audit(1745268810.792:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6230 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7dc118e169 code=0x7ffc0000
[  122.586146][   T30] audit: type=1326 audit(1745268810.802:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6230 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7dc118e169 code=0x7ffc0000
[  122.616494][   T30] audit: type=1326 audit(1745268810.832:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6230 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7dc118e169 code=0x7ffc0000
[  122.639474][   T30] audit: type=1326 audit(1745268811.142:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6230 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7dc118e169 code=0x7ffc0000
[  122.663668][   T30] audit: type=1326 audit(1745268811.142:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6230 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7dc118e169 code=0x7ffc0000
[  123.177815][ T5907] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  123.217225][   T30] audit: type=1326 audit(1745268811.202:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6230 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7dc118e169 code=0x7ffc0000
[  123.620189][ T5907] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  123.634366][ T5907] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  123.664534][ T5907] asix 3-1:0.0: probe with driver asix failed with error -71
[  123.687602][ T6250] netlink: 52 bytes leftover after parsing attributes in process `syz.3.81'.
[  123.736748][ T5907] usb 3-1: USB disconnect, device number 3
[  124.885925][ T6265] netlink: 'syz.3.85': attribute type 21 has an invalid length.
[  124.894250][ T6265] netlink: 132 bytes leftover after parsing attributes in process `syz.3.85'.
[  126.144945][ T6276] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  127.454440][ T6289] xt_CT: You must specify a L4 protocol and not use inversions on it
[  127.669114][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  127.974729][   T10] usb 1-1: Using ep0 maxpacket: 32
[  129.028289][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  129.059973][   T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  129.082260][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.108738][   T10] usb 1-1: Product: syz
[  129.116275][   T10] usb 1-1: Manufacturer: syz
[  129.129896][   T10] usb 1-1: SerialNumber: syz
[  129.156248][   T10] usb 1-1: config 0 descriptor??
[  129.163362][ T6297] kvm: kvm [6296]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400
[  129.336652][ T6298] netlink: 156 bytes leftover after parsing attributes in process `syz.3.93'.
[  137.606980][    T0] sched: DL replenish lagged too much
[  137.689180][   T10] gs_usb 1-1:0.0: Couldn't send data format (err=-110)
[  137.749188][   T10] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110
[  137.903627][   T10] usb 1-1: USB disconnect, device number 3
[  138.573285][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  138.645228][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  139.166399][ T6306] syz.0.96 uses obsolete (PF_INET,SOCK_PACKET)
[  141.553347][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'.
[  142.001880][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  142.019567][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  142.037106][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  142.046639][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  142.055069][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  142.138320][ T6317] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.148025][ T6317] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.157228][ T6317] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.166071][ T6317] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.229337][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'.
[  142.601840][ T6332] IPv6: addrconf: prefix option has invalid lifetime
[  142.878470][ T6317] syz.3.98 (6317) used greatest stack depth: 18536 bytes left
[  142.969390][ T5907] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  143.150719][ T5907] usb 3-1: Using ep0 maxpacket: 8
[  143.180699][ T5907] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  143.213845][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.253841][ T5907] usb 3-1: config 0 descriptor??
[  143.488169][ T5907] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  143.522083][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  143.542284][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  143.551489][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  143.561015][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  143.569580][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  143.665395][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.833399][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.861091][ T6330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.893907][ T5907] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  143.914703][ T5907] asix 3-1:0.0: probe with driver asix failed with error -32
[  143.938780][ T5907] usb 3-1: USB disconnect, device number 4
[  143.972076][ T6323] chnl_net:caif_netlink_parms(): no params data found
[  144.101460][ T5840] Bluetooth: hci5: command tx timeout
[  144.114869][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.323745][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.439517][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.450956][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.461366][ T6323] bridge_slave_0: entered allmulticast mode
[  144.470977][ T6323] bridge_slave_0: entered promiscuous mode
[  144.492075][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.503798][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.511347][ T6323] bridge_slave_1: entered allmulticast mode
[  144.520551][ T6323] bridge_slave_1: entered promiscuous mode
[  144.702476][ T6323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.820951][ T6345] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  144.842585][ T6323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.908590][   T12] bridge_slave_1: left allmulticast mode
[  144.932860][   T12] bridge_slave_1: left promiscuous mode
[  144.957992][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.998626][   T12] bridge_slave_0: left allmulticast mode
[  145.007562][   T12] bridge_slave_0: left promiscuous mode
[  145.017496][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.219319][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  145.379199][    T9] usb 1-1: Using ep0 maxpacket: 32
[  145.392745][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  145.406370][    T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  145.431310][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.452564][    T9] usb 1-1: Product: syz
[  145.463028][    T9] usb 1-1: Manufacturer: syz
[  145.475950][    T9] usb 1-1: SerialNumber: syz
[  145.503322][    T9] usb 1-1: config 0 descriptor??
[  145.606413][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.619737][ T5840] Bluetooth: hci3: command tx timeout
[  145.627232][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.646470][   T12] bond0 (unregistering): Released all slaves
[  145.798529][ T6323] team0: Port device team_slave_0 added
[  145.929136][    T9] gs_usb 1-1:0.0: Couldn't get device config: (err=-32)
[  145.944704][    T9] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32
[  146.018560][ T6323] team0: Port device team_slave_1 added
[  146.195720][ T5840] Bluetooth: hci5: command tx timeout
[  146.271649][ T6353] netlink: 'syz.2.106': attribute type 10 has an invalid length.
[  146.330633][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.337886][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.378260][ T6323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.402070][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.423313][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.455846][ T6323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.473867][ T6353] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  146.584249][ T6335] chnl_net:caif_netlink_parms(): no params data found
[  146.827211][   T12] hsr_slave_0: left promiscuous mode
[  146.836675][   T12] hsr_slave_1: left promiscuous mode
[  146.910258][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.973566][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.017191][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.033247][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.074821][   T12] veth1_macvtap: left promiscuous mode
[  147.081444][   T12] veth0_macvtap: left promiscuous mode
[  147.094573][   T12] veth1_vlan: left promiscuous mode
[  147.111045][   T12] veth0_vlan: left promiscuous mode
[  147.693555][ T5840] Bluetooth: hci3: command tx timeout
[  147.756083][   T12] team0 (unregistering): Port device team_slave_1 removed
[  147.814238][   T12] team0 (unregistering): Port device team_slave_0 removed
[  148.006349][ T5907] usb 1-1: USB disconnect, device number 4
[  148.270759][ T5840] Bluetooth: hci5: command tx timeout
[  149.317752][ T6323] hsr_slave_0: entered promiscuous mode
[  149.324952][ T6323] hsr_slave_1: entered promiscuous mode
[  149.510023][ T6323] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.517641][ T6323] Cannot create hsr debugfs directory
[  149.769619][ T5840] Bluetooth: hci3: command tx timeout
[  150.429349][ T5840] Bluetooth: hci5: command tx timeout
[  150.705775][ T6394] overlayfs: invalid redirect ((null))
[  150.932876][ T6407] process 'syz.2.113' launched './file1' with NULL argv: empty string added
[  151.099278][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.138766][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.156619][ T6335] bridge_slave_0: entered allmulticast mode
[  151.179621][ T6335] bridge_slave_0: entered promiscuous mode
[  151.191986][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.209297][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.227411][ T6335] bridge_slave_1: entered allmulticast mode
[  151.243508][ T6335] bridge_slave_1: entered promiscuous mode
[  151.520634][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.543351][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.676283][ T6429] FAULT_INJECTION: forcing a failure.
[  151.676283][ T6429] name failslab, interval 1, probability 0, space 0, times 0
[  151.721687][ T6429] CPU: 0 UID: 0 PID: 6429 Comm: syz.0.116 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) 
[  151.721719][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  151.721732][ T6429] Call Trace:
[  151.721741][ T6429]  <TASK>
[  151.721750][ T6429]  dump_stack_lvl+0x241/0x360
[  151.721788][ T6429]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.721818][ T6429]  ? __pfx__printk+0x10/0x10
[  151.721850][ T6429]  ? __pfx___might_resched+0x10/0x10
[  151.721886][ T6429]  should_fail_ex+0x424/0x570
[  151.721924][ T6429]  should_failslab+0xac/0x100
[  151.721952][ T6429]  ? __get_vm_area_node+0x132/0x2d0
[  151.721978][ T6429]  __kmalloc_cache_node_noprof+0x74/0x3c0
[  151.722015][ T6429]  __get_vm_area_node+0x132/0x2d0
[  151.722049][ T6429]  __vmalloc_node_range_noprof+0x349/0x1390
[  151.722081][ T6429]  ? bpf_prog_alloc_no_stats+0x4d/0x4d0
[  151.722109][ T6429]  ? kstrtoull+0x1d3/0x2f0
[  151.722131][ T6429]  ? __pfx_kstrtoull+0x10/0x10
[  151.722172][ T6429]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  151.722213][ T6429]  ? bpf_prog_alloc_no_stats+0x4d/0x4d0
[  151.722238][ T6429]  __vmalloc_noprof+0x79/0x90
[  151.722269][ T6429]  ? bpf_prog_alloc_no_stats+0x4d/0x4d0
[  151.722296][ T6429]  bpf_prog_alloc_no_stats+0x4d/0x4d0
[  151.722321][ T6429]  ? bpf_prog_alloc+0x28/0x1b0
[  151.722350][ T6429]  bpf_prog_alloc+0x3a/0x1b0
[  151.722378][ T6429]  bpf_prog_load+0x7f4/0x2250
[  151.722418][ T6429]  ? __pfx_bpf_prog_load+0x10/0x10
[  151.722470][ T6429]  ? bpf_lsm_bpf+0x9/0x10
[  151.722507][ T6429]  __sys_bpf+0x5dd/0x8b0
[  151.722535][ T6429]  ? __pfx___sys_bpf+0x10/0x10
[  151.722575][ T6429]  ? ksys_write+0x275/0x2d0
[  151.722611][ T6429]  __x64_sys_bpf+0x7c/0x90
[  151.722635][ T6429]  do_syscall_64+0xf3/0x210
[  151.722658][ T6429]  ? clear_bhb_loop+0x45/0xa0
[  151.722683][ T6429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.722703][ T6429] RIP: 0033:0x7f0f3e18e169
[  151.722721][ T6429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.722738][ T6429] RSP: 002b:00007f0f3f033038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  151.722760][ T6429] RAX: ffffffffffffffda RBX: 00007f0f3e3b5fa0 RCX: 00007f0f3e18e169
[  151.722775][ T6429] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[  151.722788][ T6429] RBP: 00007f0f3f033090 R08: 0000000000000000 R09: 0000000000000000
[  151.722801][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.722812][ T6429] R13: 0000000000000001 R14: 00007f0f3e3b5fa0 R15: 00007fffeb261528
[  151.722844][ T6429]  </TASK>
[  151.723029][ T6429] syz.0.116: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  151.850793][ T5840] Bluetooth: hci3: command tx timeout
[  152.010419][ T6429] ,cpuset=/,mems_allowed=0-1
[  152.050300][ T6429] CPU: 1 UID: 0 PID: 6429 Comm: syz.0.116 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) 
[  152.050328][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  152.050341][ T6429] Call Trace:
[  152.050349][ T6429]  <TASK>
[  152.050357][ T6429]  dump_stack_lvl+0x241/0x360
[  152.050405][ T6429]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.050434][ T6429]  ? __pfx__printk+0x10/0x10
[  152.050460][ T6429]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  152.050497][ T6429]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  152.050530][ T6429]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  152.050574][ T6429]  warn_alloc+0x27c/0x410
[  152.050612][ T6429]  ? __pfx_warn_alloc+0x10/0x10
[  152.050654][ T6429]  ? __get_vm_area_node+0x280/0x2d0
[  152.050690][ T6429]  __vmalloc_node_range_noprof+0x36e/0x1390
[  152.050721][ T6429]  ? kstrtoull+0x1d3/0x2f0
[  152.050744][ T6429]  ? __pfx_kstrtoull+0x10/0x10
[  152.050785][ T6429]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  152.050826][ T6429]  ? bpf_prog_alloc_no_stats+0x4d/0x4d0
[  152.050851][ T6429]  __vmalloc_noprof+0x79/0x90
[  152.050882][ T6429]  ? bpf_prog_alloc_no_stats+0x4d/0x4d0
[  152.050910][ T6429]  bpf_prog_alloc_no_stats+0x4d/0x4d0
[  152.050936][ T6429]  ? bpf_prog_alloc+0x28/0x1b0
[  152.050964][ T6429]  bpf_prog_alloc+0x3a/0x1b0
[  152.050992][ T6429]  bpf_prog_load+0x7f4/0x2250
[  152.051031][ T6429]  ? __pfx_bpf_prog_load+0x10/0x10
[  152.051090][ T6429]  ? bpf_lsm_bpf+0x9/0x10
[  152.051120][ T6429]  __sys_bpf+0x5dd/0x8b0
[  152.051146][ T6429]  ? __pfx___sys_bpf+0x10/0x10
[  152.051185][ T6429]  ? ksys_write+0x275/0x2d0
[  152.051221][ T6429]  __x64_sys_bpf+0x7c/0x90
[  152.051244][ T6429]  do_syscall_64+0xf3/0x210
[  152.051267][ T6429]  ? clear_bhb_loop+0x45/0xa0
[  152.051292][ T6429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.051312][ T6429] RIP: 0033:0x7f0f3e18e169
[  152.051331][ T6429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.051347][ T6429] RSP: 002b:00007f0f3f033038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  152.051370][ T6429] RAX: ffffffffffffffda RBX: 00007f0f3e3b5fa0 RCX: 00007f0f3e18e169
[  152.051385][ T6429] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[  152.051405][ T6429] RBP: 00007f0f3f033090 R08: 0000000000000000 R09: 0000000000000000
[  152.051418][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.051430][ T6429] R13: 0000000000000001 R14: 00007f0f3e3b5fa0 R15: 00007fffeb261528
[  152.051463][ T6429]  </TASK>
[  152.051484][ T6429] Mem-Info:
[  152.419237][ T6429] active_anon:353 inactive_anon:10176 isolated_anon:0
[  152.419237][ T6429]  active_file:4442 inactive_file:37488 isolated_file:0
[  152.419237][ T6429]  unevictable:768 dirty:78 writeback:0
[  152.419237][ T6429]  slab_reclaimable:9720 slab_unreclaimable:97991
[  152.419237][ T6429]  mapped:34997 shmem:6835 pagetables:988
[  152.419237][ T6429]  sec_pagetables:0 bounce:0
[  152.419237][ T6429]  kernel_misc_reclaimable:0
[  152.419237][ T6429]  free:1334781 free_pcp:2335 free_cma:0
[  152.515090][ T6429] Node 0 active_anon:1412kB inactive_anon:41104kB active_file:17692kB inactive_file:150152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140388kB dirty:312kB writeback:0kB shmem:26104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11396kB pagetables:3752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  152.601654][ T6429] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  152.688299][ T6429] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  152.769526][ T5880] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  152.778359][ T6429] lowmem_reserve[]: 0 2488 2488 2488 2488
[  152.801016][ T6335] team0: Port device team_slave_0 added
[  152.817147][ T6335] team0: Port device team_slave_1 added
[  152.825215][ T6429] Node 0 DMA32 free:1421092kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:1408kB inactive_anon:33200kB active_file:17600kB inactive_file:154040kB unevictable:1536kB writepending:312kB present:3129332kB managed:2547772kB mlocked:0kB bounce:0kB free_pcp:15532kB local_pcp:12480kB free_cma:0kB
[  152.864079][ T6429] lowmem_reserve[]: 0 0 0 0 0
[  152.868880][ T6429] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  152.939114][ T5880] usb 3-1: Using ep0 maxpacket: 32
[  152.946184][ T5880] usb 3-1: config 0 interface 0 has no altsetting 0
[  152.967624][ T5880] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  152.989568][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.997621][ T5880] usb 3-1: Product: syz
[  153.019433][ T6429] lowmem_reserve[]: 0 0 0 0 0
[  153.024242][ T6429] Node 1 Normal free:3892732kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:7380kB local_pcp:1576kB free_cma:0kB
[  153.079869][ T5880] usb 3-1: Manufacturer: syz
[  153.084535][ T5880] usb 3-1: SerialNumber: syz
[  153.107630][ T5880] usb 3-1: config 0 descriptor??
[  153.132283][ T6429] lowmem_reserve[]: 0 0 0 0 0
[  153.137760][ T6429] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  153.168835][ T6429] Node 0 DMA32: 52*4kB (U) 31*8kB (UME) 12*16kB (UE) 43*32kB (UE) 112*64kB (UE) 60*128kB (UME) 43*256kB (UE) 22*512kB (UE) 13*1024kB (UM) 2*2048kB (UM) 330*4096kB (ME) = 1408232kB
[  153.189496][ T6429] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  153.309264][ T6429] Node 1 Normal: 203*4kB (UME) 42*8kB (UME) 41*16kB (UME) 211*32kB (UME) 101*64kB (UME) 27*128kB (UME) 7*256kB (UE) 6*512kB (UME) 1*1024kB (M) 3*2048kB (UME) 943*4096kB (M) = 3893036kB
[  153.505512][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.657226][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.736538][ T6429] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  153.779463][ T6429] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  153.794133][ T6429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  153.814124][ T6429] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  153.824760][ T6429] 52217 total pagecache pages
[  153.841825][ T6429] 0 pages in swap cache
[  153.854483][ T6429] Free swap  = 124996kB
[  153.864922][ T6429] Total swap = 124996kB
[  153.884372][ T6335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.897930][ T6429] 2097051 pages RAM
[  153.917037][ T6429] 0 pages HighMem/MovableOnly
[  153.927166][ T6429] 428449 pages reserved
[  153.930242][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.938503][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.964649][ T6429] 0 pages cma reserved
[  153.982962][ T6335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.015305][   T30] audit: type=1326 audit(1745268843.132:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6439 comm="syz.3.119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dc118e169 code=0x40000000
[  154.049244][ T5880] gs_usb 3-1:0.0: Couldn't get device config: (err=-32)
[  154.056276][ T5880] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32
[  154.072026][ T6323] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  154.278200][ T6323] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  154.315273][ T6335] hsr_slave_0: entered promiscuous mode
[  154.341890][ T6335] hsr_slave_1: entered promiscuous mode
[  154.362314][ T6335] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  154.384821][ T6335] Cannot create hsr debugfs directory
[  154.455799][ T6323] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  154.552363][ T6323] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  155.192441][ T6323] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.276087][ T6335] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  155.292768][ T6335] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  155.423508][ T6323] 8021q: adding VLAN 0 to HW filter on device team0
[  155.464104][ T6335] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  155.485724][ T6335] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  155.492639][ T5881] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  155.544231][ T3082] usb 3-1: USB disconnect, device number 5
[  155.867591][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.875092][ T6090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.891146][ T5881] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  155.910072][ T5881] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  155.919145][ T5881] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  155.931375][ T5881] usb 1-1: config 220 has no interface number 2
[  155.937753][ T5881] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  155.989802][ T5881] usb 1-1: config 220 interface 0 has no altsetting 0
[  155.996671][ T5881] usb 1-1: config 220 interface 76 has no altsetting 0
[  155.999853][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.004419][ T5881] usb 1-1: config 220 interface 1 has no altsetting 0
[  156.010871][ T6090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.037639][ T5881] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  156.074929][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.120581][ T5881] usb 1-1: Product: syz
[  156.124831][ T5881] usb 1-1: Manufacturer: syz
[  156.157259][ T5881] usb 1-1: SerialNumber: syz
[  156.426177][ T6335] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.431736][ T5881] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  156.470748][ T5881] usb 1-1: No valid video chain found.
[  156.486946][ T5881] usb 1-1: selecting invalid altsetting 0
[  156.559431][ T5881] usb 1-1: selecting invalid altsetting 0
[  156.565211][ T5881] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  156.609515][ T6335] 8021q: adding VLAN 0 to HW filter on device team0
[  156.642323][ T5881] usb 1-1: USB disconnect, device number 5
[  156.678740][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.686041][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.756563][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.763792][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.026162][ T6335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  157.058618][ T6335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  157.318483][ T6323] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.679233][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  157.723029][ T6335] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.839072][   T10] usb 1-1: device descriptor read/64, error -71
[  158.089167][   T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  158.239112][   T10] usb 1-1: device descriptor read/64, error -71
[  158.341148][ T6323] veth0_vlan: entered promiscuous mode
[  158.349944][   T10] usb usb1-port1: attempt power cycle
[  158.387706][ T6323] veth1_vlan: entered promiscuous mode
[  158.849922][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  159.044773][ T6323] veth0_macvtap: entered promiscuous mode
[  159.054099][   T10] usb 1-1: device descriptor read/8, error -71
[  159.063869][ T6323] veth1_macvtap: entered promiscuous mode
[  159.113128][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.140875][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.341277][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.434203][   T30] audit: type=1800 audit(1745268848.532:182): pid=6515 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.124" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  159.457638][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.481553][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.516475][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  159.572460][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.579408][ T6506] netlink: 'syz.2.125': attribute type 9 has an invalid length.
[  159.590246][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'.
[  159.612333][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.623368][   T10] usb 1-1: device descriptor read/8, error -71
[  159.649016][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.680824][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.727297][ T6506] netlink: 48 bytes leftover after parsing attributes in process `syz.2.125'.
[  159.743492][   T10] usb usb1-port1: unable to enumerate USB device
[  159.998038][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.029445][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.059048][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.080387][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.109074][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.145321][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.165096][ T6512] hub 6-0:1.0: USB hub found
[  160.171069][ T6512] hub 6-0:1.0: 1 port detected
[  160.209207][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.227729][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.239830][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.287019][ T6335] veth0_vlan: entered promiscuous mode
[  160.307632][ T6323] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.327302][ T6323] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.377407][ T6323] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.428508][ T6323] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.536634][ T6335] veth1_vlan: entered promiscuous mode
[  162.423253][ T6335] veth0_macvtap: entered promiscuous mode
[  162.592763][ T6335] veth1_macvtap: entered promiscuous mode
[  162.678564][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.739364][ T5834] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  162.911588][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.922222][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.931234][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.941144][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.951669][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.961692][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.972661][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.982910][ T5834] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  162.995041][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.003820][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.018154][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.030876][ T5834] usb 1-1: config 0 descriptor??
[  163.038427][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.051426][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.064370][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.093703][ T5834] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  163.185587][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.228149][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.265182][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.283907][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.306931][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.317578][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.328020][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.338672][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.348628][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.359799][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.389877][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.603724][ T6553] x_tables: duplicate underflow at hook 1
[  164.278159][ T6335] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.302966][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.308424][ T6335] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.332654][ T6335] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.342353][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.359009][ T6335] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.427920][ T6107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.446168][ T6107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.701455][ T6107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.751818][ T6107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.991823][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.019212][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.603135][ T6570] netlink: 52 bytes leftover after parsing attributes in process `syz.5.94'.
[  165.630798][ T5834] usb 1-1: USB disconnect, device number 10
[  166.020508][   T30] audit: type=1800 audit(1745268855.152:183): pid=6581 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.135" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  166.545357][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  167.299921][    T9] usb 6-1: device descriptor read/64, error -71
[  167.943213][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  169.044316][    T9] usb 6-1: device descriptor read/64, error -71
[  169.179336][    T9] usb usb6-port1: attempt power cycle
[  172.180444][ T5881] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  172.341689][ T6635] netlink: 52 bytes leftover after parsing attributes in process `syz.6.145'.
[  172.619090][ T5881] usb 3-1: Using ep0 maxpacket: 8
[  172.684606][ T5881] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  172.710942][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.885651][ T5881] usb 3-1: Product: syz
[  172.891164][ T5881] usb 3-1: Manufacturer: syz
[  172.895903][ T5881] usb 3-1: SerialNumber: syz
[  172.904708][ T5881] usb 3-1: config 0 descriptor??
[  173.803618][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.147'.
[  173.988362][ T5881] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  174.916055][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.6.149'.
[  176.722495][ T5881] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  176.876610][ T5881] dvbdev: DVB: registering new adapter (Terratec H7)
[  176.892305][ T5881] usb 3-1: media controller created
[  177.405348][ T6683] netlink: 20 bytes leftover after parsing attributes in process `syz.5.156'.
[  179.030691][ T6697] netlink: 60 bytes leftover after parsing attributes in process `syz.5.160'.
[  180.264863][ T5881] usb read operation failed. (-71)
[  180.378825][ T5881] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  180.431045][ T5881] usb 3-1: USB disconnect, device number 6
[  180.589956][ T6707] netlink: 52 bytes leftover after parsing attributes in process `syz.6.159'.
[  182.343873][   T30] audit: type=1800 audit(1745268871.432:184): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.161" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  182.746162][ T6721] kvm: kvm [6719]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400
[  182.960092][ T6723] netlink: 156 bytes leftover after parsing attributes in process `syz.0.164'.
[  185.280224][ T6731] IPv6: addrconf: prefix option has invalid lifetime
[  186.309169][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  186.528166][    T9] usb 7-1: Using ep0 maxpacket: 8
[  186.562990][ T5977] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.583973][    T9] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  186.602522][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.707014][    T9] usb 7-1: config 0 descriptor??
[  186.736577][ T6745] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  186.743356][ T6745] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  186.804625][ T5977] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.815952][ T6745] vhci_hcd vhci_hcd.0: Device attached
[  186.939510][    T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  186.990807][    T9] asix 7-1:0.0: probe with driver asix failed with error -32
[  187.014301][   T52] vhci_hcd: vhci_device speed not set
[  187.050889][ T6745] netlink: 'syz.0.171': attribute type 2 has an invalid length.
[  187.099216][   T52] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  187.162051][ T5977] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.428090][ T6748] vhci_hcd: connection reset by peer
[  187.443261][ T6761] netlink: 60 bytes leftover after parsing attributes in process `syz.3.173'.
[  187.455555][ T1149] vhci_hcd: stop threads
[  187.478354][ T1149] vhci_hcd: release socket
[  187.488726][ T5977] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.715254][ T1149] vhci_hcd: disconnect device
[  188.654519][ T5881] usb 7-1: USB disconnect, device number 2
[  188.746099][ T5977] bridge_slave_1: left allmulticast mode
[  189.071403][ T5977] bridge_slave_1: left promiscuous mode
[  189.349780][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.429796][ T5977] bridge_slave_0: left allmulticast mode
[  189.456170][ T5977] bridge_slave_0: left promiscuous mode
[  189.480878][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.501325][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.177'.
[  189.769771][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  189.778483][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  189.790053][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  189.800749][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  189.814107][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  190.164784][   T30] audit: type=1800 audit(1745268879.282:185): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.179" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  191.950324][ T5840] Bluetooth: hci1: command tx timeout
[  192.644442][   T52] vhci_hcd: vhci_device speed not set
[  192.693088][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.704653][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.715918][ T5977] bond0 (unregistering): Released all slaves
[  192.754047][ T6786] erspan0: entered promiscuous mode
[  192.773276][ T6786] macsec1: entered promiscuous mode
[  193.237083][ T6829] netlink: 60 bytes leftover after parsing attributes in process `syz.3.184'.
[  194.089281][ T5840] Bluetooth: hci1: command tx timeout
[  194.313947][ T6833] IPv6: addrconf: prefix option has invalid lifetime
[  194.780250][    T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  194.979148][    T9] usb 1-1: Using ep0 maxpacket: 8
[  194.994285][    T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  195.061775][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.213253][    T9] usb 1-1: config 0 descriptor??
[  195.498499][ T6844] Falling back ldisc for ptm0.
[  195.598133][    T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  195.743933][    T9] asix 1-1:0.0: probe with driver asix failed with error -32
[  196.092559][ T5977] hsr_slave_0: left promiscuous mode
[  196.112349][ T5977] hsr_slave_1: left promiscuous mode
[  196.169448][ T5840] Bluetooth: hci1: command tx timeout
[  196.589931][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.597437][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.658076][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.669215][   T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  196.678073][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.754893][ T5977] veth1_macvtap: left promiscuous mode
[  196.761427][ T5977] veth0_macvtap: left promiscuous mode
[  196.767128][ T5977] veth1_vlan: left promiscuous mode
[  196.784182][ T5977] veth0_vlan: left promiscuous mode
[  196.866030][   T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  196.898307][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.914572][   T24] usb 4-1: Product: syz
[  196.927103][   T24] usb 4-1: Manufacturer: syz
[  196.934098][   T24] usb 4-1: SerialNumber: syz
[  196.975564][   T24] usb 4-1: config 0 descriptor??
[  197.422432][    T9] usb 1-1: USB disconnect, device number 11
[  197.642410][   T24] usb 4-1: Firmware version (0.0) predates our first public release.
[  197.665097][   T24] usb 4-1: Please update to version 0.2 or newer
[  197.920726][ T6878] loop8: detected capacity change from 0 to 7
[  197.957528][ T6878] Dev loop8: unable to read RDB block 7
[  197.979248][ T6878]  loop8: unable to read partition table
[  197.998158][ T6878] loop8: partition table beyond EOD, truncated
[  198.018033][ T6878] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  198.018033][ T6878] 
) failed (rc=-5)
[  198.249232][ T5840] Bluetooth: hci1: command tx timeout
[  198.288000][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'.
[  198.524085][ T5977] team0 (unregistering): Port device team_slave_1 removed
[  198.561827][ T5977] team0 (unregistering): Port device team_slave_0 removed
[  198.659271][ T5881] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  198.829306][ T5881] usb 7-1: Using ep0 maxpacket: 16
[  198.842485][ T5881] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11
[  198.867910][ T5881] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  198.906218][ T5881] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  198.943775][ T5881] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  198.975299][ T5881] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  198.986029][ T5881] usb 7-1: config 1 interface 0 has no altsetting 0
[  198.993828][ T5881] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  199.007620][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.533791][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  199.543123][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  199.751429][ T5881] ums-sddr09 7-1:1.0: USB Mass Storage device detected
[  199.862855][ T6897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.197'.
[  200.083430][ T5881] scsi host1: usb-storage 7-1:1.0
[  200.728648][   T24] usb 4-1: USB disconnect, device number 4
[  200.952330][ T6885] erspan0: entered promiscuous mode
[  200.963626][ T6885] macsec1: entered promiscuous mode
[  201.236237][ T6098] scsi 1:0:0:0: Direct-Access     Sandisk  ImageMate SDDR09 0177 PQ: 0 ANSI: 0
[  201.357934][ T3082] usb 7-1: USB disconnect, device number 3
[  202.483865][ T6918] IPv6: addrconf: prefix option has invalid lifetime
[  202.524311][ T6098] sd 1:0:0:0: Attached scsi generic sg1 type 0
[  202.551274][ T6111] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  202.564565][ T6111] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  202.576785][ T6111] sd 1:0:0:0: [sdb] Sense not available.
[  202.583153][ T6111] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[  202.609029][ T6111] sd 1:0:0:0: [sdb] 0-byte physical blocks
[  202.615115][ T6111] sd 1:0:0:0: [sdb] Write Protect is off
[  202.664112][ T6111] sd 1:0:0:0: [sdb] Asking for cache data failed
[  202.685000][ T6111] sd 1:0:0:0: [sdb] Assuming drive cache: write through
[  202.868736][ T6111] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[  202.889347][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  202.926870][ T6792] chnl_net:caif_netlink_parms(): no params data found
[  202.975865][ T6932] netlink: 52 bytes leftover after parsing attributes in process `syz.3.203'.
[  203.119057][    T9] usb 6-1: Using ep0 maxpacket: 8
[  203.556895][    T9] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  203.604653][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.785819][    T9] usb 6-1: config 0 descriptor??
[  203.970363][ T6940] loop8: detected capacity change from 0 to 7
[  204.008429][ T5878] Dev loop8: unable to read RDB block 7
[  204.019191][    T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  204.033927][    T9] asix 6-1:0.0: probe with driver asix failed with error -32
[  204.048302][ T5878]  loop8: unable to read partition table
[  204.057280][ T5878] loop8: partition table beyond EOD, truncated
[  204.099634][ T6940] Dev loop8: unable to read RDB block 7
[  204.160194][ T6940]  loop8: unable to read partition table
[  204.166737][ T6940] loop8: partition table beyond EOD, truncated
[  204.176578][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.187763][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.196046][ T6940] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  204.196046][ T6940] 
) failed (rc=-5)
[  204.218719][ T6792] bridge_slave_0: entered allmulticast mode
[  204.235194][ T6792] bridge_slave_0: entered promiscuous mode
[  204.263746][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.280209][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.287783][ T6792] bridge_slave_1: entered allmulticast mode
[  204.296700][ T6792] bridge_slave_1: entered promiscuous mode
[  204.496839][ T6792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.525267][ T6792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.657870][ T6792] team0: Port device team_slave_0 added
[  204.691541][ T6792] team0: Port device team_slave_1 added
[  204.817996][ T5980] udevd[5980]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  204.900262][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.910889][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.938721][ T6792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.952794][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.960318][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.996077][ T6792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.227420][ T5877] udevd[5877]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  205.501076][ T6792] hsr_slave_0: entered promiscuous mode
[  206.238053][ T6792] hsr_slave_1: entered promiscuous mode
[  206.252103][ T6792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.260398][ T6792] Cannot create hsr debugfs directory
[  206.428142][ T5834] usb 6-1: USB disconnect, device number 5
[  206.625872][ T6968] netlink: 20 bytes leftover after parsing attributes in process `syz.6.207'.
[  208.535671][ T6792] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  208.564414][ T6992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.214'.
[  208.619197][ T3082] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  208.667825][ T6792] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  208.679164][   T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  208.705047][ T6792] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  209.299051][ T3082] usb 6-1: Using ep0 maxpacket: 8
[  209.306961][ T6792] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  209.442914][ T3082] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  209.473462][ T3082] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  209.489782][   T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  209.498884][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.529022][ T3082] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.544752][   T24] usb 1-1: config 0 descriptor??
[  209.551301][ T3082] usb 6-1: config 0 descriptor??
[  209.588082][   T24] cp210x 1-1:0.0: cp210x converter detected
[  209.801566][ T6792] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.020182][   T24] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  210.594301][ T6792] 8021q: adding VLAN 0 to HW filter on device team0
[  210.719589][   T24] usb 1-1: cp210x converter now attached to ttyUSB0
[  210.759789][ T3082] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  210.781337][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.788576][ T6096] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.451684][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.458998][ T6096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.851632][ T5838] Bluetooth: hci0: command 0x0406 tx timeout
[  211.851641][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  211.966320][ T5834] usb 6-1: USB disconnect, device number 6
[  212.152998][ T7019] IPv6: addrconf: prefix option has invalid lifetime
[  212.633783][   T52] usb 1-1: USB disconnect, device number 12
[  212.670701][   T52] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  212.672383][ T6792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.771204][   T52] cp210x 1-1:0.0: device disconnected
[  212.849085][ T7030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.891078][ T7030] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.179396][   T52] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  213.622174][ T7048] netlink: 52 bytes leftover after parsing attributes in process `syz.5.223'.
[  213.726786][ T7049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.219'.
[  213.906268][ T6792] veth0_vlan: entered promiscuous mode
[  213.937265][ T6792] veth1_vlan: entered promiscuous mode
[  214.006679][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.225'.
[  214.059194][   T52] usb 1-1: device descriptor read/64, error -71
[  214.150451][ T6792] veth0_macvtap: entered promiscuous mode
[  214.246299][ T6792] veth1_macvtap: entered promiscuous mode
[  214.425110][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.435837][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.446512][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.457952][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.468220][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.479524][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.499763][   T52] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  214.500324][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.520480][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.531880][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.543008][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.574537][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.594506][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.607938][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.620412][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.631822][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.658164][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.704694][   T52] usb 1-1: Using ep0 maxpacket: 32
[  214.709040][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.735917][   T52] usb 1-1: config 0 interface 0 has no altsetting 0
[  214.747530][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.749129][   T52] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  214.775164][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.785090][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.785119][   T52] usb 1-1: Product: syz
[  214.785135][   T52] usb 1-1: Manufacturer: syz
[  214.785152][   T52] usb 1-1: SerialNumber: syz
[  214.850382][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.852598][   T52] usb 1-1: config 0 descriptor??
[  214.882243][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.954280][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.015764][ T6792] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.041959][ T6792] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.077245][ T6792] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.094010][ T6792] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.189240][ T5880] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  215.318412][   T52] gs_usb 1-1:0.0: Couldn't get device config: (err=-121)
[  215.360188][   T52] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121
[  215.432369][ T5880] usb 7-1: config index 0 descriptor too short (expected 36, got 21)
[  215.462492][ T5880] usb 7-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config
[  215.481344][ T5880] usb 7-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  215.514949][ T5880] usb 7-1: config 0 interface 0 has no altsetting 0
[  215.546674][ T5880] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  215.583033][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.614711][ T6113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.640059][ T5880] usb 7-1: config 0 descriptor??
[  215.644218][ T6113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.698578][ T5880] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  215.735785][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.749902][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.923429][ T5880] usb 7-1: USB disconnect, device number 4
[  217.186476][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  217.475528][    T9] usb 1-1: USB disconnect, device number 14
[  217.563209][   T10] usb 4-1: device descriptor read/64, error -71
[  217.973229][ T7106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.234'.
[  217.989637][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  218.120447][ T7108] netlink: 16 bytes leftover after parsing attributes in process `syz.7.235'.
[  218.310828][   T10] usb 4-1: device descriptor read/64, error -71
[  218.440008][   T10] usb usb4-port1: attempt power cycle
[  218.949606][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  219.007302][   T10] usb 4-1: device descriptor read/8, error -71
[  219.259328][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  219.330146][   T10] usb 4-1: device descriptor read/8, error -71
[  219.440575][   T10] usb usb4-port1: unable to enumerate USB device
[  219.712927][ T7136] FAULT_INJECTION: forcing a failure.
[  219.712927][ T7136] name failslab, interval 1, probability 0, space 0, times 0
[  219.829883][ T7136] CPU: 1 UID: 0 PID: 7136 Comm: syz.3.241 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) 
[  219.829914][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  219.829927][ T7136] Call Trace:
[  219.829935][ T7136]  <TASK>
[  219.829943][ T7136]  dump_stack_lvl+0x241/0x360
[  219.829991][ T7136]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.830020][ T7136]  ? __pfx__printk+0x10/0x10
[  219.830051][ T7136]  ? __pfx___might_resched+0x10/0x10
[  219.830088][ T7136]  should_fail_ex+0x424/0x570
[  219.830124][ T7136]  should_failslab+0xac/0x100
[  219.830151][ T7136]  __kmalloc_noprof+0xdf/0x4d0
[  219.830177][ T7136]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  219.830214][ T7136]  genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  219.830255][ T7136]  genl_rcv_msg+0x819/0xf00
[  219.830296][ T7136]  ? __pfx_genl_rcv_msg+0x10/0x10
[  219.830323][ T7136]  ? __dev_queue_xmit+0x1780/0x3f60
[  219.830341][ T7136]  ? kasan_save_track+0x3f/0x80
[  219.830359][ T7136]  ? __kasan_slab_alloc+0x66/0x80
[  219.830387][ T7136]  ? do_syscall_64+0xf3/0x210
[  219.830425][ T7136]  ? __lock_acquire+0xad5/0xd80
[  219.830453][ T7136]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  219.830479][ T7136]  ? __pfx_nl80211_set_rekey_data+0x10/0x10
[  219.830507][ T7136]  ? __pfx_nl80211_post_doit+0x10/0x10
[  219.830550][ T7136]  netlink_rcv_skb+0x208/0x480
[  219.830577][ T7136]  ? __pfx_genl_rcv_msg+0x10/0x10
[  219.830618][ T7136]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  219.830665][ T7136]  ? netlink_deliver_tap+0x2e/0x1b0
[  219.830697][ T7136]  genl_rcv+0x28/0x40
[  219.830726][ T7136]  netlink_unicast+0x7f8/0x9a0
[  219.830758][ T7136]  ? __pfx_netlink_unicast+0x10/0x10
[  219.830784][ T7136]  ? skb_put+0x114/0x1f0
[  219.830819][ T7136]  netlink_sendmsg+0x8c3/0xcd0
[  219.830860][ T7136]  ? __pfx_netlink_sendmsg+0x10/0x10
[  219.830900][ T7136]  ? __pfx_netlink_sendmsg+0x10/0x10
[  219.830924][ T7136]  __sock_sendmsg+0x221/0x270
[  219.830953][ T7136]  ____sys_sendmsg+0x523/0x860
[  219.830995][ T7136]  ? __pfx_____sys_sendmsg+0x10/0x10
[  219.831024][ T7136]  ? __fget_files+0x2a/0x420
[  219.831053][ T7136]  ? __fget_files+0x2a/0x420
[  219.831087][ T7136]  __sys_sendmsg+0x271/0x360
[  219.831126][ T7136]  ? __pfx___sys_sendmsg+0x10/0x10
[  219.831216][ T7136]  ? do_syscall_64+0xb6/0x210
[  219.831242][ T7136]  do_syscall_64+0xf3/0x210
[  219.831263][ T7136]  ? clear_bhb_loop+0x45/0xa0
[  219.831289][ T7136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.831308][ T7136] RIP: 0033:0x7f7dc118e169
[  219.831335][ T7136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.831352][ T7136] RSP: 002b:00007f7dbeff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.831374][ T7136] RAX: ffffffffffffffda RBX: 00007f7dc13b5fa0 RCX: 00007f7dc118e169
[  219.831389][ T7136] RDX: 0000000000004000 RSI: 0000200000000380 RDI: 0000000000000004
[  219.831402][ T7136] RBP: 00007f7dbeff6090 R08: 0000000000000000 R09: 0000000000000000
[  219.831415][ T7136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.831427][ T7136] R13: 0000000000000000 R14: 00007f7dc13b5fa0 R15: 00007fff45cfcf98
[  219.831459][ T7136]  </TASK>
[  220.388527][ T7148] netlink: 52 bytes leftover after parsing attributes in process `syz.0.242'.
[  220.509500][   T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  220.600383][ T5880] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  220.697381][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.713150][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.735723][   T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  220.781331][ T5880] usb 6-1: config index 0 descriptor too short (expected 36, got 21)
[  220.790988][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.800151][ T5880] usb 6-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config
[  220.822036][   T10] usb 4-1: config 0 descriptor??
[  220.914517][ T5880] usb 6-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  221.075265][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0
[  221.126993][ T5880] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  221.242319][   T10] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[  221.267401][   T10] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[  221.285350][   T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0003/input/input6
[  221.307666][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.347740][   T10] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  221.392745][ T5880] usb 6-1: config 0 descriptor??
[  221.454164][ T7144] warning: `syz.3.244' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  221.477498][ T5880] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  221.539058][ T5834] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  221.540438][ T3082] usb 4-1: USB disconnect, device number 9
[  221.635023][ T5881] usb 6-1: USB disconnect, device number 7
[  221.712435][ T5834] usb 8-1: Using ep0 maxpacket: 8
[  221.734297][ T5834] usb 8-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01
[  221.757054][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.798686][ T5834] usb 8-1: Product: syz
[  221.813947][ T5834] usb 8-1: Manufacturer: syz
[  221.847444][ T5834] usb 8-1: SerialNumber: syz
[  221.887348][ T5834] usb 8-1: config 0 descriptor??
[  221.928589][ T5834] go7007 8-1:0.0: probe with driver go7007 failed with error -12
[  222.125182][ T7159] netlink: 'syz.7.245': attribute type 7 has an invalid length.
[  222.161476][ T7159] netlink: 148 bytes leftover after parsing attributes in process `syz.7.245'.
[  222.201464][ T5834] usb 8-1: USB disconnect, device number 2
[  222.228104][ T7168] IPv6: addrconf: prefix option has invalid lifetime
[  222.458687][ T7171] netlink: 20 bytes leftover after parsing attributes in process `syz.6.247'.
[  222.488606][ T7174] netlink: 16 bytes leftover after parsing attributes in process `syz.5.248'.
[  222.599302][ T3082] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  222.799126][ T3082] usb 4-1: Using ep0 maxpacket: 8
[  222.878981][ T3082] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  222.924754][ T3082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.275115][ T3082] usb 4-1: config 0 descriptor??
[  223.616261][ T3082] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  224.095382][ T7200] netlink: 'syz.5.254': attribute type 1 has an invalid length.
[  224.161448][ T7200] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.254'.
[  225.229169][   T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  225.541362][ T3082] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  225.607382][ T3082] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  225.624198][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.647666][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.684711][ T3082] asix 4-1:0.0: probe with driver asix failed with error -71
[  225.705015][   T10] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  225.736309][ T3082] usb 4-1: USB disconnect, device number 10
[  225.824351][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.930051][   T10] usb 8-1: config 0 descriptor??
[  226.109327][ T5936] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  226.281418][ T5936] usb 6-1: config index 0 descriptor too short (expected 36, got 21)
[  226.319184][ T5936] usb 6-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config
[  226.348315][ T5936] usb 6-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  226.352274][   T10] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  226.393843][ T5936] usb 6-1: config 0 interface 0 has no altsetting 0
[  226.421117][   T10] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  226.428532][ T5936] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  226.438895][   T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0004/input/input7
[  226.457764][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.517518][   T10] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0
[  226.549445][ T5936] usb 6-1: config 0 descriptor??
[  226.598499][ T5936] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  226.632766][   T10] usb 8-1: USB disconnect, device number 3
[  226.636830][ T6108] Bluetooth: hci4: Frame reassembly failed (-84)
[  226.664507][ T7221] IPVS: Error connecting to the multicast addr
[  226.764225][ T5936] usb 6-1: USB disconnect, device number 8
[  227.262238][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.6.259'.
[  227.637719][ T7239] netlink: 52 bytes leftover after parsing attributes in process `syz.7.261'.
[  228.649511][ T5840] Bluetooth: hci4: command 0x1003 tx timeout
[  228.651768][   T55] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  228.897232][   T55] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  228.911264][   T55] Bluetooth: hci5: Injecting HCI hardware error event
[  228.921980][   T55] Bluetooth: hci5: hardware error 0x00
[  228.950538][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.263'.
[  229.805216][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.264'.
[  231.105662][ T7265] netlink: 'syz.3.267': attribute type 4 has an invalid length.
[  232.809086][   T55] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  234.064949][ T7293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.272'.
[  234.084253][ T5936] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  234.863168][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'.
[  234.874565][ T7306] bridge_slave_1: left allmulticast mode
[  234.880470][ T7306] bridge_slave_1: left promiscuous mode
[  234.889433][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.291334][ T7306] bridge_slave_0: left allmulticast mode
[  235.301303][ T7306] bridge_slave_0: left promiscuous mode
[  235.307900][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.397358][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.444497][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.495136][ T5936] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  235.560953][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.615273][ T5936] usb 4-1: config 0 descriptor??
[  235.819285][ T5881] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  236.035017][ T5881] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  236.046834][ T5881] usb 6-1: config 0 has no interface number 0
[  236.058573][ T5936] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  236.081187][ T5881] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  236.096109][ T5936] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  236.109096][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.146398][ T5936] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0005/input/input8
[  236.166622][ T5881] usb 6-1: config 0 descriptor??
[  236.213004][ T5881] usb 6-1: selecting invalid altsetting 1
[  236.269102][ T5881] dvb_ttusb_budget: ttusb_init_controller: error
[  236.282506][ T5881] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  236.293769][ T5936] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  236.382041][ T5936] usb 4-1: USB disconnect, device number 11
[  236.416847][ T7313] syz.5.276 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  237.415599][ T5881] DVB: Unable to find symbol cx22700_attach()
[  237.613775][ T5881] DVB: Unable to find symbol tda10046_attach()
[  237.654607][ T5881] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  237.722126][ T5881] usb 6-1: USB disconnect, device number 9
[  239.084383][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'.
[  239.093496][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'.
[  240.976525][   T30] audit: type=1326 audit(1745268930.102:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7356 comm="syz.7.284" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa10738e169 code=0x0
[  241.313778][ T7366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.285'.
[  243.659132][    T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  244.807552][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.853992][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.871972][    T9] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  245.001019][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.115757][   T30] audit: type=1800 audit(1745268934.212:187): pid=7392 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.292" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  245.150271][    T9] usb 8-1: config 0 descriptor??
[  245.312991][ T7410] netlink: 52 bytes leftover after parsing attributes in process `syz.3.294'.
[  245.583666][    T9] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  245.686609][    T9] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  245.790937][    T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0006/input/input9
[  245.896986][    T9] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0
[  245.938255][    T9] usb 8-1: USB disconnect, device number 4
[  246.021817][ T7417] netlink: 'syz.6.295': attribute type 21 has an invalid length.
[  246.059469][ T7417] netlink: 152 bytes leftover after parsing attributes in process `syz.6.295'.
[  246.071034][ T7417] netlink: 5 bytes leftover after parsing attributes in process `syz.6.295'.
[  246.090987][ T7392] hub 6-0:1.0: USB hub found
[  246.096154][ T7392] hub 6-0:1.0: 1 port detected
[  246.213741][ T7422] netlink: 20 bytes leftover after parsing attributes in process `syz.5.297'.
[  246.356212][ T5936] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  248.666930][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.7.304'.
[  248.760215][ T7456] erspan0: entered promiscuous mode
[  248.767621][ T7456] macsec1: entered promiscuous mode
[  249.640523][   T30] audit: type=1800 audit(1745268938.722:188): pid=7448 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.303" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  249.700686][ T5936] usb 7-1: unable to get BOS descriptor or descriptor too short
[  249.725369][ T5936] usb 7-1: unable to read config index 0 descriptor/start: -71
[  249.736091][ T5936] usb 7-1: can't read configurations, error -71
[  250.074153][ T7448] hub 6-0:1.0: USB hub found
[  250.079550][ T7448] hub 6-0:1.0: 1 port detected
[  250.214914][ T7469] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  250.331113][ T6113] Bluetooth: hci4: Frame reassembly failed (-84)
[  251.325496][ T7488] bond_slave_1: entered promiscuous mode
[  251.389100][ T5936] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  251.506427][ T7488] bond_slave_1: left promiscuous mode
[  251.604625][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.647079][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.697499][ T5936] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  251.718547][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.809125][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  251.830235][ T5936] usb 7-1: config 0 descriptor??
[  251.901276][ T7503] kvm: pic: single mode not supported
[  251.971235][    T9] usb 4-1: Using ep0 maxpacket: 8
[  252.007041][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  252.036630][    T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  252.054520][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.081188][    T9] usb 4-1: config 0 descriptor??
[  252.249911][   T55] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  252.256763][ T5936] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0
[  252.426112][    T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  252.643435][ T5936] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0
[  252.670956][ T5936] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0007/input/input10
[  253.535154][ T5936] cm6533_jd 0003:0D8C:0022.0007: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0
[  253.595300][ T5936] usb 7-1: USB disconnect, device number 7
[  253.964619][ T7526] netlink: 72 bytes leftover after parsing attributes in process `syz.6.319'.
[  254.189932][ T7533] netlink: 132 bytes leftover after parsing attributes in process `syz.6.321'.
[  254.199454][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.207663][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.231643][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.237443][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.241998][ T7533] netlink: 132 bytes leftover after parsing attributes in process `syz.6.321'.
[  254.244077][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.257970][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.263669][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.269330][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.274894][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.280540][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.286118][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.291789][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.297340][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.303185][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.308740][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.314376][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.319964][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.325504][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.333210][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.335055][ T7533] netlink: 132 bytes leftover after parsing attributes in process `syz.6.321'.
[  254.338786][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.338837][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.359323][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.364898][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.370530][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.376075][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.381681][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.387263][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.389809][ T7516] wg1: entered promiscuous mode
[  254.393112][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.403424][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.409253][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.414835][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.416360][ T7516] wg1: entered allmulticast mode
[  254.420454][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.420497][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.420536][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.420575][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.420611][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.420647][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.420683][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.467271][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.473003][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.478670][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.484306][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.496689][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.502457][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.508011][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.513610][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.519221][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.524760][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.530534][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.538242][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.543882][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.549529][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.555113][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.560726][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.566366][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.572096][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.577637][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.583251][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.588874][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.594532][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.600136][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.605808][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.611506][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.617045][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.623016][   T55] Bluetooth: hci3: Malformed HCI Event
[  254.634652][ T7533] netlink: 132 bytes leftover after parsing attributes in process `syz.6.321'.
[  254.646430][ T7533] netlink: 132 bytes leftover after parsing attributes in process `syz.6.321'.
[  254.655961][ T7533] netlink: 132 bytes leftover after parsing attributes in process `syz.6.321'.
[  254.733410][ T7533] netlink: 132 bytes leftover after parsing attributes in process `syz.6.321'.
[  254.762236][    T9] usb 4-1: USB disconnect, device number 12
[  254.819386][ T7533] netlink: 132 bytes leftover after parsing attributes in process `syz.6.321'.
[  257.780083][   T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  257.880910][   T55] Bluetooth: hci1: Injecting HCI hardware error event
[  257.895087][   T55] Bluetooth: hci1: hardware error 0x00
[  260.666318][   T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  261.165160][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  261.171697][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  262.814748][    T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  263.199766][    T9] usb 4-1: Using ep0 maxpacket: 32
[  263.218751][    T9] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  263.231246][    T9] usb 4-1: config 0 has no interface number 0
[  263.263394][    T9] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  263.291322][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.307954][    T9] usb 4-1: Product: syz
[  263.333340][    T9] usb 4-1: Manufacturer: syz
[  263.350228][    T9] usb 4-1: SerialNumber: syz
[  263.372907][    T9] usb 4-1: config 0 descriptor??
[  263.436594][    T9] hub 4-1:0.89: bad descriptor, ignoring hub
[  263.467555][    T9] hub 4-1:0.89: probe with driver hub failed with error -5
[  263.510058][    T9] option 4-1:0.89: GSM modem (1-port) converter detected
[  263.566796][    T9] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0
[  263.859324][ T5936] usb 4-1: USB disconnect, device number 13
[  263.900598][ T5936] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  263.940087][ T5936] option 4-1:0.89: device disconnected
[  264.107763][    T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  264.128591][ T7644] kvm: pic: single mode not supported
[  264.781247][    T9] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  265.262719][   T30] audit: type=1800 audit(1745268954.352:189): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.346" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  266.947471][ T5840] Bluetooth: min 6 > max 0
[  267.440114][ T7692] FAULT_INJECTION: forcing a failure.
[  267.440114][ T7692] name failslab, interval 1, probability 0, space 0, times 0
[  267.513587][ T7692] CPU: 0 UID: 0 PID: 7692 Comm: syz.0.351 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) 
[  267.513620][ T7692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  267.513633][ T7692] Call Trace:
[  267.513642][ T7692]  <TASK>
[  267.513652][ T7692]  dump_stack_lvl+0x241/0x360
[  267.513690][ T7692]  ? __pfx_dump_stack_lvl+0x10/0x10
[  267.513719][ T7692]  ? __pfx__printk+0x10/0x10
[  267.513745][ T7692]  ? __lock_acquire+0xad5/0xd80
[  267.513784][ T7692]  should_fail_ex+0x424/0x570
[  267.513821][ T7692]  should_failslab+0xac/0x100
[  267.513849][ T7692]  kmem_cache_alloc_noprof+0x78/0x390
[  267.513875][ T7692]  ? skb_clone+0x20c/0x390
[  267.513900][ T7692]  skb_clone+0x20c/0x390
[  267.513925][ T7692]  __netlink_deliver_tap+0x3c4/0x7f0
[  267.513964][ T7692]  ? netlink_deliver_tap+0x2e/0x1b0
[  267.513988][ T7692]  netlink_deliver_tap+0x19d/0x1b0
[  267.514015][ T7692]  netlink_unicast+0x7c6/0x9a0
[  267.514048][ T7692]  ? __pfx_netlink_unicast+0x10/0x10
[  267.514073][ T7692]  ? skb_put+0x114/0x1f0
[  267.514106][ T7692]  netlink_sendmsg+0x8c3/0xcd0
[  267.514147][ T7692]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.514195][ T7692]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.514218][ T7692]  __sock_sendmsg+0x221/0x270
[  267.514247][ T7692]  ____sys_sendmsg+0x523/0x860
[  267.514289][ T7692]  ? __pfx_____sys_sendmsg+0x10/0x10
[  267.514318][ T7692]  ? __fget_files+0x2a/0x420
[  267.514347][ T7692]  ? __fget_files+0x2a/0x420
[  267.514382][ T7692]  __sys_sendmsg+0x271/0x360
[  267.514420][ T7692]  ? __pfx___sys_sendmsg+0x10/0x10
[  267.514511][ T7692]  ? do_syscall_64+0xb6/0x210
[  267.514537][ T7692]  do_syscall_64+0xf3/0x210
[  267.514559][ T7692]  ? clear_bhb_loop+0x45/0xa0
[  267.514584][ T7692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.514609][ T7692] RIP: 0033:0x7f0f3e18e169
[  267.514628][ T7692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.514646][ T7692] RSP: 002b:00007f0f3f033038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  267.514669][ T7692] RAX: ffffffffffffffda RBX: 00007f0f3e3b5fa0 RCX: 00007f0f3e18e169
[  267.514684][ T7692] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  267.514697][ T7692] RBP: 00007f0f3f033090 R08: 0000000000000000 R09: 0000000000000000
[  267.514710][ T7692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.514722][ T7692] R13: 0000000000000000 R14: 00007f0f3e3b5fa0 R15: 00007fffeb261528
[  267.514755][ T7692]  </TASK>
[  267.854759][ T7692] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  268.272101][ T5840] Bluetooth: hci3: command 0x0406 tx timeout
[  270.509196][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  271.022264][    T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  271.397868][   T36] Bluetooth: hci4: Frame reassembly failed (-84)
[  271.593403][    T9] usb 6-1: Using ep0 maxpacket: 32
[  271.626725][    T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  271.642329][    T9] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  271.660671][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  271.714715][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  271.738843][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.776410][    T9] usb 6-1: Product: syz
[  271.793699][    T9] usb 6-1: Manufacturer: syz
[  271.798337][    T9] usb 6-1: SerialNumber: syz
[  272.168008][ T5880] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  272.201701][ T7737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.255637][ T7737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.330693][ T7737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.362538][ T7737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.370587][ T5880] usb 1-1: Using ep0 maxpacket: 32
[  272.387930][ T5880] usb 1-1: config 0 has an invalid interface number: 143 but max is 0
[  272.405585][ T5880] usb 1-1: config 0 has no interface number 0
[  272.438073][ T5880] usb 1-1: config 0 interface 143 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  272.482935][    T9] usb 6-1: 0:2 : does not exist
[  272.503250][ T5880] usb 1-1: config 0 interface 143 altsetting 2 has a duplicate endpoint with address 0x82, skipping
[  272.561427][    T9] usb 6-1: USB disconnect, device number 10
[  272.569920][ T5880] usb 1-1: config 0 interface 143 has no altsetting 0
[  272.613980][ T5880] usb 1-1: New USB device found, idVendor=12d1, idProduct=5a09, bcdDevice= 0.33
[  272.643905][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.679480][ T5880] usb 1-1: Product: syz
[  272.705868][ T5880] usb 1-1: Manufacturer: syz
[  272.720549][ T5880] usb 1-1: SerialNumber: syz
[  272.778533][ T5880] usb 1-1: config 0 descriptor??
[  272.818417][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  273.033018][ T7742] pimreg: entered allmulticast mode
[  273.051437][ T7742] pimreg: left allmulticast mode
[  273.236181][   T55] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  273.984145][ T5880] option 1-1:0.143: GSM modem (1-port) converter detected
[  274.067232][ T5880] usb 1-1: USB disconnect, device number 15
[  274.104583][ T5880] option 1-1:0.143: device disconnected
[  275.184480][   T30] audit: type=1800 audit(1745268964.312:190): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.370" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  275.675787][   T30] audit: type=1800 audit(1745268964.432:191): pid=7789 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.371" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  276.938236][ T7800] FAULT_INJECTION: forcing a failure.
[  276.938236][ T7800] name failslab, interval 1, probability 0, space 0, times 0
[  276.951046][ T7800] CPU: 1 UID: 0 PID: 7800 Comm: syz.0.373 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) 
[  276.951074][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  276.951084][ T7800] Call Trace:
[  276.951091][ T7800]  <TASK>
[  276.951098][ T7800]  dump_stack_lvl+0x241/0x360
[  276.951125][ T7800]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.951145][ T7800]  ? __pfx__printk+0x10/0x10
[  276.951168][ T7800]  ? __pfx___might_resched+0x10/0x10
[  276.951196][ T7800]  should_fail_ex+0x424/0x570
[  276.951223][ T7800]  should_failslab+0xac/0x100
[  276.951244][ T7800]  __kmalloc_cache_noprof+0x73/0x370
[  276.951263][ T7800]  ? ubifs_init_fs_context+0x54/0x2d0
[  276.951281][ T7800]  ? __pfx_ubifs_init_fs_context+0x10/0x10
[  276.951301][ T7800]  ubifs_init_fs_context+0x54/0x2d0
[  276.951322][ T7800]  alloc_fs_context+0x68a/0x800
[  276.951348][ T7800]  do_new_mount+0x160/0xb70
[  276.951372][ T7800]  ? __pfx_do_new_mount+0x10/0x10
[  276.951397][ T7800]  __se_sys_mount+0x38c/0x400
[  276.951418][ T7800]  ? __pfx___se_sys_mount+0x10/0x10
[  276.951441][ T7800]  ? __x64_sys_mount+0x20/0xc0
[  276.951460][ T7800]  do_syscall_64+0xf3/0x210
[  276.951477][ T7800]  ? clear_bhb_loop+0x45/0xa0
[  276.951495][ T7800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.951510][ T7800] RIP: 0033:0x7f0f3e18e169
[  276.951523][ T7800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.951536][ T7800] RSP: 002b:00007f0f3f012038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  276.951552][ T7800] RAX: ffffffffffffffda RBX: 00007f0f3e3b6080 RCX: 00007f0f3e18e169
[  276.951563][ T7800] RDX: 0000200000000040 RSI: 0000200000000140 RDI: 0000200000000180
[  276.951574][ T7800] RBP: 00007f0f3f012090 R08: 0000000000000000 R09: 0000000000000000
[  276.951584][ T7800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  276.951592][ T7800] R13: 0000000000000000 R14: 00007f0f3e3b6080 R15: 00007fffeb261528
[  276.951627][ T7800]  </TASK>
[  278.079737][ T7813] openvswitch: netlink: Message has 4 unknown bytes.
[  278.151957][ T7817] fuse: Unknown parameter '000000000000000000030x0000000000000006tÜ97§C-OœÜÍÜ'
[  278.259580][ T7812] netlink: 52 bytes leftover after parsing attributes in process `syz.3.378'.
[  279.379062][ T5936] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  279.629213][ T5936] usb 6-1: device descriptor read/64, error -71
[  279.733520][ T7839] netlink: 52 bytes leftover after parsing attributes in process `syz.0.380'.
[  280.013165][ T5936] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  280.309088][ T5936] usb 6-1: device descriptor read/64, error -71
[  280.443345][ T5936] usb usb6-port1: attempt power cycle
[  280.849130][ T5936] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  281.959999][ T5936] usb 6-1: device not accepting address 13, error -71
[  282.622028][ T7865] loop6: detected capacity change from 0 to 64
[  282.719155][ T5936] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  282.985499][ T5936] usb 6-1: device descriptor read/8, error -71
[  283.274935][ T5936] usb usb6-port1: unable to enumerate USB device
[  283.704369][ T3082] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  283.897545][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.7.389'.
[  283.929093][ T3082] usb 7-1: Using ep0 maxpacket: 16
[  283.942239][ T3082] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  284.021970][ T3082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  284.107193][ T3082] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  284.292020][ T3082] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.162122][ T3082] usb 7-1: Product: syz
[  285.166371][ T3082] usb 7-1: Manufacturer: syz
[  285.201258][ T3082] usb 7-1: SerialNumber: syz
[  285.309966][ T3082] usb 7-1: config 0 descriptor??
[  285.382324][ T3082] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  285.739376][ T7903] netlink: 48 bytes leftover after parsing attributes in process `syz.5.393'.
[  286.401366][ T3082] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  286.700719][ T3082] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  286.723807][ T3082] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  286.858112][ T3082] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[  286.988353][ T3082] em28xx 7-1:0.0: No AC97 audio processor
[  287.140012][ T3082] usb 7-1: USB disconnect, device number 8
[  287.370505][ T3082] em28xx 7-1:0.0: Disconnecting em28xx
[  288.293839][ T3082] em28xx 7-1:0.0: Freeing device
[  289.019186][   T30] audit: type=1800 audit(288.607:192): pid=7930 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.395" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  289.649255][ T3082] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  289.689431][ T5834] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[  289.831027][ T3082] usb 6-1: Using ep0 maxpacket: 16
[  289.880292][ T3082] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=7f.76
[  289.899101][ T5834] usb 1-1: No LPM exit latency info found, disabling LPM.
[  289.917110][ T3082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.928496][ T5834] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  289.936058][ T3082] usb 6-1: Product: syz
[  289.946068][ T3082] usb 6-1: Manufacturer: syz
[  289.965620][ T5834] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[  289.968998][ T3082] usb 6-1: SerialNumber: syz
[  290.011869][ T3082] usb 6-1: config 0 descriptor??
[  290.162554][ T7949] kvm: pic: single mode not supported
[  290.386608][ T3082] usb_8dev 6-1:0.0 can0: sending command message failed
[  290.438113][ T3082] usb_8dev 6-1:0.0 can0: can't get firmware version
[  290.519774][ T3082] usb_8dev 6-1:0.0: probe with driver usb_8dev failed with error -22
[  290.589393][ T3082] usb 6-1: USB disconnect, device number 15
[  293.059127][ T5834] usb 1-1: string descriptor 0 read error: -71
[  293.087457][ T5834] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  293.152817][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.210771][ T5834] usb 1-1: can't set config #1, error -71
[  293.225093][ T5834] usb 1-1: USB disconnect, device number 16
[  293.742902][ T7992] loop6: detected capacity change from 0 to 64
[  295.269058][ T1208] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  295.427582][ T1208] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.498623][ T1208] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.508615][ T5834] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  295.527694][ T1208] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  295.545543][ T1208] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  295.575975][ T1208] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.626115][ T1208] usb 7-1: config 0 descriptor??
[  295.670580][ T5834] usb 4-1: Using ep0 maxpacket: 8
[  295.689935][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  295.975099][ T5834] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  296.609907][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.628725][ T5834] usb 4-1: config 0 descriptor??
[  296.852137][ T5834] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  296.891817][ T1208] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  296.932544][ T1208] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  297.506329][ T1208] usb 4-1: USB disconnect, device number 14
[  297.561348][ T5834] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  297.591416][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.614349][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.641560][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.672121][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.725685][ T5843] usb 7-1: USB disconnect, device number 9
[  297.732349][ T5834] usb 1-1: Using ep0 maxpacket: 8
[  297.755109][ T5834] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  297.774637][ T5834] usb 1-1: config 179 has no interface number 0
[  297.791987][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  297.824236][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  297.854695][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  297.879832][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  297.899364][ T5834] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  297.913346][ T5834] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  297.945785][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.984849][ T8023] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  298.019165][ T5936] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  298.189213][ T5936] usb 8-1: Using ep0 maxpacket: 32
[  298.241081][ T5936] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.310975][ T5936] usb 8-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  298.351043][ T5936] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.425056][ T5936] usb 8-1: config 0 descriptor??
[  298.635923][ T5843] usb 1-1: USB disconnect, device number 17
[  298.635994][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  298.636044][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  298.681765][   T30] audit: type=1800 audit(298.587:193): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.418" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  299.165738][ T8033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.198410][ T8033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.921562][ T5936] usbhid 8-1:0.0: can't add hid device: -71
[  299.927647][ T5936] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  300.184558][ T5936] usb 8-1: USB disconnect, device number 5
[  300.289987][ T8062] netlink: 52 bytes leftover after parsing attributes in process `syz.6.421'.
[  300.469200][ T3082] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  300.579707][ T8056] block device autoloading is deprecated and will be removed.
[  300.771562][ T3082] usb 1-1: Using ep0 maxpacket: 32
[  300.802943][ T3082] usb 1-1: config 0 interface 0 has no altsetting 0
[  301.198351][ T3082] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  301.221810][ T3082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.264332][ T3082] usb 1-1: Product: syz
[  301.325423][ T3082] usb 1-1: Manufacturer: syz
[  301.339792][ T3082] usb 1-1: SerialNumber: syz
[  301.371806][ T3082] usb 1-1: config 0 descriptor??
[  303.080942][ T3082] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  303.300400][ T3082] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE)
[  303.567090][ T3082] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32
[  303.776604][ T5843] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  303.982123][   T30] audit: type=1800 audit(303.917:194): pid=8086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.427" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  304.014425][ T5843] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  304.047213][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.124872][ T5843] usb 4-1: config 0 descriptor??
[  304.358808][ T1208] usb 1-1: USB disconnect, device number 18
[  304.430592][ T6098] Bluetooth: hci4: Frame reassembly failed (-84)
[  304.459556][ T8094] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  304.587151][ T8096] pimreg: entered allmulticast mode
[  304.599307][ T8096] pimreg: left allmulticast mode
[  304.967064][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.431'.
[  305.883563][ T5843] pegasus 4-1:0.0: probe with driver pegasus failed with error -121
[  306.489262][   T55] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  306.495758][ T5840] Bluetooth: hci4: command 0x1003 tx timeout
[  308.315013][ T5843] usb 4-1: USB disconnect, device number 15
[  314.061990][ T1208] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  314.302347][ T1208] usb 8-1: Using ep0 maxpacket: 32
[  314.347468][ T1208] usb 8-1: config 0 interface 0 has no altsetting 0
[  314.384819][ T1208] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  314.417627][ T1208] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.469147][ T1208] usb 8-1: Product: syz
[  314.484299][ T1208] usb 8-1: Manufacturer: syz
[  314.509081][ T1208] usb 8-1: SerialNumber: syz
[  314.586482][ T1208] usb 8-1: config 0 descriptor??
[  315.035881][ T1208] gs_usb 8-1:0.0: Configuring for 1 interfaces
[  315.238204][ T1208] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE)
[  315.267799][ T1208] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -32
[  316.413270][ T5834] usb 8-1: USB disconnect, device number 6
[  316.548001][ T8150] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  322.876379][   T55] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  322.885148][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  322.909399][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  324.593517][ T8167] netlink: 168 bytes leftover after parsing attributes in process `syz.0.448'.
[  328.343945][ T6098] Bluetooth: hci4: Frame reassembly failed (-84)
[  330.329271][ T5840] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  330.336639][   T55] Bluetooth: hci4: command 0x1003 tx timeout
[  339.286566][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  339.299064][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  339.309250][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  339.317396][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  339.332205][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  339.457904][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  339.467454][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  339.514883][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  339.524608][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  339.669152][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  339.809892][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  339.823530][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  339.833713][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  339.859190][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  339.869754][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  341.489151][ T5838] Bluetooth: hci4: command tx timeout
[  341.627390][ T8197] chnl_net:caif_netlink_parms(): no params data found
[  343.627567][ T5838] Bluetooth: hci4: command tx timeout
[  346.380627][ T5838] Bluetooth: hci4: command tx timeout
[  347.759276][ T5838] Bluetooth: hci6: command tx timeout
[  347.765501][ T5838] Bluetooth: hci7: command tx timeout
[  348.409301][ T5838] Bluetooth: hci4: command tx timeout
[  348.538410][ T8204] chnl_net:caif_netlink_parms(): no params data found
[  348.696307][ T8202] chnl_net:caif_netlink_parms(): no params data found
[  349.851574][ T5838] Bluetooth: hci7: command tx timeout
[  349.857058][ T5838] Bluetooth: hci6: command tx timeout
[  351.930322][ T5838] Bluetooth: hci6: command tx timeout
[  351.935795][ T5838] Bluetooth: hci7: command tx timeout
[  354.009471][ T5838] Bluetooth: hci7: command tx timeout
[  354.014945][ T5838] Bluetooth: hci6: command tx timeout
[  357.684146][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  357.701206][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  357.711574][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  357.721525][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  357.738117][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  369.064649][   T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  369.073708][   T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  369.087387][   T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  369.097086][   T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  369.107494][   T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  383.895424][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  383.901888][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  384.574294][   T55] Bluetooth: hci2: command tx timeout
[  384.649500][   T55] Bluetooth: hci8: command tx timeout
[  386.657207][   T55] Bluetooth: hci2: command tx timeout
[  386.729120][   T55] Bluetooth: hci8: command tx timeout
[  388.729153][   T55] Bluetooth: hci2: command tx timeout
[  388.809343][   T55] Bluetooth: hci8: command tx timeout
[  391.669009][ T5840] Bluetooth: hci8: command tx timeout
[  391.674530][   T55] Bluetooth: hci2: command tx timeout
[  397.126336][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  397.136198][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  397.145219][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  397.159338][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  397.183161][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  397.193052][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  397.200569][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  397.210231][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  397.224414][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  397.245988][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  397.416127][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  397.431892][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  397.440502][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  397.448689][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  397.468319][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  399.289322][ T5840] Bluetooth: hci0: command tx timeout
[  399.375514][ T5840] Bluetooth: hci1: command tx timeout
[  399.534522][ T5840] Bluetooth: hci3: command tx timeout
[  401.369134][ T5840] Bluetooth: hci0: command tx timeout
[  401.449348][ T5840] Bluetooth: hci1: command tx timeout
[  401.609113][ T5840] Bluetooth: hci3: command tx timeout
[  403.449115][ T5840] Bluetooth: hci0: command tx timeout
[  403.529175][ T5840] Bluetooth: hci1: command tx timeout
[  403.689508][ T5840] Bluetooth: hci3: command tx timeout
[  405.531390][ T5840] Bluetooth: hci0: command tx timeout
[  405.609479][ T5840] Bluetooth: hci1: command tx timeout
[  405.769262][ T5840] Bluetooth: hci3: command tx timeout
[  411.579886][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  411.591549][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  411.600155][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  411.608425][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  411.625303][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  413.689209][   T55] Bluetooth: hci5: command tx timeout
[  415.769143][   T55] Bluetooth: hci5: command tx timeout
[  417.849321][   T55] Bluetooth: hci5: command tx timeout
[  419.929608][   T55] Bluetooth: hci5: command tx timeout
[  430.144901][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  430.159307][ T5840] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  430.167902][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  430.182769][ T5840] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  430.194469][ T5840] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  432.249244][ T5840] Bluetooth: hci9: command tx timeout
[  434.329128][ T5840] Bluetooth: hci9: command tx timeout
[  436.409101][ T5840] Bluetooth: hci9: command tx timeout
[  438.489113][ T5840] Bluetooth: hci9: command tx timeout
[  445.295375][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  445.302419][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  458.256979][   T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  458.269071][   T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  458.278095][   T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  458.290000][   T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  458.297868][   T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  458.403840][ T5840] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  458.429392][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  458.438521][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  458.447456][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  458.456847][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  458.588733][   T55] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  458.599385][   T55] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  458.607646][   T55] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  458.627274][   T55] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  458.639699][   T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  460.409551][ T5840] Bluetooth: hci10: command tx timeout
[  460.569124][ T5840] Bluetooth: hci11: command tx timeout
[  460.729190][ T5840] Bluetooth: hci12: command tx timeout
[  462.489193][ T5840] Bluetooth: hci10: command tx timeout
[  462.649474][ T5840] Bluetooth: hci11: command tx timeout
[  462.732672][ T5840] Bluetooth: hci4: command 0x0406 tx timeout
[  462.809190][   T55] Bluetooth: hci12: command tx timeout
[  464.569221][   T55] Bluetooth: hci10: command tx timeout
[  464.729088][   T55] Bluetooth: hci11: command tx timeout
[  464.889145][   T55] Bluetooth: hci12: command tx timeout
[  466.649362][ T8329] Bluetooth: hci10: command tx timeout
[  466.826006][ T8329] Bluetooth: hci11: command tx timeout
[  466.969133][ T8329] Bluetooth: hci12: command tx timeout
[  467.865599][ T8329] Bluetooth: hci6: command 0x0406 tx timeout
[  467.871836][ T5841] Bluetooth: hci7: command 0x0406 tx timeout
[  472.332027][ T5838] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  472.355043][ T5838] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  472.366408][ T5838] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  472.377390][ T5838] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  472.385477][ T5838] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  474.508909][ T5838] Bluetooth: hci13: command tx timeout
[  476.571608][ T5838] Bluetooth: hci13: command tx timeout
[  478.649048][ T5838] Bluetooth: hci13: command tx timeout
[  480.729120][ T5838] Bluetooth: hci13: command tx timeout
[  490.810856][   T55] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  490.823525][   T55] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  490.831995][   T55] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  490.840829][   T55] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  490.849445][   T55] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  492.889261][   T55] Bluetooth: hci14: command tx timeout
[  494.988904][   T55] Bluetooth: hci14: command tx timeout
[  497.049158][   T55] Bluetooth: hci14: command tx timeout
[  499.130139][   T55] Bluetooth: hci14: command tx timeout
[  506.769405][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  506.775772][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  509.064657][   T55] Bluetooth: hci8: command 0x0406 tx timeout
[  509.077662][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  519.288339][ T8329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  519.310848][ T8329] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  519.319491][ T8329] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  519.327773][ T8329] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  519.335703][ T8329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  519.459355][ T8329] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  519.468709][ T8329] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  519.477677][ T8329] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  519.491879][ T8329] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  519.503511][ T8329] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  519.585218][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  519.594906][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  519.603887][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  519.614395][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  519.623218][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  521.369126][ T5838] Bluetooth: hci2: command tx timeout
[  521.534923][ T5838] Bluetooth: hci4: command tx timeout
[  521.689001][ T5838] Bluetooth: hci7: command tx timeout
[  523.449072][ T5840] Bluetooth: hci2: command tx timeout
[  523.609629][ T5840] Bluetooth: hci4: command tx timeout
[  523.771617][ T5840] Bluetooth: hci7: command tx timeout
[  524.187183][ T5840] Bluetooth: hci3: command 0x0406 tx timeout
[  524.193698][ T8362] Bluetooth: hci0: command 0x0406 tx timeout
[  524.202301][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  525.530041][ T8329] Bluetooth: hci2: command tx timeout
[  525.699620][ T8329] Bluetooth: hci4: command tx timeout
[  525.849054][ T8329] Bluetooth: hci7: command tx timeout
[  527.608909][ T8329] Bluetooth: hci2: command tx timeout
[  527.769386][ T8329] Bluetooth: hci4: command tx timeout
[  527.929482][ T8329] Bluetooth: hci7: command tx timeout
[  532.332787][   T31] INFO: task syz-executor:5825 blocked for more than 143 seconds.
[  532.359146][   T31]       Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0
[  532.366854][   T31]       Blocked by coredump.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  532.394482][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  532.439071][   T31] task:syz-executor    state:D stack:19640 pid:5825  tgid:5825  ppid:1      task_flags:0x40054c flags:0x00004006
[  532.550356][   T31] Call Trace:
[  532.553738][   T31]  <TASK>
[  532.556728][   T31]  __schedule+0x1b33/0x51f0
[  532.643254][   T31]  ? schedule+0x163/0x360
[  532.648139][   T31]  ? __pfx___schedule+0x10/0x10
[  532.687665][   T31]  ? schedule+0x90/0x360
[  532.692711][   T31]  ? schedule+0x90/0x360
[  532.697019][   T31]  schedule+0x163/0x360
[  532.717218][   T31]  ? __mutex_lock+0x5f3/0x10c0
[  532.725891][   T31]  schedule_preempt_disabled+0x13/0x30
[  532.736788][   T31]  __mutex_lock+0x805/0x10c0
[  532.744277][   T31]  ? __mutex_lock+0x5f3/0x10c0
[  532.755727][   T31]  ? tun_chr_close+0x3b/0x1b0
[  532.765231][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  532.773858][   T31]  tun_chr_close+0x3b/0x1b0
[  532.778456][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  532.795623][   T31]  __fput+0x3e9/0x9f0
[  532.803784][   T31]  task_work_run+0x251/0x310
[  532.808459][   T31]  ? __pfx_task_work_run+0x10/0x10
[  532.824432][   T31]  ? do_exit+0xa0c/0x27f0
[  532.830045][   T31]  ? do_exit+0xa0c/0x27f0
[  532.834440][   T31]  do_exit+0xa11/0x27f0
[  532.838660][   T31]  ? do_raw_spin_lock+0x151/0x370
[  532.849478][   T31]  ? __pfx_do_exit+0x10/0x10
[  532.854138][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  532.870222][   T31]  do_group_exit+0x207/0x2c0
[  532.874890][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  532.887725][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  532.895480][   T31]  get_signal+0x1696/0x1730
[  532.912284][   T31]  ? __pfx_call_rcu+0x10/0x10
[  532.917039][   T31]  ? __pfx_get_signal+0x10/0x10
[  532.933064][   T31]  arch_do_signal_or_restart+0x98/0x810
[  532.938708][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  532.948671][   T31]  ? syscall_exit_to_user_mode+0xa3/0x340
[  532.964985][   T31]  syscall_exit_to_user_mode+0xce/0x340
[  532.977143][   T31]  do_syscall_64+0x100/0x210
[  532.988024][   T31]  ? clear_bhb_loop+0x45/0xa0
[  532.995674][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.014766][   T31] RIP: 0033:0x7f0f3e1843d7
[  533.026087][   T31] RSP: 002b:00007fffeb261880 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[  533.045978][   T31] RAX: fffffffffffffe00 RBX: 0000000000000189 RCX: 00007f0f3e1843d7
[  533.054951][   T31] RDX: 0000000040000000 RSI: 00007fffeb2618ec RDI: 00000000ffffffff
[  533.074029][   T31] RBP: 00007fffeb2618ec R08: 0000000000000000 R09: 0000000000000000
[  533.085716][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000006b
[  533.098989][   T31] R13: 000055557f1fe590 R14: 0000000000051de2 R15: 00007fffeb261940
[  533.121813][   T31]  </TASK>
[  533.124923][   T31] INFO: task kworker/u8:13:6098 blocked for more than 144 seconds.
[  533.142911][   T31]       Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0
[  533.157490][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  533.177062][   T31] task:kworker/u8:13   state:D stack:21928 pid:6098  tgid:6098  ppid:2      task_flags:0x4208060 flags:0x00004000
[  533.198947][   T31] Workqueue: netns cleanup_net
[  533.203810][   T31] Call Trace:
[  533.207130][   T31]  <TASK>
[  533.222860][   T31]  __schedule+0x1b33/0x51f0
[  533.227473][   T31]  ? schedule+0x163/0x360
[  533.238980][   T31]  ? __pfx___schedule+0x10/0x10
[  533.243953][   T31]  ? schedule+0x90/0x360
[  533.248294][   T31]  ? schedule+0x90/0x360
[  533.264346][   T31]  schedule+0x163/0x360
[  533.274982][   T31]  ? __mutex_lock+0x5f3/0x10c0
[  533.283367][   T31]  schedule_preempt_disabled+0x13/0x30
[  533.293886][   T31]  __mutex_lock+0x805/0x10c0
[  533.298559][   T31]  ? __mutex_lock+0x5f3/0x10c0
[  533.307016][   T31]  ? wg_netns_pre_exit+0x1f/0x1e0
[  533.318087][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  533.327776][   T31]  wg_netns_pre_exit+0x1f/0x1e0
[  533.344401][   T31]  cleanup_net+0x627/0xd60
[  533.353317][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  533.358337][   T31]  ? process_scheduled_works+0x9cb/0x18e0
[  533.378937][   T31]  process_scheduled_works+0xac3/0x18e0
[  533.384607][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  533.401596][   T31]  ? assign_work+0x367/0x3d0
[  533.406502][   T31]  worker_thread+0x870/0xd50
[  533.418965][   T31]  ? __kthread_parkme+0x1a8/0x200
[  533.424089][   T31]  ? __pfx_worker_thread+0x10/0x10
[  533.437063][   T31]  kthread+0x7b7/0x940
[  533.443798][   T31]  ? __pfx_worker_thread+0x10/0x10
[  533.459448][   T31]  ? __pfx_kthread+0x10/0x10
[  533.464109][   T31]  ? __pfx_kthread+0x10/0x10
[  533.468736][   T31]  ? __pfx_kthread+0x10/0x10
[  533.485850][   T31]  ? __pfx_kthread+0x10/0x10
[  533.491741][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  533.497007][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  533.510917][   T31]  ? __pfx_kthread+0x10/0x10
[  533.515592][   T31]  ret_from_fork+0x4b/0x80
[  533.525505][   T31]  ? __pfx_kthread+0x10/0x10
[  533.532926][   T31]  ret_from_fork_asm+0x1a/0x30
[  533.537791][   T31]  </TASK>
[  533.547140][   T31] INFO: task kworker/u8:20:6115 blocked for more than 144 seconds.
[  533.594505][   T31]       Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0
[  533.604257][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  533.624891][   T31] task:kworker/u8:20   state:D stack:23176 pid:6115  tgid:6115  ppid:2      task_flags:0x4208060 flags:0x00004000
[  533.647526][   T31] Workqueue: ipv6_addrconf addrconf_verify_work
[  533.655222][   T31] Call Trace:
[  533.658555][   T31]  <TASK>
[  533.668863][   T31]  __schedule+0x1b33/0x51f0
[  533.673469][   T31]  ? do_raw_spin_lock+0xc1/0x370
[  533.697074][   T31]  ? schedule+0x163/0x360
[  533.707667][   T31]  ? __pfx___schedule+0x10/0x10
[  533.715424][   T31]  ? schedule+0x90/0x360
[  533.726027][   T31]  ? schedule+0x90/0x360
[  533.733126][   T31]  schedule+0x163/0x360
[  533.737357][   T31]  ? __mutex_lock+0x5f3/0x10c0
[  533.747765][   T31]  schedule_preempt_disabled+0x13/0x30
[  533.756045][   T31]  __mutex_lock+0x805/0x10c0
[  533.767178][   T31]  ? __mutex_lock+0x5f3/0x10c0
[  533.775341][   T31]  ? addrconf_verify_work+0x19/0x30
[  533.787896][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  533.801735][   T31]  ? process_scheduled_works+0x9cb/0x18e0
[  533.807543][   T31]  addrconf_verify_work+0x19/0x30
[  533.824167][   T31]  process_scheduled_works+0xac3/0x18e0
[  533.835765][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  533.843870][   T31]  ? assign_work+0x367/0x3d0
[  533.848546][   T31]  worker_thread+0x870/0xd50
[  533.858952][   T31]  ? __kthread_parkme+0x1a8/0x200
[  533.864213][   T31]  ? __pfx_worker_thread+0x10/0x10
[  533.877406][   T31]  kthread+0x7b7/0x940
[  533.884129][   T31]  ? __pfx_worker_thread+0x10/0x10
[  533.896201][   T31]  ? __pfx_kthread+0x10/0x10
[  533.906217][   T31]  ? __pfx_kthread+0x10/0x10
[  533.919880][   T31]  ? __pfx_kthread+0x10/0x10
[  533.925092][   T31]  ? __pfx_kthread+0x10/0x10
[  533.938063][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  533.943767][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  533.956367][   T31]  ? __pfx_kthread+0x10/0x10
[  533.961430][   T31]  ret_from_fork+0x4b/0x80
[  533.965899][   T31]  ? __pfx_kthread+0x10/0x10
[  533.978128][   T31]  ret_from_fork_asm+0x1a/0x30
[  533.984956][   T31]  </TASK>
[  533.997979][   T31] INFO: task kworker/u8:21:6554 blocked for more than 145 seconds.
[  534.006045][   T31]       Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0
[  534.029805][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  534.046071][   T31] task:kworker/u8:21   state:D stack:21032 pid:6554  tgid:6554  ppid:2      task_flags:0x4208060 flags:0x00004000
[  534.058626][   T31] Workqueue: events_unbound linkwatch_event
[  534.068892][   T31] Call Trace:
[  534.075932][   T31]  <TASK>
[  534.082580][   T31]  __schedule+0x1b33/0x51f0
[  534.094035][   T31]  ? schedule+0x163/0x360
[  534.098469][   T31]  ? __pfx___schedule+0x10/0x10
[  534.107956][   T31]  ? schedule+0x90/0x360
[  534.117563][   T31]  ? schedule+0x90/0x360
[  534.131666][   T31]  schedule+0x163/0x360
[  534.135911][   T31]  ? __mutex_lock+0x5f3/0x10c0
[  534.151774][   T31]  schedule_preempt_disabled+0x13/0x30
[  534.157321][   T31]  __mutex_lock+0x805/0x10c0
[  534.167049][   T31]  ? __mutex_lock+0x5f3/0x10c0
[  534.174783][   T31]  ? linkwatch_event+0xe/0x60
[  534.184519][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  534.194548][   T31]  ? process_scheduled_works+0x9cb/0x18e0
[  534.205665][   T31]  linkwatch_event+0xe/0x60
[  534.214013][   T31]  process_scheduled_works+0xac3/0x18e0
[  534.226881][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  534.246399][   T31]  ? assign_work+0x367/0x3d0
[  534.254909][   T31]  worker_thread+0x870/0xd50
[  534.265411][   T31]  ? __kthread_parkme+0x1a8/0x200
[  534.272530][   T31]  ? __pfx_worker_thread+0x10/0x10
[  534.277713][   T31]  kthread+0x7b7/0x940
[  534.287731][   T31]  ? __pfx_worker_thread+0x10/0x10
[  534.297051][   T31]  ? __pfx_kthread+0x10/0x10
[  534.307555][   T31]  ? __pfx_kthread+0x10/0x10
[  534.315578][   T31]  ? __pfx_kthread+0x10/0x10
[  534.326902][   T31]  ? __pfx_kthread+0x10/0x10
[  534.334243][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  534.351529][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  534.356807][   T31]  ? __pfx_kthread+0x10/0x10
[  534.372905][   T31]  ret_from_fork+0x4b/0x80
[  534.377402][   T31]  ? __pfx_kthread+0x10/0x10
[  534.388895][   T31]  ret_from_fork_asm+0x1a/0x30
[  534.396042][   T31]  </TASK>
[  534.404958][   T31] INFO: task syz-executor:6792 blocked for more than 145 seconds.
[  534.416251][ T5841] Bluetooth: hci5: command 0x0406 tx timeout
[  534.430355][   T31]       Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0
[  534.438045][   T31]       Blocked by coredump.
[  534.456133][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  534.482996][   T31] task:syz-executor    state:D stack:20904 pid:6792  tgid:6792  ppid:1      task_flags:0x40054c flags:0x00004006
[  534.508959][   T31] Call Trace:
[  534.512303][   T31]  <TASK>
[  534.515269][   T31]  __schedule+0x1b33/0x51f0
[  534.527048][   T31]  ? schedule+0x163/0x360
[  534.533028][   T31]  ? __pfx___schedule+0x10/0x10
[  534.537977][   T31]  ? schedule+0x90/0x360
[  534.549260][   T31]  ? schedule+0x90/0x360
[  534.553581][   T31]  schedule+0x163/0x360
[  534.557786][   T31]  ? __mutex_lock+0x5f3/0x10c0
[  534.577501][   T31]  schedule_preempt_disabled+0x13/0x30
[  534.586870][   T31]  __mutex_lock+0x805/0x10c0
[  534.596634][   T31]  ? __mutex_lock+0x5f3/0x10c0
[  534.606531][   T31]  ? tun_chr_close+0x3b/0x1b0
[  534.616323][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  534.624241][   T31]  tun_chr_close+0x3b/0x1b0
[  534.633789][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  534.643184][   T31]  __fput+0x3e9/0x9f0
[  534.647353][   T31]  task_work_run+0x251/0x310
[  534.663392][   T31]  ? __pfx_task_work_run+0x10/0x10
[  534.668587][   T31]  ? do_exit+0xa0c/0x27f0
[  534.687383][   T31]  ? do_exit+0xa0c/0x27f0
[  534.698743][   T31]  do_exit+0xa11/0x27f0
[  534.712763][   T31]  ? do_raw_spin_lock+0x151/0x370
[  534.717849][   T31]  ? __pfx_do_exit+0x10/0x10
[  534.729422][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  534.735497][   T31]  do_group_exit+0x207/0x2c0
[  534.748998][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  534.754299][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  534.767193][   T31]  get_signal+0x1696/0x1730
[  534.773853][   T31]  ? __pfx_call_rcu+0x10/0x10
[  534.778594][   T31]  ? __pfx_get_signal+0x10/0x10
[  534.792269][   T31]  arch_do_signal_or_restart+0x98/0x810
[  534.797923][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  534.829029][   T31]  ? syscall_exit_to_user_mode+0xa3/0x340
[  534.834848][   T31]  syscall_exit_to_user_mode+0xce/0x340
[  534.852367][   T31]  do_syscall_64+0x100/0x210
[  534.857063][   T31]  ? clear_bhb_loop+0x45/0xa0
[  534.865489][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.876725][   T31] RIP: 0033:0x7fa1073843d7
[  534.885531][   T31] RSP: 002b:00007ffdaad48ef0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[  534.906126][   T31] RAX: fffffffffffffe00 RBX: 0000000000000097 RCX: 00007fa1073843d7
[  534.925654][   T31] RDX: 0000000040000000 RSI: 00007ffdaad48f5c RDI: 00000000ffffffff
[  534.937870][   T31] RBP: 00007ffdaad48f5c R08: 0000000000000000 R09: 0000000000000000
[  534.950759][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000002c
[  534.963891][   T31] R13: 000055557f5c4590 R14: 00000000000563c3 R15: 00007ffdaad48fb0
[  534.974844][   T31]  </TASK>
[  534.986425][   T31] INFO: task syz-executor:8202 blocked for more than 146 seconds.
[  534.996730][   T31]       Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0
[  535.026886][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  535.049983][   T31] task:syz-executor    state:D stack:21992 pid:8202  tgid:8202  ppid:1      task_flags:0x400140 flags:0x00000004
[  535.070026][   T31] Call Trace:
[  535.073377][   T31]  <TASK>
[  535.076345][   T31]  __schedule+0x1b33/0x51f0
[  535.088125][   T31]  ? stack_trace_save+0x61/0x1d0
[  535.096077][   T31]  ? schedule+0x163/0x360
[  535.106354][   T31]  ? __pfx___schedule+0x10/0x10
[  535.115472][   T31]  ? schedule+0x90/0x360
[  535.130305][   T31]  ? schedule+0x90/0x360
[  535.134635][   T31]  schedule+0x163/0x360
[  535.153151][   T31]  ? __mutex_lock+0x5f3/0x10c0
[  535.157995][   T31]  schedule_preempt_disabled+0x13/0x30
[  535.169432][   T31]  __mutex_lock+0x805/0x10c0
[  535.174097][   T31]  ? __mutex_lock+0x5f3/0x10c0
[  535.186635][   T31]  ? rtnl_newlink+0xd68/0x1fe0
[  535.192258][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  535.197350][   T31]  ? safesetid_security_capable+0xb2/0x1d0
[  535.208841][   T31]  ? ns_capable+0x8a/0xf0
[  535.218418][   T31]  ? rtnl_link_get_net_capable+0x168/0x340
[  535.235267][   T31]  rtnl_newlink+0xd68/0x1fe0
[  535.248861][   T31]  ? __lock_acquire+0xad5/0xd80
[  535.253883][   T31]  ? __pfx_rtnl_newlink+0x10/0x10
[  535.268138][   T31]  ? __lock_acquire+0xad5/0xd80
[  535.274579][   T31]  ? __lock_acquire+0xad5/0xd80
[  535.287004][   T31]  ? __lock_acquire+0xad5/0xd80
[  535.292313][   T31]  ? __lock_acquire+0xad5/0xd80
[  535.297247][   T31]  ? is_bpf_text_address+0x26/0x2a0
[  535.309352][   T31]  ? is_bpf_text_address+0x288/0x2a0
[  535.316128][   T31]  ? is_bpf_text_address+0x26/0x2a0
[  535.333408][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  535.351150][   T31]  ? kernel_text_address+0xa7/0xe0
[  535.356350][   T31]  ? __kernel_text_address+0xd/0x40
[  535.369338][   T31]  ? unwind_get_return_address+0x4d/0x90
[  535.375044][   T31]  ? arch_stack_walk+0xff/0x150
[  535.387823][   T31]  ? __lock_acquire+0xad5/0xd80
[  535.393118][   T31]  ? __pfx_rtnl_newlink+0x10/0x10
[  535.398392][   T31]  rtnetlink_rcv_msg+0x80f/0xd70
[  535.408856][   T31]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  535.414056][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  535.428457][   T31]  ? __lock_acquire+0xad5/0xd80
[  535.434689][   T31]  netlink_rcv_skb+0x208/0x480
[  535.446855][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  535.469367][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  535.474762][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[  535.490708][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[  535.496010][   T31]  netlink_unicast+0x7f8/0x9a0
[  535.508584][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  535.514306][   T31]  ? smack_socket_getpeersec_dgram+0x180/0x410
[  535.529277][   T31]  ? skb_put+0x114/0x1f0
[  535.533610][   T31]  netlink_sendmsg+0x8c3/0xcd0
[  535.538435][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  535.557990][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  535.578235][   T31]  __sock_sendmsg+0x221/0x270
[  535.586559][   T31]  __sys_sendto+0x365/0x4c0
[  535.598157][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  535.604480][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  535.616251][   T31]  ? blkcg_maybe_throttle_current+0x1ad/0xbb0
[  535.625910][   T31]  __x64_sys_sendto+0xde/0x100
[  535.637307][   T31]  do_syscall_64+0xf3/0x210
[  535.643134][   T31]  ? clear_bhb_loop+0x45/0xa0
[  535.647879][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.658946][   T31] RIP: 0033:0x7f695fd8fffc
[  535.663426][   T31] RSP: 002b:00007ffe3a706ff0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  535.695960][   T31] RAX: ffffffffffffffda RBX: 00007f6960ae4620 RCX: 00007f695fd8fffc
[  535.706450][   T31] RDX: 000000000000003c RSI: 00007f6960ae4670 RDI: 0000000000000003
[  535.719283][   T31] RBP: 0000000000000000 R08: 00007ffe3a707044 R09: 000000000000000c
[  535.732779][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  535.745131][   T31] R13: 0000000000000000 R14: 00007f6960ae4670 R15: 0000000000000000
[  535.756944][   T31]  </TASK>
[  535.765348][   T31] 
[  535.765348][   T31] Showing all locks held in the system:
[  535.778263][   T31] 3 locks held by kworker/0:0/9:
[  535.800089][   T31]  #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0
[  535.818152][   T31]  #1: ffffc900000e7c60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0
[  535.839170][   T31]  #2: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  535.857160][   T31] 1 lock held by khungtaskd/31:
[  535.864418][   T31]  #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180
[  535.879168][   T31] 3 locks held by kworker/u8:3/53:
[  535.884366][   T31] 2 locks held by getty/5586:
[  535.903421][   T31]  #0: ffff88803101e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  535.919308][   T31]  #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700
[  535.939374][   T31] 1 lock held by syz-executor/5825:
[  535.944640][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  535.958863][   T31] 4 locks held by kworker/u8:13/6098:
[  535.964285][   T31]  #0: ffff88801bef3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0
[  535.985721][   T31]  #1: ffffc9000ae9fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0
[  535.999598][   T31]  #2: ffffffff900de7d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60
[  536.021297][   T31]  #3: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1f/0x1e0
[  536.040975][   T31] 3 locks held by kworker/u8:20/6115:
[  536.046409][   T31]  #0: ffff88814d552948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0
[  536.066964][   T31]  #1: ffffc9000af4fc60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0
[  536.090443][   T31]  #2: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  536.106653][   T31] 3 locks held by kworker/u8:21/6554:
[  536.113391][   T31]  #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0
[  536.139348][   T31]  #1: ffffc9000af8fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0
[  536.160088][   T31]  #2: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  536.177038][   T31] 1 lock held by syz-executor/6792:
[  536.183782][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  536.202263][   T31] 1 lock held by syz.6.439/8135:
[  536.207260][   T31] 1 lock held by syz-executor/8197:
[  536.218435][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  536.236555][   T31] 2 locks held by syz-executor/8202:
[  536.255873][   T31]  #0: ffffffff905ef3b0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250
[  536.278309][   T31]  #1: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0
[  536.288005][   T31] 1 lock held by syz-executor/8204:
[  536.300979][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  536.316488][   T31] 3 locks held by kworker/1:9/8228:
[  536.324581][   T31] 2 locks held by kworker/1:10/8269:
[  536.333441][   T31] 2 locks held by syz-executor/8272:
[  536.347445][   T31]  #0: ffffffff900de7d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  536.368847][   T31]  #1: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x87/0x270
[  536.387520][   T31] 1 lock held by syz-executor/8287:
[  536.393973][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40
[  536.409365][   T31] 1 lock held by syz-executor/8288:
[  536.414616][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40
[  536.432866][   T31] 1 lock held by syz-executor/8294:
[  536.438129][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40
[  536.454826][   T31] 1 lock held by syz-executor/8301:
[  536.476702][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40
[  536.498894][   T31] 4 locks held by kworker/1:12/8306:
[  536.504288][   T31] 1 lock held by syz-executor/8308:
[  536.516493][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40
[  536.526433][   T31] 1 lock held by syz-executor/8318:
[  536.538864][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40
[  536.557736][   T31] 1 lock held by syz-executor/8321:
[  536.563365][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40
[  536.588914][   T31] 1 lock held by syz-executor/8325:
[  536.594213][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40
[  536.612141][   T31] 1 lock held by syz-executor/8336:
[  536.617414][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40
[  536.630767][   T31] 1 lock held by syz-executor/8340:
[  536.636021][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40
[  536.658897][   T31] 1 lock held by syz-executor/8354:
[  536.664166][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40
[  536.686641][   T31] 1 lock held by syz-executor/8358:
[  536.702193][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40
[  536.719653][   T31] 1 lock held by syz-executor/8360:
[  536.724926][   T31]  #0: ffffffff900eb308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40
[  536.739467][   T31] 
[  536.741835][   T31] =============================================
[  536.741835][   T31] 
[  536.760654][   T31] NMI backtrace for cpu 0
[  536.760678][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) 
[  536.760703][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  536.760716][   T31] Call Trace:
[  536.760724][   T31]  <TASK>
[  536.760732][   T31]  dump_stack_lvl+0x241/0x360
[  536.760768][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  536.760797][   T31]  ? __pfx__printk+0x10/0x10
[  536.760867][   T31]  nmi_cpu_backtrace+0x4ab/0x4e0
[  536.760904][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  536.760931][   T31]  ? _printk+0xd5/0x120
[  536.760964][   T31]  ? __wake_up_klogd+0xcc/0x110
[  536.760994][   T31]  ? __pfx__printk+0x10/0x10
[  536.761034][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  536.761066][   T31]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  536.761100][   T31]  watchdog+0x1058/0x10a0
[  536.761127][   T31]  ? watchdog+0x1ea/0x10a0
[  536.761164][   T31]  ? __pfx_watchdog+0x10/0x10
[  536.761188][   T31]  kthread+0x7b7/0x940
[  536.761212][   T31]  ? __pfx_watchdog+0x10/0x10
[  536.761238][   T31]  ? __pfx_kthread+0x10/0x10
[  536.761257][   T31]  ? __pfx_kthread+0x10/0x10
[  536.761279][   T31]  ? __pfx_kthread+0x10/0x10
[  536.761300][   T31]  ? __pfx_kthread+0x10/0x10
[  536.761320][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  536.761349][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  536.761369][   T31]  ? __pfx_kthread+0x10/0x10
[  536.761392][   T31]  ret_from_fork+0x4b/0x80
[  536.761410][   T31]  ? __pfx_kthread+0x10/0x10
[  536.761432][   T31]  ret_from_fork_asm+0x1a/0x30
[  536.761479][   T31]  </TASK>
[  536.761487][   T31] Sending NMI from CPU 0 to CPUs 1:
[  536.925133][    C1] NMI backtrace for cpu 1
[  536.925151][    C1] CPU: 1 UID: 0 PID: 8228 Comm: kworker/1:9 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) 
[  536.925173][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  536.925186][    C1] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker
[  536.925220][    C1] RIP: 0010:rcu_is_watching+0x0/0xb0
[  536.925238][    C1] Code: c7 a0 36 d4 8e e8 d0 d7 8f 03 eb cd 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 41 57 41 56 53 65 ff 05 00 e3 bc 11 e8 6b a1 7f 0a 89
[  536.925254][    C1] RSP: 0018:ffffc90000a07520 EFLAGS: 00000202
[  536.925269][    C1] RAX: 0000000000000001 RBX: ffffc90000a07600 RCX: ffff88802c1d8000
[  536.925282][    C1] RDX: dffffc0000000000 RSI: ffffc90000a01000 RDI: ffffc90000a07608
[  536.925294][    C1] RBP: dffffc0000000001 R08: ffffc90000a086e8 R09: 0000000000000000
[  536.925306][    C1] R10: ffffc90000a07650 R11: fffff52000140ecc R12: ffffc90000a07610
[  536.925319][    C1] R13: dffffc0000000000 R14: ffffc90000a086f8 R15: ffffffff816d9bc8
[  536.925332][    C1] FS:  0000000000000000(0000) GS:ffff8881250cf000(0000) knlGS:0000000000000000
[  536.925347][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  536.925358][    C1] CR2: 0000200000032000 CR3: 000000000eb38000 CR4: 00000000003526f0
[  536.925374][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  536.925384][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  536.925394][    C1] Call Trace:
[  536.925401][    C1]  <IRQ>
[  536.925407][    C1]  unwind_next_frame+0x1a5b/0x23b0
[  536.925432][    C1]  ? unwind_next_frame+0xb8/0x23b0
[  536.925451][    C1]  ? nft_do_chain_inet+0x41f/0x6b0
[  536.925475][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  536.925495][    C1]  arch_stack_walk+0x11e/0x150
[  536.925516][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  536.925537][    C1]  ? nf_hook_slow+0xc8/0x220
[  536.925558][    C1]  stack_trace_save+0x11a/0x1d0
[  536.925575][    C1]  ? unwind_next_frame+0xb8/0x23b0
[  536.925593][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  536.925612][    C1]  ? unwind_next_frame+0xb8/0x23b0
[  536.925631][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  536.925656][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  536.925682][    C1]  kasan_save_track+0x3f/0x80
[  536.925699][    C1]  ? kasan_save_track+0x3f/0x80
[  536.925713][    C1]  ? __kasan_kmalloc+0x9d/0xb0
[  536.925730][    C1]  ? __kmalloc_cache_noprof+0x236/0x370
[  536.925750][    C1]  ? ref_tracker_alloc+0x159/0x4c0
[  536.925766][    C1]  ? dst_init+0xee/0x490
[  536.925779][    C1]  ? dst_alloc+0x14f/0x190
[  536.925793][    C1]  ? ip_route_output_key_hash_rcu+0x1378/0x2290
[  536.925817][    C1]  ? ip_route_output_key_hash+0x195/0x2b0
[  536.925840][    C1]  ? ip_route_output_flow+0x29/0x140
[  536.925861][    C1]  ? ip_route_me_harder+0x852/0x13e0
[  536.925891][    C1]  ? synproxy_send_tcp+0x356/0x6c0
[  536.925910][    C1]  ? synproxy_send_client_synack+0x8ea/0xf70
[  536.925930][    C1]  ? nft_synproxy_eval_v4+0x3cc/0x610
[  536.925951][    C1]  ? nft_synproxy_do_eval+0x36a/0xa90
[  536.925973][    C1]  ? nft_do_chain+0x4b2/0x1db0
[  536.925994][    C1]  ? nft_do_chain_inet+0x41f/0x6b0
[  536.926037][    C1]  __kasan_kmalloc+0x9d/0xb0
[  536.926055][    C1]  __kmalloc_cache_noprof+0x236/0x370
[  536.926076][    C1]  ? ref_tracker_alloc+0x159/0x4c0
[  536.926094][    C1]  ref_tracker_alloc+0x159/0x4c0
[  536.926111][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  536.926142][    C1]  dst_init+0xee/0x490
[  536.926155][    C1]  ? dst_alloc+0x12b/0x190
[  536.926173][    C1]  dst_alloc+0x14f/0x190
[  536.926191][    C1]  ip_route_output_key_hash_rcu+0x1378/0x2290
[  536.926223][    C1]  ip_route_output_key_hash+0x195/0x2b0
[  536.926248][    C1]  ? ip_route_output_key_hash+0xe1/0x2b0
[  536.926272][    C1]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  536.926306][    C1]  ip_route_output_flow+0x29/0x140
[  536.926330][    C1]  ip_route_me_harder+0x852/0x13e0
[  536.926361][    C1]  ? __pfx_ip_route_me_harder+0x10/0x10
[  536.926387][    C1]  ? kmem_cache_alloc_node_noprof+0x24e/0x3b0
[  536.926421][    C1]  synproxy_send_tcp+0x356/0x6c0
[  536.926445][    C1]  synproxy_send_client_synack+0x8ea/0xf70
[  536.926472][    C1]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  536.926492][    C1]  ? nft_fib_reduce+0x5e8/0x600
[  536.926513][    C1]  ? synproxy_pernet+0x45/0x280
[  536.926537][    C1]  nft_synproxy_eval_v4+0x3cc/0x610
[  536.926564][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  536.926589][    C1]  ? nf_ip_checksum+0x13a/0x500
[  536.926613][    C1]  nft_synproxy_do_eval+0x36a/0xa90
[  536.926639][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  536.926673][    C1]  nft_do_chain+0x4b2/0x1db0
[  536.926704][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  536.926725][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  536.926764][    C1]  ? __pfx_nf_nat_inet_fn+0x10/0x10
[  536.926792][    C1]  nft_do_chain_inet+0x41f/0x6b0
[  536.926815][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  536.926836][    C1]  ? ipt_do_table+0x314/0x1870
[  536.926862][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  536.926888][    C1]  nf_hook_slow+0xc8/0x220
[  536.926908][    C1]  NF_HOOK+0x29b/0x450
[  536.926927][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  536.926946][    C1]  ? NF_HOOK+0x9e/0x450
[  536.926963][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  536.926982][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  536.927004][    C1]  ? ip_rcv_finish+0x409/0x560
[  536.927024][    C1]  NF_HOOK+0x3a0/0x450
[  536.927043][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  536.927060][    C1]  ? NF_HOOK+0x9e/0x450
[  536.927077][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  536.927093][    C1]  ? ip_rcv_core+0x80c/0xd20
[  536.927112][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  536.927135][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  536.927154][    C1]  __netif_receive_skb+0x2c9/0x670
[  536.927176][    C1]  ? __pfx___netif_receive_skb+0x10/0x10
[  536.927207][    C1]  process_backlog+0x664/0x15c0
[  536.927231][    C1]  ? process_backlog+0x33d/0x15c0
[  536.927257][    C1]  ? __pfx_process_backlog+0x10/0x10
[  536.927283][    C1]  __napi_poll+0xcb/0x480
[  536.927304][    C1]  net_rx_action+0x89d/0x1240
[  536.927337][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  536.927358][    C1]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  536.927399][    C1]  handle_softirqs+0x2d6/0x9b0
[  536.927428][    C1]  ? do_softirq+0x11f/0x1e0
[  536.927453][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  536.927482][    C1]  do_softirq+0x11f/0x1e0
[  536.927504][    C1]  </IRQ>
[  536.927510][    C1]  <TASK>
[  536.927516][    C1]  ? __pfx_do_softirq+0x10/0x10
[  536.927539][    C1]  ? chacha_block_generic+0xb0/0x1360
[  536.927560][    C1]  ? kernel_fpu_end+0xf9/0x150
[  536.927582][    C1]  ? lockdep_softirqs_on+0x144/0x1d0
[  536.927605][    C1]  __local_bh_enable_ip+0x1be/0x200
[  536.927629][    C1]  ? __crypto_xor+0x1b37/0x1ba0
[  536.927646][    C1]  ? kernel_fpu_end+0xf9/0x150
[  536.927666][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  536.927693][    C1]  ? kernel_fpu_begin_mask+0x2cd/0x3a0
[  536.927717][    C1]  kernel_fpu_end+0x103/0x150
[  536.927737][    C1]  ? __pfx_kernel_fpu_end+0x10/0x10
[  536.927764][    C1]  blake2s_compress+0x5f/0xd0
[  536.927785][    C1]  blake2s_final+0x114/0x260
[  536.927807][    C1]  hmac+0x674/0x9d0
[  536.927835][    C1]  ? __pfx_hmac+0x10/0x10
[  536.927859][    C1]  ? __pfx_do_softirq+0x10/0x10
[  536.927897][    C1]  ? kdf+0x139/0x3a0
[  536.927917][    C1]  kdf+0x1a5/0x3a0
[  536.927937][    C1]  ? __pfx_kdf+0x10/0x10
[  536.927956][    C1]  ? wg_pubkey_hashtable_lookup+0x1e/0x360
[  536.927989][    C1]  ? wg_pubkey_hashtable_lookup+0x1e/0x360
[  536.928016][    C1]  wg_noise_handshake_consume_initiation+0x50b/0xd60
[  536.928039][    C1]  ? __pfx_kernel_fpu_end+0x10/0x10
[  536.928061][    C1]  ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10
[  536.928082][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  536.928101][    C1]  ? blake2s_final+0x13c/0x260
[  536.928121][    C1]  ? __asan_memset+0x23/0x50
[  536.928147][    C1]  ? blake2s_final+0x14b/0x260
[  536.928174][    C1]  ? __pfx_compute_mac1+0x10/0x10
[  536.928189][    C1]  ? sched_clock_cpu+0x77/0x4d0
[  536.928225][    C1]  ? wg_cookie_validate_packet+0x21a/0x340
[  536.928247][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  536.928277][    C1]  wg_packet_handshake_receive_worker+0x5bd/0xf60
[  536.928310][    C1]  ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10
[  536.928337][    C1]  ? register_lock_class+0x54/0x330
[  536.928361][    C1]  ? __lock_acquire+0xad5/0xd80
[  536.928395][    C1]  ? process_scheduled_works+0x9cb/0x18e0
[  536.928419][    C1]  process_scheduled_works+0xac3/0x18e0
[  536.928458][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  536.928488][    C1]  ? assign_work+0x367/0x3d0
[  536.928513][    C1]  worker_thread+0x870/0xd50
[  536.928545][    C1]  ? __kthread_parkme+0x1a8/0x200
[  536.928573][    C1]  ? __pfx_worker_thread+0x10/0x10
[  536.928598][    C1]  kthread+0x7b7/0x940
[  536.928616][    C1]  ? __pfx_worker_thread+0x10/0x10
[  536.928641][    C1]  ? __pfx_kthread+0x10/0x10
[  536.928657][    C1]  ? __pfx_kthread+0x10/0x10
[  536.928674][    C1]  ? __pfx_kthread+0x10/0x10
[  536.928691][    C1]  ? __pfx_kthread+0x10/0x10
[  536.928708][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  536.928732][    C1]  ? lockdep_hardirqs_on+0x9d/0x150
[  536.928748][    C1]  ? __pfx_kthread+0x10/0x10
[  536.928766][    C1]  ret_from_fork+0x4b/0x80
[  536.928784][    C1]  ? __pfx_kthread+0x10/0x10
[  536.928801][    C1]  ret_from_fork_asm+0x1a/0x30
[  536.928836][    C1]  </TASK>
[  537.872119][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  537.879036][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) 
[  537.890880][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  537.900972][   T31] Call Trace:
[  537.904279][   T31]  <TASK>
[  537.907239][   T31]  dump_stack_lvl+0x241/0x360
[  537.911968][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  537.917734][   T31]  ? __pfx__printk+0x10/0x10
[  537.922382][   T31]  ? vscnprintf+0x5d/0x90
[  537.926756][   T31]  panic+0x349/0x880
[  537.930698][   T31]  ? __pfx_preempt_schedule+0x10/0x10
[  537.936115][   T31]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  537.942317][   T31]  ? __pfx_panic+0x10/0x10
[  537.946772][   T31]  ? tick_nohz_tick_stopped+0x82/0xb0
[  537.952193][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  537.957594][   T31]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  537.963796][   T31]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  537.969992][   T31]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  537.976195][   T31]  watchdog+0x1097/0x10a0
[  537.980562][   T31]  ? watchdog+0x1ea/0x10a0
[  537.985020][   T31]  ? __pfx_watchdog+0x10/0x10
[  537.989729][   T31]  kthread+0x7b7/0x940
[  537.993842][   T31]  ? __pfx_watchdog+0x10/0x10
[  537.998549][   T31]  ? __pfx_kthread+0x10/0x10
[  538.003163][   T31]  ? __pfx_kthread+0x10/0x10
[  538.007788][   T31]  ? __pfx_kthread+0x10/0x10
[  538.012408][   T31]  ? __pfx_kthread+0x10/0x10
[  538.017027][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  538.022263][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  538.027667][   T31]  ? __pfx_kthread+0x10/0x10
[  538.032297][   T31]  ret_from_fork+0x4b/0x80
[  538.036739][   T31]  ? __pfx_kthread+0x10/0x10
[  538.041369][   T31]  ret_from_fork_asm+0x1a/0x30
[  538.046198][   T31]  </TASK>
[  538.049535][   T31] Kernel Offset: disabled
[  538.053898][   T31] Rebooting in 86400 seconds..