last executing test programs:

7m57.064115853s ago: executing program 4 (id=16):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00'})
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000400)=0x8)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021cc1100001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000140003800c0000800800034000000002040000800900010073797a310000000074110380100000800c0004400000000000000008ec0500807c010180cd000100fb0aa2c0c064a9cb50e36e8f2919503392b1e77ea0acb6f1f8c089c85005959900ab704ca209ab4b0ad02ddef582c36696aa014a843d37b8d19c0b8bc5e8353cdf44eb4a88aa2e8bbd28b327d2f0c9a08ea7a4790b07cdf9fa5658d2fbbf073821a797607daf282e6907c66b3debf784a552a6ca462c600a3c3969a453bc2d88bb97497b7ef4dd92035935ea227d636ff8c7624e7991d7fd25980225819f5d44ad3066d185adcb4186b28c7a33517f871a1e18832a63018b26df2f23d9d38c2e3e8d19a682f6d9314f000000280001008bbde70048ee2a3f87ea0685b84680c37acc738f6341dde0982b2f9cb7ce272bad59ec5248000100063fc07658180153372bdd7ef18b573499e5c843e2edb4c521bd37864ced0e3f0490d54f65186e3eaacc1ae4f1b12f621a3f2edb45a57402589dc0f1978954c11dbdc79f0c00028008000180000000002c0002800900020073797a31000000000900020073797a320000000008000180fffffffd08000180fffffffe0c000540000000000000000004000280ac020a80440002800900020073797a31000000000900020073797a30000000000900020073797a300000000008000180fffffffb08000180fffffffd0900020073797a3000000000350001004deb4fc914a92d9d864a311e892b4554512fa12869b5a05a21978ca5cf7b551f6b0e8e90d00220cb5690445b2e009921b2000000bc000100b577101f63d029fe64f0dfa754ef356df80675b56f09072ca963a30bb2d7728feed0f8bf4c9318fedf2f1006b381abf74ac637dad82454c035c80757f1f2651d83ef0dc9709b6072fd62f024b9a0683e9f27b76de54d4b1161708e5b71c3dc8a0d8d5fab7a4420da301d59f8301ed9b59ef22b88b22c54a7a4ff166c6bd6f73bef486b9b826784a25c9daac2e81b847b7d29f9faf41d7911a5f51dfcf095227fea7297b0f03e59cd436306790d05b0c3520b4f3621e8bd3d98000100d5b15266d2ced83e0e7bc57c7c894700cb4d63f82144b30aa27b7f39860df6617427ddc5b5b438e4f468314cd6d5f4cf33fbccbb2cd4c50f74ce124cf3c925da4c8115a8e9939e90192217852139c10df7194a8c7436b765f6aa9ec1348cd8bac1bb1bc347fc68fc833a7d28ebbd2acb5b9cf2f05b1e9f7cb7f2d26b5d4f93cd282ded24f887e9dd429b865a54c43ef23b5348c30c0002800800034000000002910001001ee847c43caf08580ba4b1ba049733491fad305bfb57a62949602197f5988a92b4dc8e290e7e88dc56aaa0123dd307740be86db436696c2f585b14344b55574a6a1f558d55131773c759cdad05f8bcf3d1a0e463a09e8c9f0ed0f57ae5278bc41ab10f992075529d04ccc350815bf2f6b3b19022d13e55642cb4f674aa02ff7b7daae3d3433b7383e5c62f10a5000000380002800900020073797a3100000000080003400000000408000180fffffffb08000180fffffffb08000180ffffffff08000180fffffffbb0010180180002800900020073797a3200000000080003400000000350000280080003400000000108000180fffffffd08000340000000010900020073797a300000000008000180ffffffff0900020073797a30000000000900020073797a300000000008000340000000030c00028008000180fffffffdd3000100f347916d96a5c74601853a36f798c588d5f3d690239c3ea86046adc6e5a6dce3321863a0761f429dee88361615eb01bfbd193e90b727c0fd49218926a131868706d50fbebd39873448f2ddf89db89ccd159d4f674e5e20d16f8650f81c786d3f05532dae0b33d50488dee9f70f8ebddeebf63712e26961f2c37bcbaf8de444312a00d4ea9af430b289c32b4a7b9c6d7c5752cc1b62d99c31a9b4a4607d97076015a8c524f71a2d4a7afc74256282bfe35adb3871ea5f411062e9e42350ab1fc86b16039c6d1107e5d00c8fe96e011500100002800900020073797a300000000045000100ec6d88d1c0f98e9f2b6fde2bd66999c49b1a57461bdb1fb7d4efbc8c4f2393e3a15709406b1665ee00c711de85b55628970b478f54e48e75bc99a879fc13b3300d0000000c00028008000180fffffffef409008094020a80640002800900020073797a320000000008000180ffffffff0900020073797a310000000008000180fffffffc0900020073797a30000000000800034000000003080003400000000108000340000000030900020073797a310000000008000180ffffffffce0001003ef4de519f5271ef66b88133e5b621fd2c2c8f4e95a731ffffcf10dcacb420de287adba3511b480abd493ef00f0488d43cbdf2c8616e6ab1f4667f8959f9f049edff6e4aefde29f4e18c4f4b9d0ba20eea8d1976873989666696d365e79b1c8acb00c2d4ccca37b55f13336d476ad9a07dc0a307d015d198dc0dd1a7c5196d4910b2788f4b8ebed46b1cd8772b5ea6d9b4c30742fc12e837bd586eb051404c654560fec48931a18e7ff1de6f5af95bd4b58da8f44b6122d304529bb5854bffcf09f1f7af01339e6cfc9d000044000280080003400000000208000340000000020900020073797a31000000000900020073797a32000000000900020073797a30000000000900020073797a3000000000340001003abe1a3afee1afa8fd6111a8c050c6fbb4605d10aa769a007310de53da99fa412d9dfdf59068e83f972da5d1994c687fe3000100c2d11cd9071317921ba8e8ff7350d413e72afa540987d58e1e296f1eda781e2594151376e7863e7b67e56b43a29b63039840880a4818b3912c166a9af0c251e2a98e2fe16dcc5c5f601a7f3f420031daed70bb8be96a1869d91d8f93e7fccfdc50ece50714cca8eec128ff37795178d2fd171243cb0daba631cd8795492a2f2daa60bd9b3163f59851a8003b673c418ad8415841d56f92b2aa4901f06c4a035afd65d08ea2f9942f1858f9857cd6820898488398a865a41bd79a7c53315e3355c0004f1a0570912fdf40e135b465fc92b3a375c7c0cc72e4272945fa26f4520018000780080001006c6f67000c000280060001400000000044020a8008000100bd0504745c000280080003400000000308000180fffffffb080003400000000108000340000000030900020073797a32000000000900020073797a310000000008000180fffffffc08000180fffffffd080003400000000408000340000000025b00010018d8230d6ebcdcde5b2c9b89f0a923b7360738af39c1e0b70ea562fead5f55d9ac69069a52ccff89436017a82774d1e1b53c5979160d00194e5c800772ae1e80452b39948fae41b5203374902e357cad57365a540b6eb4005c00028008000180fffffffe0900020073797a30000000000900020073797a31000000000800034000000003080003400000000308000180fffffffd08000340000000020800034000000003080003400000000408000340000000031800028008000340000000010900020073797a3100000000d60001003a4179d61ad8da1d737fadad3853770806539a72aba1920dc472a9ad9ca267ad5fda436c3d73a44782d424c23a28f03e7e07dbc253cbd33c51c175424741e8e6da0272713f127177e89e1e1b737c51d424e34f4f2d6d46c612e705c2d3a08a141ee233d18ff915f4d03042d0bb98bb163eda06be180bf0dcc7885963bbcc7b8c7e1d050c187ba5fbdd6a6f7f3692ce5de68692f2898c65d090b4ddd2a2316ed824ed8885f1ca8cad6b7277c7d80ff3809912429186aafd3058437faddec798c29cedee56d77863c87bb585cd2c7b004989e700003400028008000180fffffffd0900020073797a3000000000080001800000000008000340000000010900020073797a30000000002c01028016000100cf2423e846331d984bbe5186f2883bbef7730000200002800900020073797a310000000008000180fffffffc08000180fffffffe2e000100750b0c87bff4a6ff8441b2f69ad653afa7021b2de50b09d1b2c6b1a8396d09aa562a54aad49585f23c8700009b0001006d074054d62a5a838595b903cd6fc36457feea826b4ca943af0ad6337d88cd882334df607c702a89586ada49a0960925c8b21372a82f6f53ae14f52cf5f036ecbaaa3c1ee36cf4fd6d62674ea02e193f5d8f21afd140ef1cf39ae76ec298f8591cb09e6fb9416e76d977bc2063e705addf76d3ebe02238eab4de645e3009a5ab707e088321a62677ca0bbcbfad4d72e9ae26e711fafa8c000400010014000280080003400000000408000340000000010c00028008000180fffffffb0c000440000000000000007f0c0101804400028008000180fffffffe0900020073797a300000000008000180ffffffff080003400000000308000180ffffffff08000340000000030900020073797a3200000000580002800900020073797a32000000000900020073797a310000000008000180fffffffc08000340000000040900020073797a300000000008000180fffffffc08000180fffffffe08000340000000040800034000000003100002800900020073797a30000000002c0002800900020073797a30000000000900020073797a320000000008000180fffffffd08000180ffffffff3000028008000340000000010900020073797a31000000000900020073797a31000000000900020073797a30000000000900090073797a3100000000b0020a807d000100fef9d9051083946c03c3e5cee2fe49a133eaf2f160e91b8e696a30718e0cdd440820ac07b7dca84a512d0feaf42ee2ec5d360ed399c65e998345f2a94af57a5a0fcb77ee772782d3ca27cb45c6794b4d061e913f836f5196433703a0c141c3d0689387995934288d6f3fc09de8e4366b8917f2b3e2a16394c10000002c0002800900020073797a3200000000080003400000000308000180fffffffb0900020073797a3000000000fe000100a4053ff686294c087c9ed55363a8a2fe9b0bf9103d3e14acab1032011e2f5456ad0900058571550f1564cf401d5f420555b39ebb8e8190c59faac66666471ea9292078433f481a50826102063470c9b737af76d06ff0d927e1a76ab427f3734d7385f312c32d8dd7f8b2db21862700bd5975ccc5e532bb7e20e12744ffeba3f411b2f27612071092597426ef1edb7ec7f32f08be02b169927d74f603344cd3de4ce8744f6d203edfacb62e1541602bf87f8f0fce07e3e0bcd0b29ae8c605d932d772fc02d707ab253a36d2e60a30491a4349dc1ab0f7cddcd679040b49068b92159a55b928fbe3af69bb1d02903c6cd64bce9bd661445f8d9cfe0000be0001007b338363f4ccd2f90f4dec972d8f4f3c5684b62de7febc53ebdc76fa94a4bdaee4c62ea6ced17bfb6e61f7cb87678b5e3192b322ad44ca65746f401bcad066c212bd84cda1b303d43c310e0bc0c87f1ca8cbd07735c43f236cd2f73be5ceb3d7c6c580683bd9ecdf83af48113bf67c486e188ff43d4aea88ccef2fa45a65b40148a35b1fe7572350505a527e2cbc5a1a30360ecd9c651c0f2e120768a096b59e1c14ceb7a90c9f7615c4d9507d28a3a834eef2606ece3f79fead00002e000100f159941f519b50e37fb5807ce70fa60d1cc9635debf396148f6ba761f2e874523bf05193f658411f09e50000100002800900020073797a3000000000800100807c010a808a000100f088b65bc63d71af678143af534460eabf93ffe898460e0b3fd03d72da0fbe66401c2371a5c82302160cb191c3f6dea0e7dc4f500ae2f1444d7ad60f4a0e7d6b9d4c04f9f8de220ba400acf8ce0730eb62a598b8c4656a5d25e11a8fa20b2be1cff741e59fb4a738a95d05fd0786afec71d45327397fd618a8f7f0d8c3f76406da0d8ca3e9c70000a4000100d1e35f46c21f9d5dcc371a89fe6016dd34fb3da591fb09f465ece053744694513fef26494ff5480991f2f0595326494f090f299f91d62a5ca9dca94b24da6c1918fbeb9dd9a1d918313e4cf5def1b56af7ab0a5a7937ecfb3a7cda279391f7c5e777b8e08a686413971b850fe9fb869022aed6f55e6fd8075ebb9a2d5b59a56247e1292d063558e2848b584a2fccf29564460c6865eb65af41af08456988f7104500010014b2cefc21189462b7306691b4f6c039e52ebd1c3e00788472285c7e29c44a1256d6fade06d0755e6acb1826253cc3a535efcedcdddc810bb402901efb5cf210"], 0x1250}}, 0x40088)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300)

7m55.215337468s ago: executing program 4 (id=17):
r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r7, 0x5)
landlock_create_ruleset(&(0x7f0000000080)={0x8048, 0x1}, 0x18, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48)
connect$ax25(r8, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, {0x0, r9}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r10, &(0x7f0000000bc0)={0x20000014})
socket$inet(0x2, 0x800, 0x14bb3ced)

7m44.434840335s ago: executing program 4 (id=27):
r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r7, 0x5)
landlock_create_ruleset(&(0x7f0000000080)={0x8048, 0x1}, 0x18, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48)
connect$ax25(r8, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, {0x0, r9}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000bc0)={0x20000014})

7m38.961175439s ago: executing program 4 (id=35):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r1 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)
syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, <r2=>0x41424344}, 0x3, 0x2)
syz_emit_ethernet(0x11a, &(0x7f0000000200)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x3, 0x38, 0x10c, 0x66, 0x0, 0xfa, 0x6, 0x0, @private=0xa010100, @loopback, {[@lsrr={0x83, 0x7, 0xeb, [@remote]}, @end, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xb4, [@multicast1]}]}}, {{0x4e22, 0x4e20, r2, 0x41424344, 0x0, 0x0, 0x15, 0x4, 0xfff9, 0x0, 0x5, {[@sack_perm={0x4, 0x2}, @sack={0x5, 0xe, [0xe9be, 0x5, 0x8]}, @generic={0x22, 0x12, "1bd410d5b9df070ae017ecbcee91e209"}, @mss={0x2, 0x4, 0x8}, @generic={0x3, 0xa, "567a733d27dc9f49"}, @generic={0x2, 0xf, "7cb58f8417874111119d109719"}]}}, {"171a4787d0a3907e33720144291ac58927133cc56e49706c7154ccae65f6a48b87ddae5a062792f4d6414781632553caecf69d544b02eca5ff1a788868feab2157f8aeaea109c745ce6f768d1c83b70c29e56c3baf135a2c17a421b1cbfa676b8c9598a8d0f2358529f8be70678c44beb6851848df9a9a536b118d6b7aede0139055fa34d5c4409c11215b15804fa884"}}}}}}, 0x0)

7m38.475069612s ago: executing program 4 (id=36):
r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r7, 0x5)
landlock_create_ruleset(&(0x7f0000000080)={0x8048, 0x1}, 0x18, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48)
connect$ax25(r8, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, {0x0, r9}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000bc0)={0x20000014})

7m36.859999656s ago: executing program 4 (id=37):
r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r7, 0x5)
landlock_create_ruleset(&(0x7f0000000080)={0x8048, 0x1}, 0x18, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48)
connect$ax25(r8, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, {0x0, r9}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000bc0)={0x20000014})
socket$inet(0x2, 0x800, 0x14bb3ced)

7m21.542651981s ago: executing program 32 (id=37):
r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r7, 0x5)
landlock_create_ruleset(&(0x7f0000000080)={0x8048, 0x1}, 0x18, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48)
connect$ax25(r8, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, {0x0, r9}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000bc0)={0x20000014})
socket$inet(0x2, 0x800, 0x14bb3ced)

5m37.487751019s ago: executing program 1 (id=186):
socket(0x1d, 0x2, 0x6)
timerfd_create(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r0], 0x0)

5m31.839270441s ago: executing program 1 (id=193):
r0 = openat$uhid(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00')
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1909841, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x1b, 0x6, [@datasec={0x5, 0x0, 0x0, 0xf, 0x3, [], "bae4d6"}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x61, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/220, 0x3a, 0xdc, 0x0, 0x3}, 0x28)
socket$inet6(0xa, 0xb2c9dc41aa762534, 0x40007)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x1b59, 0x8}}}}}, 0x0)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

5m30.626085073s ago: executing program 1 (id=194):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000009000000850000007a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000781126bbb1c50b5319ea1dc3516804c49c74462d9299660aa291637338236284eb0c72eaa17e3c88726fd5a740987871c761edcaea28f5cf8a0f0c0919e2b4f3a08efd3a60e4e892a31d4ac7d60ad7a77fd2072a795f399334a2de7c890a274a9a9488585cab582b2c6ffccd7f39f6ae9ae0f6372a6cc08471dfd3cab407d68d92e65cda24e2b880ab4bf3c2cf22db1bb31b41732cb2141f3b69c29a83116fc91a76086d24a4e55d76e2d42532dba137"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94)
restart_syscall()
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000002f80)={0xa, 0x0, 0x0, @dev, 0x7}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace(0x10, r3)
ptrace$cont(0x18, r3, 0x7, 0xb)
ptrace$cont(0x20, r3, 0xfffffffffffffffb, 0x8)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x3, 0x2d, [0x9, 0x400, 0x0, 0x10, 0xbd, 0x1], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000040)=""/45}, &(0x7f0000000140)=0x78)

5m30.087137819s ago: executing program 1 (id=197):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x121201, 0x0)
r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x2002894)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x25, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffe}, 0x90)
r8 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x4}, 0x10)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
mq_open(&(0x7f0000000000)='\':\x00', 0x40, 0x3, &(0x7f0000000040)={0x10001, 0x4, 0x80000001, 0x3})
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000100)=0xffffffffffffffff)
close(r0)

5m27.716329817s ago: executing program 1 (id=200):
r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r7, 0x5)
landlock_create_ruleset(&(0x7f0000000080)={0x8048, 0x1}, 0x18, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48)
connect$ax25(r8, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, {0x0, r9}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

5m25.254630678s ago: executing program 1 (id=203):
prlimit64(0x0, 0x4, &(0x7f0000000440)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e)
r3 = syz_clone(0x4001000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
ioprio_get$pid(0x2, r3)
sched_setscheduler(r3, 0x3, &(0x7f0000000100)=0x9)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x4081)
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2ad01, 0x0)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000380)={0x2, 0xffff, 0x10000, 0x9, 0x13, "a294e7003e805a9d1b78d681c441000700"})
write$UHID_INPUT(r4, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0)

5m9.769872783s ago: executing program 33 (id=203):
prlimit64(0x0, 0x4, &(0x7f0000000440)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e)
r3 = syz_clone(0x4001000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
ioprio_get$pid(0x2, r3)
sched_setscheduler(r3, 0x3, &(0x7f0000000100)=0x9)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x4081)
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2ad01, 0x0)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000380)={0x2, 0xffff, 0x10000, 0x9, 0x13, "a294e7003e805a9d1b78d681c441000700"})
write$UHID_INPUT(r4, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0)

27.374735906s ago: executing program 2 (id=694):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x200)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20)
recvfrom$inet6(r2, &(0x7f0000000580)=""/44, 0x2c, 0x100f2, 0x0, 0x0)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040))
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x7f, 0x800, 0x0, 0x4})

24.707634447s ago: executing program 3 (id=699):
r0 = socket$kcm(0x11, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca8297", 0x22}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b11", 0x11}], 0x2}, 0x24000008)

24.592951683s ago: executing program 2 (id=700):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, 0x0)

23.48983408s ago: executing program 0 (id=701):
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x23e69000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x80200)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x6, 0x1, 'RAS\x00'}}]}, 0x70}}, 0x80)
io_setup(0x8, &(0x7f0000004200)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
r5 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00')
preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1ef, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400000000000077, 0x7600)

23.416622641s ago: executing program 3 (id=702):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/access2\x00', 0x2, 0x0)
write$smackfs_access(r4, 0x0, 0x7)

23.111058473s ago: executing program 2 (id=703):
r0 = openat$uhid(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1909841, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x1b, 0x6, [@datasec={0x5, 0x0, 0x0, 0xf, 0x3, [], "bae4d6"}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x61, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/220, 0x3a, 0xdc, 0x0, 0x3}, 0x28)
socket$inet6(0xa, 0xb2c9dc41aa762534, 0x40007)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x1b59, 0x8}}}}}, 0x0)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)

21.983266947s ago: executing program 2 (id=704):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x200)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x8080)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@random="492afaf4337b", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xce, '\x00', @local}}}}}}, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040))
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x7f, 0x800, 0x0, 0x4})

20.118284458s ago: executing program 2 (id=705):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x200)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x8080)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040))
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x7f, 0x800, 0x0, 0x4})

19.997389897s ago: executing program 5 (id=51):
r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r7, 0x5)
landlock_create_ruleset(&(0x7f0000000080)={0x8048, 0x1}, 0x18, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48)
connect$ax25(r8, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, {0x0, r9}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000bc0)={0x20000014})

18.325399767s ago: executing program 5 (id=706):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45)
socket$netlink(0x10, 0x3, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@host, 0x5})
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
bind$vsock_stream(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x0, 0x0, @host}, 0x10)
listen(0xffffffffffffffff, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6ae}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x26100)
timer_create(0x9, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000400)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000140), &(0x7f00000001c0))

17.695433456s ago: executing program 3 (id=707):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
capset(0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000001c0)={0x0, 0x50, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, r7, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3f}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048844)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c01000087d7830b32eab8fa4e2598a456b3c82a83b5f6caaf25d81adbd5de9940cac0bf35289cc2620ffeb9a5c6113f288b68d5bcf49dee94e497abf732e455292391b4b60f77de2c7bf0bd49c5e68354fe3eeef67dc2317438bfed30adf37e96fdcf6715b023b528a4ecc62f4fa0eff30a581d73805356b6464abe4183a0460ac409ddf659c138753a1e982ecb062449e91130d8aac459cb22db1cdf02ba43242614182c", @ANYRES16=r7, @ANYBLOB="000229bd7000fddbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830000000000080001007063"], 0x11c}, 0x1, 0x0, 0x0, 0x20004014}, 0x4000010)
connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10)
write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c002b03", 0x9)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0xfffffffffffffd39}, 0x1, 0x0, 0x0, 0x4000004}, 0x24008010)
memfd_create(&(0x7f0000000040)='[\v\xdbX\xae[5\xa9\x90\t\x00\x00\x00\x00\x00\x00\x00\xd1m\x13}\xe1\xdf4f!\xd5d\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\x1ae\xe0\x00\x00\x00gl\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5>j\x87\x04\x11y\xa1\xc8\x9f\x9etiHv\xef\x1a\xedS\xd6\x91%||/c\x87\x94Y\xa0\x8e\x03\x00\x00\x00\x00\x00\x00\x003:\x99\x1e\xac`\x00\x00\x00\x00m\xeaB\xf0K\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\x156\xb0\xffL\xe2\x9d\xb3\xfd:\'\xd75\x11p`\xf7\xf1X\x10\xfa+y\xe9l{\xf9\x94t\xb4\x8a\x8bl\xb5lp\x127tF\xa4\xb3E\x93R\xe4\xc16\xe1\x7f\f\xa4\xd3\x9d@\vy\xac\x8a\x15\x1e=\xa7\xdf8\xd99\x928\xa6\xaa\xee\x87\x05\f\x0e\xe4\x05\x14M\xbb\x14Q\xe7[\xfd\x8a-\xa7(\xd968=\x8bw\xe3Q\xdb\xac\x06\x19\xd8\xddcB\x18\xc5\x94\xe1L\xd11\v\x06\xab\xb1)\x18\xf7\xe2\xcetL4\xb4t\xf7%U|\x7f\xcc\v7O\xb1Y\xcc\x7f\xdd\xd4P\x9d\xf6\xd1\x80\\\xa3\x8b\xca\x99\xe9q\x17\xe9v\xe9l\xdb\xa9\"\xcc\xc0\xa6\xfb\xb5=\xc9\xbdm\xff\xd7?\xe7\xa5,6\xa8\x93\xdb\x06\x16\xafT\xa0\'I\xbe\x86\x00\x00\x908\x7f\a\xee\xaf\xa2\xf8T\xdf7\xaa\x19\x86@\xbe\xc48\xafDp\x04\xd17\xef\xc7w}\x97H\"):\xfaV\x17\xbd', 0x7)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x20, 0x0, 0x81, 0xfffffffb})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r0, 0x20, &(0x7f0000000640)={&(0x7f0000000580)=""/96, 0x60, 0x0, &(0x7f0000000600)}}, 0x10)

16.194806853s ago: executing program 3 (id=708):
socket(0x1d, 0x2, 0x6)
syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
unshare(0x2040400)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

13.736736189s ago: executing program 0 (id=711):
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0)

13.691802458s ago: executing program 6 (id=712):
r0 = openat$uhid(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00')
mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1909841, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x1b, 0x6, [@datasec={0x5, 0x0, 0x0, 0xf, 0x3, [], "bae4d6"}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x61, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/220, 0x3a, 0xdc, 0x0, 0x3}, 0x28)
socket$inet6(0xa, 0xb2c9dc41aa762534, 0x40007)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x1b59, 0x8}}}}}, 0x0)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)

13.306604945s ago: executing program 0 (id=713):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000013a40)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

12.626077788s ago: executing program 6 (id=714):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x200)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x8080)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@random="492afaf4337b", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xce, '\x00', @local}}}}}}, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040))
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x7f, 0x800, 0x0, 0x4})

10.930537434s ago: executing program 6 (id=715):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/194, 0xc2}], 0x1}, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_MARK_MASK={0x8}, @CTA_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r4, 0x8b2a, &(0x7f0000000040))

9.151669127s ago: executing program 2 (id=716):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/access2\x00', 0x2, 0x0)
write$smackfs_access(r4, 0x0, 0x7)

9.130107776s ago: executing program 5 (id=717):
ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000100000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/231, 0x46, 0xe7, 0x6}, 0x28)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, 0x0, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
kcmp(r3, r3, 0x3, r0, r1)
r6 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0)
syz_usb_control_io(r6, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030400000004031404e116ab2a7be0047159313e1b261be9ca35984f9a1c360308b81f2e0b"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r6, &(0x7f0000001840)={0xffffffffffffff94, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x3d, @string={0x1}}}, 0x0)
syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="208302"], 0x0, 0x0})
syz_usb_control_io(r6, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="081502000000fbb425bddd09a96491c42193454c6987de474303400b0e0955cc3a07f1d9fabe33e74b990fed840deb127061601706e6db97eaf226e1af432fc39133d57eda67d84eb916322915cfb1810e294e4180e966248a9bca"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%\x00'/12, @ANYBLOB="fe"], 0x20)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_group_source_req(r7, 0x0, 0x1, &(0x7f0000000340)={0x80, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e21, @remote}}}, 0x108)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r8, 0x0, 0x0)

8.987277362s ago: executing program 3 (id=718):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45)
socket$netlink(0x10, 0x3, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@host, 0x5})
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
bind$vsock_stream(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x0, 0x0, @host}, 0x10)
listen(0xffffffffffffffff, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x26100)
timer_create(0x9, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000400)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000140), &(0x7f00000001c0))

8.95511968s ago: executing program 6 (id=719):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x81, @empty, 0x7f}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000340)="a51532ecbb0ce100105397b2cae2ccea5fc98d028a5c6b681163ece1f936c26a33786967125a54fe7b96400380921ef18eb15ca538bb4c077ac75d3828d08970ae6da6003046f38ae9ddc51407f0ac784b5b71a53893b2ca1b4166880fe75fb5d0c6e72bee0c594cced07d07e534652c20603fa97766e4e3381621fdcc40603f54ec71708bfa6af947e67edc651ed133cf39f480f31d90a49091143559187efc633787974d3eec35bba494824447f97d0c004581ff11d1fb91990903d6444d7baa720c943c14767aefcd0f098eca763cd256f3f5cd71cbd02f9a859ce355fcbd35b80c3f3a63d1ff6c0b075e0701", 0xee}, {&(0x7f0000000440)="8241c8f553c9a7f3ff8c477bfd286936c4303f388d25e63b48c4221cf4b09b8c5b8438a5024978366344fa8537d9bae7eced206a7d9cfe4fee70e11bf06932bdf014f0c6dbc40ccbab1a12a42518dc69707291e391dd26ee90abc5fc19d8fdfa7fe3bee205262b079e60091d642fbf607b695e909341cb44a8af4330e68522fb42219fc7b80d0e5fa13ebe4061a66c48da384603dca028729de0", 0x9a}, {&(0x7f0000000280)="9f598e7080342c538c52e93fe984770b3e50820250270141ca713917ef6c619d7240185c703b756a32db6e0e22def71c4aa0ae66147be1ba578e2ca82f416ef32c09c3a99d", 0x45}, {&(0x7f0000000600)="5f5ea859e11a7c8abf4575fb3bc48e801c74a76e120245f7f07af4e865582b005ecdb824c092953a1c570380bb0c66aa69f316c8e3c7cb7e30aed622c0c7eed55225110c8ae1254ac2cf843ebcd4aa8c573a1feaf3b0cab97719cbed068168208b3631ad5b0d7499c3dd4319afe2369734c1ac5f0ddeea442a0dbe50102ceb1ff30a5e3568a98b60077e122d6c9ecac305367e9e502becea4f8f88ed7df3bbfcfc532e308aa97af251b89b65a933fa1bb689a4a0a5be505e52351ea57f700250e4", 0xc1}, {&(0x7f0000000700)="d508386bb64dc63471b07a20de7630ae53f074248389abf4a889bab30ce5b29fa0fe54c0524307ff875e47cfb701abeb1607125c496a00ee108ce2c59d90a44ea5fb81ce3381f53519296608bba645263546384ebe8e7f6a7b2ee21e25ad06bba46c1bc4f354b27b80b297183519724ca604d98eb829574802ba1e38a5fa8c20cbba0b19f9db21e2b6fddc644f41f3211619ac9c87952577348946755c86d5a587d705c777acd2d72c41e5391ff842390c620e8f0f5d5f84e2a435003e28c039a789db12ae60d2ef8f49ba10052e52", 0xcf}, {&(0x7f0000000800)="9d3bfc94d9976511a1133c3b9ac399d663c5a5367b760ee87057fb4c419f11a59ae3240ea9b055700fbf278234beb249e3693bbba691366301e077d2ab9b95d2211168b0cdaaf353b5a04be61491b87155a4e3e4041452391dfc7e508e62e3d1e5dae34d85299e4e1755dd16a2eaa95669b9c991453834146882ed0f2e84b787412028c2f1", 0x85}, {&(0x7f00000008c0)="7df35ba4e62eabac52779e4090d0917c70ac905fc5f52705098e050bb023b6f51dc9f3a427942a9d21242e67906bc3e37576c6d2a2bb6139ad3822bd84bf4e54bf3bc3f89ad4", 0x46}, {&(0x7f0000000940)="6be1fc90603bc30a62ea04f5e7a8cdcef5416b95373058414307d81c02cba19d2be612de1a91484f9ef354f0a30072070cc1848393b77e1e0c36173bdc047dcf600a80d3956b109df94e5b268d73638fdadf702482f87608fc8d2cfa9cac863e5dc1672758928c074380d4e1429d9c8e0e77fa0bb6be2282f5ead50813442033298f7add3949bd17bad7ca8564bda45ca4336cd182070d35194fad80180b5dc336927fb2", 0xa4}, {&(0x7f0000000a00)="69cede82b747a9fab5bbefe837c4a836644d9dddde048df0f2f76eeff76326e4665b698c523a1e1fd0d600493439594c307c9242fe65f47cc65cd10d0a3781fdc4d4ca9f903e9c3dfa6a8f2e56a1f7a6a812076a2148b7e208e0b918f29ee9b45d7ae2081fcf1a74e062f961660c8f1ee1300ff1bf9953c391c24af4e615eac770775d7924c307a52f56553e5be0d5b080f5988074bb5e0c8b", 0x99}, {&(0x7f0000000ac0)="67399093e26e4e293951f5b01956f530f7081fb285f97f2301ad64782a0787b14850c3deb028f4cf6506ffbb164ebb20ec09fdc78c456b400d88cb78ae3d6f4ae99b00783388233df86098e25b2fbd6911434aead153f6718d1e3b206a01daafe2e06a78643166914d92bda641e8453c2f089f6c599150134169918d64f17795796e28aa16db20487873d6ae025aa83b99eab6db85b1417d1d0bac74c4b4ba055d87727648afcc20a4e236da56a9a95736a9859953a2eb6d893a9405f6c4fcd4668ab56029962235efd8cff90330a3ab8d5ce466a7b81ec937ca7c6deb7fa28a31f888", 0xe3}], 0xa}}], 0x2, 0x4000000)
madvise(&(0x7f0000970000/0x1000)=nil, 0x1000, 0x17)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010102}, 0x10)
socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYBLOB="be216d6259b6604987de8fde95ecf83976a1908c5b67e168c95ea5c7e2b66fa23ffdc799ddbcd86d3ea96d96f87be449b9da8abddbb3232f9db92989eee2c89c868994e720f474ee7cf122537fb1b78f25d13cd5a5667d91118ab7ae6aa549409e838a3f8bffed8d2d5405b37ee7ca2af948020052eb40f9543bdac0dfee5a91586580d72349814c", @ANYBLOB="f9000000000000ec0000003f787ca9139b7d36b3ac4cecc5fafcb8b8b48b36331b3c8de539cb9db5152a6fd4e43a830233861ee8b2614f72e754f1a6b48f6bcf6cebfc96af9cc4ff2bd142", @ANYRESDEC=r5], 0x64}}, 0x0)

8.809448804s ago: executing program 0 (id=720):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000fd3f1400e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000180)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000180), 0x0}, 0x20)
listxattr(&(0x7f0000001300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r4, @ANYBLOB='.'], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
r6 = fanotify_init(0x0, 0x101000)
fanotify_mark(r6, 0x10, 0x8, r4, &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000e00000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1410, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8091}, 0x44000)
ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000000240)="cde078b62dce842ea09b3d61f656e1a914835d9c2b21af0d6c5bb783cdc69a17587a47e8ad10745a9050797f4fbc96a718fdfc1d4b6451b290ceecde567e9612a98f653f86ffe72e8a43424c910365d0f03df79be50bb7819ecc319d865d2995b605a87d6941810cb4c54b74bc93c9f2672b780b25cd8a89cf6084009206d077c39b88ce392e59fa32b6a8f757c168fe4f91de43e45bb1e14abf24d3c572e3389e1a12dac82ac9643688de", 0xab})

7.432702188s ago: executing program 6 (id=721):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280), 0x0)
socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
kcmp(r1, r1, 0x2, r3, r2)
socket$tipc(0x1e, 0x2, 0x0)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x6472333b}}}}, 0x30}}, 0x20000040)
r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f00000005c0)={'#! ', './file1/../file0', [{0x20, '\x00.\x11U!\xac\xb2\x80\x9f4Lg\x1d\xbek\xefL !\t\xa8\x81\x1a\x84O\xcb\x9b5\x0e^\xe8\xd72L\xba\x06\xef7m\xb6z\xa2\xfev 2\x12X\xbb\xe3-1\xac\xdc\xeaX\xb8\xdb\x88\x80;\xd2\xf7\x11\xcd\xc1\x81\x144\x96tJ&\xaa\x8e\x111HX\xc2Z\xdc\xa5\xe1\xc2p/\xc1\xa7\x82*\v\xbfk\x12S\x92\xa3\x87\xa8v\xa0\x01\xca\xab\xa1\x19\'j\x8a\xbdf \xf5@\xb1\x8aE <\xa7K\xe3\xedG\xffM\xd2e\xadfi\xba\x121\x175\x1a\xee+X*\x8a\x82\x8aNm9\x96\x11\x15\xe9\xb5;3\t\x06-\xe6\xf2\xdf%[C6,\x91\xe6\xfb\xef\xcd\xd3\x0fg\x8e;p\xa7_\x98\xcen\xb2\a\xfb7y\xec\xd1\xdb\xd3\x1e\xd1\xcc\xc7e\x82\xf6\xe0\xbb\xeftD\x7f\x89\xb7\xf8\xc1\x1f\xfbz9\xa8\xc9\x87\x0f\xb8!\xb5\x93\xf6\xe9m\xb4\x13M\xf9E\x06\x85\x1f]\xd7\n3\x0e\x1f\x1aT\x05\xc7\x81\xdfs\'UJ\x92\xc3\x9a\xfe\xa8\xa7\xa9G\xd3'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b00"}, 0x13b)
write$UHID_INPUT(r6, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea8a1d91bec8d4b5a6d80b8785d9600010000000000000094d75396dccd0ff600000000a81b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x8, 0x4]}})

5.810730313s ago: executing program 5 (id=722):
r0 = socket$kcm(0x11, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2b", 0x24}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b11", 0x11}], 0x2}, 0x24000008)

5.715456714s ago: executing program 0 (id=723):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\n%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac~\xea\xb6m\xf0u \xdd3\f\xaa\x02dR\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xacy{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9T\xf14\xa2\xfe\xb6|\x111j#T\x97\x02M\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4', 0x40, 0x4, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='sessionid\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30}, 0x31)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

4.352107098s ago: executing program 5 (id=724):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x88140, 0x111)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000004600070128bd700000000000017c0000080004804e"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2c080, 0x0)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020"], 0x58)
close(r3)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x356, 0x1e0, 0x578, 0x280, 0x1001, 0xfffffffc, 0xd968d5b908ac0cde, 0xffffffff, {0xfffffff9, 0x8}, {0x350}, {0x7}, {0x81, 0x7, 0xffe}, 0x0, 0xa8c6b5bddf18cc2b, 0x0, 0xd614, 0x1, 0x0, 0x0, 0xa00000, 0x10000000, 0x40000, 0x0, 0x0, 0x16, 0x0, 0x1, 0x8})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
connect$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r6 = getpgrp(0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x4, 0x1b}]}, 0x20}], 0x1}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x2, 0x0)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
r9 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x1, 0x0)
r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000240)="ff", 0x1, 0xffffffffffffffff)
ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000180)={0x0, 0x40000105, 0x0, 0x0, 0xfffffffffffffdcc})

2.871402405s ago: executing program 0 (id=725):
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000980)={@remote}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
r6 = dup2(r5, r5)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10})
ioctl$BLKTRACESTART(r5, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r6, 0x1275, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7)
syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="85e3"], 0x0)

2.835053553s ago: executing program 5 (id=726):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x200)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r6, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x8080)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040))
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x7f, 0x800, 0x0, 0x4})

436.938475ms ago: executing program 6 (id=727):
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000980)={@remote}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
r6 = dup2(r5, r5)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10})
ioctl$BLKTRACESTART(r5, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r6, 0x1275, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7)
syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="85e3"], 0x0)

0s ago: executing program 3 (id=728):
socket(0x1d, 0x2, 0x6)
syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
unshare(0x2040400)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 PREEMPT_{RT,(full)} 
[  346.883477][ T7360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  346.883489][ T7360] Call Trace:
[  346.883496][ T7360]  <TASK>
[  346.883504][ T7360]  dump_stack_lvl+0xe8/0x150
[  346.883543][ T7360]  should_fail_ex+0x46c/0x600
[  346.883574][ T7360]  should_failslab+0xa8/0x100
[  346.883593][ T7360]  __kmalloc_noprof+0xe0/0x7e0
[  346.883618][ T7360]  ? tomoyo_encode+0x28b/0x550
[  346.883642][ T7360]  tomoyo_encode+0x28b/0x550
[  346.883664][ T7360]  tomoyo_realpath_from_path+0x58d/0x5d0
[  346.883694][ T7360]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  346.883717][ T7360]  tomoyo_path_number_perm+0x1e8/0x5a0
[  346.883743][ T7360]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  346.883766][ T7360]  ? __lock_acquire+0x6b6/0x2cf0
[  346.883792][ T7360]  ? do_raw_spin_lock+0x121/0x290
[  346.883847][ T7360]  ? __fget_files+0x2a/0x420
[  346.883869][ T7360]  ? __fget_files+0x2a/0x420
[  346.883886][ T7360]  ? __fget_files+0x3a6/0x420
[  346.883904][ T7360]  ? __fget_files+0x2a/0x420
[  346.883927][ T7360]  security_file_ioctl+0xcb/0x2d0
[  346.883954][ T7360]  __se_sys_ioctl+0x47/0x170
[  346.883980][ T7360]  do_syscall_64+0xec/0xf80
[  346.883999][ T7360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.884016][ T7360]  ? trace_irq_disable+0x37/0x100
[  346.884034][ T7360]  ? clear_bhb_loop+0x60/0xb0
[  346.884056][ T7360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.884075][ T7360] RIP: 0033:0x7f97db6ef749
[  346.884091][ T7360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  346.884107][ T7360] RSP: 002b:00007f97d994e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  346.884126][ T7360] RAX: ffffffffffffffda RBX: 00007f97db945fa0 RCX: 00007f97db6ef749
[  346.884141][ T7360] RDX: 0000200000000140 RSI: 00000000c054561d RDI: 0000000000000003
[  346.884153][ T7360] RBP: 00007f97d994e090 R08: 0000000000000000 R09: 0000000000000000
[  346.884165][ T7360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  346.884176][ T7360] R13: 00007f97db946038 R14: 00007f97db945fa0 R15: 00007ffe994f8aa8
[  346.884208][ T7360]  </TASK>
[  346.884329][ T7360] ERROR: Out of memory at tomoyo_realpath_from_path.
[  347.164862][ T7363] XFS (nullb0): Invalid superblock magic number
[  351.671073][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'.
[  351.871593][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.871795][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.872035][ T7240] bridge_slave_0: entered allmulticast mode
[  351.947306][ T7412] netlink: 'syz.3.340': attribute type 27 has an invalid length.
[  353.338438][ T7240] bridge_slave_0: entered promiscuous mode
[  353.447519][ T7240] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.447640][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.448160][ T7240] bridge_slave_1: entered allmulticast mode
[  353.766641][ T7240] bridge_slave_1: entered promiscuous mode
[  353.943076][ T7425] FAULT_INJECTION: forcing a failure.
[  353.943076][ T7425] name failslab, interval 1, probability 0, space 0, times 0
[  353.943110][ T7425] CPU: 0 UID: 0 PID: 7425 Comm: syz.0.346 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  353.943131][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  353.943143][ T7425] Call Trace:
[  353.943150][ T7425]  <TASK>
[  353.943158][ T7425]  dump_stack_lvl+0xe8/0x150
[  353.943187][ T7425]  should_fail_ex+0x46c/0x600
[  353.943215][ T7425]  ? __alloc_skb+0x1dc/0x3a0
[  353.943234][ T7425]  should_failslab+0xa8/0x100
[  353.943253][ T7425]  ? __alloc_skb+0x1dc/0x3a0
[  353.943270][ T7425]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  353.943295][ T7425]  ? lockdep_hardirqs_on+0x7b/0x110
[  353.943315][ T7425]  ? __alloc_skb+0x198/0x3a0
[  353.943335][ T7425]  __alloc_skb+0x1dc/0x3a0
[  353.943358][ T7425]  netlink_sendmsg+0x5c6/0xb30
[  353.943391][ T7425]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.943422][ T7425]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  353.943444][ T7425]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.943468][ T7425]  __sock_sendmsg+0x21c/0x270
[  353.943498][ T7425]  ____sys_sendmsg+0x508/0x810
[  353.943526][ T7425]  ? __pfx_____sys_sendmsg+0x10/0x10
[  353.943557][ T7425]  ? import_iovec+0x74/0xa0
[  353.943578][ T7425]  ___sys_sendmsg+0x21f/0x2a0
[  353.943603][ T7425]  ? __pfx____sys_sendmsg+0x10/0x10
[  353.943658][ T7425]  ? __fget_files+0x2a/0x420
[  353.943676][ T7425]  ? __fget_files+0x3a6/0x420
[  353.943704][ T7425]  __x64_sys_sendmsg+0x1a1/0x260
[  353.943729][ T7425]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  353.943759][ T7425]  ? __pfx_ksys_write+0x10/0x10
[  353.943798][ T7425]  do_syscall_64+0xec/0xf80
[  353.943814][ T7425]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.943831][ T7425]  ? trace_irq_disable+0x37/0x100
[  353.943849][ T7425]  ? clear_bhb_loop+0x60/0xb0
[  353.943917][ T7425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.943935][ T7425] RIP: 0033:0x7f876a9ef749
[  353.943951][ T7425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.943967][ T7425] RSP: 002b:00007f8768c4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.943987][ T7425] RAX: ffffffffffffffda RBX: 00007f876ac45fa0 RCX: 00007f876a9ef749
[  353.944001][ T7425] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  353.944012][ T7425] RBP: 00007f8768c4e090 R08: 0000000000000000 R09: 0000000000000000
[  353.944023][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.944034][ T7425] R13: 00007f876ac46038 R14: 00007f876ac45fa0 R15: 00007ffe5ecb96d8
[  353.944064][ T7425]  </TASK>
[  354.101708][ T6061] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  354.209664][ T6149] hsr_slave_0: left promiscuous mode
[  354.251275][ T6149] hsr_slave_1: left promiscuous mode
[  354.253400][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  354.253424][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  354.319678][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  354.319707][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  354.328770][ T6061] usb 4-1: Using ep0 maxpacket: 16
[  354.379206][ T6061] usb 4-1: unable to get BOS descriptor or descriptor too short
[  354.379958][ T6061] usb 4-1: unable to read config index 0 descriptor/start: -71
[  354.379977][ T6061] usb 4-1: can't read configurations, error -71
[  354.517929][ T6149] veth1_macvtap: left promiscuous mode
[  354.518022][ T6149] veth0_macvtap: left promiscuous mode
[  354.518251][ T6149] veth1_vlan: left promiscuous mode
[  354.518405][ T6149] veth0_vlan: left promiscuous mode
[  354.929191][ T7444] netlink: 88 bytes leftover after parsing attributes in process `syz.2.349'.
[  355.178794][ T5804] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  355.361213][ T5804] usb 3-1: unable to read config index 0 descriptor/start: -61
[  355.361249][ T5804] usb 3-1: can't read configurations, error -61
[  355.498838][ T5804] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  355.521233][ T7463] netlink: 'syz.0.352': attribute type 27 has an invalid length.
[  355.531522][ T7465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  355.672067][ T5804] usb 3-1: unable to read config index 0 descriptor/start: -61
[  355.672103][ T5804] usb 3-1: can't read configurations, error -61
[  355.672450][ T5804] usb usb3-port1: attempt power cycle
[  356.880959][ T5804] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  356.917989][ T5804] usb 3-1: unable to read config index 0 descriptor/start: -61
[  356.918025][ T5804] usb 3-1: can't read configurations, error -61
[  356.999298][ T5788] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  357.058746][ T5804] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  357.081489][ T5804] usb 3-1: unable to read config index 0 descriptor/start: -61
[  357.081522][ T5804] usb 3-1: can't read configurations, error -61
[  357.086042][ T5804] usb usb3-port1: unable to enumerate USB device
[  357.162131][ T5788] usb 4-1: Using ep0 maxpacket: 8
[  357.166649][ T5788] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  357.166665][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.166675][ T5788] usb 4-1: Product: syz
[  357.166683][ T5788] usb 4-1: Manufacturer: syz
[  357.166689][ T5788] usb 4-1: SerialNumber: syz
[  357.205997][ T5788] usb 4-1: config 0 descriptor??
[  357.425822][ T5788] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  357.647258][ T5788] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  358.351681][ T6149] team0 (unregistering): Port device team_slave_1 removed
[  358.509997][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.356'.
[  358.608811][   T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  358.634822][ T6149] team0 (unregistering): Port device team_slave_0 removed
[  358.758698][   T10] usb 1-1: Using ep0 maxpacket: 16
[  358.765489][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  358.766481][   T10] usb 1-1: unable to read config index 0 descriptor/start: -71
[  358.766511][   T10] usb 1-1: can't read configurations, error -71
[  358.933852][ T5804] usb 4-1: USB disconnect, device number 20
[  359.038875][ T7488] FAULT_INJECTION: forcing a failure.
[  359.038875][ T7488] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  359.038909][ T7488] CPU: 1 UID: 0 PID: 7488 Comm: syz.3.359 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  359.038931][ T7488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  359.038942][ T7488] Call Trace:
[  359.038949][ T7488]  <TASK>
[  359.038957][ T7488]  dump_stack_lvl+0xe8/0x150
[  359.038987][ T7488]  should_fail_ex+0x46c/0x600
[  359.039016][ T7488]  _copy_from_user+0x2d/0xb0
[  359.039036][ T7488]  core_sys_select+0x4be/0xa20
[  359.039074][ T7488]  ? __pfx_core_sys_select+0x10/0x10
[  359.039124][ T7488]  ? __pfx_set_user_sigmask+0x10/0x10
[  359.039143][ T7488]  ? rt_mutex_slowunlock+0x1be/0x2e0
[  359.039166][ T7488]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  359.039196][ T7488]  __se_sys_pselect6+0x27a/0x300
[  359.039228][ T7488]  ? __pfx___se_sys_pselect6+0x10/0x10
[  359.039255][ T7488]  ? __pfx_ksys_write+0x10/0x10
[  359.039284][ T7488]  ? __x64_sys_pselect6+0x21/0xf0
[  359.039313][ T7488]  do_syscall_64+0xec/0xf80
[  359.039330][ T7488]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.039348][ T7488]  ? trace_irq_disable+0x37/0x100
[  359.039366][ T7488]  ? clear_bhb_loop+0x60/0xb0
[  359.039389][ T7488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.039407][ T7488] RIP: 0033:0x7f97db6ef749
[  359.039423][ T7488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  359.039438][ T7488] RSP: 002b:00007f97d994e038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  359.039468][ T7488] RAX: ffffffffffffffda RBX: 00007f97db945fa0 RCX: 00007f97db6ef749
[  359.039482][ T7488] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000040
[  359.039494][ T7488] RBP: 00007f97d994e090 R08: 0000200000000140 R09: 0000000000000000
[  359.039506][ T7488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  359.039517][ T7488] R13: 00007f97db946038 R14: 00007f97db945fa0 R15: 00007ffe994f8aa8
[  359.039548][ T7488]  </TASK>
[  360.108967][ T7494] ICMPv6: NA: 01:80:c2:00:00:03 advertised our address fe80::aa on syz_tun!
[  360.988384][ T7496] netlink: 88 bytes leftover after parsing attributes in process `syz.2.363'.
[  361.360374][ T5988] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  361.553287][ T5988] usb 3-1: unable to read config index 0 descriptor/start: -61
[  361.553333][ T5988] usb 3-1: can't read configurations, error -61
[  361.635208][ T7492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  361.678710][ T5988] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  361.857233][ T5988] usb 3-1: unable to read config index 0 descriptor/start: -61
[  361.857270][ T5988] usb 3-1: can't read configurations, error -61
[  361.857630][ T5988] usb usb3-port1: attempt power cycle
[  362.248759][ T5988] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  362.282052][ T5988] usb 3-1: unable to read config index 0 descriptor/start: -61
[  362.282075][ T5988] usb 3-1: can't read configurations, error -61
[  362.408720][ T5988] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  362.431557][ T5988] usb 3-1: unable to read config index 0 descriptor/start: -61
[  362.431579][ T5988] usb 3-1: can't read configurations, error -61
[  362.431941][ T5988] usb usb3-port1: unable to enumerate USB device
[  362.574506][ T5944] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  362.728834][ T5944] usb 4-1: Using ep0 maxpacket: 8
[  362.736624][ T5944] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  362.736651][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.736669][ T5944] usb 4-1: Product: syz
[  362.736682][ T5944] usb 4-1: Manufacturer: syz
[  362.736696][ T5944] usb 4-1: SerialNumber: syz
[  362.765793][ T5944] usb 4-1: config 0 descriptor??
[  362.930882][ T5988] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  362.974248][ T5944] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  363.089382][ T5988] usb 3-1: Using ep0 maxpacket: 16
[  363.111255][ T5988] usb 3-1: unable to get BOS descriptor or descriptor too short
[  363.113885][ T5988] usb 3-1: config 255 has an invalid interface number: 35 but max is 0
[  363.113907][ T5988] usb 3-1: config 255 has no interface number 0
[  363.113938][ T5988] usb 3-1: config 255 interface 35 has no altsetting 0
[  363.203110][ T5988] usb 3-1: New USB device found, idVendor=2bde, idProduct=a2a4, bcdDevice=e0.2d
[  363.203138][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.203156][ T5988] usb 3-1: Product: syz
[  363.203169][ T5988] usb 3-1: Manufacturer: syz
[  363.203182][ T5988] usb 3-1: SerialNumber: syz
[  363.213409][ T5944] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  363.505547][ T5988] usb 3-1: bad CDC descriptors
[  363.516424][ T5988] usb 3-1: USB disconnect, device number 22
[  364.107404][ T7240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.159326][ T7240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.173563][ T7298] chnl_net:caif_netlink_parms(): no params data found
[  364.435787][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'.
[  365.436265][ T5804] usb 4-1: USB disconnect, device number 21
[  365.841509][ T7240] team0: Port device team_slave_0 added
[  366.448847][ T7531] ICMPv6: NA: 01:80:c2:00:00:03 advertised our address fe80::aa on syz_tun!
[  367.100876][ T7240] team0: Port device team_slave_1 added
[  367.476628][ T7240] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.476644][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.476668][ T7240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  367.551106][ T7240] batman_adv: batadv0: Adding interface: batadv_slave_1
[  367.551122][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.551148][ T7240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.930056][ T5988] IPVS: starting estimator thread 0...
[  369.034990][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.035181][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.035405][ T7298] bridge_slave_0: entered allmulticast mode
[  369.037983][ T7298] bridge_slave_0: entered promiscuous mode
[  369.049115][ T7548] IPVS: using max 9 ests per chain, 21600 per kthread
[  369.197576][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.197710][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.197894][ T7298] bridge_slave_1: entered allmulticast mode
[  369.222722][ T7298] bridge_slave_1: entered promiscuous mode
[  369.240161][ T7240] hsr_slave_0: entered promiscuous mode
[  369.243494][ T7240] hsr_slave_1: entered promiscuous mode
[  369.244646][ T7240] debugfs: 'hsr0' already exists in 'hsr'
[  369.244668][ T7240] Cannot create hsr debugfs directory
[  369.348747][ T5921] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  369.498751][ T5921] usb 4-1: Using ep0 maxpacket: 32
[  369.501765][ T5921] usb 4-1: config 3 has an invalid interface number: 103 but max is 1
[  369.501788][ T5921] usb 4-1: config 3 has an invalid interface number: 171 but max is 1
[  369.501806][ T5921] usb 4-1: config 3 has an invalid interface association descriptor of length 2, skipping
[  369.501823][ T5921] usb 4-1: config 3 has no interface number 0
[  369.501838][ T5921] usb 4-1: config 3 has no interface number 1
[  369.501911][ T5921] usb 4-1: config 3 interface 171 altsetting 2 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  369.501937][ T5921] usb 4-1: config 3 interface 171 altsetting 2 endpoint 0xD has an invalid bInterval 0, changing to 7
[  369.501960][ T5921] usb 4-1: config 3 interface 171 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[  369.501980][ T5921] usb 4-1: config 3 interface 103 has no altsetting 0
[  369.501996][ T5921] usb 4-1: config 3 interface 171 has no altsetting 0
[  369.506309][ T5921] usb 4-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=3d.61
[  369.506334][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.506352][ T5921] usb 4-1: Product: à ¾
[  369.506364][ T5921] usb 4-1: Manufacturer: ÐŽ
[  369.506377][ T5921] usb 4-1: SerialNumber: ã°Š
[  369.656962][ T7298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  369.718915][ T7298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.740023][ T7549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  369.894386][ T5921] usbhid 4-1:3.171: couldn't find an input interrupt endpoint
[  369.914786][ T5921] usb 4-1: USB disconnect, device number 22
[  373.431180][ T6149] bridge_slave_1: left allmulticast mode
[  373.431205][ T6149] bridge_slave_1: left promiscuous mode
[  373.431443][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.521661][ T6149] bridge_slave_0: left allmulticast mode
[  373.521687][ T6149] bridge_slave_0: left promiscuous mode
[  373.521949][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.611000][ T6149] bridge_slave_1: left allmulticast mode
[  373.611019][ T6149] bridge_slave_1: left promiscuous mode
[  373.611204][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.710871][ T6149] bridge_slave_0: left allmulticast mode
[  373.710897][ T6149] bridge_slave_0: left promiscuous mode
[  373.711123][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.199464][ T6149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  375.328710][ T6149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  375.396273][ T6149] bond0 (unregistering): Released all slaves
[  375.534937][ T7612] FAULT_INJECTION: forcing a failure.
[  375.534937][ T7612] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  375.534985][ T7612] CPU: 0 UID: 0 PID: 7612 Comm: syz.2.394 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  375.535007][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  375.535021][ T7612] Call Trace:
[  375.535032][ T7612]  <TASK>
[  375.535040][ T7612]  dump_stack_lvl+0xe8/0x150
[  375.535069][ T7612]  should_fail_ex+0x46c/0x600
[  375.535098][ T7612]  strncpy_from_user+0x36/0x2c0
[  375.535125][ T7612]  getname_flags+0xf3/0x540
[  375.535148][ T7612]  user_path_at+0x24/0x60
[  375.535171][ T7612]  do_faccessat+0x5d8/0xd90
[  375.535197][ T7612]  ? ksys_write+0x230/0x260
[  375.535219][ T7612]  ? __pfx_do_faccessat+0x10/0x10
[  375.535240][ T7612]  ? __pfx_ksys_write+0x10/0x10
[  375.535270][ T7612]  __x64_sys_faccessat2+0x9a/0xb0
[  375.535299][ T7612]  do_syscall_64+0xec/0xf80
[  375.535318][ T7612]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.535336][ T7612]  ? trace_irq_disable+0x37/0x100
[  375.535354][ T7612]  ? clear_bhb_loop+0x60/0xb0
[  375.535376][ T7612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.535394][ T7612] RIP: 0033:0x7fa132ddf749
[  375.535410][ T7612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.535426][ T7612] RSP: 002b:00007fa13103e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7
[  375.535446][ T7612] RAX: ffffffffffffffda RBX: 00007fa133035fa0 RCX: 00007fa132ddf749
[  375.535460][ T7612] RDX: 0000000000000000 RSI: 0000200000001400 RDI: 0000000000000004
[  375.535472][ T7612] RBP: 00007fa13103e090 R08: 0000000000000000 R09: 0000000000000000
[  375.535484][ T7612] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000001
[  375.535495][ T7612] R13: 00007fa133036038 R14: 00007fa133035fa0 R15: 00007ffeb2eb5c48
[  375.535525][ T7612]  </TASK>
[  376.760241][ T7629] FAULT_INJECTION: forcing a failure.
[  376.760241][ T7629] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  376.760280][ T7629] CPU: 1 UID: 0 PID: 7629 Comm: syz.0.398 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  376.760301][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  376.760312][ T7629] Call Trace:
[  376.760319][ T7629]  <TASK>
[  376.760327][ T7629]  dump_stack_lvl+0xe8/0x150
[  376.760356][ T7629]  should_fail_ex+0x46c/0x600
[  376.760385][ T7629]  _copy_from_user+0x2d/0xb0
[  376.760404][ T7629]  ucma_set_option+0xc1/0xa60
[  376.760428][ T7629]  ? __lock_acquire+0x6b6/0x2cf0
[  376.760452][ T7629]  ? __pfx_ucma_set_option+0x10/0x10
[  376.760476][ T7629]  ? __lock_acquire+0x6b6/0x2cf0
[  376.760502][ T7629]  ? _parse_integer_limit+0x1ae/0x1f0
[  376.760535][ T7629]  ? __might_fault+0xb0/0x130
[  376.760561][ T7629]  ? __might_fault+0xb0/0x130
[  376.760607][ T7629]  ucma_write+0x252/0x2f0
[  376.760630][ T7629]  ? __pfx_ucma_write+0x10/0x10
[  376.760654][ T7629]  ? rw_verify_area+0x25b/0x4e0
[  376.760677][ T7629]  ? __pfx_ucma_write+0x10/0x10
[  376.760699][ T7629]  vfs_write+0x287/0xb40
[  376.760731][ T7629]  ? __pfx_vfs_write+0x10/0x10
[  376.760757][ T7629]  ? __fget_files+0x2a/0x420
[  376.760779][ T7629]  ? __fget_files+0x2a/0x420
[  376.760797][ T7629]  ? __fget_files+0x3a6/0x420
[  376.760814][ T7629]  ? __fget_files+0x2a/0x420
[  376.760841][ T7629]  ksys_write+0x14b/0x260
[  376.760868][ T7629]  ? __pfx_ksys_write+0x10/0x10
[  376.760902][ T7629]  do_syscall_64+0xec/0xf80
[  376.760920][ T7629]  ? rcu_is_watching+0x15/0xb0
[  376.760937][ T7629]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.760955][ T7629]  ? clear_bhb_loop+0x60/0xb0
[  376.760977][ T7629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.760994][ T7629] RIP: 0033:0x7f876a9ef749
[  376.761011][ T7629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.761026][ T7629] RSP: 002b:00007f8768c2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  376.761046][ T7629] RAX: ffffffffffffffda RBX: 00007f876ac46090 RCX: 00007f876a9ef749
[  376.761060][ T7629] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000008
[  376.761072][ T7629] RBP: 00007f8768c2d090 R08: 0000000000000000 R09: 0000000000000000
[  376.761083][ T7629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  376.761094][ T7629] R13: 00007f876ac46128 R14: 00007f876ac46090 R15: 00007ffe5ecb96d8
[  376.761124][ T7629]  </TASK>
[  377.084465][ T6149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.200685][ T6149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.249456][ T6149] bond0 (unregistering): Released all slaves
[  377.314909][ T7298] team0: Port device team_slave_0 added
[  377.379845][ T7298] team0: Port device team_slave_1 added
[  379.179467][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  379.179536][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  379.291787][ T7644] FAULT_INJECTION: forcing a failure.
[  379.291787][ T7644] name failslab, interval 1, probability 0, space 0, times 0
[  379.291808][ T7644] CPU: 0 UID: 0 PID: 7644 Comm: syz.3.403 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  379.291820][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  379.291827][ T7644] Call Trace:
[  379.291832][ T7644]  <TASK>
[  379.291836][ T7644]  dump_stack_lvl+0xe8/0x150
[  379.291855][ T7644]  should_fail_ex+0x46c/0x600
[  379.291873][ T7644]  should_failslab+0xa8/0x100
[  379.291884][ T7644]  __kmalloc_cache_noprof+0x84/0x6d0
[  379.291900][ T7644]  ? snd_pcm_oss_change_params_locked+0x1b3/0x3f70
[  379.291913][ T7644]  snd_pcm_oss_change_params_locked+0x1b3/0x3f70
[  379.291923][ T7644]  ? do_sys_openat2+0x15a/0x200
[  379.291952][ T7644]  ? __lock_acquire+0x6b6/0x2cf0
[  379.291969][ T7644]  ? __lock_acquire+0x6b6/0x2cf0
[  379.291989][ T7644]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  379.292000][ T7644]  ? do_raw_spin_lock+0x121/0x290
[  379.292017][ T7644]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  379.292027][ T7644]  ? lockdep_hardirqs_on+0x7b/0x110
[  379.292039][ T7644]  snd_pcm_oss_make_ready_locked+0x7d/0x300
[  379.292057][ T7644]  snd_pcm_oss_read+0x224/0x680
[  379.292077][ T7644]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[  379.292099][ T7644]  vfs_read+0x206/0xa30
[  379.292116][ T7644]  ? __pfx_vfs_read+0x10/0x10
[  379.292131][ T7644]  ? __fget_files+0x2a/0x420
[  379.292143][ T7644]  ? __fget_files+0x2a/0x420
[  379.292152][ T7644]  ? __fget_files+0x3a6/0x420
[  379.292162][ T7644]  ? __fget_files+0x2a/0x420
[  379.292176][ T7644]  ksys_read+0x14b/0x260
[  379.292191][ T7644]  ? __pfx_ksys_read+0x10/0x10
[  379.292210][ T7644]  do_syscall_64+0xec/0xf80
[  379.292220][ T7644]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.292230][ T7644]  ? trace_irq_disable+0x37/0x100
[  379.292240][ T7644]  ? clear_bhb_loop+0x60/0xb0
[  379.292252][ T7644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.292261][ T7644] RIP: 0033:0x7f97db6ef749
[  379.292271][ T7644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  379.292281][ T7644] RSP: 002b:00007f97d994e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  379.292292][ T7644] RAX: ffffffffffffffda RBX: 00007f97db945fa0 RCX: 00007f97db6ef749
[  379.292300][ T7644] RDX: 0000000000002020 RSI: 00002000000063c0 RDI: 0000000000000005
[  379.292306][ T7644] RBP: 00007f97d994e090 R08: 0000000000000000 R09: 0000000000000000
[  379.292313][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  379.292318][ T7644] R13: 00007f97db946038 R14: 00007f97db945fa0 R15: 00007ffe994f8aa8
[  379.292335][ T7644]  </TASK>
[  381.069220][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.069235][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.069256][ T7298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.228693][ T6149] hsr_slave_0: left promiscuous mode
[  381.280032][ T6149] hsr_slave_1: left promiscuous mode
[  381.301644][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.389587][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  381.718818][ T6149] hsr_slave_0: left promiscuous mode
[  381.758731][ T6149] hsr_slave_1: left promiscuous mode
[  381.769294][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.822661][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  381.943299][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  381.964084][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  381.965729][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  381.967488][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  381.992960][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  382.252112][ T7664] FAULT_INJECTION: forcing a failure.
[  382.252112][ T7664] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  382.252147][ T7664] CPU: 1 UID: 0 PID: 7664 Comm: syz.3.407 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  382.252170][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  382.252182][ T7664] Call Trace:
[  382.252190][ T7664]  <TASK>
[  382.252198][ T7664]  dump_stack_lvl+0xe8/0x150
[  382.252239][ T7664]  should_fail_ex+0x46c/0x600
[  382.252268][ T7664]  _copy_from_user+0x2d/0xb0
[  382.252288][ T7664]  io_submit_one+0xc2/0x1440
[  382.252317][ T7664]  ? irqentry_exit+0x5e8/0x670
[  382.252337][ T7664]  ? lockdep_hardirqs_on+0x7b/0x110
[  382.252355][ T7664]  ? irqentry_exit+0x5e8/0x670
[  382.252378][ T7664]  ? __pfx_io_submit_one+0x10/0x10
[  382.252402][ T7664]  ? __might_fault+0xb0/0x130
[  382.252440][ T7664]  ? __might_fault+0xb0/0x130
[  382.252469][ T7664]  __se_sys_io_submit+0x185/0x320
[  382.252494][ T7664]  ? __pfx___se_sys_io_submit+0x10/0x10
[  382.252514][ T7664]  ? ksys_write+0x230/0x260
[  382.252556][ T7664]  do_syscall_64+0xec/0xf80
[  382.252575][ T7664]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.252593][ T7664]  ? trace_irq_disable+0x37/0x100
[  382.252612][ T7664]  ? clear_bhb_loop+0x60/0xb0
[  382.252635][ T7664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.252654][ T7664] RIP: 0033:0x7f97db6ef749
[  382.252671][ T7664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.252688][ T7664] RSP: 002b:00007f97d994e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  382.252708][ T7664] RAX: ffffffffffffffda RBX: 00007f97db945fa0 RCX: 00007f97db6ef749
[  382.252723][ T7664] RDX: 0000200000000300 RSI: 0000000000000002 RDI: 00007f97d991d000
[  382.252736][ T7664] RBP: 00007f97d994e090 R08: 0000000000000000 R09: 0000000000000000
[  382.252749][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.252760][ T7664] R13: 00007f97db946038 R14: 00007f97db945fa0 R15: 00007ffe994f8aa8
[  382.252792][ T7664]  </TASK>
[  382.687235][ T7666] FAULT_INJECTION: forcing a failure.
[  382.687235][ T7666] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  382.687273][ T7666] CPU: 1 UID: 0 PID: 7666 Comm: syz.3.410 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  382.687295][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  382.687307][ T7666] Call Trace:
[  382.687315][ T7666]  <TASK>
[  382.687323][ T7666]  dump_stack_lvl+0xe8/0x150
[  382.687353][ T7666]  should_fail_ex+0x46c/0x600
[  382.687384][ T7666]  _copy_from_user+0x2d/0xb0
[  382.687404][ T7666]  __sys_bpf+0x1e3/0x860
[  382.687429][ T7666]  ? __pfx___sys_bpf+0x10/0x10
[  382.687447][ T7666]  ? rt_mutex_slowunlock+0x1be/0x2e0
[  382.687488][ T7666]  ? ksys_write+0x230/0x260
[  382.687516][ T7666]  ? __pfx_ksys_write+0x10/0x10
[  382.687548][ T7666]  __x64_sys_bpf+0x7c/0x90
[  382.687568][ T7666]  do_syscall_64+0xec/0xf80
[  382.687586][ T7666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.687604][ T7666]  ? trace_irq_disable+0x37/0x100
[  382.687624][ T7666]  ? clear_bhb_loop+0x60/0xb0
[  382.687646][ T7666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.687665][ T7666] RIP: 0033:0x7f97db6ef749
[  382.687682][ T7666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.687699][ T7666] RSP: 002b:00007f97d994e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  382.687720][ T7666] RAX: ffffffffffffffda RBX: 00007f97db945fa0 RCX: 00007f97db6ef749
[  382.687735][ T7666] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c
[  382.687748][ T7666] RBP: 00007f97d994e090 R08: 0000000000000000 R09: 0000000000000000
[  382.687760][ T7666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.687772][ T7666] R13: 00007f97db946038 R14: 00007f97db945fa0 R15: 00007ffe994f8aa8
[  382.687804][ T7666]  </TASK>
[  384.347008][ T5814] Bluetooth: hci3: command tx timeout
[  384.595873][ T7679] capability: warning: `syz.3.414' uses 32-bit capabilities (legacy support in use)
[  384.719529][ T6149] team0 (unregistering): Port device team_slave_1 removed
[  384.900010][ T6149] team0 (unregistering): Port device team_slave_0 removed
[  384.952527][ T7682] FAULT_INJECTION: forcing a failure.
[  384.952527][ T7682] name failslab, interval 1, probability 0, space 0, times 0
[  384.952549][ T7682] CPU: 0 UID: 0 PID: 7682 Comm: syz.2.413 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  384.952564][ T7682] Tainted: [L]=SOFTLOCKUP
[  384.952568][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  384.952575][ T7682] Call Trace:
[  384.952579][ T7682]  <TASK>
[  384.952584][ T7682]  dump_stack_lvl+0xe8/0x150
[  384.952602][ T7682]  should_fail_ex+0x46c/0x600
[  384.952620][ T7682]  should_failslab+0xa8/0x100
[  384.952631][ T7682]  __kmalloc_noprof+0xe0/0x7e0
[  384.952646][ T7682]  ? tomoyo_encode+0x28b/0x550
[  384.952659][ T7682]  tomoyo_encode+0x28b/0x550
[  384.952672][ T7682]  tomoyo_realpath_from_path+0x58d/0x5d0
[  384.952683][ T7682]  ? tomoyo_domain+0xd9/0x130
[  384.952696][ T7682]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  384.952710][ T7682]  tomoyo_path_number_perm+0x1e8/0x5a0
[  384.952726][ T7682]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  384.952739][ T7682]  ? __lock_acquire+0x6b6/0x2cf0
[  384.952754][ T7682]  ? do_raw_spin_lock+0x121/0x290
[  384.952782][ T7682]  ? __fget_files+0x2a/0x420
[  384.952794][ T7682]  ? __fget_files+0x2a/0x420
[  384.952803][ T7682]  ? __fget_files+0x3a6/0x420
[  384.952813][ T7682]  ? __fget_files+0x2a/0x420
[  384.952825][ T7682]  security_file_ioctl+0xcb/0x2d0
[  384.952841][ T7682]  __se_sys_ioctl+0x47/0x170
[  384.952856][ T7682]  do_syscall_64+0xec/0xf80
[  384.952867][ T7682]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.952877][ T7682]  ? trace_irq_disable+0x37/0x100
[  384.952887][ T7682]  ? clear_bhb_loop+0x60/0xb0
[  384.952899][ T7682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.952909][ T7682] RIP: 0033:0x7fa132ddf749
[  384.952919][ T7682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  384.952928][ T7682] RSP: 002b:00007fa13103e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  384.952939][ T7682] RAX: ffffffffffffffda RBX: 00007fa133035fa0 RCX: 00007fa132ddf749
[  384.952947][ T7682] RDX: 0000000000000000 RSI: 00000000c0383e04 RDI: 0000000000000007
[  384.952962][ T7682] RBP: 00007fa13103e090 R08: 0000000000000000 R09: 0000000000000000
[  384.952968][ T7682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  384.952973][ T7682] R13: 00007fa133036038 R14: 00007fa133035fa0 R15: 00007ffeb2eb5c48
[  384.952989][ T7682]  </TASK>
[  384.952999][ T7682] ERROR: Out of memory at tomoyo_realpath_from_path.
[  385.298795][   T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  385.449461][   T10] usb 3-1: no configurations
[  385.449473][   T10] usb 3-1: can't read configurations, error -22
[  385.578729][   T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  385.740854][   T10] usb 3-1: no configurations
[  385.740873][   T10] usb 3-1: can't read configurations, error -22
[  385.741378][   T10] usb usb3-port1: attempt power cycle
[  386.059208][ T6149] team0 (unregistering): Port device team_slave_1 removed
[  386.088849][   T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  386.123394][   T10] usb 3-1: no configurations
[  386.123407][   T10] usb 3-1: can't read configurations, error -22
[  386.190905][ T6149] team0 (unregistering): Port device team_slave_0 removed
[  386.252825][   T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  386.281471][   T10] usb 3-1: no configurations
[  386.281483][   T10] usb 3-1: can't read configurations, error -22
[  386.281754][   T10] usb usb3-port1: unable to enumerate USB device
[  386.368820][ T5814] Bluetooth: hci3: command tx timeout
[  386.738379][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.738391][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.738407][ T7298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  388.455903][ T5814] Bluetooth: hci3: command tx timeout
[  388.596222][ T7698] FAULT_INJECTION: forcing a failure.
[  388.596222][ T7698] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  388.596440][ T7698] CPU: 0 UID: 0 PID: 7698 Comm: syz.3.419 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  388.596475][ T7698] Tainted: [L]=SOFTLOCKUP
[  388.596481][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  388.596492][ T7698] Call Trace:
[  388.596500][ T7698]  <TASK>
[  388.596507][ T7698]  dump_stack_lvl+0xe8/0x150
[  388.596537][ T7698]  should_fail_ex+0x46c/0x600
[  388.596566][ T7698]  strncpy_from_user+0x36/0x2c0
[  388.596592][ T7698]  getname_flags+0xf3/0x540
[  388.596615][ T7698]  user_path_at+0x24/0x60
[  388.596636][ T7698]  do_faccessat+0x5d8/0xd90
[  388.596664][ T7698]  ? __pfx_do_faccessat+0x10/0x10
[  388.596693][ T7698]  __x64_sys_faccessat2+0x9a/0xb0
[  388.596722][ T7698]  do_syscall_64+0xec/0xf80
[  388.596740][ T7698]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.596759][ T7698]  ? clear_bhb_loop+0x60/0xb0
[  388.596780][ T7698]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.596797][ T7698] RIP: 0033:0x7f97db6ef749
[  388.596815][ T7698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  388.596830][ T7698] RSP: 002b:00007f97d992d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7
[  388.596850][ T7698] RAX: ffffffffffffffda RBX: 00007f97db946090 RCX: 00007f97db6ef749
[  388.596864][ T7698] RDX: 0000000000000000 RSI: 0000200000001400 RDI: 0000000000000004
[  388.596881][ T7698] RBP: 00007f97d992d090 R08: 0000000000000000 R09: 0000000000000000
[  388.596893][ T7698] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000001
[  388.596904][ T7698] R13: 00007f97db946128 R14: 00007f97db946090 R15: 00007ffe994f8aa8
[  388.596934][ T7698]  </TASK>
[  390.283096][ T7298] hsr_slave_0: entered promiscuous mode
[  390.283888][ T7298] hsr_slave_1: entered promiscuous mode
[  390.284414][ T7298] debugfs: 'hsr0' already exists in 'hsr'
[  390.284429][ T7298] Cannot create hsr debugfs directory
[  390.398707][   T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  390.558694][   T10] usb 4-1: Using ep0 maxpacket: 8
[  390.564695][ T5814] Bluetooth: hci3: command tx timeout
[  390.588144][   T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  390.588169][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.588179][   T10] usb 4-1: Product: syz
[  390.588187][   T10] usb 4-1: Manufacturer: syz
[  390.588194][   T10] usb 4-1: SerialNumber: syz
[  391.377527][   T10] usb 4-1: config 0 descriptor??
[  391.592205][   T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  395.004463][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  395.017140][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  395.018404][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  395.043912][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  395.059568][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  395.121437][   T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  395.130721][   T10] usb 4-1: USB disconnect, device number 23
[  396.496952][ T7660] chnl_net:caif_netlink_parms(): no params data found
[  396.698686][ T6061] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  396.872714][ T6061] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  396.872738][ T6061] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  396.875750][ T6061] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  396.875767][ T6061] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  396.875777][ T6061] usb 4-1: SerialNumber: syz
[  397.088722][ T5812] Bluetooth: hci0: command tx timeout
[  397.153532][ T6061] usb 4-1: 0:2 : does not exist
[  397.209094][ T6061] usb 4-1: USB disconnect, device number 24
[  397.443667][ T7649] udevd[7649]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  399.413393][ T5812] Bluetooth: hci0: command tx timeout
[  400.832019][ T6149] bridge_slave_1: left allmulticast mode
[  400.832041][ T6149] bridge_slave_1: left promiscuous mode
[  400.832231][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.991075][ T6149] bridge_slave_0: left allmulticast mode
[  400.991102][ T6149] bridge_slave_0: left promiscuous mode
[  400.991350][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.370328][  T803] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  401.499822][ T5812] Bluetooth: hci0: command tx timeout
[  402.289370][  T803] usb 3-1: Using ep0 maxpacket: 8
[  402.307291][  T803] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  402.307317][  T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.307335][  T803] usb 3-1: Product: syz
[  402.307346][  T803] usb 3-1: Manufacturer: syz
[  402.307359][  T803] usb 3-1: SerialNumber: syz
[  402.350756][  T803] usb 3-1: config 0 descriptor??
[  402.600967][  T803] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  403.519442][ T6149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  403.568736][ T5812] Bluetooth: hci0: command tx timeout
[  403.819017][ T6149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  404.015492][ T6149] bond0 (unregistering): Released all slaves
[  406.235795][  T803] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  406.310626][  T803] usb 3-1: USB disconnect, device number 27
[  406.432831][ T7660] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.433027][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.433245][ T7660] bridge_slave_0: entered allmulticast mode
[  406.444517][ T7660] bridge_slave_0: entered promiscuous mode
[  406.610404][ T6149] hsr_slave_0: left promiscuous mode
[  406.670167][ T6149] hsr_slave_1: left promiscuous mode
[  406.671156][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.740183][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.004147][ T7841] FAULT_INJECTION: forcing a failure.
[  407.004147][ T7841] name failslab, interval 1, probability 0, space 0, times 0
[  407.004190][ T7841] CPU: 1 UID: 0 PID: 7841 Comm: syz.0.452 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  407.004217][ T7841] Tainted: [L]=SOFTLOCKUP
[  407.004224][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  407.004245][ T7841] Call Trace:
[  407.004252][ T7841]  <TASK>
[  407.004260][ T7841]  dump_stack_lvl+0xe8/0x150
[  407.004290][ T7841]  should_fail_ex+0x46c/0x600
[  407.004320][ T7841]  should_failslab+0xa8/0x100
[  407.004339][ T7841]  __kmalloc_noprof+0xe0/0x7e0
[  407.004365][ T7841]  ? tomoyo_encode+0x28b/0x550
[  407.004381][ T7841]  tomoyo_encode+0x28b/0x550
[  407.004394][ T7841]  tomoyo_realpath_from_path+0x58d/0x5d0
[  407.004409][ T7841]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  407.004423][ T7841]  tomoyo_path_number_perm+0x1e8/0x5a0
[  407.004438][ T7841]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  407.004451][ T7841]  ? __lock_acquire+0x6b6/0x2cf0
[  407.004467][ T7841]  ? do_raw_spin_lock+0x121/0x290
[  407.004497][ T7841]  ? __fget_files+0x2a/0x420
[  407.004509][ T7841]  ? __fget_files+0x2a/0x420
[  407.004519][ T7841]  ? __fget_files+0x3a6/0x420
[  407.004528][ T7841]  ? __fget_files+0x2a/0x420
[  407.004541][ T7841]  security_file_ioctl+0xcb/0x2d0
[  407.004557][ T7841]  __se_sys_ioctl+0x47/0x170
[  407.004572][ T7841]  do_syscall_64+0xec/0xf80
[  407.004582][ T7841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.004592][ T7841]  ? trace_irq_disable+0x37/0x100
[  407.004602][ T7841]  ? clear_bhb_loop+0x60/0xb0
[  407.004615][ T7841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.004624][ T7841] RIP: 0033:0x7f876a9ef749
[  407.004634][ T7841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  407.004644][ T7841] RSP: 002b:00007f8768c2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  407.004655][ T7841] RAX: ffffffffffffffda RBX: 00007f876ac46090 RCX: 00007f876a9ef749
[  407.004663][ T7841] RDX: 0000200000000080 RSI: 00000000c004500a RDI: 0000000000000005
[  407.004669][ T7841] RBP: 00007f8768c2d090 R08: 0000000000000000 R09: 0000000000000000
[  407.004676][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.004681][ T7841] R13: 00007f876ac46128 R14: 00007f876ac46090 R15: 00007ffe5ecb96d8
[  407.004697][ T7841]  </TASK>
[  407.004715][ T7841] ERROR: Out of memory at tomoyo_realpath_from_path.
[  408.628813][ T7845] ICMPv6: NA: 01:80:c2:00:00:03 advertised our address fe80::aa on syz_tun!
[  410.349616][ T6149] team0 (unregistering): Port device team_slave_1 removed
[  412.049522][ T6149] team0 (unregistering): Port device team_slave_0 removed
[  413.740148][ T5988] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  414.680000][ T7872] ICMPv6: NA: 01:80:c2:00:00:03 advertised our address fe80::aa on syz_tun!
[  414.825748][ T5988] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  414.825785][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.825804][ T5988] usb 4-1: Product: syz
[  414.825817][ T5988] usb 4-1: Manufacturer: syz
[  414.825831][ T5988] usb 4-1: SerialNumber: syz
[  414.862310][ T5988] usb 4-1: config 0 descriptor??
[  414.896923][ T5988] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 025
[  415.008393][ T7660] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.008522][ T7660] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.028934][ T7660] bridge_slave_1: entered allmulticast mode
[  415.031116][ T7660] bridge_slave_1: entered promiscuous mode
[  416.080358][ T5988]  (null): failure reading functionality
[  416.083754][ T5988] i2c i2c-1: failure reading functionality
[  416.085318][ T7870] SQUASHFS error: Failed to read block 0x0: -5
[  416.144434][ T5988] i2c i2c-1: connected i2c-tiny-usb device
[  416.161759][ T5988] usb 4-1: USB disconnect, device number 25
[  416.265004][ T7660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  416.286782][ T7660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.084039][ T7660] team0: Port device team_slave_0 added
[  418.103987][ T7660] team0: Port device team_slave_1 added
[  421.423923][ T7660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  421.423940][ T7660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  421.423965][ T7660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  421.640639][ T7660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  421.640656][ T7660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  421.640682][ T7660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.201478][ T5811] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  423.399475][ T7737] chnl_net:caif_netlink_parms(): no params data found
[  423.418694][ T5811] usb 3-1: Using ep0 maxpacket: 32
[  423.424747][ T5811] usb 3-1: config 3 has an invalid interface number: 103 but max is 1
[  423.424772][ T5811] usb 3-1: config 3 has an invalid interface number: 171 but max is 1
[  423.424792][ T5811] usb 3-1: config 3 has no interface number 0
[  423.424807][ T5811] usb 3-1: config 3 has no interface number 1
[  423.424870][ T5811] usb 3-1: config 3 interface 171 altsetting 2 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  423.424897][ T5811] usb 3-1: config 3 interface 171 altsetting 2 endpoint 0xD has an invalid bInterval 0, changing to 7
[  423.424921][ T5811] usb 3-1: config 3 interface 103 has no altsetting 0
[  423.424939][ T5811] usb 3-1: config 3 interface 171 has no altsetting 0
[  423.488065][ T5811] usb 3-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=3d.61
[  423.488090][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.488100][ T5811] usb 3-1: Product: à ¾
[  423.488107][ T5811] usb 3-1: Manufacturer: ÐŽ
[  423.488115][ T5811] usb 3-1: SerialNumber: ã°Š
[  423.776808][ T6149] bridge_slave_1: left allmulticast mode
[  423.776834][ T6149] bridge_slave_1: left promiscuous mode
[  423.777033][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.814632][ T5811] usbhid 3-1:3.171: couldn't find an input interrupt endpoint
[  423.837609][ T5811] usb 3-1: USB disconnect, device number 28
[  423.885651][ T6149] bridge_slave_0: left allmulticast mode
[  423.885678][ T6149] bridge_slave_0: left promiscuous mode
[  423.885923][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.898719][ T6267] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  424.050726][ T6267] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  424.050753][ T6267] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  424.053190][ T6267] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  424.053218][ T6267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.053237][ T6267] usb 1-1: Product: syz
[  424.053250][ T6267] usb 1-1: Manufacturer: syz
[  424.053262][ T6267] usb 1-1: SerialNumber: syz
[  424.122968][ T6267] usb 1-1: config 0 descriptor??
[  424.349939][ T6760] usb 1-1: USB disconnect, device number 24
[  425.430081][ T6149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  425.526261][ T6149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  425.602413][ T6149] bond0 (unregistering): Released all slaves
[  425.646705][ T7660] hsr_slave_0: entered promiscuous mode
[  425.648123][ T7660] hsr_slave_1: entered promiscuous mode
[  425.662081][ T7660] debugfs: 'hsr0' already exists in 'hsr'
[  425.662106][ T7660] Cannot create hsr debugfs directory
[  426.529332][ T6149] hsr_slave_0: left promiscuous mode
[  426.755721][ T6149] hsr_slave_1: left promiscuous mode
[  426.779641][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.445778][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.132409][ T7982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.483'.
[  428.990417][ T7986] netlink: 'syz.0.484': attribute type 1 has an invalid length.
[  429.332611][ T7997] tipc: Withdrawal distribution failure
[  429.739322][ T6149] team0 (unregistering): Port device team_slave_1 removed
[  429.829091][ T6149] team0 (unregistering): Port device team_slave_0 removed
[  430.321846][ T7986] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  430.918030][ T5944] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  432.743283][ T8023] netlink: 'syz.0.493': attribute type 1 has an invalid length.
[  433.687878][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.688175][ T7737] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.688489][ T7737] bridge_slave_0: entered allmulticast mode
[  433.741939][ T7737] bridge_slave_0: entered promiscuous mode
[  433.812600][ T8027] dlm: no locking on control device
[  433.825734][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.846370][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.846584][ T7737] bridge_slave_1: entered allmulticast mode
[  433.871402][ T7737] bridge_slave_1: entered promiscuous mode
[  434.019489][ T5944] usb 4-1: unable to read config index 0 descriptor/all
[  434.019519][ T5944] usb 4-1: can't read configurations, error -71
[  434.138777][ T6061] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  434.282935][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.496'.
[  434.288702][ T6061] usb 3-1: Using ep0 maxpacket: 16
[  434.290856][ T6061] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.290885][ T6061] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  434.294586][ T6061] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  434.294612][ T6061] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0
[  434.294630][ T6061] usb 3-1: Product: syz
[  434.294644][ T6061] usb 3-1: Manufacturer: syz
[  434.314201][ T6061] usb 3-1: config 0 descriptor??
[  434.506938][ T7737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  434.643876][ T7737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  435.304282][ T8048] loop8: detected capacity change from 0 to 8
[  435.418706][ T8048] Dev loop8: unable to read RDB block 8
[  435.419012][ T8048]  loop8: unable to read partition table
[  435.421670][ T8048] loop8: partition table beyond EOD, truncated
[  435.421737][ T8048] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  436.091789][ T8052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.124734][ T8052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.224072][ T7737] team0: Port device team_slave_0 added
[  436.453865][ T7737] team0: Port device team_slave_1 added
[  437.343160][ T6061] usbhid 3-1:0.0: can't add hid device: -71
[  437.343397][ T6061] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  437.358058][ T6061] usb 3-1: USB disconnect, device number 29
[  440.003157][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  440.003294][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  441.361779][ T8084] capability: warning: `syz.2.508' uses deprecated v2 capabilities in a way that may be insecure
[  441.389667][ T8084] binder: 8083:8084 ioctl c0306201 2000000003c0 returned -22
[  441.431933][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.431959][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.431985][ T7737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.588817][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.588835][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.588860][ T7737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.816748][ T5873] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  442.744049][ T5873] usb 4-1: device descriptor read/all, error -71
[  442.908833][ T5812] Bluetooth: hci1: unexpected event for opcode 0x200c
[  443.100084][ T7737] hsr_slave_0: entered promiscuous mode
[  443.101399][ T7737] hsr_slave_1: entered promiscuous mode
[  443.102270][ T7737] debugfs: 'hsr0' already exists in 'hsr'
[  443.102293][ T7737] Cannot create hsr debugfs directory
[  443.105804][ T8109] __vm_enough_memory: pid: 8109, comm: syz.2.511, bytes: 4503599627366400 not enough memory for the allocation
[  443.426466][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  443.444978][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  443.453483][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  443.455611][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  443.459583][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  445.818732][ T6073] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  445.839393][   T56] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  445.988664][ T6073] usb 4-1: Using ep0 maxpacket: 32
[  445.991589][ T6073] usb 4-1: config 3 has an invalid interface number: 103 but max is 2
[  445.991613][ T6073] usb 4-1: config 3 has an invalid interface number: 171 but max is 2
[  445.991632][ T6073] usb 4-1: config 3 has an invalid interface association descriptor of length 5, skipping
[  445.991649][ T6073] usb 4-1: config 3 has an invalid interface number: 20 but max is 2
[  445.991667][ T6073] usb 4-1: config 3 has no interface number 0
[  445.991682][ T6073] usb 4-1: config 3 has no interface number 1
[  445.991697][ T6073] usb 4-1: config 3 has no interface number 2
[  445.991771][ T6073] usb 4-1: config 3 interface 171 altsetting 2 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  445.991796][ T6073] usb 4-1: config 3 interface 171 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[  445.991818][ T6073] usb 4-1: config 3 interface 103 has no altsetting 0
[  445.991835][ T6073] usb 4-1: config 3 interface 171 has no altsetting 0
[  445.991852][ T6073] usb 4-1: config 3 interface 20 has no altsetting 0
[  445.994202][ T6073] usb 4-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=3d.61
[  445.994225][ T6073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.994243][ T6073] usb 4-1: Product: à ¾
[  445.994256][ T6073] usb 4-1: Manufacturer: ÐŽ
[  445.994268][ T6073] usb 4-1: SerialNumber: ã°Š
[  445.998782][   T56] usb 3-1: Using ep0 maxpacket: 32
[  446.001084][   T56] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  446.001114][   T56] usb 3-1: config 0 interface 0 has no altsetting 0
[  446.001144][   T56] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  446.001166][   T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.006230][   T56] usb 3-1: config 0 descriptor??
[  446.139077][ T5814] Bluetooth: hci5: command tx timeout
[  446.283212][ T6073] usbhid 4-1:3.171: couldn't find an input interrupt endpoint
[  446.318061][ T6073] usb 4-1: USB disconnect, device number 30
[  446.675668][   T56] steelseries 0003:1038:12B6.0002: item fetching failed at offset 0/2
[  446.676542][   T56] steelseries 0003:1038:12B6.0002: probe with driver steelseries failed with error -22
[  447.365404][ T6061] usb 3-1: USB disconnect, device number 30
[  448.699538][ T5814] Bluetooth: hci5: command tx timeout
[  448.741288][ T8156] FAULT_INJECTION: forcing a failure.
[  448.741288][ T8156] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  448.741323][ T8156] CPU: 0 UID: 0 PID: 8156 Comm: syz.0.521 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  448.741349][ T8156] Tainted: [L]=SOFTLOCKUP
[  448.741356][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  448.741368][ T8156] Call Trace:
[  448.741376][ T8156]  <TASK>
[  448.741383][ T8156]  dump_stack_lvl+0xe8/0x150
[  448.741414][ T8156]  should_fail_ex+0x46c/0x600
[  448.741444][ T8156]  _copy_from_user+0x2d/0xb0
[  448.741473][ T8156]  __copy_msghdr+0x3c5/0x5b0
[  448.741500][ T8156]  ___sys_sendmsg+0x1a5/0x2a0
[  448.741525][ T8156]  ? __pfx____sys_sendmsg+0x10/0x10
[  448.741580][ T8156]  ? __fget_files+0x2a/0x420
[  448.741599][ T8156]  ? __fget_files+0x3a6/0x420
[  448.741628][ T8156]  __x64_sys_sendmsg+0x1a1/0x260
[  448.741651][ T8156]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  448.741680][ T8156]  ? __pfx_ksys_write+0x10/0x10
[  448.741712][ T8156]  do_syscall_64+0xec/0xf80
[  448.741729][ T8156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.741745][ T8156]  ? trace_irq_disable+0x37/0x100
[  448.741763][ T8156]  ? clear_bhb_loop+0x60/0xb0
[  448.741785][ T8156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.741802][ T8156] RIP: 0033:0x7f876a9ef749
[  448.741818][ T8156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  448.741834][ T8156] RSP: 002b:00007f8768c4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  448.741853][ T8156] RAX: ffffffffffffffda RBX: 00007f876ac45fa0 RCX: 00007f876a9ef749
[  448.741866][ T8156] RDX: 0000000004000800 RSI: 0000200000000180 RDI: 0000000000000003
[  448.741878][ T8156] RBP: 00007f8768c4e090 R08: 0000000000000000 R09: 0000000000000000
[  448.741889][ T8156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.741899][ T8156] R13: 00007f876ac46038 R14: 00007f876ac45fa0 R15: 00007ffe5ecb96d8
[  448.741928][ T8156]  </TASK>
[  448.938721][ T6061] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  449.121332][ T6061] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  449.121358][ T6061] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  449.123273][ T6061] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  449.123297][ T6061] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  449.123313][ T6061] usb 3-1: SerialNumber: syz
[  449.358064][ T6061] usb 3-1: 0:2 : does not exist
[  449.358116][ T6061] usb 3-1: unit 5 not found!
[  449.391048][ T6061] usb 3-1: USB disconnect, device number 31
[  450.520685][ T7649] udevd[7649]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  451.018838][ T8170] ICMPv6: NA: 01:80:c2:00:00:03 advertised our address fe80::aa on syz_tun!
[  451.675548][ T5814] Bluetooth: hci5: command tx timeout
[  452.221214][ T8179] netlink: 'syz.3.525': attribute type 1 has an invalid length.
[  454.234559][ T5814] Bluetooth: hci5: command tx timeout
[  454.619619][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  454.619837][ T5804] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  454.623280][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  454.631526][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  454.819196][ T5804] usb 3-1: Using ep0 maxpacket: 32
[  455.150161][ T5804] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  455.150196][ T5804] usb 3-1: config 0 interface 0 has no altsetting 0
[  455.150230][ T5804] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  455.150253][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.209717][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  455.216831][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  455.264921][ T5804] usb 3-1: config 0 descriptor??
[  455.707516][ T5804] steelseries 0003:1038:12B6.0003: item fetching failed at offset 0/2
[  455.708379][ T5804] steelseries 0003:1038:12B6.0003: probe with driver steelseries failed with error -22
[  456.668909][ T5804] usb 3-1: USB disconnect, device number 32
[  457.029726][ T8110] chnl_net:caif_netlink_parms(): no params data found
[  457.256962][ T5812] Bluetooth: hci3: command tx timeout
[  458.868795][ T6760] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  459.088682][ T6760] usb 1-1: Using ep0 maxpacket: 32
[  459.090431][ T6760] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  459.090454][ T6760] usb 1-1: config 0 has no interface number 0
[  459.090500][ T6760] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  459.090522][ T6760] usb 1-1: config 0 interface 85 has no altsetting 0
[  459.109354][ T6760] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  459.109381][ T6760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.109399][ T6760] usb 1-1: Product: syz
[  459.109412][ T6760] usb 1-1: Manufacturer: syz
[  459.109426][ T6760] usb 1-1: SerialNumber: syz
[  459.171378][ T6760] usb 1-1: config 0 descriptor??
[  459.267035][ T1201] bridge_slave_1: left allmulticast mode
[  459.267062][ T1201] bridge_slave_1: left promiscuous mode
[  459.267292][ T1201] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.328894][ T5812] Bluetooth: hci3: command tx timeout
[  459.360004][ T1201] bridge_slave_0: left allmulticast mode
[  459.360032][ T1201] bridge_slave_0: left promiscuous mode
[  459.360240][ T1201] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.397781][ T6760] appletouch 1-1:0.85: Failed to read mode from device.
[  459.398022][ T6760] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[  460.003486][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  460.004625][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  460.005075][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  460.005481][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  460.005873][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  460.050346][ T6760] usb 1-1: USB disconnect, device number 25
[  460.100565][ T1201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  460.310306][ T1201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.479759][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'.
[  460.544380][ T8234] netlink: 488 bytes leftover after parsing attributes in process `syz.2.534'.
[  460.685882][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888048699800: rx timeout, send abort
[  461.187549][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88804869a400: rx timeout, send abort
[  461.189411][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888048699800: abort rx timeout. Force session deactivation
[  461.348025][ T1201] bond0 (unregistering): Released all slaves
[  461.408704][ T5812] Bluetooth: hci3: command tx timeout
[  461.619601][   T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  461.694383][    C0] vxcan0 (unregistering): j1939_tp_rxtimer: 0xffff88804869a400: abort rx timeout. Force session deactivation
[  462.518687][   T31] usb 1-1: Using ep0 maxpacket: 16
[  462.520634][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.520664][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.522468][   T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  462.522493][   T31] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0
[  462.522514][   T31] usb 1-1: Product: syz
[  462.522528][   T31] usb 1-1: Manufacturer: syz
[  462.586009][   T31] usb 1-1: config 0 descriptor??
[  462.791182][ T8252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.792280][ T8252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.002131][   T31] usbhid 1-1:0.0: can't add hid device: -71
[  463.002253][   T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  463.019053][   T31] usb 1-1: USB disconnect, device number 26
[  464.545545][ T5812] Bluetooth: hci3: command tx timeout
[  464.978801][ T1201] hsr_slave_0: left promiscuous mode
[  465.850359][ T8265] ICMPv6: NA: 01:80:c2:00:00:03 advertised our address fe80::aa on syz_tun!
[  465.874626][ T1201] hsr_slave_1: left promiscuous mode
[  465.875555][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_0
[  465.944739][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_1
[  467.180241][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'.
[  469.553860][ T1201] team0 (unregistering): Port device team_slave_1 removed
[  469.799534][ T1201] team0 (unregistering): Port device team_slave_0 removed
[  470.948013][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.545'.
[  471.557162][ T6073] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  471.718648][ T6073] usb 3-1: Using ep0 maxpacket: 32
[  471.725671][ T6073] usb 3-1: config 3 has an invalid interface number: 103 but max is 1
[  471.725697][ T6073] usb 3-1: config 3 has an invalid interface number: 171 but max is 1
[  471.725715][ T6073] usb 3-1: config 3 has no interface number 0
[  471.725742][ T6073] usb 3-1: config 3 has no interface number 1
[  471.725800][ T6073] usb 3-1: config 3 interface 103 has no altsetting 0
[  471.725817][ T6073] usb 3-1: config 3 interface 171 has no altsetting 0
[  471.749608][ T6073] usb 3-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=3d.61
[  471.749637][ T6073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.749656][ T6073] usb 3-1: Product: à ¾
[  471.749669][ T6073] usb 3-1: Manufacturer: ÐŽ
[  471.749682][ T6073] usb 3-1: SerialNumber: ã°Š
[  472.024784][ T6073] usbhid 3-1:3.171: couldn't find an input interrupt endpoint
[  472.055352][ T6073] usb 3-1: USB disconnect, device number 33
[  472.075695][ T8110] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.075885][ T8110] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.076109][ T8110] bridge_slave_0: entered allmulticast mode
[  472.105281][ T8110] bridge_slave_0: entered promiscuous mode
[  472.130001][ T8110] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.130129][ T8110] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.130326][ T8110] bridge_slave_1: entered allmulticast mode
[  472.132827][ T8110] bridge_slave_1: entered promiscuous mode
[  472.390007][ T8110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  472.454216][ T8110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  472.816980][ T8110] team0: Port device team_slave_0 added
[  473.930841][ T8110] team0: Port device team_slave_1 added
[  474.535037][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.553'.
[  475.358954][ T6073] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  475.497896][ T5804] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  475.512863][ T6073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  475.512888][ T6073] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  475.514689][ T6073] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  475.514714][ T6073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  475.514733][ T6073] usb 4-1: SerialNumber: syz
[  475.623566][ T6073] usb 4-1: 0:2 : does not exist
[  475.623615][ T6073] usb 4-1: unit 5 not found!
[  475.648674][ T5804] usb 3-1: Using ep0 maxpacket: 32
[  475.661335][ T5804] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  475.661364][ T5804] usb 3-1: config 0 has no interface number 0
[  475.661415][ T5804] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  475.670665][ T5804] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  475.670692][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.670709][ T5804] usb 3-1: Product: syz
[  475.670723][ T5804] usb 3-1: Manufacturer: syz
[  475.670736][ T5804] usb 3-1: SerialNumber: syz
[  475.755089][ T5804] usb 3-1: config 0 descriptor??
[  475.755832][ T8320] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  475.798756][ T6073] usb 4-1: USB disconnect, device number 31
[  475.962054][ T5804] asix 3-1:0.188: probe with driver asix failed with error -71
[  476.062610][ T8292] udevd[8292]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  476.103838][ T5804] usb 3-1: USB disconnect, device number 34
[  476.328097][ T8198] chnl_net:caif_netlink_parms(): no params data found
[  476.347700][ T8110] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.347716][ T8110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.347742][ T8110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.399550][ T8110] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.399567][ T8110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.399593][ T8110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.548677][ T6073] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  476.698801][ T6073] usb 4-1: Using ep0 maxpacket: 32
[  476.701723][ T6073] usb 4-1: config 3 has an invalid interface number: 103 but max is 1
[  476.701747][ T6073] usb 4-1: config 3 has an invalid interface number: 171 but max is 1
[  476.701766][ T6073] usb 4-1: config 3 has no interface number 0
[  476.701781][ T6073] usb 4-1: config 3 has no interface number 1
[  476.701837][ T6073] usb 4-1: config 3 interface 171 altsetting 2 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  476.701864][ T6073] usb 4-1: config 3 interface 171 altsetting 2 endpoint 0xD has an invalid bInterval 0, changing to 7
[  476.701889][ T6073] usb 4-1: config 3 interface 171 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[  476.701911][ T6073] usb 4-1: config 3 interface 103 has no altsetting 0
[  476.701928][ T6073] usb 4-1: config 3 interface 171 has no altsetting 0
[  476.704212][ T6073] usb 4-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=3d.61
[  476.704238][ T6073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.704257][ T6073] usb 4-1: Product: à ¾
[  476.704270][ T6073] usb 4-1: Manufacturer: ÐŽ
[  476.704284][ T6073] usb 4-1: SerialNumber: ã°Š
[  477.082933][ T6073] usbhid 4-1:3.171: couldn't find an input interrupt endpoint
[  477.089644][ T8110] hsr_slave_0: entered promiscuous mode
[  477.098103][ T8110] hsr_slave_1: entered promiscuous mode
[  477.099146][ T8110] debugfs: 'hsr0' already exists in 'hsr'
[  477.099169][ T8110] Cannot create hsr debugfs directory
[  477.131833][ T6073] usb 4-1: USB disconnect, device number 32
[  479.479601][ T5873] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  479.625618][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.625739][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.625860][ T8198] bridge_slave_0: entered allmulticast mode
[  479.630140][ T5873] usb 3-1: Using ep0 maxpacket: 8
[  479.631617][ T8198] bridge_slave_0: entered promiscuous mode
[  479.644049][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  479.644106][ T5873] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  479.644127][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.692576][ T8369] kvm: pic: non byte read
[  479.692640][ T8369] kvm: pic: non byte read
[  479.692682][ T8369] kvm: pic: non byte read
[  479.692723][ T8369] kvm: pic: non byte read
[  479.692764][ T8369] kvm: pic: non byte read
[  479.692806][ T8369] kvm: pic: non byte read
[  479.692847][ T8369] kvm: pic: non byte read
[  479.692889][ T8369] kvm: pic: non byte read
[  479.692931][ T8369] kvm: pic: non byte read
[  479.692972][ T8369] kvm: pic: non byte read
[  479.693418][ T5873] usb 3-1: config 0 descriptor??
[  479.731168][ T5873] gspca_main: vc032x-2.14.0 probing 046d:0892
[  479.840107][ T8198] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.840320][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.840615][ T8198] bridge_slave_1: entered allmulticast mode
[  479.847480][ T8198] bridge_slave_1: entered promiscuous mode
[  480.607351][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.563'.
[  481.413749][ T5873] gspca_vc032x: reg_w err -110
[  481.413854][ T5873] vc032x 3-1:0.0: probe with driver vc032x failed with error -110
[  481.471078][ T8364] team0: entered promiscuous mode
[  481.471101][ T8364] team_slave_0: entered promiscuous mode
[  481.471308][ T8364] team_slave_1: entered promiscuous mode
[  481.771210][ T8198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  481.810572][ T8198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  482.262390][ T8198] team0: Port device team_slave_0 added
[  482.310796][ T8198] team0: Port device team_slave_1 added
[  482.752733][ T6180] Bluetooth: hci0: Frame reassembly failed (-84)
[  482.753732][ T6180] Bluetooth: hci0: Frame reassembly failed (-84)
[  482.791039][ T5804] usb 3-1: USB disconnect, device number 35
[  482.833284][ T8406] FAULT_INJECTION: forcing a failure.
[  482.833284][ T8406] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  482.833309][ T8406] CPU: 0 UID: 0 PID: 8406 Comm: syz.2.566 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  482.833324][ T8406] Tainted: [L]=SOFTLOCKUP
[  482.833328][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  482.833334][ T8406] Call Trace:
[  482.833338][ T8406]  <TASK>
[  482.833343][ T8406]  dump_stack_lvl+0xe8/0x150
[  482.833362][ T8406]  should_fail_ex+0x46c/0x600
[  482.833379][ T8406]  _copy_from_iter+0x1cd/0x1630
[  482.833395][ T8406]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  482.833411][ T8406]  ? __pfx__copy_from_iter+0x10/0x10
[  482.833428][ T8406]  ? set_page_refcounted+0xa0/0x1e0
[  482.833441][ T8406]  ? page_copy_sane+0x4e/0x280
[  482.833457][ T8406]  copy_page_from_iter+0xdd/0x170
[  482.833473][ T8406]  tun_get_user+0x1d40/0x3de0
[  482.833489][ T8406]  ? tun_get_user+0x6fc/0x3de0
[  482.833507][ T8406]  ? __pfx_tun_get_user+0x10/0x10
[  482.833520][ T8406]  ? __lock_acquire+0x6b6/0x2cf0
[  482.833537][ T8406]  ? kstrtoull+0x12f/0x1d0
[  482.833553][ T8406]  ? ref_tracker_alloc+0x2fe/0x450
[  482.833566][ T8406]  ? get_pid_task+0x20/0x1f0
[  482.833581][ T8406]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  482.833595][ T8406]  ? tun_get+0x1c/0x2f0
[  482.833607][ T8406]  ? tun_get+0x1c/0x2f0
[  482.833621][ T8406]  ? tun_get+0x1c/0x2f0
[  482.833633][ T8406]  ? tun_get+0x1c/0x2f0
[  482.833647][ T8406]  tun_chr_write_iter+0x119/0x200
[  482.833666][ T8406]  vfs_write+0x5d5/0xb40
[  482.833691][ T8406]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  482.833712][ T8406]  ? __pfx_vfs_write+0x10/0x10
[  482.833744][ T8406]  ? __fget_files+0x2a/0x420
[  482.833770][ T8406]  ksys_write+0x14b/0x260
[  482.833795][ T8406]  ? __pfx_ksys_write+0x10/0x10
[  482.833820][ T8406]  do_syscall_64+0xec/0xf80
[  482.833831][ T8406]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.833841][ T8406]  ? trace_irq_disable+0x37/0x100
[  482.833852][ T8406]  ? clear_bhb_loop+0x60/0xb0
[  482.833864][ T8406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.833874][ T8406] RIP: 0033:0x7fa132dde1ff
[  482.833884][ T8406] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  482.833893][ T8406] RSP: 002b:00007fa13103e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  482.833905][ T8406] RAX: ffffffffffffffda RBX: 00007fa133035fa0 RCX: 00007fa132dde1ff
[  482.833913][ T8406] RDX: 000000000000003a RSI: 0000200000000040 RDI: 00000000000000c8
[  482.833920][ T8406] RBP: 00007fa13103e090 R08: 0000000000000000 R09: 0000000000000000
[  482.833926][ T8406] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001
[  482.833932][ T8406] R13: 00007fa133036038 R14: 00007fa133035fa0 R15: 00007ffeb2eb5c48
[  482.833948][ T8406]  </TASK>
[  483.148288][ T8198] batman_adv: batadv0: Adding interface: batadv_slave_0
[  483.148304][ T8198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  483.148330][ T8198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.225989][ T8198] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.226006][ T8198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  483.226033][ T8198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  484.429619][ T8418] netlink: 40 bytes leftover after parsing attributes in process `syz.0.569'.
[  484.668736][   T56] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  484.750803][ T8198] hsr_slave_0: entered promiscuous mode
[  484.752157][ T8198] hsr_slave_1: entered promiscuous mode
[  484.760341][ T8198] debugfs: 'hsr0' already exists in 'hsr'
[  484.760366][ T8198] Cannot create hsr debugfs directory
[  484.771955][ T5812] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  484.818645][   T56] usb 1-1: Using ep0 maxpacket: 16
[  484.820502][   T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  484.820519][   T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  484.820540][   T56] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b2a, bcdDevice= 0.00
[  484.820551][   T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.870768][   T56] usb 1-1: config 0 descriptor??
[  485.595476][   T56] usbhid 1-1:0.0: can't add hid device: -71
[  485.600248][   T56] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  485.628198][   T56] usb 1-1: USB disconnect, device number 27
[  486.650767][ T1201] bridge_slave_1: left allmulticast mode
[  486.650786][ T1201] bridge_slave_1: left promiscuous mode
[  486.650923][ T1201] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.749527][ T1201] bridge_slave_0: left allmulticast mode
[  486.749547][ T1201] bridge_slave_0: left promiscuous mode
[  486.749717][ T1201] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.684222][ T1201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.859527][ T1201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  490.902099][ T1201] bond0 (unregistering): Released all slaves
[  491.494240][ T8451] netlink: 'syz.2.580': attribute type 1 has an invalid length.
[  492.690712][ T1201] hsr_slave_0: left promiscuous mode
[  492.712092][ T1201] hsr_slave_1: left promiscuous mode
[  492.715071][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_0
[  492.769463][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_1
[  493.490394][ T8466] netlink: 'syz.3.581': attribute type 1 has an invalid length.
[  498.617213][ T1201] team0 (unregistering): Port device team_slave_1 removed
[  498.859408][ T1201] team0 (unregistering): Port device team_slave_0 removed
[  500.078329][ T8498] FAULT_INJECTION: forcing a failure.
[  500.078329][ T8498] name failslab, interval 1, probability 0, space 0, times 0
[  500.078364][ T8498] CPU: 1 UID: 0 PID: 8498 Comm: syz.0.593 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  500.078391][ T8498] Tainted: [L]=SOFTLOCKUP
[  500.078397][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  500.078409][ T8498] Call Trace:
[  500.078416][ T8498]  <TASK>
[  500.078424][ T8498]  dump_stack_lvl+0xe8/0x150
[  500.078453][ T8498]  should_fail_ex+0x46c/0x600
[  500.078481][ T8498]  ? dst_alloc+0x105/0x170
[  500.078505][ T8498]  should_failslab+0xa8/0x100
[  500.078526][ T8498]  ? dst_alloc+0x105/0x170
[  500.078546][ T8498]  kmem_cache_alloc_noprof+0x84/0x6c0
[  500.078573][ T8498]  ? fib_lookup+0x76/0x440
[  500.078604][ T8498]  dst_alloc+0x105/0x170
[  500.078633][ T8498]  ip_route_output_key_hash_rcu+0x1560/0x23e0
[  500.078662][ T8498]  ? ip_route_output_key_hash+0xc1/0x280
[  500.078682][ T8498]  ip_route_output_key_hash+0x174/0x280
[  500.078705][ T8498]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  500.078728][ T8498]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  500.078748][ T8498]  ? lockdep_hardirqs_on+0x7b/0x110
[  500.078768][ T8498]  ? rt_mutex_slowunlock+0x493/0x8a0
[  500.078791][ T8498]  ? dst_release+0x72/0x1b0
[  500.078817][ T8498]  __ip4_datagram_connect+0x8f4/0x1270
[  500.078867][ T8498]  udp_connect+0x33/0x1f0
[  500.078897][ T8498]  __sys_connect+0x323/0x450
[  500.078921][ T8498]  ? __pfx___sys_connect+0x10/0x10
[  500.078955][ T8498]  ? __pfx_ksys_write+0x10/0x10
[  500.078988][ T8498]  __x64_sys_connect+0x7a/0x90
[  500.079010][ T8498]  do_syscall_64+0xec/0xf80
[  500.079028][ T8498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.079047][ T8498]  ? trace_irq_disable+0x37/0x100
[  500.079065][ T8498]  ? clear_bhb_loop+0x60/0xb0
[  500.079088][ T8498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.079106][ T8498] RIP: 0033:0x7f876a9ef749
[  500.079123][ T8498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  500.079140][ T8498] RSP: 002b:00007f8768c4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  500.079161][ T8498] RAX: ffffffffffffffda RBX: 00007f876ac45fa0 RCX: 00007f876a9ef749
[  500.079176][ T8498] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003
[  500.079189][ T8498] RBP: 00007f8768c4e090 R08: 0000000000000000 R09: 0000000000000000
[  500.079210][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  500.079221][ T8498] R13: 00007f876ac46038 R14: 00007f876ac45fa0 R15: 00007ffe5ecb96d8
[  500.079254][ T8498]  </TASK>
[  501.414851][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  501.414921][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  504.793124][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  504.841015][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  504.842298][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  504.844141][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  504.845377][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  505.075433][ T8550] picdev_read: 10 callbacks suppressed
[  505.075454][ T8550] kvm: pic: non byte read
[  505.075520][ T8550] kvm: pic: non byte read
[  505.075579][ T8550] kvm: pic: non byte read
[  505.075638][ T8550] kvm: pic: non byte read
[  505.075695][ T8550] kvm: pic: non byte read
[  505.075752][ T8550] kvm: pic: non byte read
[  505.075809][ T8550] kvm: pic: non byte read
[  505.075865][ T8550] kvm: pic: non byte read
[  505.075922][ T8550] kvm: pic: non byte read
[  505.075983][ T8550] kvm: pic: non byte read
[  506.448462][ T8563] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  507.472175][ T5812] Bluetooth: hci0: command tx timeout
[  509.037151][ T8577] tmpfs: Bad value for 'nr_blocks'
[  509.143851][ T8585] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.616'.
[  509.314915][ T5944] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  509.431745][ T8592] FAULT_INJECTION: forcing a failure.
[  509.431745][ T8592] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  509.431805][ T8592] CPU: 0 UID: 0 PID: 8592 Comm: syz.0.616 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  509.431833][ T8592] Tainted: [L]=SOFTLOCKUP
[  509.431840][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  509.431853][ T8592] Call Trace:
[  509.431861][ T8592]  <TASK>
[  509.431869][ T8592]  dump_stack_lvl+0xe8/0x150
[  509.431899][ T8592]  should_fail_ex+0x46c/0x600
[  509.431928][ T8592]  strncpy_from_user+0x36/0x2c0
[  509.431955][ T8592]  getname_flags+0xf3/0x540
[  509.431979][ T8592]  do_sys_openat2+0xbc/0x200
[  509.432001][ T8592]  ? lockdep_hardirqs_on+0x7b/0x110
[  509.432020][ T8592]  ? __pfx_do_sys_openat2+0x10/0x10
[  509.432054][ T8592]  __x64_sys_openat+0x138/0x170
[  509.432080][ T8592]  do_syscall_64+0xec/0xf80
[  509.432098][ T8592]  ? rcu_is_watching+0x15/0xb0
[  509.432115][ T8592]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.432134][ T8592]  ? clear_bhb_loop+0x60/0xb0
[  509.432157][ T8592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.432175][ T8592] RIP: 0033:0x7f876a9ef749
[  509.432193][ T8592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  509.432209][ T8592] RSP: 002b:00007f8768c0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  509.432230][ T8592] RAX: ffffffffffffffda RBX: 00007f876ac46180 RCX: 00007f876a9ef749
[  509.432244][ T8592] RDX: 0000000000000000 RSI: 0000200000002440 RDI: ffffffffffffff9c
[  509.432258][ T8592] RBP: 00007f8768c0c090 R08: 0000000000000000 R09: 0000000000000000
[  509.432271][ T8592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  509.432282][ T8592] R13: 00007f876ac46218 R14: 00007f876ac46180 R15: 00007ffe5ecb96d8
[  509.432314][ T8592]  </TASK>
[  509.910657][ T5812] Bluetooth: hci0: command tx timeout
[  510.142812][ T5944] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  510.142841][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.142860][ T5944] usb 4-1: Product: syz
[  510.142873][ T5944] usb 4-1: Manufacturer: syz
[  510.142887][ T5944] usb 4-1: SerialNumber: syz
[  510.163328][ T5944] usb 4-1: config 0 descriptor??
[  510.177966][ T5944] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 033
[  510.248683][   T31] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  510.402235][   T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  510.402285][   T31] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  510.402312][   T31] usb 3-1: config 0 interface 0 has no altsetting 0
[  510.438807][   T31] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  510.438832][   T31] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  510.438850][   T31] usb 3-1: Product: syz
[  510.438862][   T31] usb 3-1: Manufacturer: syz
[  510.438876][   T31] usb 3-1: SerialNumber: syz
[  510.450119][   T31] usb 3-1: config 0 descriptor??
[  510.601381][ T5944]  (null): failure reading functionality
[  510.606676][ T5944] i2c i2c-1: failure reading functionality
[  510.617930][ T8581] SQUASHFS error: Failed to read block 0x0: -5
[  510.679268][ T8589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.679768][ T5944] i2c i2c-1: connected i2c-tiny-usb device
[  510.679933][ T8589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.711711][   T31] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  510.729864][   T31] usb 3-1: USB disconnect, device number 36
[  510.734801][ T5873] usb 4-1: USB disconnect, device number 33
[  510.846538][ T8456] udevd[8456]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  510.947641][ T8606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  511.089591][ T8547] chnl_net:caif_netlink_parms(): no params data found
[  511.133157][ T8198] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  511.208695][ T6073] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  511.229753][ T8198] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  511.292902][ T8198] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  511.373114][ T6073] usb 1-1: Using ep0 maxpacket: 32
[  511.395686][ T6073] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c
[  511.395716][ T6073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.395735][ T6073] usb 1-1: Product: syz
[  511.395749][ T6073] usb 1-1: Manufacturer: syz
[  511.395762][ T6073] usb 1-1: SerialNumber: syz
[  511.413773][ T6073] usb 1-1: config 0 descriptor??
[  511.454153][ T6073] cdc_mbim 1-1:0.0: CDC Union missing and no IAD found
[  511.454202][ T6073] cdc_mbim 1-1:0.0: bind() failure
[  511.465961][ T6073] option 1-1:0.0: GSM modem (1-port) converter detected
[  511.618123][ T8198] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  511.659302][ T5873] usb 1-1: USB disconnect, device number 28
[  511.661487][ T5873] option 1-1:0.0: device disconnected
[  512.472648][ T5814] Bluetooth: hci0: command tx timeout
[  514.653119][ T5814] Bluetooth: hci0: command tx timeout
[  514.829428][ T8547] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.829499][ T8547] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.829668][ T8547] bridge_slave_0: entered allmulticast mode
[  514.831054][ T8547] bridge_slave_0: entered promiscuous mode
[  514.834506][ T8547] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.834572][ T8547] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.834669][ T8547] bridge_slave_1: entered allmulticast mode
[  514.836001][ T8547] bridge_slave_1: entered promiscuous mode
[  515.285438][ T8547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.310990][ T8547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  515.462698][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  515.465766][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  515.469700][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  515.478329][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  515.484177][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  517.193507][  T976] bridge_slave_1: left allmulticast mode
[  517.193535][  T976] bridge_slave_1: left promiscuous mode
[  517.193782][  T976] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.279519][  T976] bridge_slave_0: left allmulticast mode
[  517.279537][  T976] bridge_slave_0: left promiscuous mode
[  517.279695][  T976] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.288652][ T5944] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  517.452966][ T5944] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  517.452995][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.453014][ T5944] usb 4-1: Product: syz
[  517.453027][ T5944] usb 4-1: Manufacturer: syz
[  517.453040][ T5944] usb 4-1: SerialNumber: syz
[  517.458154][ T5944] usb 4-1: config 0 descriptor??
[  517.488728][ T5812] Bluetooth: hci5: command tx timeout
[  517.512791][ T5944] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 034
[  517.941614][ T5944]  (null): failure reading functionality
[  517.950188][ T8652] SQUASHFS error: Failed to read block 0x0: -5
[  517.963055][ T5944] i2c i2c-1: failure reading functionality
[  517.966878][ T5944] i2c i2c-1: connected i2c-tiny-usb device
[  518.013406][ T5944] usb 4-1: USB disconnect, device number 34
[  518.129444][  T976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  518.209645][  T976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  518.272550][  T976] bond0 (unregistering): Released all slaves
[  518.424466][ T8547] team0: Port device team_slave_0 added
[  518.427530][ T8547] team0: Port device team_slave_1 added
[  519.188674][ T5944] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  519.208693][  T976] hsr_slave_0: left promiscuous mode
[  520.278689][ T5812] Bluetooth: hci5: command tx timeout
[  520.295430][  T976] hsr_slave_1: left promiscuous mode
[  520.307300][  T976] batman_adv: batadv0: Removing interface: batadv_slave_0
[  520.341966][  T976] batman_adv: batadv0: Removing interface: batadv_slave_1
[  520.358610][ T5944] usb 1-1: Using ep0 maxpacket: 16
[  520.375085][ T5944] usb 1-1: config 0 has an invalid interface number: 77 but max is 0
[  520.375112][ T5944] usb 1-1: config 0 has no interface number 0
[  520.375159][ T5944] usb 1-1: config 0 interface 77 has no altsetting 0
[  520.377703][ T5944] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=8c.11
[  520.377728][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.377746][ T5944] usb 1-1: Product: syz
[  520.377759][ T5944] usb 1-1: Manufacturer: syz
[  520.377773][ T5944] usb 1-1: SerialNumber: syz
[  520.436262][ T5944] usb 1-1: config 0 descriptor??
[  520.689468][ T8669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.695601][ T8669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.716485][ T5944] ath6kl: Failed to submit usb control message: -71
[  520.716534][ T5944] ath6kl: unable to send the bmi data to the device: -71
[  520.716548][ T5944] ath6kl: Unable to send get target info: -71
[  520.742070][ T5944] ath6kl: Failed to init ath6kl core: -71
[  520.760227][ T5944] ath6kl_usb 1-1:0.77: probe with driver ath6kl_usb failed with error -71
[  520.797229][ T5944] usb 1-1: USB disconnect, device number 29
[  522.288658][ T5812] Bluetooth: hci5: command tx timeout
[  522.378666][ T6267] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  522.419209][  T976] team0 (unregistering): Port device team_slave_1 removed
[  522.538645][ T6267] usb 1-1: Using ep0 maxpacket: 32
[  522.539972][  T976] team0 (unregistering): Port device team_slave_0 removed
[  522.543162][ T6267] usb 1-1: config 3 has an invalid interface number: 103 but max is 2
[  522.543187][ T6267] usb 1-1: config 3 has an invalid interface number: 171 but max is 2
[  522.543204][ T6267] usb 1-1: config 3 has an invalid interface association descriptor of length 2, skipping
[  522.543221][ T6267] usb 1-1: config 3 has an invalid interface number: 20 but max is 2
[  522.543239][ T6267] usb 1-1: config 3 has no interface number 0
[  522.543253][ T6267] usb 1-1: config 3 has no interface number 1
[  522.543267][ T6267] usb 1-1: config 3 has no interface number 2
[  522.543337][ T6267] usb 1-1: config 3 interface 171 altsetting 2 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  522.543362][ T6267] usb 1-1: config 3 interface 171 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[  522.543383][ T6267] usb 1-1: config 3 interface 103 has no altsetting 0
[  522.543400][ T6267] usb 1-1: config 3 interface 171 has no altsetting 0
[  522.543416][ T6267] usb 1-1: config 3 interface 20 has no altsetting 0
[  522.546027][ T6267] usb 1-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=3d.61
[  522.546053][ T6267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.546072][ T6267] usb 1-1: Product: à ¾
[  522.546086][ T6267] usb 1-1: Manufacturer: ÐŽ
[  522.546099][ T6267] usb 1-1: SerialNumber: ã°Š
[  522.959889][ T6267] usbhid 1-1:3.171: couldn't find an input interrupt endpoint
[  522.981073][ T6267] usb 1-1: USB disconnect, device number 30
[  524.190846][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.190863][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.190888][ T8547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  524.251206][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_1
[  524.251223][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.251246][ T8547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  524.368661][ T5812] Bluetooth: hci5: command tx timeout
[  524.541833][   T56] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  524.889960][ T8705] loop8: detected capacity change from 0 to 7
[  525.969488][ T8705] Dev loop8: unable to read RDB block 7
[  525.969538][ T8705]  loop8: unable to read partition table
[  525.969841][ T8705] loop8: partition table beyond EOD, truncated
[  525.969861][ T8705] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  526.048219][   T56] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  526.048250][   T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.048269][   T56] usb 4-1: Product: syz
[  526.048283][   T56] usb 4-1: Manufacturer: syz
[  526.048297][   T56] usb 4-1: SerialNumber: syz
[  526.111600][   T56] usb 4-1: config 0 descriptor??
[  526.167553][   T56] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 035
[  526.445526][ T8547] hsr_slave_0: entered promiscuous mode
[  526.446812][ T8547] hsr_slave_1: entered promiscuous mode
[  526.447729][ T8547] debugfs: 'hsr0' already exists in 'hsr'
[  526.447752][ T8547] Cannot create hsr debugfs directory
[  526.533471][   T56]  (null): failure reading functionality
[  526.546912][   T56] i2c i2c-1: failure reading functionality
[  526.547386][ T8700] SQUASHFS error: Failed to read block 0x0: -5
[  526.580753][   T56] i2c i2c-1: connected i2c-tiny-usb device
[  526.635586][ T6073] usb 4-1: USB disconnect, device number 35
[  526.746577][ T8720] FAULT_INJECTION: forcing a failure.
[  526.746577][ T8720] name failslab, interval 1, probability 0, space 0, times 0
[  526.746612][ T8720] CPU: 1 UID: 0 PID: 8720 Comm: syz.2.651 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  526.746638][ T8720] Tainted: [L]=SOFTLOCKUP
[  526.746645][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  526.746657][ T8720] Call Trace:
[  526.746664][ T8720]  <TASK>
[  526.746672][ T8720]  dump_stack_lvl+0xe8/0x150
[  526.746701][ T8720]  should_fail_ex+0x46c/0x600
[  526.746730][ T8720]  ? __alloc_skb+0x1dc/0x3a0
[  526.746749][ T8720]  should_failslab+0xa8/0x100
[  526.746769][ T8720]  ? __alloc_skb+0x1dc/0x3a0
[  526.746786][ T8720]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  526.746812][ T8720]  ? lockdep_hardirqs_on+0x7b/0x110
[  526.746832][ T8720]  ? __alloc_skb+0x198/0x3a0
[  526.746853][ T8720]  __alloc_skb+0x1dc/0x3a0
[  526.746876][ T8720]  netlink_sendmsg+0x5c6/0xb30
[  526.746910][ T8720]  ? __pfx_netlink_sendmsg+0x10/0x10
[  526.746941][ T8720]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  526.746964][ T8720]  ? __pfx_netlink_sendmsg+0x10/0x10
[  526.746989][ T8720]  __sock_sendmsg+0x21c/0x270
[  526.747019][ T8720]  ____sys_sendmsg+0x508/0x810
[  526.747048][ T8720]  ? __pfx_____sys_sendmsg+0x10/0x10
[  526.747080][ T8720]  ? import_iovec+0x74/0xa0
[  526.747102][ T8720]  ___sys_sendmsg+0x21f/0x2a0
[  526.747127][ T8720]  ? __pfx____sys_sendmsg+0x10/0x10
[  526.747183][ T8720]  ? __fget_files+0x2a/0x420
[  526.747203][ T8720]  ? __fget_files+0x3a6/0x420
[  526.747232][ T8720]  __x64_sys_sendmsg+0x1a1/0x260
[  526.747257][ T8720]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  526.747288][ T8720]  ? __pfx_ksys_write+0x10/0x10
[  526.747324][ T8720]  do_syscall_64+0xec/0xf80
[  526.747343][ T8720]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.747361][ T8720]  ? trace_irq_disable+0x37/0x100
[  526.747381][ T8720]  ? clear_bhb_loop+0x60/0xb0
[  526.747403][ T8720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.747422][ T8720] RIP: 0033:0x7fa132ddf749
[  526.747438][ T8720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  526.747455][ T8720] RSP: 002b:00007fa13103e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  526.747475][ T8720] RAX: ffffffffffffffda RBX: 00007fa133035fa0 RCX: 00007fa132ddf749
[  526.747490][ T8720] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000003
[  526.747502][ T8720] RBP: 00007fa13103e090 R08: 0000000000000000 R09: 0000000000000000
[  526.747515][ T8720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  526.747526][ T8720] R13: 00007fa133036038 R14: 00007fa133035fa0 R15: 00007ffeb2eb5c48
[  526.747563][ T8720]  </TASK>
[  529.970013][ T5788] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  529.973812][ T8642] chnl_net:caif_netlink_parms(): no params data found
[  530.129654][ T5788] usb 3-1: Using ep0 maxpacket: 32
[  530.134123][ T5788] usb 3-1: config 3 has an invalid interface number: 103 but max is 2
[  530.134148][ T5788] usb 3-1: config 3 has an invalid interface number: 171 but max is 2
[  530.134166][ T5788] usb 3-1: config 3 has an invalid interface association descriptor of length 2, skipping
[  530.134184][ T5788] usb 3-1: config 3 has an invalid interface number: 20 but max is 2
[  530.134202][ T5788] usb 3-1: config 3 has no interface number 0
[  530.134216][ T5788] usb 3-1: config 3 has no interface number 1
[  530.134230][ T5788] usb 3-1: config 3 has no interface number 2
[  530.134311][ T5788] usb 3-1: config 3 interface 171 altsetting 2 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  530.134337][ T5788] usb 3-1: config 3 interface 171 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[  530.134360][ T5788] usb 3-1: config 3 interface 103 has no altsetting 0
[  530.134376][ T5788] usb 3-1: config 3 interface 171 has no altsetting 0
[  530.134393][ T5788] usb 3-1: config 3 interface 20 has no altsetting 0
[  530.138383][ T5788] usb 3-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=3d.61
[  530.138409][ T5788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.138428][ T5788] usb 3-1: Product: à ¾
[  530.138441][ T5788] usb 3-1: Manufacturer: ÐŽ
[  530.138454][ T5788] usb 3-1: SerialNumber: ã°Š
[  530.479076][ T5788] usbhid 3-1:3.171: couldn't find an input interrupt endpoint
[  530.526192][ T5788] usb 3-1: USB disconnect, device number 37
[  532.358789][ T8642] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.358858][ T8642] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.359019][ T8642] bridge_slave_0: entered allmulticast mode
[  532.360380][ T8642] bridge_slave_0: entered promiscuous mode
[  532.851811][ T5811] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  533.036914][ T5811] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  533.036943][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.036962][ T5811] usb 1-1: Product: syz
[  533.036974][ T5811] usb 1-1: Manufacturer: syz
[  533.036988][ T5811] usb 1-1: SerialNumber: syz
[  533.116511][ T5811] usb 1-1: config 0 descriptor??
[  533.142545][ T5811] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 031
[  533.315044][ T8642] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.317107][ T8642] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.317346][ T8642] bridge_slave_1: entered allmulticast mode
[  533.337815][ T8642] bridge_slave_1: entered promiscuous mode
[  533.620481][ T5811]  (null): failure reading functionality
[  533.626487][ T5811] i2c i2c-1: failure reading functionality
[  533.645720][ T8772] SQUASHFS error: Failed to read block 0x0: -5
[  533.662619][ T5811] i2c i2c-1: connected i2c-tiny-usb device
[  533.782063][ T5788] usb 1-1: USB disconnect, device number 31
[  535.377515][ T8642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  535.413430][ T8642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  537.270378][ T8642] team0: Port device team_slave_0 added
[  537.322902][ T8642] team0: Port device team_slave_1 added
[  538.332231][ T8817] blktrace: Concurrent blktraces are not allowed on loop6
[  539.180357][ T8642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  539.180373][ T8642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  539.180728][ T8642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  539.348705][ T6267] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  540.370789][ T6267] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  540.370822][ T6267] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x85 has invalid wMaxPacketSize 0
[  540.370842][ T6267] usb 4-1: config 0 interface 0 has no altsetting 0
[  540.373203][ T6267] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  540.373229][ T6267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.373248][ T6267] usb 4-1: Product: syz
[  540.373261][ T6267] usb 4-1: Manufacturer: syz
[  540.373274][ T6267] usb 4-1: SerialNumber: syz
[  540.421793][ T6267] usb 4-1: config 0 descriptor??
[  540.463240][ T6267] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected
[  540.463425][ T6267] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87
[  540.463467][ T6267] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[  540.464569][ T6267] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[  540.464618][ T6267] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[  540.464664][ T6267] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[  540.464729][ T6267] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[  540.564390][ T6267] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  540.600039][ T6267] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83
[  540.600135][ T6267] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3
[  540.600224][ T6267] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4
[  540.600308][ T6267] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86
[  540.600401][ T6267] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6
[  540.623353][ T8642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  540.623369][ T8642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  540.623395][ T8642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  540.682378][ T6267] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  541.464074][ T8642] hsr_slave_0: entered promiscuous mode
[  541.469585][ T8642] hsr_slave_1: entered promiscuous mode
[  541.474041][ T8642] debugfs: 'hsr0' already exists in 'hsr'
[  541.474065][ T8642] Cannot create hsr debugfs directory
[  541.475026][ T8547] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  541.576656][ T8547] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  541.814521][ T6267] usb 4-1: USB disconnect, device number 36
[  541.821478][ T6267] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  541.825825][ T8547] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  541.873904][ T6267] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  541.874790][ T6267] keyspan 4-1:0.0: device disconnected
[  542.109616][ T8547] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  543.289565][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.678'.
[  543.316347][  T976] bridge_slave_1: left allmulticast mode
[  543.316375][  T976] bridge_slave_1: left promiscuous mode
[  543.316617][  T976] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.587079][  T976] bridge_slave_0: left allmulticast mode
[  543.587099][  T976] bridge_slave_0: left promiscuous mode
[  543.587271][  T976] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.768662][ T6267] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  543.933407][ T6267] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  543.933425][ T6267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.933435][ T6267] usb 3-1: Product: syz
[  543.933443][ T6267] usb 3-1: Manufacturer: syz
[  543.933450][ T6267] usb 3-1: SerialNumber: syz
[  543.937287][ T6267] usb 3-1: config 0 descriptor??
[  543.985433][ T6267] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 038
[  544.081822][  T976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  544.180464][  T976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  544.261602][  T976] bond0 (unregistering): Released all slaves
[  544.570604][ T6267]  (null): failure reading functionality
[  544.572256][ T6267] i2c i2c-1: failure reading functionality
[  544.573932][ T8852] SQUASHFS error: Failed to read block 0x0: -5
[  544.610885][ T6267] i2c i2c-1: connected i2c-tiny-usb device
[  544.682958][ T5811] usb 3-1: USB disconnect, device number 38
[  545.208741][  T976] hsr_slave_0: left promiscuous mode
[  545.249174][  T976] hsr_slave_1: left promiscuous mode
[  545.250161][  T976] batman_adv: batadv0: Removing interface: batadv_slave_0
[  545.300190][  T976] batman_adv: batadv0: Removing interface: batadv_slave_1
[  545.378648][ T5811] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  545.529308][ T5811] usb 1-1: Using ep0 maxpacket: 32
[  545.537633][ T5811] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  545.537670][ T5811] usb 1-1: config 0 interface 0 has no altsetting 0
[  545.537703][ T5811] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  545.537726][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.599981][ T5811] usb 1-1: config 0 descriptor??
[  547.162963][ T5811] steelseries 0003:1038:12B6.0004: item fetching failed at offset 0/2
[  547.163784][ T5811] steelseries 0003:1038:12B6.0004: probe with driver steelseries failed with error -22
[  548.167245][   T31] usb 1-1: USB disconnect, device number 32
[  549.318745][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'.
[  549.679380][  T976] team0 (unregistering): Port device team_slave_1 removed
[  549.958784][  T976] team0 (unregistering): Port device team_slave_0 removed
[  550.434980][ T8890] netlink: 284 bytes leftover after parsing attributes in process `syz.3.684'.
[  551.517947][ T8895] netlink: 88 bytes leftover after parsing attributes in process `syz.0.690'.
[  551.768744][ T5921] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  551.931792][ T5921] usb 1-1: unable to read config index 0 descriptor/start: -61
[  551.931828][ T5921] usb 1-1: can't read configurations, error -61
[  552.058713][ T5921] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  552.237635][ T5921] usb 1-1: unable to read config index 0 descriptor/start: -61
[  552.237673][ T5921] usb 1-1: can't read configurations, error -61
[  552.238024][ T5921] usb usb1-port1: attempt power cycle
[  552.608884][ T5921] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  552.633473][ T5921] usb 1-1: unable to read config index 0 descriptor/start: -61
[  552.633507][ T5921] usb 1-1: can't read configurations, error -61
[  552.758713][ T5921] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  552.784883][ T5921] usb 1-1: unable to read config index 0 descriptor/start: -61
[  552.784921][ T5921] usb 1-1: can't read configurations, error -61
[  552.785269][ T5921] usb usb1-port1: unable to enumerate USB device
[  553.233081][ T8547] 8021q: adding VLAN 0 to HW filter on device bond0
[  553.379634][ T8547] 8021q: adding VLAN 0 to HW filter on device team0
[  553.410227][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.410428][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  553.461472][ T5990] bridge0: port 2(bridge_slave_1) entered blocking state
[  553.461628][ T5990] bridge0: port 2(bridge_slave_1) entered forwarding state
[  554.039193][ T8642] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  554.094866][ T8642] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  554.197776][ T8642] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  554.492061][ T8642] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  554.968080][ T8547] 8021q: adding VLAN 0 to HW filter on device batadv0
[  555.251008][ T8955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.695'.
[  555.251046][ T8955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.695'.
[  555.444901][ T8642] 8021q: adding VLAN 0 to HW filter on device bond0
[  555.679426][ T8642] 8021q: adding VLAN 0 to HW filter on device team0
[  555.695607][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.701423][ T6149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  555.711777][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.711978][ T6149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  558.091522][ T8547] veth0_vlan: entered promiscuous mode
[  558.278890][ T8547] veth1_vlan: entered promiscuous mode
[  558.543027][ T8547] veth0_macvtap: entered promiscuous mode
[  558.578805][ T8547] veth1_macvtap: entered promiscuous mode
[  558.772028][ T8547] batman_adv: batadv0: Interface activated: batadv_slave_0
[  559.129040][ T8547] batman_adv: batadv0: Interface activated: batadv_slave_1
[  559.227311][ T8642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  559.266790][ T5990] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  559.267284][ T5990] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  559.274558][ T5990] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  559.285478][ T5990] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  560.839193][ T9010] ICMPv6: NA: 01:80:c2:00:00:03 advertised our address fe80::aa on syz_tun!
[  560.948853][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.948874][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.221338][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.221358][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.027682][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  563.027757][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  563.136780][ T8642] veth0_vlan: entered promiscuous mode
[  563.269496][ T8642] veth1_vlan: entered promiscuous mode
[  563.411420][ T8642] veth0_macvtap: entered promiscuous mode
[  563.416166][ T8642] veth1_macvtap: entered promiscuous mode
[  563.485606][ T8642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  563.533262][ T8642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  563.609084][   T69] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  563.609132][   T69] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  563.609167][   T69] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  563.609201][   T69] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  565.528662][ T1412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.528683][ T1412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  565.597443][  T976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.597463][  T976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  569.898799][ T9063] ICMPv6: NA: 01:80:c2:00:00:03 advertised our address fe80::aa on syz_tun!
[  571.219705][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.6.715'.
[  574.338813][ T5873] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  574.638794][ T5873] usb 6-1: Using ep0 maxpacket: 16
[  574.647804][ T5873] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  574.647819][ T5873] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  574.647829][ T5873] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  575.462040][ T5873] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  575.462071][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.462090][ T5873] usb 6-1: Product: syz
[  575.462103][ T5873] usb 6-1: Manufacturer: syz
[  575.462115][ T5873] usb 6-1: SerialNumber: syz
[  575.781396][ T5873] usb 6-1: 0:2 : does not exist
[  575.852284][ T5873] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1)
[  576.006305][ T5873] usb 6-1: USB disconnect, device number 2
[  577.275918][ T9024] udevd[9024]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  577.418659][ T9107] netlink: 'syz.5.724': attribute type 27 has an invalid length.
[  580.078693][ T6760] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  580.409833][ T6760] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  580.409916][ T6760] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x85 has invalid wMaxPacketSize 0
[  580.409997][ T6760] usb 1-1: config 0 interface 0 has no altsetting 0
[  580.463406][ T9117] loop8: detected capacity change from 0 to 8
[  580.574183][ T9117] Dev loop8: unable to read RDB block 8
[  580.574441][ T9117]  loop8: unable to read partition table
[  580.577104][ T9117] loop8: partition table beyond EOD, truncated
[  580.577172][ T9117] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  580.627041][ T6760] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  580.627122][ T6760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.627167][ T6760] usb 1-1: Product: syz
[  580.627207][ T6760] usb 1-1: Manufacturer: syz
[  580.627246][ T6760] usb 1-1: SerialNumber: syz
[  581.131945][ T6760] usb 1-1: config 0 descriptor??
[  581.154616][ T6760] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected
[  581.154917][ T6760] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87
[  581.154997][ T6760] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7
[  581.202334][ T6760] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81
[  581.202425][ T6760] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[  581.202529][ T6760] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[  581.202657][ T6760] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5
[  581.241860][ T6760] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  581.261829][ T6760] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83
[  581.261919][ T6760] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3
[  581.262002][ T6760] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4
[  581.262087][ T6760] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86
[  581.262167][ T6760] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6
[  581.324568][ T6760] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  583.543005][ T9096] usb 1-1: USB disconnect, device number 37
[  583.578729][ T9096] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  583.584054][ T9096] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  583.584891][ T9096] keyspan 1-1:0.0: device disconnected
[  583.629056][ T5945] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  583.806926][ T5945] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  583.806960][ T5945] usb 7-1: config 0 interface 0 altsetting [  583.806960][ T5945] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x85 has invalid wMaxPacketSize 0
[  583.806982][ T5945] usb 7-1: config 0 interface 0 has no altsetting 0
[  583.809493][ T5945] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  583.809519][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.809538][ T5945] usb 7-1: Product: syz
[  583.809550][ T5945] usb 7-1: Manufacturer: syz
[  583.809564][ T5945] usb 7-1: SerialNumber: syz
[  583.814752][ T5945] usb 7-1: config 0 descriptor??
[  583.825174][ T5945] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected
[  583.829156][ T9096] ==================================================================
[  583.829168][ T9096] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130
[  583.829197][ T9096] Read of size 8 at addr ffffc90011d28008 by task kworker/0:7/9096
[  583.829213][ T9096] 
[  583.829227][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: kworker/0:7 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  583.829252][ T9096] Tainted: [L]=SOFTLOCKUP
[  583.829258][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  583.829271][ T9096] Workqueue: usb_hub_wq hub_event
[  583.829295][ T9096] Call Trace:
[  583.829303][ T9096]  <TASK>
[  583.829310][ T9096]  dump_stack_lvl+0xe8/0x150
[  583.829336][ T9096]  print_report+0xca/0x240
[  583.829357][ T9096]  ? __list_add_valid_or_report+0x4e/0x130
[  583.829377][ T9096]  kasan_report+0x118/0x150
[  583.829405][ T9096]  ? __list_add_valid_or_report+0x4e/0x130
[  583.829429][ T9096]  __list_add_valid_or_report+0x4e/0x130
[  583.829453][ T9096]  kcov_remote_stop+0x458/0x690
[  583.829484][ T9096]  hub_event+0x4982/0x4f30
[  583.829505][ T9096]  ? bpf_trace_run4+0x19c/0x4b0
[  583.829529][ T9096]  ? __lock_acquire+0x6b6/0x2cf0
[  583.829562][ T9096]  ? finish_task_switch+0x162/0x940
[  583.829593][ T9096]  ? __pfx_hub_event+0x10/0x10
[  583.829615][ T9096]  ? process_scheduled_works+0x9ef/0x1770
[  583.829640][ T9096]  ? process_scheduled_works+0x9ef/0x1770
[  583.829658][ T9096]  ? process_scheduled_works+0x9ef/0x1770
[  583.829678][ T9096]  process_scheduled_works+0xad1/0x1770
[  583.829710][ T9096]  ? __pfx_process_scheduled_works+0x10/0x10
[  583.829727][ T9096]  ? do_raw_spin_lock+0x121/0x290
[  583.829754][ T9096]  worker_thread+0x8a0/0xda0
[  583.829780][ T9096]  ? __kthread_parkme+0x7b/0x200
[  583.829804][ T9096]  kthread+0x711/0x8a0
[  583.829829][ T9096]  ? __pfx_worker_thread+0x10/0x10
[  583.829848][ T9096]  ? __pfx_kthread+0x10/0x10
[  583.829870][ T9096]  ? rt_spin_unlock+0x150/0x200
[  583.829896][ T9096]  ? rt_spin_unlock+0x161/0x200
[  583.829917][ T9096]  ? __pfx_kthread+0x10/0x10
[  583.829940][ T9096]  ret_from_fork+0x510/0xa50
[  583.829961][ T9096]  ? __pfx_ret_from_fork+0x10/0x10
[  583.829979][ T9096]  ? __switch_to+0xc9e/0x1480
[  583.830005][ T9096]  ? __pfx_kthread+0x10/0x10
[  583.830028][ T9096]  ret_from_fork_asm+0x1a/0x30
[  583.830057][ T9096]  </TASK>
[  583.830063][ T9096] 
[  583.830068][ T9096] The buggy address belongs to a vmalloc virtual mapping
[  583.830084][ T9096] Memory state around the buggy address:
[  583.830094][ T9096]  ffffc90011d27f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  583.830104][ T9096]  ffffc90011d27f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  583.830117][ T9096] >ffffc90011d28000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  583.830127][ T9096]                       ^
[  583.830136][ T9096]  ffffc90011d28080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  583.830149][ T9096]  ffffc90011d28100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  583.830159][ T9096] ==================================================================
[  583.830180][ T9096] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  583.830199][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: kworker/0:7 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  583.830225][ T9096] Tainted: [L]=SOFTLOCKUP
[  583.830232][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  583.830244][ T9096] Workqueue: usb_hub_wq hub_event
[  583.830265][ T9096] Call Trace:
[  583.830272][ T9096]  <TASK>
[  583.830279][ T9096]  vpanic+0x1e0/0x670
[  583.830304][ T9096]  panic+0xb9/0xc0
[  583.830326][ T9096]  ? __pfx_panic+0x10/0x10
[  583.830350][ T9096]  ? __list_add_valid_or_report+0x4e/0x130
[  583.830375][ T9096]  ? __list_add_valid_or_report+0x4e/0x130
[  583.830396][ T9096]  check_panic_on_warn+0x89/0xb0
[  583.830422][ T9096]  ? __list_add_valid_or_report+0x4e/0x130
[  583.830443][ T9096]  end_report+0x6f/0x140
[  583.830467][ T9096]  kasan_report+0x129/0x150
[  583.830499][ T9096]  ? __list_add_valid_or_report+0x4e/0x130
[  583.830524][ T9096]  __list_add_valid_or_report+0x4e/0x130
[  583.830547][ T9096]  kcov_remote_stop+0x458/0x690
[  583.830568][ T9096]  hub_event+0x4982/0x4f30
[  583.830590][ T9096]  ? bpf_trace_run4+0x19c/0x4b0
[  583.830612][ T9096]  ? __lock_acquire+0x6b6/0x2cf0
[  583.830643][ T9096]  ? finish_task_switch+0x162/0x940
[  583.830673][ T9096]  ? __pfx_hub_event+0x10/0x10
[  583.830695][ T9096]  ? process_scheduled_works+0x9ef/0x1770
[  583.830718][ T9096]  ? process_scheduled_works+0x9ef/0x1770
[  583.830736][ T9096]  ? process_scheduled_works+0x9ef/0x1770
[  583.830756][ T9096]  process_scheduled_works+0xad1/0x1770
[  583.830787][ T9096]  ? __pfx_process_scheduled_works+0x10/0x10
[  583.830807][ T9096]  ? do_raw_spin_lock+0x121/0x290
[  583.830833][ T9096]  worker_thread+0x8a0/0xda0
[  583.830859][ T9096]  ? __kthread_parkme+0x7b/0x200
[  583.830884][ T9096]  kthread+0x711/0x8a0
[  583.830908][ T9096]  ? __pfx_worker_thread+0x10/0x10
[  583.830927][ T9096]  ? __pfx_kthread+0x10/0x10
[  583.830948][ T9096]  ? rt_spin_unlock+0x150/0x200
[  583.830972][ T9096]  ? rt_spin_unlock+0x161/0x200
[  583.830993][ T9096]  ? __pfx_kthread+0x10/0x10
[  583.831017][ T9096]  ret_from_fork+0x510/0xa50
[  583.831037][ T9096]  ? __pfx_ret_from_fork+0x10/0x10
[  583.831055][ T9096]  ? __switch_to+0xc9e/0x1480
[  583.831082][ T9096]  ? __pfx_kthread+0x10/0x10
[  583.831106][ T9096]  ret_from_fork_asm+0x1a/0x30
[  583.831138][ T9096]  </TASK>
[  583.831520][ T9096] Kernel Offset: disabled