last executing test programs:

25m18.474154685s ago: executing program 32 (id=909):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000680)={0x2, 0x0, [{0x8, 0x2, 0x1, 0x0, @adapter={0xc, 0x4000000, 0x1ff, 0x0, 0x6}}, {0x7fffffff, 0x3, 0x1, 0x0, @adapter={0x1, 0x9, 0x9, 0xc}}]})

24m23.106231656s ago: executing program 33 (id=1353):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
io_uring_setup(0x5edb, &(0x7f0000002900)={0x0, 0xd0b9, 0x40, 0x0, 0x27d})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7b, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0xfffffffd, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x400242, 0x3, 0xe, 0x100, 0x8071, 0x7, 0x6, 0xffffffff, 0x9, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0x79, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x80400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000003, 0x5f31, 0x1100d, 0x4e0, 0x2, 0x4, 0xb, 0x0, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x40000000, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0xff, 0x6, 0x8, 0x86, 0x3, 0x104000, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x6, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78f, 0x1, 0x2, 0x14c, 0x60a7, 0x7, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffff, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0xfff, 0x8000, 0x3, 0x6, 0x226, 0x15f3cce1, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x40, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

24m22.49654339s ago: executing program 34 (id=1356):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x5})

24m22.212599429s ago: executing program 35 (id=1359):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900", <r2=>0xffffffffffffffff})
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])

24m21.884315997s ago: executing program 36 (id=1360):
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read(r0, &(0x7f0000000380)=""/144, 0x90)
write$char_usb(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

24m2.915703427s ago: executing program 37 (id=1412):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000aca000/0x1000)=nil, 0x1000, 0x10201})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x4000)=nil, 0x4000, 0xf3})

22m40.046004451s ago: executing program 6 (id=1495):
unshare(0x22020600)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00), 0x0, 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a)
flock(r1, 0x2)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

22m38.432735807s ago: executing program 6 (id=1497):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x48810}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f00, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

22m37.760855719s ago: executing program 6 (id=1498):
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0x90)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x3}, @ib={0x1b, 0x840, 0x7, {"4e31211a40e51c75adce5a1c234e4f87"}, 0x8, 0x2, 0x8}}}, 0x118)

22m36.820904185s ago: executing program 6 (id=1499):
r0 = epoll_create1(0x80000)
r1 = epoll_create1(0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0xa0000007})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x3})

22m36.561460197s ago: executing program 6 (id=1500):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
mlockall(0x7)

22m36.273193298s ago: executing program 6 (id=1501):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)

22m20.114856889s ago: executing program 38 (id=1501):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)

10m29.785944635s ago: executing program 1 (id=3933):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0})
eventfd2(0x1, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000})
unshare(0x20060400)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000000000001000000010000"], 0x18}}], 0x1, 0x0)
dup3(r6, r5, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r7, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)

10m22.218198402s ago: executing program 1 (id=3952):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
sendmmsg(r0, 0x0, 0x0, 0x0)

10m20.885257509s ago: executing program 1 (id=3955):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xf88e470f}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

10m20.836547368s ago: executing program 1 (id=3957):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

10m20.419713744s ago: executing program 1 (id=3959):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0)
getsockopt(r4, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10)
close_range(r3, r3, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$nl_route(0x10, 0x3, 0x0)

10m16.810038581s ago: executing program 1 (id=3971):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0)
getsockopt(r4, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10)
close_range(r3, r3, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$nl_route(0x10, 0x3, 0x0)

10m1.593954623s ago: executing program 39 (id=3971):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0)
getsockopt(r4, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10)
close_range(r3, r3, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$nl_route(0x10, 0x3, 0x0)

7m15.420862809s ago: executing program 3 (id=4551):
syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
syz_open_dev$tty1(0xc, 0x4, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
creat(0x0, 0x122)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x8c0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0)

7m4.520820148s ago: executing program 3 (id=4574):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
dup2(r3, r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"a2e3ad204fc752f91b5d34f70b06d038e7ff7fc6e5539b325d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x100f}}, 0x1006)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080)

7m1.922372415s ago: executing program 3 (id=4576):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1975e7, 0x40000000, 0x10})
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"a2e3ad204fc752f91b5d34f70b06d038e7ff7fc6e5539b325d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x100f}}, 0x1006)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080)

7m1.921005138s ago: executing program 7 (id=4577):
syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
syz_open_dev$tty1(0xc, 0x4, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
creat(0x0, 0x122)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x8c0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r3, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0)

7m0.190351954s ago: executing program 3 (id=4580):
syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
syz_open_dev$tty1(0xc, 0x4, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
creat(0x0, 0x122)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x8c0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r3, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0)

6m58.351138525s ago: executing program 7 (id=4588):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

6m56.937886299s ago: executing program 7 (id=4591):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0)
getsockopt(r4, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10)
close_range(r3, r3, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

6m56.577077545s ago: executing program 2 (id=4594):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

6m52.159493218s ago: executing program 7 (id=4598):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

6m51.498744353s ago: executing program 2 (id=4600):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

6m50.348148669s ago: executing program 7 (id=4601):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

6m49.038022549s ago: executing program 2 (id=4603):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
write$binfmt_elf64(r2, &(0x7f0000000240)=ANY=[], 0x40000)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000b00)}, 0x1ff}], 0x1, 0x20022, 0x0)
recvfrom$unix(r3, &(0x7f00000004c0)=""/249, 0xf9, 0x40, 0x0, 0x0)

6m48.95668162s ago: executing program 3 (id=4605):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xfffffffe, 0x3}, 0x0)

6m47.885337136s ago: executing program 2 (id=4606):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x6000010)
shutdown(r3, 0x1)

6m45.893701644s ago: executing program 3 (id=4609):
socket$l2tp(0x2, 0x2, 0x73)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008", @ANYRESDEC], 0x1c}}, 0x0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
rmdir(&(0x7f0000000240)='./cgroup/../file0\x00')
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

6m45.863569454s ago: executing program 2 (id=4610):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

6m44.561649302s ago: executing program 7 (id=4612):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

6m44.37915213s ago: executing program 2 (id=4613):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

6m28.999211788s ago: executing program 40 (id=4609):
socket$l2tp(0x2, 0x2, 0x73)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008", @ANYRESDEC], 0x1c}}, 0x0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
rmdir(&(0x7f0000000240)='./cgroup/../file0\x00')
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

6m28.787276124s ago: executing program 41 (id=4613):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

6m28.64718274s ago: executing program 42 (id=4612):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

4m17.160739061s ago: executing program 9 (id=5558):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x3c)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x4, r2, 0x0, 0x1, 0x4}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @mcast2, 0x2}, {0xa, 0x4e23, 0x7, @mcast1, 0xf2}, r2, 0x7}}, 0x48)
r5 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r5)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r5})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r5})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)

4m16.626764246s ago: executing program 9 (id=5563):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3)

4m16.449202779s ago: executing program 9 (id=5564):
unshare(0x22020600)
unshare(0x54000000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
pwrite64(r0, &(0x7f0000000180)="5699b87f958b382718589a2f6883d4c75de44177cc5eab1481a2405e7d31ebd19bfe4cb3143f5b16740896509cdc5aadb9765f10fb8d44f467a2a5d8ef87ede9316b6d7e019b87ddbb85cd8d59784b06bb70bd6f69cbfe8e8e00"/99, 0x63, 0x7fffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x100, 0x1, &(0x7f0000000300))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
unshare(0x40040100)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4000)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x0, 0x4000, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22)
ioctl$EVIOCGPROP(r4, 0x80404509, 0x0)
open_tree(r4, &(0x7f00000000c0)='./file0\x00', 0x101)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x501001, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18)
syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902970003010000000904000000010100000a24010000000201021324060000ebffff0800000000000000000000092403fd030300000009829d8d46f8431cfd0924030004020004fc0a240504"], 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$UI_SET_RELBIT(r7, 0x40045566, 0x5)

4m14.659900527s ago: executing program 9 (id=5572):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x6a7}]})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'})
r6 = socket$igmp(0x2, 0x3, 0x2)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1000000003)
syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$IPSET_CMD_SAVE(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x44, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e22, @broadcast}], 0x10)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x3, 0x1, 0xfd, 0x0, @vifc_lcl_addr=@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4)

4m9.57456885s ago: executing program 9 (id=5599):
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', <r0=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', r0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x2, 0x80000000, 0xd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2d8a7313}, 0x94)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r3=>0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c)
listen(r4, 0x2)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x50, r5, 0x3000)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[], 0x118)
ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaeaaaaaaaaaaa0086dd600a3ff2001c0604fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES8=r5, @ANYBLOB="70808000900d000000000000000000"], 0x0)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18)

4m7.43999549s ago: executing program 9 (id=5606):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4d25c}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x488}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8460)
r2 = socket$inet(0x2, 0x800, 0x6)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="db930a", 0x3}], 0x1)

3m52.254430578s ago: executing program 43 (id=5606):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4d25c}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x488}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8460)
r2 = socket$inet(0x2, 0x800, 0x6)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="db930a", 0x3}], 0x1)

3m42.695774237s ago: executing program 0 (id=5692):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
mount$fuseblk(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x488, &(0x7f0000000480)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}]}})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b)
r6 = socket$kcm(0x10, 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x80, 0xcb, r8}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000000)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_DEVICE_INFO(r10, 0xc1007c00, &(0x7f0000000080))
write$cgroup_subtree(r6, 0x0, 0xfe33)
close(0xffffffffffffffff)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x2, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

3m41.87733612s ago: executing program 0 (id=5695):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80482, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x7a72}, 0x28)
recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0)

3m40.41958575s ago: executing program 0 (id=5699):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xfffffffe, 0x3}, 0x0)

3m38.938556918s ago: executing program 0 (id=5707):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x6, 0x46, 0x1, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x8, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x244, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x10, 0x5, 0x8, 0x40, 0xfffffffffffff613, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]})
io_setup(0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd(0x8c66)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x35, 0x0, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffff001, 0x0, 0x2, r4, 0x4})
mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil)
mremap(&(0x7f0000ef9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
read$FUSE(r5, &(0x7f0000005200)={0x2020}, 0x2020)

3m35.764937414s ago: executing program 0 (id=5719):
mount$9p_rdma(&(0x7f0000000580), &(0x7f00000005c0)='./cgroup\x00', &(0x7f0000000600), 0x2800004, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=rdma,port=0', @ANYRESOCT]) (fail_nth: 15)

3m35.681161373s ago: executing program 4 (id=5720):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x19a)
mkdir(&(0x7f0000000280)='./bus\x00', 0x55)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181)
rmdir(&(0x7f0000000000)='./file0\x00')
r3 = open_tree(r2, &(0x7f0000000300)='./file0\x00', 0x0)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x3000000000000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x8000, &(0x7f0000001dc0)={0xb9, 0x0, 0x140000}, 0x20)
r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x280429, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007", @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94)
futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x25000003)
r6 = syz_io_uring_setup(0x5c84, &(0x7f00000000c0)={0x0, 0x2119, 0x1, 0x40203, 0x11e, 0x0, r3}, &(0x7f0000000140)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x8d8828188953f1d5, &(0x7f0000000040)=0xefefffd1, 0x0, 0x4)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r6], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x8, 0x3, r2, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0), 0xac094893e46dbcbb, 0x0)
r9 = socket$inet(0x2b, 0x801, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2cadaf9e420001002dbd7000f8dbdf2502202000ff02ff02001a000008000100ac1414aa08000700ac1414aa"], 0x2c}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000)
connect$inet(r9, &(0x7f0000000340)={0x2, 0xfffb, @local}, 0x10)

3m34.928931324s ago: executing program 0 (id=5722):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000001180))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7020000140000007b03000000000000850000e582000000790900000000000055090100000000009500000000990000db000800a0000000bf91000000000000bf0200000000000085000000ce000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000012c0)='net/icmp\x00')
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
getpriority(0x1, r5)
pread64(r4, &(0x7f00000011c0)=""/246, 0xf6, 0x7)
clock_nanosleep(0x7, 0x0, &(0x7f0000000580)={0x0, 0x3938700}, 0x0)
write$bt_hci(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="010d0417ffffffffffff02b6bd76605d2e8a6fec0000f0d4a2bd2b"], 0x1b)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'macvtap0\x00', <r6=>0x0})
unshare(0x22020600)
r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
io_setup(0x2, &(0x7f0000000000)=<r9=>0x0)
r10 = fanotify_init(0x48, 0x400)
io_submit(r9, 0x1, &(0x7f00000007c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x81, r10, 0x0, 0x0, 0x1, 0x0, 0x3, r8}])
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x4, 0x270bd20, 0x1ffd, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)

3m31.160537862s ago: executing program 4 (id=5725):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81)
readv(r1, &(0x7f0000000640)=[{&(0x7f0000002480)=""/4082, 0x48}], 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffb, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0})
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x803, 0x0)
setresuid(0xee01, 0xee00, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x3, 'vlan1\x00', {0x8}, 0x61c3})
close(r2)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@volatile={0xf, 0x0, 0x0, 0x9, 0x1}, @volatile={0x5, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x51, 0x61]}}, &(0x7f0000000040)=""/215, 0x39, 0xd7, 0x0, 0x80, 0x10000, @value=r5}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), 0x0}, 0x20)

3m26.289844698s ago: executing program 4 (id=5730):
socket$inet6_icmp(0xa, 0x2, 0x3a)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2, 0x3, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000001640)=0x7, 0x4)
recvfrom$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_buf(r3, 0x29, 0x2f, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x184, 0x65, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x4, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x158, 0x2, [@TCA_BPF_ACT={0x10c, 0x1, [@m_mirred={0xbc, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x9, 0x2, 0x38eb8000, 0x9b}, 0x1}}]}, {0x6d, 0x6, "dae0489b799d15556c6c7d44ae8f295fea1c62d64b963cf0dd1fcb6569ccece7639c45fe850fdd998bfb2bf1864e314a1573d71d7ce0c846e05d02bea46bb8684f4400bcd9e6ffd44db802ec87e70b916f5c754381982d8e0d94021e6c0a03419d371065f3943d3dd6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x4c, 0x3, 0x0, 0x0, {{0xc}, {0x4}, {0x1d, 0x6, "6312ba1453c5d091a0881fca14b9956480f3cad707c642f8a4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_ACT={0x48, 0x1, [@m_bpf={0x44, 0x7, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x1, 0x9, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x22bf533d53fd5981, 0x3}}}}]}]}}]}, 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x28482, 0x0)
write$char_usb(r5, &(0x7f0000000080)="ce066e02107f367995c16d3229404181072e8924da890d432ba6a47069eb905d9527b2c65ec3d0a769b760f9865d7cebd8980d317f33ee7145e0aebfbbb9f58da89896d9734ed546d43c917cc93351fda06619832e18056375d0dc756591e1316e1abb894526c36c611a236d99d453c26fe1ea6a132b615c0abb", 0x7a)

3m19.06247213s ago: executing program 44 (id=5722):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000001180))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7020000140000007b03000000000000850000e582000000790900000000000055090100000000009500000000990000db000800a0000000bf91000000000000bf0200000000000085000000ce000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000012c0)='net/icmp\x00')
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
getpriority(0x1, r5)
pread64(r4, &(0x7f00000011c0)=""/246, 0xf6, 0x7)
clock_nanosleep(0x7, 0x0, &(0x7f0000000580)={0x0, 0x3938700}, 0x0)
write$bt_hci(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="010d0417ffffffffffff02b6bd76605d2e8a6fec0000f0d4a2bd2b"], 0x1b)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'macvtap0\x00', <r6=>0x0})
unshare(0x22020600)
r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
io_setup(0x2, &(0x7f0000000000)=<r9=>0x0)
r10 = fanotify_init(0x48, 0x400)
io_submit(r9, 0x1, &(0x7f00000007c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x81, r10, 0x0, 0x0, 0x1, 0x0, 0x3, r8}])
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x4, 0x270bd20, 0x1ffd, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)

3m14.417164808s ago: executing program 4 (id=5739):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0})
ioctl$DMA_BUF_SET_NAME_A(r2, 0x541b, 0x0) (fail_nth: 2)

3m11.937135532s ago: executing program 4 (id=5741):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe)
shutdown(r3, 0x1)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x405e, 0x4)
recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x3, 0x2, 0x4, 0x0, 0x6})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x2}, 0x94)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x10001, 0x9}, 0x10)

3m10.624932809s ago: executing program 5 (id=5742):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f00000000c0))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='inet_sock_set_state\x00', r1, 0x0, 0x3}, 0x18)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x80, 0x700, 0xac8, 0x6, {{0x5, 0x4, 0x3, 0x2, 0x14, 0x66, 0x0, 0xfb, 0x4, 0x0, @remote, @loopback}}}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008001f0007000000080007"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000)
sendmmsg(r2, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x2, @local, 'ipvlan1\x00'}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x45}], 0x1}}], 0x1, 0x2c000011)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed0000620300ff000000003f440000000000007a0a00fe00ffffffc30300ff40000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r8, @ANYBLOB="0800c300741300000800c4"], 0x2c}}, 0x40)
r9 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f0000000400)={0xe, 0x6, 0x5, 0x0, 0x6, "f3234090e2427ec1ba4b8c2dd57d352f29c8e3", 0x4})
sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x74, r6, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x36}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x18, 0xbd, [0x6, 0x10a, 0x3, 0x5, 0x7ff, 0xfe33, 0x0, 0x7cdf, 0x0, 0x40]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xe}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8000}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x4)

3m10.337966915s ago: executing program 4 (id=5744):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000140)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x2}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)
ioctl(r2, 0x1, &(0x7f000000ad40))

3m7.736836774s ago: executing program 5 (id=5746):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r3, 0x0)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
write$binfmt_elf64(r4, 0x0, 0x40000)

3m2.712460194s ago: executing program 5 (id=5750):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x4, 0x6, 0x1f7c, 0xa}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
listen(r2, 0x3)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2, 0x8007}, 0x1c)

2m58.527165258s ago: executing program 5 (id=5755):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

2m56.285339173s ago: executing program 5 (id=5757):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xcbe817b171a81fa9, 0x6, 0x0, 0x3}})
clock_gettime(0x0, &(0x7f0000002400)={<r1=>0x0, <r2=>0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
fsync(r3)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x3, 0x8, 0x4, 0x102001, 0x0, {r1, r2/1000+10000}, {0x4, 0x1, 0x1, 0x0, 0x53, 0x5a, "5ab52781"}, 0x2, 0x1, {&(0x7f0000002440)=[{0xffff, 0xf, {0x8}, 0x2c4}, {0x6, 0x8000, {0x7}, 0x2}]}, 0x5, 0x0, r3})
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000100)={0x80000000, 0x5, "c0ca908bb0ab5143c973644db096525f20c0890fa11d39ff6a985fd8e6175601", 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x6, 0xfff, 0x401, 0x1, 0x10001, [0x0, 0xb, 0xe745, 0xad]})

2m53.937311144s ago: executing program 45 (id=5744):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000140)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x2}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)
ioctl(r2, 0x1, &(0x7f000000ad40))

2m53.220120419s ago: executing program 5 (id=5760):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x6a7}]})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'})
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1000000003)
syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x44, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e22, @broadcast}], 0x10)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4)

2m36.321112816s ago: executing program 46 (id=5760):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x6a7}]})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'})
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1000000003)
syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x44, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e22, @broadcast}], 0x10)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4)

16.347327122s ago: executing program 8 (id=5839):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000000c0)=@tcp, 0x2}, 0x20)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x1, 0x8, 0x5, 0x0, 0xfffffff9, 0x9, 0x7, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x3ff, 0x10, 0x80, 0x4, 0x10, 0x9, '\x00', 0xa, 0x10001})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x4ba, 0x0, 0x0, 0xfffffffe, 0x0, "abf9dba75481653e5430445e9f822c1e3eba5f"})
ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000000c0)={0x100, 0x6d7c, 0x4, 0x8, 0xd, "df58631a114c70de2001b54121d3882baf5cc3", 0x6, 0x4})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)

11.840888491s ago: executing program 8 (id=5840):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80482, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x7a72}, 0x28)
recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0)

9.449526415s ago: executing program 8 (id=5841):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x4b)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r3)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0)
r4 = eventfd2(0x2, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r4, 0xb})

6.753129301s ago: executing program 8 (id=5842):
pipe(0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r0 = memfd_create(&(0x7f0000000200)='\x00\x00\x00\x00\xc2\n\xfe6\xeb\x00\x00z\x8b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa2\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe20\xb1,\xbfW\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xab\x99k\xdf\x1f\x9b\x81\x87\xbe\x87{.\x90c\xb1\xcd\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P\x1a\xe516b\xdf\x97\x04\x11\xc5k\x18\x82\xb90+]\x05\xbc\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xc4E\xadG\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaa\r\x802\xd7\x1b$\x95tO*\xf4\xae\x00\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b`c\xe0\x88?\xda\x8a#t>r\xae\xbc%\xc1\x840C\xfb\xe8\xc9\xc5\x82\xd6\x95\vr\x9d\xcb\x9f\xb4\x18\xa2:,\\-r\xcb\x06\x8ey\xcf[ \x92\xe7\xaf\xea?D\xc1#7):\xdd\xd5d\x14\x89v\xb3k\x18\xd7\xd4\xdd\xca\x81\x1b\xa5\xb0\x00\x00\x00\x00\x00\x8cp\xa0\xee:\xcaq\xf1s?l\xf3\xfe\x16\x81\xda4\x00\x00\x00\x00z\x14\x8e\xa8\xa0\x86\xf0\x89;\x99\x82>\x93\xda (\x19\xde\xfeVR.l\x9e\\\xb5Q],\xc3\xe7\xec\x87\xa5?\v\xc61CK\xb5\x880U9\x80\x9c\tn;\xd3\x06\x99y\xa4A\xc8l)(\x84\xc5k\x9c\xbe{\xcdU\xdeV\'7\v+\x92v\xfe\xe041C\x18UF\xc2\xea\xc9\xd2\x8e\xde\xf9\x91\xb8\x1f\xac\xd0>\x83c\xa3$\xc0:X\xca\x05<s\x95\xca,R8g\x9f\xdbB\xa5\x9c\xb8Ot\xb9\x87\x19\x00\xa5L\xf51\xb6\xfe\x97_\x19ZQ\xc4\x8af\xad\xab\r\xa0\xe4\x95\xcdsf\xa0k?\xab\x8c\x9b\x1a\x97#O\xddT\x9a}\xc2\r\"y\x19 \x99(\xfd\x7f\xb8g<\xaa\xb1\xa1\xe8w#\xc8q\xe2\xb8K\xcf\xc8\xfe\x96e\xdc~\xfd\xe3', 0x4)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r3=>0x0})
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x100})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x44, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x80}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80, 0x1b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8)
shutdown(r5, 0x1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x3}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd00005efe0000000162e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19c211220940ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b838570400"}, 0x80, 0x0}, 0x0)

1.124997225s ago: executing program 8 (id=5843):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80482, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x7a72}, 0x28)
recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0)

0s ago: executing program 8 (id=5844):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6(0xa, 0x1, 0x0)
socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

kernel console output (not intermixed with test programs):

 audit(1764223463.014:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20365 comm="syz.9.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ee17f749 code=0x7ffc0000
[ 1492.724081][   T38] audit: type=1326 audit(1764223463.014:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20365 comm="syz.9.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ee17f749 code=0x7ffc0000
[ 1492.724478][   T38] audit: type=1326 audit(1764223463.014:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20365 comm="syz.9.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8ee17df90 code=0x7ffc0000
[ 1492.725465][   T38] audit: type=1326 audit(1764223463.014:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20365 comm="syz.9.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff8ee17e1ff code=0x7ffc0000
[ 1492.725719][   T38] audit: type=1326 audit(1764223463.014:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20365 comm="syz.9.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff8ee17f749 code=0x7ffc0000
[ 1492.725867][T20366] FAULT_INJECTION: forcing a failure.
[ 1492.725867][T20366] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1492.725900][T20366] CPU: 0 UID: 0 PID: 20366 Comm: syz.9.5327 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1492.725926][T20366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1492.725940][T20366] Call Trace:
[ 1492.725949][T20366]  <TASK>
[ 1492.725959][T20366]  dump_stack_lvl+0x189/0x250
[ 1492.725998][T20366]  ? __pfx____ratelimit+0x10/0x10
[ 1492.726029][T20366]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1492.726062][T20366]  ? __pfx__printk+0x10/0x10
[ 1492.726092][T20366]  ? fs_reclaim_acquire+0x7d/0x100
[ 1492.726133][T20366]  should_fail_ex+0x46c/0x600
[ 1492.726171][T20366]  prepare_alloc_pages+0x213/0x670
[ 1492.726213][T20366]  __alloc_frozen_pages_noprof+0x123/0x370
[ 1492.726252][T20366]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1492.726308][T20366]  alloc_pages_bulk_noprof+0x5fa/0x7d0
[ 1492.726349][T20366]  ? alloc_pages_noprof+0xe4/0x1e0
[ 1492.726387][T20366]  kasan_populate_vmalloc+0xd1/0x270
[ 1492.726423][T20366]  alloc_vmap_area+0xd7a/0x14c0
[ 1492.726468][T20366]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1492.726495][T20366]  ? __kasan_kmalloc+0x93/0xb0
[ 1492.726526][T20366]  ? __kmalloc_cache_node_noprof+0x2a9/0x700
[ 1492.726556][T20366]  ? __get_vm_area_node+0x172/0x350
[ 1492.726584][T20366]  ? copy_process+0x545/0x3ae0
[ 1492.726614][T20366]  __get_vm_area_node+0x227/0x350
[ 1492.726656][T20366]  __vmalloc_node_range_noprof+0x30c/0x12d0
[ 1492.726687][T20366]  ? copy_process+0x545/0x3ae0
[ 1492.726713][T20366]  ? percpu_ref_get_many+0x19/0x140
[ 1492.726776][T20366]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1492.726810][T20366]  ? memcpy_and_pad+0x48/0x80
[ 1492.726842][T20366]  __vmalloc_node_noprof+0xc2/0x110
[ 1492.726868][T20366]  ? copy_process+0x545/0x3ae0
[ 1492.726888][T20366]  ? copy_process+0x545/0x3ae0
[ 1492.726912][T20366]  dup_task_struct+0x3d4/0x830
[ 1492.726939][T20366]  ? rt_spin_unlock+0x161/0x200
[ 1492.726969][T20366]  copy_process+0x545/0x3ae0
[ 1492.726995][T20366]  ? __lock_acquire+0xab9/0xd20
[ 1492.727035][T20366]  ? __might_fault+0xb0/0x130
[ 1492.727080][T20366]  ? __pfx_copy_process+0x10/0x10
[ 1492.727110][T20366]  ? __asan_memset+0x22/0x50
[ 1492.727134][T20366]  kernel_clone+0x224/0x7c0
[ 1492.727159][T20366]  ? __pfx_kernel_clone+0x10/0x10
[ 1492.727189][T20366]  ? __seccomp_filter+0xce4/0x1e10
[ 1492.727217][T20366]  __se_sys_clone3+0x256/0x2d0
[ 1492.727249][T20366]  ? __pfx___seccomp_filter+0x10/0x10
[ 1492.727266][T20366]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1492.727323][T20366]  ? __secure_computing+0xe2/0x2a0
[ 1492.727349][T20366]  do_syscall_64+0xfa/0xfa0
[ 1492.727375][T20366]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1492.727406][T20366]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1492.727428][T20366]  ? clear_bhb_loop+0x60/0xb0
[ 1492.727449][T20366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1492.727468][T20366] RIP: 0033:0x7ff8ee17f749
[ 1492.727483][T20366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1492.727499][T20366] RSP: 002b:00007ff8ec3ddf08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[ 1492.727519][T20366] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff8ee17f749
[ 1492.727531][T20366] RDX: 00007ff8ec3ddf20 RSI: 0000000000000058 RDI: 00007ff8ec3ddf20
[ 1492.727542][T20366] RBP: 00007ff8ec3de090 R08: 0000000000000000 R09: 0000000000000058
[ 1492.727553][T20366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1492.727562][T20366] R13: 00007ff8ee3d6038 R14: 00007ff8ee3d5fa0 R15: 00007ffc01c58398
[ 1492.727589][T20366]  </TASK>
[ 1492.732228][T20366] syz.9.5327: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1492.732313][T20366] CPU: 0 UID: 0 PID: 20366 Comm: syz.9.5327 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1492.732342][T20366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1492.732359][T20366] Call Trace:
[ 1492.732369][T20366]  <TASK>
[ 1492.732379][T20366]  dump_stack_lvl+0x189/0x250
[ 1492.732426][T20366]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1492.732464][T20366]  ? __pfx__printk+0x10/0x10
[ 1492.732494][T20366]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1492.732526][T20366]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1492.732556][T20366]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 1492.732589][T20366]  warn_alloc+0x22e/0x3b0
[ 1492.732627][T20366]  ? kasan_quarantine_put+0xdd/0x220
[ 1492.732665][T20366]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1492.732704][T20366]  ? __pfx_warn_alloc+0x10/0x10
[ 1492.732743][T20366]  ? __get_vm_area_node+0x240/0x350
[ 1492.732773][T20366]  ? __get_vm_area_node+0x172/0x350
[ 1492.732804][T20366]  ? copy_process+0x545/0x3ae0
[ 1492.732838][T20366]  ? __get_vm_area_node+0x240/0x350
[ 1492.732879][T20366]  __vmalloc_node_range_noprof+0x331/0x12d0
[ 1492.732913][T20366]  ? percpu_ref_get_many+0x19/0x140
[ 1492.732983][T20366]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1492.733020][T20366]  ? memcpy_and_pad+0x48/0x80
[ 1492.733060][T20366]  __vmalloc_node_noprof+0xc2/0x110
[ 1492.733092][T20366]  ? copy_process+0x545/0x3ae0
[ 1492.733120][T20366]  ? copy_process+0x545/0x3ae0
[ 1492.733154][T20366]  dup_task_struct+0x3d4/0x830
[ 1492.733185][T20366]  ? rt_spin_unlock+0x161/0x200
[ 1492.733219][T20366]  copy_process+0x545/0x3ae0
[ 1492.733250][T20366]  ? __lock_acquire+0xab9/0xd20
[ 1492.733297][T20366]  ? __might_fault+0xb0/0x130
[ 1492.733347][T20366]  ? __pfx_copy_process+0x10/0x10
[ 1492.733382][T20366]  ? __asan_memset+0x22/0x50
[ 1492.733418][T20366]  kernel_clone+0x224/0x7c0
[ 1492.733458][T20366]  ? __pfx_kernel_clone+0x10/0x10
[ 1492.733500][T20366]  ? __seccomp_filter+0xce4/0x1e10
[ 1492.733539][T20366]  __se_sys_clone3+0x256/0x2d0
[ 1492.733574][T20366]  ? __pfx___seccomp_filter+0x10/0x10
[ 1492.733599][T20366]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1492.733710][T20366]  ? __secure_computing+0xe2/0x2a0
[ 1492.733745][T20366]  do_syscall_64+0xfa/0xfa0
[ 1492.733779][T20366]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1492.733814][T20366]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1492.733840][T20366]  ? clear_bhb_loop+0x60/0xb0
[ 1492.733869][T20366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1492.733894][T20366] RIP: 0033:0x7ff8ee17f749
[ 1492.733915][T20366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1492.733939][T20366] RSP: 002b:00007ff8ec3ddf08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[ 1492.733963][T20366] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff8ee17f749
[ 1492.733981][T20366] RDX: 00007ff8ec3ddf20 RSI: 0000000000000058 RDI: 00007ff8ec3ddf20
[ 1492.733998][T20366] RBP: 00007ff8ec3de090 R08: 0000000000000000 R09: 0000000000000058
[ 1492.734015][T20366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1492.734031][T20366] R13: 00007ff8ee3d6038 R14: 00007ff8ee3d5fa0 R15: 00007ffc01c58398
[ 1492.734071][T20366]  </TASK>
[ 1492.734080][T20366] Mem-Info:
[ 1492.734093][T20366] active_anon:257 inactive_anon:6701 isolated_anon:0
[ 1492.734093][T20366]  active_file:19060 inactive_file:36875 isolated_file:0
[ 1492.734093][T20366]  unevictable:768 dirty:95 writeback:0
[ 1492.734093][T20366]  slab_reclaimable:11712 slab_unreclaimable:108253
[ 1492.734093][T20366]  mapped:29234 shmem:1355 pagetables:990
[ 1492.734093][T20366]  sec_pagetables:0 bounce:0
[ 1492.734093][T20366]  kernel_misc_reclaimable:0
[ 1492.734093][T20366]  free:1312681 free_pcp:2768 free_cma:0
[ 1492.734160][T20366] Node 0 active_anon:1028kB inactive_anon:26804kB active_file:75964kB inactive_file:147500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116884kB dirty:380kB writeback:0kB shmem:3884kB kernel_stack:12384kB pagetables:3836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1492.734218][T20366] Node 1 active_anon:0kB inactive_anon:0kB active_file:276kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1492.734271][T20366] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1492.734344][T20366] lowmem_reserve[]: 0 2515 2517 2517 2517
[ 1492.734387][T20366] Node 0 DMA32 free:1324468kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1028kB inactive_anon:26804kB active_file:75964kB inactive_file:147500kB unevictable:1536kB writepending:380kB zspages:0kB present:3129332kB managed:2576076kB mlocked:0kB bounce:0kB free_pcp:11072kB local_pcp:6508kB free_cma:0kB
[ 1492.734464][T20366] lowmem_reserve[]: 0 0 1 1 1
[ 1492.734641][T20366] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1492.734721][T20366] lowmem_reserve[]: 0 0 0 0 0
[ 1492.734761][T20366] Node 1 Normal free:3910896kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:276kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1492.734838][T20366] lowmem_reserve[]: 0 0 0 0 0
[ 1492.734879][T20366] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1492.735043][T20366] Node 0 DMA32: 5174*4kB (UM) 2956*8kB (UME) 1808*16kB (UME) 2100*32kB (UME) 364*64kB (UME) 124*128kB (UME) 58*256kB (UME) 27*512kB (UME) 20*1024kB (UM) 21*2048kB (UME) 257*4096kB (UM) = 1324472kB
[ 1492.735239][T20366] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1492.735359][T20366] Node 1 Normal: 184*4kB (UE) 46*8kB (UE) 48*16kB (UME) 195*32kB (UME) 83*64kB (UE) 33*128kB (UME) 14*256kB (UME) 9*512kB (UME) 4*1024kB (UME) 3*2048kB (ME) 946*4096kB (M) = 3910896kB
[ 1492.735549][T20366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1492.735570][T20366] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[ 1492.735591][T20366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1492.735611][T20366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1492.735632][T20366] 57287 total pagecache pages
[ 1492.735648][T20366] 0 pages in swap cache
[ 1492.735659][T20366] Free swap  = 124996kB
[ 1492.735669][T20366] Total swap = 124996kB
[ 1492.735679][T20366] 2097051 pages RAM
[ 1492.735688][T20366] 0 pages HighMem/MovableOnly
[ 1492.735698][T20366] 421006 pages reserved
[ 1492.735707][T20366] 0 pages cma reserved
[ 1492.736046][   T38] audit: type=1326 audit(1764223463.024:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20365 comm="syz.9.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff8ee17e15c code=0x7ffc0000
[ 1492.736450][   T38] audit: type=1326 audit(1764223463.024:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20365 comm="syz.9.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff8ee17e1ff code=0x7ffc0000
[ 1492.736791][   T38] audit: type=1326 audit(1764223463.024:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20365 comm="syz.9.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff8ee17e3aa code=0x7ffc0000
[ 1492.737207][   T38] audit: type=1326 audit(1764223463.024:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20365 comm="syz.9.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ee17f749 code=0x7ffc0000
[ 1492.857499][ T5790] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[ 1492.879421][ T5790] usb 9-1: device descriptor read/8, error -71
[ 1493.024429][ T5790] usb usb9-port1: unable to enumerate USB device
[ 1494.197328][ T3594] hsr_slave_0: left promiscuous mode
[ 1494.221590][ T3594] hsr_slave_1: left promiscuous mode
[ 1494.222841][ T3594] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1494.271985][ T3594] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1494.717369][ T5790] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1494.877392][ T5790] usb 10-1: Using ep0 maxpacket: 32
[ 1494.881214][ T5790] usb 10-1: config 35 has an invalid interface number: 34 but max is 2
[ 1494.881243][ T5790] usb 10-1: config 35 has an invalid interface number: 68 but max is 2
[ 1494.881268][ T5790] usb 10-1: config 35 contains an unexpected descriptor of type 0x2, skipping
[ 1494.881288][ T5790] usb 10-1: config 35 has an invalid interface number: 106 but max is 2
[ 1494.881312][ T5790] usb 10-1: config 35 has no interface number 0
[ 1494.881331][ T5790] usb 10-1: config 35 has no interface number 1
[ 1494.881350][ T5790] usb 10-1: config 35 has no interface number 2
[ 1494.881450][ T5790] usb 10-1: config 35 interface 34 altsetting 28 has an invalid descriptor for endpoint zero, skipping
[ 1494.881502][ T5790] usb 10-1: config 35 interface 68 altsetting 11 endpoint 0xC has invalid maxpacket 1024, setting to 64
[ 1494.881534][ T5790] usb 10-1: config 35 interface 68 altsetting 11 has a duplicate endpoint with address 0x2, skipping
[ 1494.881561][ T5790] usb 10-1: config 35 interface 68 altsetting 11 endpoint 0x6 has invalid maxpacket 512, setting to 64
[ 1494.881598][ T5790] usb 10-1: config 35 interface 68 altsetting 11 has a duplicate endpoint with address 0x2, skipping
[ 1494.881623][ T5790] usb 10-1: config 35 interface 68 altsetting 11 has a duplicate endpoint with address 0x4, skipping
[ 1494.881648][ T5790] usb 10-1: config 35 interface 68 altsetting 11 has a duplicate endpoint with address 0xC, skipping
[ 1494.881673][ T5790] usb 10-1: config 35 interface 68 altsetting 11 has a duplicate endpoint with address 0xC, skipping
[ 1494.881698][ T5790] usb 10-1: config 35 interface 68 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[ 1494.881722][ T5790] usb 10-1: config 35 interface 68 altsetting 11 has a duplicate endpoint with address 0xB, skipping
[ 1494.881746][ T5790] usb 10-1: config 35 interface 68 altsetting 11 has a duplicate endpoint with address 0x4, skipping
[ 1494.881803][ T5790] usb 10-1: config 35 interface 106 altsetting 9 has a duplicate endpoint with address 0x2, skipping
[ 1494.881830][ T5790] usb 10-1: config 35 interface 106 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64
[ 1494.881858][ T5790] usb 10-1: config 35 interface 106 altsetting 9 has a duplicate endpoint with address 0xE, skipping
[ 1494.881881][ T5790] usb 10-1: config 35 interface 106 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[ 1494.881909][ T5790] usb 10-1: config 35 interface 34 has no altsetting 0
[ 1494.881929][ T5790] usb 10-1: config 35 interface 68 has no altsetting 0
[ 1494.881950][ T5790] usb 10-1: config 35 interface 106 has no altsetting 0
[ 1494.885119][ T5790] usb 10-1: New USB device found, idVendor=1b3d, idProduct=012d, bcdDevice=d9.8b
[ 1494.885150][ T5790] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1494.885174][ T5790] usb 10-1: Product: syz
[ 1494.885189][ T5790] usb 10-1: Manufacturer: 迻霒ᐕ᝗앾穖㷪橵䉈晽㐴ᆾ㓢焼䔓쏩줳䶿햝ᘒ諘횂墱뉾ܼ¥뫀푕Დ齉ࠟ薆茮豖搌䣸﮵㳶剬Ǿ⚄ＴW빅<꓿䬐晸敯稫笄뀓僡䱄寸뒬陎得렙ѕ첃⾵Ѐិ茣תּ쩳掐仁煜殺塭伍ꆤ녧煉펜飯薆⿷ᬭǸ튟㔌䤽䲴Ĭ饎沋ᷞ췲㘟珝遮偏
[ 1494.885226][ T5790] usb 10-1: SerialNumber: syz
[ 1495.492468][ T5790] ftdi_sio 10-1:35.34: FTDI USB Serial Device converter detected
[ 1495.494210][ T5790] ftdi_sio ttyUSB0: unknown device type: 0xd98b
[ 1495.525020][ T5790] ftdi_sio 10-1:35.68: FTDI USB Serial Device converter detected
[ 1495.526748][ T5790] ftdi_sio ttyUSB1: unknown device type: 0xd98b
[ 1495.556005][ T5790] ftdi_sio 10-1:35.106: FTDI USB Serial Device converter detected
[ 1495.565785][ T5790] ftdi_sio ttyUSB2: unknown device type: 0xd98b
[ 1495.565908][ T3594] team0 (unregistering): Port device team_slave_1 removed
[ 1495.648853][ T5790] usb 10-1: USB disconnect, device number 22
[ 1495.652516][ T5790] ftdi_sio 10-1:35.34: device disconnected
[ 1495.664792][ T5790] ftdi_sio 10-1:35.68: device disconnected
[ 1495.689832][ T5790] ftdi_sio 10-1:35.106: device disconnected
[ 1495.819486][ T3594] team0 (unregistering): Port device team_slave_0 removed
[ 1496.634352][T19731] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1496.690225][T19731] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1496.744147][T19731] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1496.790404][T19731] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1497.026970][T20465] FAULT_INJECTION: forcing a failure.
[ 1497.026970][T20465] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1497.029643][T20465] CPU: 0 UID: 0 PID: 20465 Comm: syz.8.5372 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1497.029674][T20465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1497.029689][T20465] Call Trace:
[ 1497.029698][T20465]  <TASK>
[ 1497.029709][T20465]  dump_stack_lvl+0x189/0x250
[ 1497.029747][T20465]  ? __pfx____ratelimit+0x10/0x10
[ 1497.029779][T20465]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1497.029813][T20465]  ? __pfx__printk+0x10/0x10
[ 1497.029855][T20465]  should_fail_ex+0x46c/0x600
[ 1497.029892][T20465]  strncpy_from_user+0x36/0x290
[ 1497.029934][T20465]  bpf_prog_load+0xc23/0x19e0
[ 1497.029978][T20465]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1497.030034][T20465]  ? bpf_lsm_bpf+0x9/0x20
[ 1497.030055][T20465]  ? security_bpf+0x7e/0x300
[ 1497.030084][T20465]  __sys_bpf+0x507/0x860
[ 1497.030117][T20465]  ? __pfx___sys_bpf+0x10/0x10
[ 1497.030150][T20465]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1497.030199][T20465]  ? ksys_write+0x230/0x260
[ 1497.030230][T20465]  ? __pfx_ksys_write+0x10/0x10
[ 1497.030264][T20465]  __x64_sys_bpf+0x7c/0x90
[ 1497.030293][T20465]  do_syscall_64+0xfa/0xfa0
[ 1497.030324][T20465]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1497.030354][T20465]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1497.030377][T20465]  ? clear_bhb_loop+0x60/0xb0
[ 1497.030405][T20465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1497.030427][T20465] RIP: 0033:0x7f7eb0e9f749
[ 1497.030446][T20465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1497.030463][T20465] RSP: 002b:00007f7eaf106038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1497.030488][T20465] RAX: ffffffffffffffda RBX: 00007f7eb10f5fa0 RCX: 00007f7eb0e9f749
[ 1497.030505][T20465] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005
[ 1497.030520][T20465] RBP: 00007f7eaf106090 R08: 0000000000000000 R09: 0000000000000000
[ 1497.030535][T20465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1497.030548][T20465] R13: 00007f7eb10f6038 R14: 00007f7eb10f5fa0 R15: 00007fff33613aa8
[ 1497.030585][T20465]  </TASK>
[ 1497.047131][  T990] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1497.197101][  T990] usb 10-1: Using ep0 maxpacket: 32
[ 1497.201656][  T990] usb 10-1: config 35 has an invalid interface number: 34 but max is 2
[ 1497.201686][  T990] usb 10-1: config 35 has an invalid interface number: 68 but max is 2
[ 1497.201712][  T990] usb 10-1: config 35 contains an unexpected descriptor of type 0x2, skipping
[ 1497.201733][  T990] usb 10-1: config 35 has an invalid interface number: 106 but max is 2
[ 1497.201757][  T990] usb 10-1: config 35 has no interface number 0
[ 1497.201774][  T990] usb 10-1: config 35 has no interface number 1
[ 1497.201792][  T990] usb 10-1: config 35 has no interface number 2
[ 1497.201872][  T990] usb 10-1: config 35 interface 34 altsetting 28 has an invalid descriptor for endpoint zero, skipping
[ 1497.201921][  T990] usb 10-1: config 35 interface 68 altsetting 11 endpoint 0xC has invalid maxpacket 1024, setting to 64
[ 1497.201955][  T990] usb 10-1: config 35 interface 68 altsetting 11 has a duplicate endpoint with address 0x2, skipping
[ 1497.201979][  T990] usb 10-1: config 35 interface 68 altsetting 11 endpoint 0x6 has invalid maxpacket 512, setting to 64
[ 1497.202006][  T990] usb 10-1: config 35 interface 68 altsetting 11 has a duplicate endpoint with address 0x2, skipping
[ 1497.202032][  T990] usb 10-1: config 35 interface 68 altsetting 11 has a duplicate endpoint with address 0x4, skipping
[ 1497.202057][  T990] usb 10-1: config 35 interface 68 altsetting 11 has a duplicate endpoint with address 0xC, skipping
[ 1497.202082][  T990] usb 10-1: config 35 interface 68 altsetting 11 has a duplicate endpoint with address 0xC, skipping
[ 1497.202106][  T990] usb 10-1: config 35 interface 68 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[ 1497.202131][  T990] usb 10-1: config 35 interface 68 altsetting 11 has a duplicate endpoint with address 0xB, skipping
[ 1497.202164][  T990] usb 10-1: config 35 interface 68 altsetting 11 has a duplicate endpoint with address 0x4, skipping
[ 1497.202205][  T990] usb 10-1: config 35 interface 106 altsetting 9 has a duplicate endpoint with address 0x2, skipping
[ 1497.202231][  T990] usb 10-1: config 35 interface 106 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64
[ 1497.202261][  T990] usb 10-1: config 35 interface 106 altsetting 9 has a duplicate endpoint with address 0xE, skipping
[ 1497.202286][  T990] usb 10-1: config 35 interface 106 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[ 1497.202313][  T990] usb 10-1: config 35 interface 34 has no altsetting 0
[ 1497.202333][  T990] usb 10-1: config 35 interface 68 has no altsetting 0
[ 1497.202353][  T990] usb 10-1: config 35 interface 106 has no altsetting 0
[ 1497.217442][  T990] usb 10-1: New USB device found, idVendor=1b3d, idProduct=012d, bcdDevice=d9.8b
[ 1497.217476][  T990] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1497.217498][  T990] usb 10-1: Product: syz
[ 1497.217514][  T990] usb 10-1: Manufacturer: 迻霒ᐕ᝗앾穖㷪橵䉈晽㐴ᆾ㓢焼䔓쏩줳䶿햝ᘒ諘횂墱뉾ܼ¥뫀푕Დ齉ࠟ薆茮豖搌䣸﮵㳶剬Ǿ⚄ＴW빅<꓿䬐晸敯稫笄뀓僡䱄寸뒬陎得렙ѕ첃⾵Ѐិ茣תּ쩳掐仁煜殺塭伍ꆤ녧煉펜飯薆⿷ᬭǸ튟㔌䤽䲴Ĭ饎沋ᷞ췲㘟珝遮偏
[ 1497.217551][  T990] usb 10-1: SerialNumber: syz
[ 1497.683876][  T990] ftdi_sio 10-1:35.34: FTDI USB Serial Device converter detected
[ 1497.685587][  T990] ftdi_sio ttyUSB0: unknown device type: 0xd98b
[ 1497.702410][T19718] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1497.715651][  T990] ftdi_sio 10-1:35.68: FTDI USB Serial Device converter detected
[ 1497.747455][  T990] ftdi_sio ttyUSB1: unknown device type: 0xd98b
[ 1497.779865][  T990] ftdi_sio 10-1:35.106: FTDI USB Serial Device converter detected
[ 1497.781628][  T990] ftdi_sio ttyUSB2: unknown device type: 0xd98b
[ 1497.819378][  T990] usb 10-1: USB disconnect, device number 23
[ 1497.822663][  T990] ftdi_sio 10-1:35.34: device disconnected
[ 1497.858298][  T990] ftdi_sio 10-1:35.68: device disconnected
[ 1497.869635][T19718] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1497.881606][  T990] ftdi_sio 10-1:35.106: device disconnected
[ 1497.910011][T19718] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1498.098493][T19718] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1498.393027][T19713] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1498.434863][T19713] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1498.477252][T19713] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1498.529170][T19713] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1498.765569][T19731] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1498.916084][T19731] 8021q: adding VLAN 0 to HW filter on device team0
[ 1498.958281][T14421] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1498.961640][T14421] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1499.025002][T14421] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1499.034309][T14421] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1499.163849][T19718] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1499.261654][T19713] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1499.313415][T19718] 8021q: adding VLAN 0 to HW filter on device team0
[ 1499.380604][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1499.380844][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1499.416294][T19713] 8021q: adding VLAN 0 to HW filter on device team0
[ 1499.424657][T18260] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1499.424794][T18260] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1499.484880][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1499.485090][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1499.530846][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1499.530997][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1500.105562][T19731] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1500.216953][ T8746] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1500.347644][T19718] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1500.378002][ T8746] usb 10-1: config 0 has an invalid interface number: 41 but max is 0
[ 1500.378034][ T8746] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1500.378056][ T8746] usb 10-1: config 0 has no interface number 0
[ 1500.384260][ T8746] usb 10-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[ 1500.384293][ T8746] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1500.384315][ T8746] usb 10-1: Product: syz
[ 1500.384330][ T8746] usb 10-1: Manufacturer: syz
[ 1500.384346][ T8746] usb 10-1: SerialNumber: syz
[ 1500.393185][ T8746] usb 10-1: config 0 descriptor??
[ 1500.451619][ T8746] ims_pcu 10-1:0.41: Missing CDC union descriptor
[ 1500.451687][ T8746] ims_pcu 10-1:0.41: probe with driver ims_pcu failed with error -22
[ 1500.605243][ T5790] usb 10-1: USB disconnect, device number 24
[ 1500.696329][T19713] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1500.874616][T19713] veth0_vlan: entered promiscuous mode
[ 1500.902734][T19713] veth1_vlan: entered promiscuous mode
[ 1500.974165][T19713] veth0_macvtap: entered promiscuous mode
[ 1501.001145][T19713] veth1_macvtap: entered promiscuous mode
[ 1501.040462][T20574] FAULT_INJECTION: forcing a failure.
[ 1501.040462][T20574] name failslab, interval 1, probability 0, space 0, times 0
[ 1501.040501][T20574] CPU: 1 UID: 0 PID: 20574 Comm: syz.8.5405 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1501.040528][T20574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1501.040542][T20574] Call Trace:
[ 1501.040551][T20574]  <TASK>
[ 1501.040562][T20574]  dump_stack_lvl+0x189/0x250
[ 1501.040601][T20574]  ? __pfx____ratelimit+0x10/0x10
[ 1501.040634][T20574]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1501.040675][T20574]  ? __pfx__printk+0x10/0x10
[ 1501.040710][T20574]  ? __pfx___might_resched+0x10/0x10
[ 1501.040741][T20574]  should_fail_ex+0x46c/0x600
[ 1501.040779][T20574]  should_failslab+0xa8/0x100
[ 1501.040815][T20574]  __kmalloc_noprof+0xcc/0x7d0
[ 1501.040845][T20574]  ? kfree+0x51/0x950
[ 1501.040868][T20574]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1501.040898][T20574]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1501.040925][T20574]  ? tomoyo_domain+0xda/0x130
[ 1501.040957][T20574]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1501.040991][T20574]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1501.041031][T20574]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1501.041071][T20574]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1501.041107][T20574]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1501.041173][T20574]  ? __fget_files+0x2a/0x420
[ 1501.041208][T20574]  ? __fget_files+0x3a6/0x420
[ 1501.041238][T20574]  ? __fget_files+0x2a/0x420
[ 1501.041275][T20574]  security_file_ioctl+0xcb/0x2d0
[ 1501.041302][T20574]  __se_sys_ioctl+0x47/0x170
[ 1501.041331][T20574]  do_syscall_64+0xfa/0xfa0
[ 1501.041363][T20574]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1501.041395][T20574]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1501.041418][T20574]  ? clear_bhb_loop+0x60/0xb0
[ 1501.041445][T20574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1501.041466][T20574] RIP: 0033:0x7f7eb0e9f749
[ 1501.041486][T20574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1501.041506][T20574] RSP: 002b:00007f7eaf106038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1501.041530][T20574] RAX: ffffffffffffffda RBX: 00007f7eb10f5fa0 RCX: 00007f7eb0e9f749
[ 1501.041547][T20574] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[ 1501.041562][T20574] RBP: 00007f7eaf106090 R08: 0000000000000000 R09: 0000000000000000
[ 1501.041576][T20574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1501.041589][T20574] R13: 00007f7eb10f6038 R14: 00007f7eb10f5fa0 R15: 00007fff33613aa8
[ 1501.041626][T20574]  </TASK>
[ 1501.041636][T20574] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1501.135748][T19731] veth0_vlan: entered promiscuous mode
[ 1501.194076][T19713] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1501.209616][T19731] veth1_vlan: entered promiscuous mode
[ 1501.256336][T19713] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1501.346608][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.358271][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.363092][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.385978][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.712041][T19731] veth0_macvtap: entered promiscuous mode
[ 1501.751432][T19731] veth1_macvtap: entered promiscuous mode
[ 1501.826617][T19718] veth0_vlan: entered promiscuous mode
[ 1501.840989][T14436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1501.841011][T14436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1501.897822][T19718] veth1_vlan: entered promiscuous mode
[ 1501.902853][T19731] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1501.907239][   T31] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1501.987601][T19731] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1501.988662][T14436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1501.988682][T14436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1502.053573][ T3594] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1502.054655][ T3594] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1502.058660][   T31] usb 10-1: Using ep0 maxpacket: 16
[ 1502.063894][   T31] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1502.063935][   T31] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1502.063964][   T31] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[ 1502.063999][   T31] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1502.064040][   T31] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1502.064069][   T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1502.079055][ T3594] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1502.082264][ T3594] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1502.085850][   T31] usb 10-1: config 0 descriptor??
[ 1502.513210][T19718] veth0_macvtap: entered promiscuous mode
[ 1502.513464][   T31] hid (null): unknown global tag 0xd
[ 1502.517436][   T31] hid (null): invalid report_size 27418
[ 1502.626619][T19718] veth1_macvtap: entered promiscuous mode
[ 1502.758795][ T8746] usb 10-1: USB disconnect, device number 25
[ 1502.820505][T18686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1502.820535][T18686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1502.872584][T19718] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1502.960880][T19718] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1503.005326][T18260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1503.005350][T18260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1503.051078][T18686] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1503.056382][T18686] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1503.078567][T18686] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1503.117875][T18262] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1504.923057][T20633] FAULT_INJECTION: forcing a failure.
[ 1504.923057][T20633] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1504.923095][T20633] CPU: 0 UID: 0 PID: 20633 Comm: syz.4.5425 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1504.923122][T20633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1504.923136][T20633] Call Trace:
[ 1504.923145][T20633]  <TASK>
[ 1504.923156][T20633]  dump_stack_lvl+0x189/0x250
[ 1504.923195][T20633]  ? __pfx____ratelimit+0x10/0x10
[ 1504.923228][T20633]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1504.923272][T20633]  ? __pfx__printk+0x10/0x10
[ 1504.923300][T20633]  ? __might_fault+0xb0/0x130
[ 1504.923344][T20633]  should_fail_ex+0x46c/0x600
[ 1504.923381][T20633]  _copy_from_user+0x2d/0xb0
[ 1504.923409][T20633]  __sys_connect+0x124/0x450
[ 1504.923437][T20633]  ? __pfx___sys_connect+0x10/0x10
[ 1504.923475][T20633]  ? __pfx_ksys_write+0x10/0x10
[ 1504.923511][T20633]  __x64_sys_connect+0x7a/0x90
[ 1504.923537][T20633]  do_syscall_64+0xfa/0xfa0
[ 1504.923568][T20633]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1504.923601][T20633]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.923624][T20633]  ? clear_bhb_loop+0x60/0xb0
[ 1504.923651][T20633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.923674][T20633] RIP: 0033:0x7f289ed4f749
[ 1504.923694][T20633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1504.923714][T20633] RSP: 002b:00007f289cfb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1504.923738][T20633] RAX: ffffffffffffffda RBX: 00007f289efa5fa0 RCX: 00007f289ed4f749
[ 1504.923755][T20633] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003
[ 1504.923769][T20633] RBP: 00007f289cfb6090 R08: 0000000000000000 R09: 0000000000000000
[ 1504.923783][T20633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1504.923796][T20633] R13: 00007f289efa6038 R14: 00007f289efa5fa0 R15: 00007ffc1063bcf8
[ 1504.923832][T20633]  </TASK>
[ 1505.241334][ T3594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1505.241361][ T3594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1505.969265][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1505.969288][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1507.964482][T20667] FAULT_INJECTION: forcing a failure.
[ 1507.964482][T20667] name failslab, interval 1, probability 0, space 0, times 0
[ 1507.964521][T20667] CPU: 0 UID: 0 PID: 20667 Comm: syz.5.5438 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1507.964549][T20667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1507.964563][T20667] Call Trace:
[ 1507.964573][T20667]  <TASK>
[ 1507.964584][T20667]  dump_stack_lvl+0x189/0x250
[ 1507.964624][T20667]  ? __pfx____ratelimit+0x10/0x10
[ 1507.964658][T20667]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1507.964692][T20667]  ? __pfx__printk+0x10/0x10
[ 1507.964727][T20667]  ? __pfx___might_resched+0x10/0x10
[ 1507.964750][T20667]  ? fs_reclaim_acquire+0x7d/0x100
[ 1507.964787][T20667]  should_fail_ex+0x46c/0x600
[ 1507.964825][T20667]  should_failslab+0xa8/0x100
[ 1507.964861][T20667]  __kmalloc_noprof+0xcc/0x7d0
[ 1507.964892][T20667]  ? tomoyo_encode+0x28b/0x550
[ 1507.964933][T20667]  tomoyo_encode+0x28b/0x550
[ 1507.964968][T20667]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1507.965009][T20667]  ? tomoyo_mount_permission+0x27a/0x970
[ 1507.965037][T20667]  tomoyo_mount_permission+0x377/0x970
[ 1507.965067][T20667]  ? tomoyo_mount_permission+0x27a/0x970
[ 1507.965094][T20667]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[ 1507.965186][T20667]  security_sb_mount+0xec/0x350
[ 1507.965222][T20667]  path_mount+0xbc/0xfe0
[ 1507.965254][T20667]  ? user_path_at+0x44/0x60
[ 1507.965289][T20667]  __se_sys_mount+0x313/0x410
[ 1507.965329][T20667]  ? __pfx___se_sys_mount+0x10/0x10
[ 1507.965367][T20667]  ? do_syscall_64+0xbe/0xfa0
[ 1507.965398][T20667]  ? __x64_sys_mount+0x20/0xc0
[ 1507.965433][T20667]  do_syscall_64+0xfa/0xfa0
[ 1507.965464][T20667]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1507.965497][T20667]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1507.965520][T20667]  ? clear_bhb_loop+0x60/0xb0
[ 1507.965548][T20667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1507.965571][T20667] RIP: 0033:0x7f8324bef749
[ 1507.965591][T20667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1507.965612][T20667] RSP: 002b:00007f8322e56038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1507.965636][T20667] RAX: ffffffffffffffda RBX: 00007f8324e45fa0 RCX: 00007f8324bef749
[ 1507.965654][T20667] RDX: 0000200000000600 RSI: 00002000000005c0 RDI: 0000200000000580
[ 1507.965671][T20667] RBP: 00007f8322e56090 R08: 0000200000000000 R09: 0000000000000000
[ 1507.965686][T20667] R10: 0000000002800004 R11: 0000000000000246 R12: 0000000000000002
[ 1507.965701][T20667] R13: 00007f8324e46038 R14: 00007f8324e45fa0 R15: 00007ffe3a6f4008
[ 1507.965739][T20667]  </TASK>
[ 1507.965762][T20667] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1508.111772][T20668] fuse: Unknown parameter ''
[ 1509.062193][T20704] FAULT_INJECTION: forcing a failure.
[ 1509.062193][T20704] name failslab, interval 1, probability 0, space 0, times 0
[ 1509.062220][T20704] CPU: 1 UID: 0 PID: 20704 Comm: syz.8.5454 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1509.062238][T20704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1509.062248][T20704] Call Trace:
[ 1509.062255][T20704]  <TASK>
[ 1509.062262][T20704]  dump_stack_lvl+0x189/0x250
[ 1509.062291][T20704]  ? __pfx____ratelimit+0x10/0x10
[ 1509.062314][T20704]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1509.062337][T20704]  ? __pfx__printk+0x10/0x10
[ 1509.062362][T20704]  ? __pfx___might_resched+0x10/0x10
[ 1509.062383][T20704]  should_fail_ex+0x46c/0x600
[ 1509.062409][T20704]  should_failslab+0xa8/0x100
[ 1509.062434][T20704]  __kmalloc_cache_node_noprof+0x78/0x700
[ 1509.062457][T20704]  ? __get_vm_area_node+0x172/0x350
[ 1509.062481][T20704]  __get_vm_area_node+0x172/0x350
[ 1509.062505][T20704]  __vmalloc_node_range_noprof+0x30c/0x12d0
[ 1509.062528][T20704]  ? bpf_check+0x1aa/0x1d730
[ 1509.062547][T20704]  ? __lruvec_stat_mod_folio+0x6f/0x2e0
[ 1509.062583][T20704]  ? __phys_addr+0xd3/0x180
[ 1509.062607][T20704]  ? __kasan_kmalloc_large+0x85/0xa0
[ 1509.062632][T20704]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1509.062659][T20704]  ? bpf_check+0x1aa/0x1d730
[ 1509.062677][T20704]  vzalloc_noprof+0xb2/0xf0
[ 1509.062698][T20704]  ? bpf_check+0x1aa/0x1d730
[ 1509.062717][T20704]  bpf_check+0x1aa/0x1d730
[ 1509.062760][T20704]  ? rtlock_slowlock_locked+0xd8/0x4010
[ 1509.062785][T20704]  ? __lock_acquire+0xab9/0xd20
[ 1509.062809][T20704]  ? __lock_acquire+0xab9/0xd20
[ 1509.062836][T20704]  ? do_raw_spin_lock+0x121/0x290
[ 1509.062868][T20704]  ? __lock_acquire+0xab9/0xd20
[ 1509.062895][T20704]  ? __pfx_bpf_check+0x10/0x10
[ 1509.062921][T20704]  ? seqcount_lockdep_reader_access+0x122/0x1c0
[ 1509.062939][T20704]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1509.062962][T20704]  ? ktime_get_with_offset+0x93/0x2a0
[ 1509.062977][T20704]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[ 1509.062995][T20704]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[ 1509.063020][T20704]  ? __asan_memset+0x22/0x50
[ 1509.063038][T20704]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[ 1509.063054][T20704]  ? security_bpf_prog_load+0x125/0x3f0
[ 1509.063076][T20704]  bpf_prog_load+0x13ba/0x19e0
[ 1509.063108][T20704]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1509.063155][T20704]  ? bpf_lsm_bpf+0x9/0x20
[ 1509.063169][T20704]  ? security_bpf+0x7e/0x300
[ 1509.063188][T20704]  __sys_bpf+0x507/0x860
[ 1509.063211][T20704]  ? __pfx___sys_bpf+0x10/0x10
[ 1509.063230][T20704]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1509.063262][T20704]  ? ksys_write+0x230/0x260
[ 1509.063283][T20704]  ? __pfx_ksys_write+0x10/0x10
[ 1509.063308][T20704]  __x64_sys_bpf+0x7c/0x90
[ 1509.063328][T20704]  do_syscall_64+0xfa/0xfa0
[ 1509.063350][T20704]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1509.063372][T20704]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1509.063388][T20704]  ? clear_bhb_loop+0x60/0xb0
[ 1509.063407][T20704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1509.063422][T20704] RIP: 0033:0x7f7eb0e9f749
[ 1509.063436][T20704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1509.063449][T20704] RSP: 002b:00007f7eaf106038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1509.063465][T20704] RAX: ffffffffffffffda RBX: 00007f7eb10f5fa0 RCX: 00007f7eb0e9f749
[ 1509.063477][T20704] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005
[ 1509.063487][T20704] RBP: 00007f7eaf106090 R08: 0000000000000000 R09: 0000000000000000
[ 1509.063497][T20704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1509.063506][T20704] R13: 00007f7eb10f6038 R14: 00007f7eb10f5fa0 R15: 00007fff33613aa8
[ 1509.063531][T20704]  </TASK>
[ 1509.063539][T20704] syz.8.5454: vmalloc error: size 352, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1509.063590][T20704] CPU: 1 UID: 0 PID: 20704 Comm: syz.8.5454 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1509.063608][T20704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1509.063617][T20704] Call Trace:
[ 1509.063622][T20704]  <TASK>
[ 1509.063629][T20704]  dump_stack_lvl+0x189/0x250
[ 1509.063655][T20704]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1509.063679][T20704]  ? __pfx__printk+0x10/0x10
[ 1509.063698][T20704]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1509.063717][T20704]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1509.063737][T20704]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 1509.063758][T20704]  warn_alloc+0x22e/0x3b0
[ 1509.063781][T20704]  ? should_fail_ex+0x344/0x600
[ 1509.063806][T20704]  ? __pfx_warn_alloc+0x10/0x10
[ 1509.063830][T20704]  ? __get_vm_area_node+0x172/0x350
[ 1509.063854][T20704]  ? __get_vm_area_node+0x2e2/0x350
[ 1509.063879][T20704]  __vmalloc_node_range_noprof+0x331/0x12d0
[ 1509.063903][T20704]  ? __lruvec_stat_mod_folio+0x6f/0x2e0
[ 1509.063930][T20704]  ? __phys_addr+0xd3/0x180
[ 1509.063953][T20704]  ? __kasan_kmalloc_large+0x85/0xa0
[ 1509.063978][T20704]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1509.064005][T20704]  ? bpf_check+0x1aa/0x1d730
[ 1509.064024][T20704]  vzalloc_noprof+0xb2/0xf0
[ 1509.064044][T20704]  ? bpf_check+0x1aa/0x1d730
[ 1509.064064][T20704]  bpf_check+0x1aa/0x1d730
[ 1509.064107][T20704]  ? rtlock_slowlock_locked+0xd8/0x4010
[ 1509.064131][T20704]  ? __lock_acquire+0xab9/0xd20
[ 1509.064155][T20704]  ? __lock_acquire+0xab9/0xd20
[ 1509.064182][T20704]  ? do_raw_spin_lock+0x121/0x290
[ 1509.064214][T20704]  ? __lock_acquire+0xab9/0xd20
[ 1509.064241][T20704]  ? __pfx_bpf_check+0x10/0x10
[ 1509.064267][T20704]  ? seqcount_lockdep_reader_access+0x122/0x1c0
[ 1509.064284][T20704]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1509.064307][T20704]  ? ktime_get_with_offset+0x93/0x2a0
[ 1509.064323][T20704]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[ 1509.064340][T20704]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[ 1509.064365][T20704]  ? __asan_memset+0x22/0x50
[ 1509.064383][T20704]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[ 1509.064398][T20704]  ? security_bpf_prog_load+0x125/0x3f0
[ 1509.064420][T20704]  bpf_prog_load+0x13ba/0x19e0
[ 1509.064451][T20704]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1509.064491][T20704]  ? bpf_lsm_bpf+0x9/0x20
[ 1509.064505][T20704]  ? security_bpf+0x7e/0x300
[ 1509.064524][T20704]  __sys_bpf+0x507/0x860
[ 1509.064547][T20704]  ? __pfx___sys_bpf+0x10/0x10
[ 1509.064652][T20704]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1509.064683][T20704]  ? ksys_write+0x230/0x260
[ 1509.064704][T20704]  ? __pfx_ksys_write+0x10/0x10
[ 1509.064728][T20704]  __x64_sys_bpf+0x7c/0x90
[ 1509.064749][T20704]  do_syscall_64+0xfa/0xfa0
[ 1509.064770][T20704]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1509.064792][T20704]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1509.064807][T20704]  ? clear_bhb_loop+0x60/0xb0
[ 1509.064826][T20704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1509.064841][T20704] RIP: 0033:0x7f7eb0e9f749
[ 1509.064854][T20704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1509.064867][T20704] RSP: 002b:00007f7eaf106038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1509.064881][T20704] RAX: ffffffffffffffda RBX: 00007f7eb10f5fa0 RCX: 00007f7eb0e9f749
[ 1509.064892][T20704] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005
[ 1509.064902][T20704] RBP: 00007f7eaf106090 R08: 0000000000000000 R09: 0000000000000000
[ 1509.064912][T20704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1509.064921][T20704] R13: 00007f7eb10f6038 R14: 00007f7eb10f5fa0 R15: 00007fff33613aa8
[ 1509.064946][T20704]  </TASK>
[ 1509.064952][T20704] Mem-Info:
[ 1509.064959][T20704] active_anon:305 inactive_anon:6811 isolated_anon:0
[ 1509.064959][T20704]  active_file:19069 inactive_file:36875 isolated_file:0
[ 1509.064959][T20704]  unevictable:768 dirty:199 writeback:0
[ 1509.064959][T20704]  slab_reclaimable:11802 slab_unreclaimable:111410
[ 1509.064959][T20704]  mapped:29286 shmem:1406 pagetables:1090
[ 1509.064959][T20704]  sec_pagetables:0 bounce:0
[ 1509.064959][T20704]  kernel_misc_reclaimable:0
[ 1509.064959][T20704]  free:1305363 free_pcp:6174 free_cma:0
[ 1509.064999][T20704] Node 0 active_anon:1220kB inactive_anon:27244kB active_file:76000kB inactive_file:147500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117072kB dirty:792kB writeback:0kB shmem:4088kB kernel_stack:13132kB pagetables:4236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1509.065033][T20704] Node 1 active_anon:0kB inactive_anon:0kB active_file:276kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1509.065066][T20704] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1509.065111][T20704] lowmem_reserve[]: 0 2515 2517 2517 2517
[ 1509.065136][T20704] Node 0 DMA32 free:1295196kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1220kB inactive_anon:27244kB active_file:76000kB inactive_file:147500kB unevictable:1536kB writepending:792kB zspages:0kB present:3129332kB managed:2576076kB mlocked:0kB bounce:0kB free_pcp:24696kB local_pcp:13304kB free_cma:0kB
[ 1509.065183][T20704] lowmem_reserve[]: 0 0 1 1 1
[ 1509.065207][T20704] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1509.065249][T20704] lowmem_reserve[]: 0 0 0 0 0
[ 1509.065273][T20704] Node 1 Normal free:3910896kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:276kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1509.065318][T20704] lowmem_reserve[]: 0 0 0 0 0
[ 1509.065342][T20704] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1509.065427][T20704] Node 0 DMA32: 4074*4kB (UM) 2259*8kB (UME) 1483*16kB (UME) 1873*32kB (UME) 346*64kB (UME) 128*128kB (UME) 58*256kB (UME) 27*512kB (UME) 14*1024kB (UM) 21*2048kB (UME) 257*4096kB (UM) = 1295248kB
[ 1509.065543][T20704] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1509.065620][T20704] Node 1 Normal: 184*4kB (UE) 46*8kB (UE) 48*16kB (UME) 195*32kB (UME) 83*64kB (UE) 33*128kB (UME) 14*256kB (UME) 9*512kB (UME) 4*1024kB (UME) 3*2048kB (ME) 946*4096kB (M) = 3910896kB
[ 1509.065734][T20704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1509.065747][T20704] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[ 1509.065759][T20704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1509.065772][T20704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1509.065784][T20704] 57347 total pagecache pages
[ 1509.065790][T20704] 0 pages in swap cache
[ 1509.065796][T20704] Free swap  = 124996kB
[ 1509.065802][T20704] Total swap = 124996kB
[ 1509.065808][T20704] 2097051 pages RAM
[ 1509.065814][T20704] 0 pages HighMem/MovableOnly
[ 1509.065819][T20704] 421006 pages reserved
[ 1509.065825][T20704] 0 pages cma reserved
[ 1509.170043][T17307] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1509.306447][T17307] usb 10-1: device descriptor read/64, error -71
[ 1509.586722][T17307] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 1509.736568][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1509.746520][T17307] usb 10-1: device descriptor read/64, error -71
[ 1509.873154][T17307] usb usb10-port1: attempt power cycle
[ 1510.036472][   T10] usb 6-1: device descriptor read/64, error -71
[ 1510.376796][T17307] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 1510.546048][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1511.406387][   T10] usb 6-1: device descriptor read/64, error -71
[ 1511.409516][T17307] usb 10-1: device descriptor read/8, error -71
[ 1511.516752][   T10] usb usb6-port1: attempt power cycle
[ 1511.856368][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1511.887049][T17307] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 1512.110699][T17307] usb 10-1: device not accepting address 29, error -71
[ 1512.122887][T17307] usb usb10-port1: unable to enumerate USB device
[ 1512.805440][T20758] netlink: 'syz.9.5477': attribute type 1 has an invalid length.
[ 1512.805464][T20758] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5477'.
[ 1512.842329][T20758] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5477'.
[ 1512.969769][   T10] usb 6-1: device descriptor read/8, error -71
[ 1513.316585][T20772] dvmrp3: entered allmulticast mode
[ 1513.334736][T20776] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5484'.
[ 1513.396643][T20772] dvmrp3: left allmulticast mode
[ 1513.416224][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1513.437314][   T10] usb 6-1: Using ep0 maxpacket: 16
[ 1513.444325][   T10] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1513.444357][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1513.444384][   T10] usb 6-1: Product: syz
[ 1513.444399][   T10] usb 6-1: Manufacturer: syz
[ 1513.444413][   T10] usb 6-1: SerialNumber: syz
[ 1513.514926][   T10] usb 6-1: config 0 descriptor??
[ 1513.960640][   T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 1514.005803][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1514.029590][   T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 1514.029664][   T10] usb 6-1: media controller created
[ 1514.093208][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1514.110053][T20791] FAULT_INJECTION: forcing a failure.
[ 1514.110053][T20791] name failslab, interval 1, probability 0, space 0, times 0
[ 1514.110090][T20791] CPU: 0 UID: 0 PID: 20791 Comm: syz.8.5492 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1514.110117][T20791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1514.110131][T20791] Call Trace:
[ 1514.110140][T20791]  <TASK>
[ 1514.110151][T20791]  dump_stack_lvl+0x189/0x250
[ 1514.110197][T20791]  ? __pfx____ratelimit+0x10/0x10
[ 1514.110231][T20791]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1514.110265][T20791]  ? __pfx__printk+0x10/0x10
[ 1514.110309][T20791]  should_fail_ex+0x46c/0x600
[ 1514.110354][T20791]  should_failslab+0xa8/0x100
[ 1514.110390][T20791]  __kmalloc_cache_noprof+0x6f/0x6c0
[ 1514.110423][T20791]  ? sctp_add_bind_addr+0x8c/0x370
[ 1514.110459][T20791]  sctp_add_bind_addr+0x8c/0x370
[ 1514.110494][T20791]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 1514.110528][T20791]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 1514.110559][T20791]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1514.110592][T20791]  ? sctp_v6_is_any+0x64/0x80
[ 1514.110626][T20791]  ? sctp_copy_one_addr+0x93/0x360
[ 1514.110661][T20791]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1514.110693][T20791]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1514.110724][T20791]  sctp_connect_new_asoc+0x2e0/0x690
[ 1514.110751][T20791]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1514.110777][T20791]  ? rt_spin_unlock+0x161/0x200
[ 1514.110806][T20791]  ? lock_sock_nested+0x5f/0x130
[ 1514.110839][T20791]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1514.110859][T20791]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1514.110887][T20791]  sctp_sendmsg+0x14fd/0x2590
[ 1514.110937][T20791]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1514.110972][T20791]  ? __lock_acquire+0xab9/0xd20
[ 1514.111022][T20791]  ? sock_rps_record_flow+0x19/0x410
[ 1514.111060][T20791]  ? inet_sendmsg+0x2f4/0x370
[ 1514.111099][T20791]  __sock_sendmsg+0x19c/0x270
[ 1514.111137][T20791]  __sys_sendto+0x3c7/0x520
[ 1514.111165][T20791]  ? __pfx___sys_sendto+0x10/0x10
[ 1514.111221][T20791]  ? ksys_write+0x230/0x260
[ 1514.111253][T20791]  ? __pfx_ksys_write+0x10/0x10
[ 1514.111286][T20791]  __x64_sys_sendto+0xde/0x100
[ 1514.111315][T20791]  do_syscall_64+0xfa/0xfa0
[ 1514.111354][T20791]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1514.111386][T20791]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1514.111409][T20791]  ? clear_bhb_loop+0x60/0xb0
[ 1514.111437][T20791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1514.111460][T20791] RIP: 0033:0x7f7eb0e9f749
[ 1514.111480][T20791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1514.111500][T20791] RSP: 002b:00007f7eaf106038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1514.111523][T20791] RAX: ffffffffffffffda RBX: 00007f7eb10f5fa0 RCX: 00007f7eb0e9f749
[ 1514.111541][T20791] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[ 1514.111555][T20791] RBP: 00007f7eaf106090 R08: 000020000005ffe4 R09: 000000000000001c
[ 1514.111571][T20791] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002
[ 1514.111585][T20791] R13: 00007f7eb10f6038 R14: 00007f7eb10f5fa0 R15: 00007fff33613aa8
[ 1514.111624][T20791]  </TASK>
[ 1514.116295][T11042] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 1514.266155][T11042] usb 10-1: Using ep0 maxpacket: 16
[ 1514.275264][T11042] usb 10-1: config index 0 descriptor too short (expected 65, got 36)
[ 1514.275298][T11042] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1514.275361][T11042] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[ 1514.275389][T11042] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1514.473763][T20796] dtv5100: wlen = 0, aborting.
[ 1514.512343][T11042] usb 10-1: config 0 descriptor??
[ 1514.519393][T20793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1514.519901][T20793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1514.548835][T11042] pxrc 10-1:0.0: Could not find endpoint
[ 1514.730323][   T38] audit: type=1326 audit(1764223485.015:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20799 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ef0f749 code=0x7ffc0000
[ 1514.734156][   T38] audit: type=1326 audit(1764223485.015:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20799 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ef0f749 code=0x7ffc0000
[ 1514.778573][T20788] openvswitch: netlink: Message has 572 unknown bytes.
[ 1514.778614][T20788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1514.804820][   T38] audit: type=1326 audit(1764223485.085:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20799 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b8ef0f749 code=0x7ffc0000
[ 1514.806357][   T38] audit: type=1326 audit(1764223485.095:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20799 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ef0f749 code=0x7ffc0000
[ 1514.808538][   T38] audit: type=1326 audit(1764223485.095:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20799 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5b8ef0f749 code=0x7ffc0000
[ 1514.808594][   T38] audit: type=1326 audit(1764223485.095:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20799 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ef0f749 code=0x7ffc0000
[ 1514.816730][T20800] binder: 20799:20800 unknown command 64
[ 1514.816764][T20800] binder: 20799:20800 ioctl c0306201 200000000080 returned -22
[ 1514.824647][   T38] audit: type=1326 audit(1764223485.095:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20799 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b8ef0f749 code=0x7ffc0000
[ 1514.849668][   T38] audit: type=1326 audit(1764223485.095:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20799 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ef0f749 code=0x7ffc0000
[ 1514.849751][   T38] audit: type=1326 audit(1764223485.105:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20799 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5b8ef0f749 code=0x7ffc0000
[ 1514.849806][   T38] audit: type=1326 audit(1764223485.105:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20799 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ef0f749 code=0x7ffc0000
[ 1514.896899][ T8746] usb 10-1: USB disconnect, device number 30
[ 1515.064871][   T10] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1515.064938][   T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 1515.064953][   T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 1515.098007][   T10] usb 6-1: USB disconnect, device number 6
[ 1515.162711][   T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 1515.317197][T20808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5498'.
[ 1517.090338][T20833] netlink: 'syz.9.5508': attribute type 16 has an invalid length.
[ 1517.090364][T20833] netlink: 'syz.9.5508': attribute type 17 has an invalid length.
[ 1517.116158][  T990] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1517.276371][  T990] usb 6-1: Using ep0 maxpacket: 8
[ 1517.285488][  T990] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[ 1517.285521][  T990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1517.285542][  T990] usb 6-1: Product: syz
[ 1517.285559][  T990] usb 6-1: Manufacturer: syz
[ 1517.285575][  T990] usb 6-1: SerialNumber: syz
[ 1517.466053][T18235] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[ 1517.625989][T18235] usb 10-1: Using ep0 maxpacket: 8
[ 1517.628651][T18235] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1517.628709][T18235] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1517.632478][T18235] usb 10-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1517.632509][T18235] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1517.632533][T18235] usb 10-1: Product: syz
[ 1517.632550][T18235] usb 10-1: Manufacturer: syz
[ 1517.632566][T18235] usb 10-1: SerialNumber: syz
[ 1517.672843][T20846] FAULT_INJECTION: forcing a failure.
[ 1517.672843][T20846] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1517.672887][T20846] CPU: 0 UID: 0 PID: 20846 Comm: syz.8.5513 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1517.672917][T20846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1517.672932][T20846] Call Trace:
[ 1517.672942][T20846]  <TASK>
[ 1517.672953][T20846]  dump_stack_lvl+0x189/0x250
[ 1517.672998][T20846]  ? __pfx____ratelimit+0x10/0x10
[ 1517.673033][T20846]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1517.673070][T20846]  ? __pfx__printk+0x10/0x10
[ 1517.673102][T20846]  ? fs_reclaim_acquire+0x7d/0x100
[ 1517.673150][T20846]  should_fail_ex+0x46c/0x600
[ 1517.673190][T20846]  prepare_alloc_pages+0x213/0x670
[ 1517.673237][T20846]  __alloc_frozen_pages_noprof+0x123/0x370
[ 1517.673281][T20846]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1517.673343][T20846]  alloc_pages_bulk_noprof+0x5fa/0x7d0
[ 1517.673388][T20846]  ? alloc_pages_noprof+0xe4/0x1e0
[ 1517.673429][T20846]  kasan_populate_vmalloc+0xd1/0x270
[ 1517.673470][T20846]  alloc_vmap_area+0xd7a/0x14c0
[ 1517.673521][T20846]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1517.673552][T20846]  ? __kasan_kmalloc+0x93/0xb0
[ 1517.673587][T20846]  ? __kmalloc_cache_node_noprof+0x2a9/0x700
[ 1517.673622][T20846]  ? __get_vm_area_node+0x172/0x350
[ 1517.673652][T20846]  ? bpf_check+0x1aa/0x1d730
[ 1517.673690][T20846]  __get_vm_area_node+0x227/0x350
[ 1517.673730][T20846]  __vmalloc_node_range_noprof+0x30c/0x12d0
[ 1517.673765][T20846]  ? bpf_check+0x1aa/0x1d730
[ 1517.673796][T20846]  ? __lruvec_stat_mod_folio+0x6f/0x2e0
[ 1517.673840][T20846]  ? __phys_addr+0xd3/0x180
[ 1517.673876][T20846]  ? __kasan_kmalloc_large+0x85/0xa0
[ 1517.673914][T20846]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1517.673957][T20846]  ? bpf_check+0x1aa/0x1d730
[ 1517.673986][T20846]  vzalloc_noprof+0xb2/0xf0
[ 1517.674018][T20846]  ? bpf_check+0x1aa/0x1d730
[ 1517.674050][T20846]  bpf_check+0x1aa/0x1d730
[ 1517.674117][T20846]  ? rtlock_slowlock_locked+0xd8/0x4010
[ 1517.674156][T20846]  ? __lock_acquire+0xab9/0xd20
[ 1517.674196][T20846]  ? __lock_acquire+0xab9/0xd20
[ 1517.674241][T20846]  ? do_raw_spin_lock+0x121/0x290
[ 1517.674293][T20846]  ? __lock_acquire+0xab9/0xd20
[ 1517.674334][T20846]  ? __pfx_bpf_check+0x10/0x10
[ 1517.674377][T20846]  ? seqcount_lockdep_reader_access+0x122/0x1c0
[ 1517.674405][T20846]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1517.674441][T20846]  ? ktime_get_with_offset+0x93/0x2a0
[ 1517.674467][T20846]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[ 1517.674494][T20846]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[ 1517.674534][T20846]  ? __asan_memset+0x22/0x50
[ 1517.674562][T20846]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[ 1517.674587][T20846]  ? security_bpf_prog_load+0x125/0x3f0
[ 1517.674621][T20846]  bpf_prog_load+0x13ba/0x19e0
[ 1517.674676][T20846]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1517.674740][T20846]  ? bpf_lsm_bpf+0x9/0x20
[ 1517.674763][T20846]  ? security_bpf+0x7e/0x300
[ 1517.674793][T20846]  __sys_bpf+0x507/0x860
[ 1517.674829][T20846]  ? __pfx___sys_bpf+0x10/0x10
[ 1517.674859][T20846]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1517.674908][T20846]  ? ksys_write+0x230/0x260
[ 1517.674942][T20846]  ? __pfx_ksys_write+0x10/0x10
[ 1517.674980][T20846]  __x64_sys_bpf+0x7c/0x90
[ 1517.675013][T20846]  do_syscall_64+0xfa/0xfa0
[ 1517.675047][T20846]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1517.675082][T20846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1517.675108][T20846]  ? clear_bhb_loop+0x60/0xb0
[ 1517.675140][T20846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1517.675164][T20846] RIP: 0033:0x7f7eb0e9f749
[ 1517.675186][T20846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1517.675207][T20846] RSP: 002b:00007f7eaf106038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1517.675230][T20846] RAX: ffffffffffffffda RBX: 00007f7eb10f5fa0 RCX: 00007f7eb0e9f749
[ 1517.675249][T20846] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005
[ 1517.675266][T20846] RBP: 00007f7eaf106090 R08: 0000000000000000 R09: 0000000000000000
[ 1517.675283][T20846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1517.675299][T20846] R13: 00007f7eb10f6038 R14: 00007f7eb10f5fa0 R15: 00007fff33613aa8
[ 1517.675341][T20846]  </TASK>
[ 1517.769628][T18235] usb 10-1: config 0 descriptor??
[ 1517.801552][T18235] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 found
[ 1517.973759][T18235] snd_usb_toneport 10-1:0.0: set_interface failed
[ 1517.974852][T18235] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1517.975116][T18235] snd_usb_toneport 10-1:0.0: probe with driver snd_usb_toneport failed with error -71
[ 1517.981881][T18235] usb 10-1: USB disconnect, device number 31
[ 1518.264422][  T990] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71)
[ 1518.264537][  T990] mxuport 6-1:254.0: probe with driver mxuport failed with error -5
[ 1518.292815][  T990] usb 6-1: USB disconnect, device number 7
[ 1519.311411][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1520.032978][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1520.356279][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1520.697071][T20922] program syz.5.5545 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1521.301012][T20941] program syz.4.5553 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1522.893392][T18235] Process accounting resumed
[ 1523.056602][T18235] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[ 1523.210708][T18235] usb 10-1: Using ep0 maxpacket: 16
[ 1523.214127][T18235] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1523.214160][T18235] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1523.225942][T18235] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1523.225975][T18235] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1523.225997][T18235] usb 10-1: Product: syz
[ 1523.226013][T18235] usb 10-1: Manufacturer: syz
[ 1523.226038][T18235] usb 10-1: SerialNumber: syz
[ 1523.898655][T20965] Process accounting resumed
[ 1524.021419][T20983] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1524.496131][T18235] usb 10-1: 0:2 : does not exist
[ 1524.556344][T18235] usb 10-1: USB disconnect, device number 32
[ 1524.639204][T20988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5570'.
[ 1525.035001][T20995] dvmrp3: left allmulticast mode
[ 1525.887411][T21007] dvmrp3: entered allmulticast mode
[ 1526.426257][   T38] kauditd_printk_skb: 18 callbacks suppressed
[ 1526.426279][   T38] audit: type=1326 audit(1764223496.696:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21015 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8324bef749 code=0x7ffc0000
[ 1526.426336][   T38] audit: type=1326 audit(1764223496.696:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21015 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8324bef749 code=0x7ffc0000
[ 1526.426385][   T38] audit: type=1326 audit(1764223496.706:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21015 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8324bef749 code=0x7ffc0000
[ 1526.426437][   T38] audit: type=1326 audit(1764223496.706:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21015 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8324bef749 code=0x7ffc0000
[ 1526.426486][   T38] audit: type=1326 audit(1764223496.706:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21015 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8324bef749 code=0x7ffc0000
[ 1526.438531][   T38] audit: type=1326 audit(1764223496.716:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21015 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8324bef749 code=0x7ffc0000
[ 1526.438598][   T38] audit: type=1326 audit(1764223496.716:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21015 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8324bef749 code=0x7ffc0000
[ 1526.438653][   T38] audit: type=1326 audit(1764223496.716:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21015 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8324bef749 code=0x7ffc0000
[ 1527.395635][T18235] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1527.548315][T18235] usb 6-1: config 0 has an invalid interface number: 69 but max is 0
[ 1527.548347][T18235] usb 6-1: config 0 has no interface number 0
[ 1527.548406][T18235] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 1527.548435][T18235] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1527.690491][T18235] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 1527.690525][T18235] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.690547][T18235] usb 6-1: Product: syz
[ 1527.690572][T18235] usb 6-1: Manufacturer: syz
[ 1527.690588][T18235] usb 6-1: SerialNumber: syz
[ 1527.791144][T18235] usb 6-1: config 0 descriptor??
[ 1527.792225][T21021] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1527.811715][T18235] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 1527.851661][T18235] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 1528.085218][T21021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1528.088143][T21021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1528.387115][T21033] program syz.4.5590 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1528.534356][T10978] usb 6-1: USB disconnect, device number 8
[ 1528.618617][T10978] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 1528.619304][T10978] cyberjack 6-1:0.69: device disconnected
[ 1531.117254][T21078] FAULT_INJECTION: forcing a failure.
[ 1531.117254][T21078] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1531.117294][T21078] CPU: 0 UID: 0 PID: 21078 Comm: syz.5.5603 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1531.117321][T21078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1531.117335][T21078] Call Trace:
[ 1531.117344][T21078]  <TASK>
[ 1531.117355][T21078]  dump_stack_lvl+0x189/0x250
[ 1531.117397][T21078]  ? __pfx____ratelimit+0x10/0x10
[ 1531.117434][T21078]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1531.117469][T21078]  ? __pfx__printk+0x10/0x10
[ 1531.117499][T21078]  ? fs_reclaim_acquire+0x7d/0x100
[ 1531.117541][T21078]  should_fail_ex+0x46c/0x600
[ 1531.117579][T21078]  prepare_alloc_pages+0x213/0x670
[ 1531.117622][T21078]  __alloc_frozen_pages_noprof+0x123/0x370
[ 1531.117663][T21078]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1531.117718][T21078]  alloc_pages_mpol+0xd1/0x380
[ 1531.117757][T21078]  alloc_pages_noprof+0xcf/0x1e0
[ 1531.117794][T21078]  get_free_pages_noprof+0xf/0x80
[ 1531.117829][T21078]  kasan_populate_vmalloc+0x38/0x270
[ 1531.117860][T21078]  ? rt_spin_unlock+0x161/0x200
[ 1531.117892][T21078]  alloc_vmap_area+0xd7a/0x14c0
[ 1531.117939][T21078]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1531.117967][T21078]  ? __kasan_kmalloc+0x93/0xb0
[ 1531.117999][T21078]  ? __kmalloc_cache_node_noprof+0x2a9/0x700
[ 1531.118032][T21078]  ? __get_vm_area_node+0x172/0x350
[ 1531.118060][T21078]  ? bpf_check+0x1aa/0x1d730
[ 1531.118088][T21078]  __get_vm_area_node+0x227/0x350
[ 1531.118125][T21078]  __vmalloc_node_range_noprof+0x30c/0x12d0
[ 1531.118165][T21078]  ? bpf_check+0x1aa/0x1d730
[ 1531.118193][T21078]  ? __lruvec_stat_mod_folio+0x6f/0x2e0
[ 1531.118234][T21078]  ? __phys_addr+0xd3/0x180
[ 1531.118268][T21078]  ? __kasan_kmalloc_large+0x85/0xa0
[ 1531.118304][T21078]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1531.118343][T21078]  ? bpf_check+0x1aa/0x1d730
[ 1531.118370][T21078]  vzalloc_noprof+0xb2/0xf0
[ 1531.118401][T21078]  ? bpf_check+0x1aa/0x1d730
[ 1531.118429][T21078]  bpf_check+0x1aa/0x1d730
[ 1531.118492][T21078]  ? rtlock_slowlock_locked+0xd8/0x4010
[ 1531.118528][T21078]  ? __lock_acquire+0xab9/0xd20
[ 1531.118562][T21078]  ? __lock_acquire+0xab9/0xd20
[ 1531.118602][T21078]  ? do_raw_spin_lock+0x121/0x290
[ 1531.118649][T21078]  ? __lock_acquire+0xab9/0xd20
[ 1531.118687][T21078]  ? __pfx_bpf_check+0x10/0x10
[ 1531.118725][T21078]  ? seqcount_lockdep_reader_access+0x122/0x1c0
[ 1531.118752][T21078]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1531.118786][T21078]  ? ktime_get_with_offset+0x93/0x2a0
[ 1531.118808][T21078]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[ 1531.118834][T21078]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[ 1531.118872][T21078]  ? __asan_memset+0x22/0x50
[ 1531.118898][T21078]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[ 1531.118921][T21078]  ? security_bpf_prog_load+0x125/0x3f0
[ 1531.118953][T21078]  bpf_prog_load+0x13ba/0x19e0
[ 1531.119000][T21078]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1531.119058][T21078]  ? bpf_lsm_bpf+0x9/0x20
[ 1531.119078][T21078]  ? security_bpf+0x7e/0x300
[ 1531.119106][T21078]  __sys_bpf+0x507/0x860
[ 1531.119147][T21078]  ? __pfx___sys_bpf+0x10/0x10
[ 1531.119176][T21078]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1531.119221][T21078]  ? ksys_write+0x230/0x260
[ 1531.119253][T21078]  ? __pfx_ksys_write+0x10/0x10
[ 1531.119289][T21078]  __x64_sys_bpf+0x7c/0x90
[ 1531.119319][T21078]  do_syscall_64+0xfa/0xfa0
[ 1531.119350][T21078]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1531.119382][T21078]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1531.119406][T21078]  ? clear_bhb_loop+0x60/0xb0
[ 1531.119434][T21078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1531.119457][T21078] RIP: 0033:0x7f8324bef749
[ 1531.119477][T21078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1531.119497][T21078] RSP: 002b:00007f8322e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1531.119522][T21078] RAX: ffffffffffffffda RBX: 00007f8324e45fa0 RCX: 00007f8324bef749
[ 1531.119540][T21078] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005
[ 1531.119555][T21078] RBP: 00007f8322e56090 R08: 0000000000000000 R09: 0000000000000000
[ 1531.119570][T21078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1531.119583][T21078] R13: 00007f8324e46038 R14: 00007f8324e45fa0 R15: 00007ffe3a6f4008
[ 1531.119619][T21078]  </TASK>
[ 1531.366825][T21078] warn_alloc: 1 callbacks suppressed
[ 1531.366847][T21078] syz.5.5603: vmalloc error: size 352, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1531.366920][T21078] CPU: 0 UID: 0 PID: 21078 Comm: syz.5.5603 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1531.366947][T21078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1531.366961][T21078] Call Trace:
[ 1531.366970][T21078]  <TASK>
[ 1531.366981][T21078]  dump_stack_lvl+0x189/0x250
[ 1531.367024][T21078]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1531.367060][T21078]  ? __pfx__printk+0x10/0x10
[ 1531.367111][T21078]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1531.367139][T21078]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1531.367169][T21078]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 1531.367199][T21078]  warn_alloc+0x22e/0x3b0
[ 1531.367233][T21078]  ? kasan_quarantine_put+0xdd/0x220
[ 1531.367262][T21078]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1531.367299][T21078]  ? __pfx_warn_alloc+0x10/0x10
[ 1531.367333][T21078]  ? __get_vm_area_node+0x240/0x350
[ 1531.367360][T21078]  ? __get_vm_area_node+0x172/0x350
[ 1531.367396][T21078]  ? bpf_check+0x1aa/0x1d730
[ 1531.367423][T21078]  ? __get_vm_area_node+0x240/0x350
[ 1531.367461][T21078]  __vmalloc_node_range_noprof+0x331/0x12d0
[ 1531.367495][T21078]  ? __lruvec_stat_mod_folio+0x6f/0x2e0
[ 1531.367536][T21078]  ? __phys_addr+0xd3/0x180
[ 1531.367570][T21078]  ? __kasan_kmalloc_large+0x85/0xa0
[ 1531.367606][T21078]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1531.367646][T21078]  ? bpf_check+0x1aa/0x1d730
[ 1531.367673][T21078]  vzalloc_noprof+0xb2/0xf0
[ 1531.367702][T21078]  ? bpf_check+0x1aa/0x1d730
[ 1531.367731][T21078]  bpf_check+0x1aa/0x1d730
[ 1531.367793][T21078]  ? rtlock_slowlock_locked+0xd8/0x4010
[ 1531.367829][T21078]  ? __lock_acquire+0xab9/0xd20
[ 1531.367864][T21078]  ? __lock_acquire+0xab9/0xd20
[ 1531.367903][T21078]  ? do_raw_spin_lock+0x121/0x290
[ 1531.367949][T21078]  ? __lock_acquire+0xab9/0xd20
[ 1531.367988][T21078]  ? __pfx_bpf_check+0x10/0x10
[ 1531.368026][T21078]  ? seqcount_lockdep_reader_access+0x122/0x1c0
[ 1531.368053][T21078]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1531.368086][T21078]  ? ktime_get_with_offset+0x93/0x2a0
[ 1531.368109][T21078]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[ 1531.368135][T21078]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[ 1531.368173][T21078]  ? __asan_memset+0x22/0x50
[ 1531.368199][T21078]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[ 1531.368222][T21078]  ? security_bpf_prog_load+0x125/0x3f0
[ 1531.368254][T21078]  bpf_prog_load+0x13ba/0x19e0
[ 1531.368301][T21078]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1531.368359][T21078]  ? bpf_lsm_bpf+0x9/0x20
[ 1531.368380][T21078]  ? security_bpf+0x7e/0x300
[ 1531.368415][T21078]  __sys_bpf+0x507/0x860
[ 1531.368448][T21078]  ? __pfx___sys_bpf+0x10/0x10
[ 1531.368477][T21078]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1531.368523][T21078]  ? ksys_write+0x230/0x260
[ 1531.368554][T21078]  ? __pfx_ksys_write+0x10/0x10
[ 1531.368590][T21078]  __x64_sys_bpf+0x7c/0x90
[ 1531.368619][T21078]  do_syscall_64+0xfa/0xfa0
[ 1531.368651][T21078]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1531.368683][T21078]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1531.368706][T21078]  ? clear_bhb_loop+0x60/0xb0
[ 1531.368733][T21078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1531.368756][T21078] RIP: 0033:0x7f8324bef749
[ 1531.368777][T21078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1531.368798][T21078] RSP: 002b:00007f8322e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1531.368821][T21078] RAX: ffffffffffffffda RBX: 00007f8324e45fa0 RCX: 00007f8324bef749
[ 1531.368838][T21078] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005
[ 1531.368853][T21078] RBP: 00007f8322e56090 R08: 0000000000000000 R09: 0000000000000000
[ 1531.368868][T21078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1531.368882][T21078] R13: 00007f8324e46038 R14: 00007f8324e45fa0 R15: 00007ffe3a6f4008
[ 1531.368919][T21078]  </TASK>
[ 1531.368929][T21078] Mem-Info:
[ 1531.368939][T21078] active_anon:258 inactive_anon:6817 isolated_anon:0
[ 1531.368939][T21078]  active_file:19083 inactive_file:36869 isolated_file:0
[ 1531.368939][T21078]  unevictable:768 dirty:322 writeback:0
[ 1531.368939][T21078]  slab_reclaimable:11673 slab_unreclaimable:116989
[ 1531.368939][T21078]  mapped:30610 shmem:1377 pagetables:1139
[ 1531.368939][T21078]  sec_pagetables:0 bounce:0
[ 1531.368939][T21078]  kernel_misc_reclaimable:0
[ 1531.368939][T21078]  free:1294877 free_pcp:8673 free_cma:0
[ 1531.368996][T21078] Node 0 active_anon:1032kB inactive_anon:27268kB active_file:76056kB inactive_file:147476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122400kB dirty:1288kB writeback:0kB shmem:3972kB kernel_stack:13064kB pagetables:4432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1531.369050][T21078] Node 1 active_anon:0kB inactive_anon:0kB active_file:276kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1531.369099][T21078] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1531.369165][T21078] lowmem_reserve[]: 0 2515 2517 2517 2517
[ 1531.369204][T21078] Node 0 DMA32 free:1253252kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1032kB inactive_anon:27268kB active_file:76056kB inactive_file:147476kB unevictable:1536kB writepending:1288kB zspages:0kB present:3129332kB managed:2576076kB mlocked:0kB bounce:0kB free_pcp:34692kB local_pcp:12432kB free_cma:0kB
[ 1531.369274][T21078] lowmem_reserve[]: 0 0 1 1 1
[ 1531.369311][T21078] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1531.369376][T21078] lowmem_reserve[]: 0 0 0 0 0
[ 1531.369419][T21078] Node 1 Normal free:3910896kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:276kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1531.369487][T21078] lowmem_reserve[]: 0 0 0 0 0
[ 1531.369523][T21078] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1531.369652][T21078] Node 0 DMA32: 3*4kB (UME) 540*8kB (UE) 56*16kB (E) 1922*32kB (UME) 482*64kB (UME) 132*128kB (UME) 58*256kB (UME) 27*512kB (UME) 14*1024kB (UM) 21*2048kB (UME) 257*4096kB (UM) = 1253164kB
[ 1531.369828][T21078] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1531.369939][T21078] Node 1 Normal: 184*4kB (UE) 46*8kB (UE) 48*16kB (UME) 195*32kB (UME) 83*64kB (UE) 33*128kB (UME) 14*256kB (UME) 9*512kB (UME) 4*1024kB (UME) 3*2048kB (ME) 946*4096kB (M) = 3910896kB
[ 1531.370112][T21078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1531.370132][T21078] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[ 1531.370152][T21078] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1531.370171][T21078] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1531.370189][T21078] 57326 total pagecache pages
[ 1531.370198][T21078] 0 pages in swap cache
[ 1531.370206][T21078] Free swap  = 124996kB
[ 1531.370215][T21078] Total swap = 124996kB
[ 1531.370225][T21078] 2097051 pages RAM
[ 1531.370233][T21078] 0 pages HighMem/MovableOnly
[ 1531.370241][T21078] 421006 pages reserved
[ 1531.370250][T21078] 0 pages cma reserved
[ 1533.362983][T21092] lo speed is unknown, defaulting to 1000
[ 1533.392014][T21092] lo speed is unknown, defaulting to 1000
[ 1533.453529][T21092] lo speed is unknown, defaulting to 1000
[ 1536.354544][T10978] lo speed is unknown, defaulting to 1000
[ 1536.375091][T21092] infiniband syz1: set active
[ 1536.375119][T21092] infiniband syz1: added lo
[ 1536.382535][T21092] syz1: rxe_create_cq: returned err = -12
[ 1536.382789][T21092] infiniband syz1: Couldn't create ib_mad CQ
[ 1536.383008][T21092] infiniband syz1: Couldn't open port 1
[ 1537.824311][T21092] RDS/IB: syz1: added
[ 1537.871703][T21092] smc: adding ib device syz1 with port count 1
[ 1537.884738][T21092] smc:    ib device syz1 port 1 has no pnetid
[ 1537.922609][ T8746] lo speed is unknown, defaulting to 1000
[ 1537.958266][T21092] lo speed is unknown, defaulting to 1000
[ 1541.011050][T21092] lo speed is unknown, defaulting to 1000
[ 1542.467727][T21169] FAULT_INJECTION: forcing a failure.
[ 1542.467727][T21169] name failslab, interval 1, probability 0, space 0, times 0
[ 1542.467795][T21169] CPU: 0 UID: 0 PID: 21169 Comm: syz.0.5636 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1542.467822][T21169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1542.467838][T21169] Call Trace:
[ 1542.467847][T21169]  <TASK>
[ 1542.467857][T21169]  dump_stack_lvl+0x189/0x250
[ 1542.467897][T21169]  ? __pfx____ratelimit+0x10/0x10
[ 1542.467930][T21169]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1542.467965][T21169]  ? __pfx__printk+0x10/0x10
[ 1542.467990][T21169]  ? fs_reclaim_acquire+0x7d/0x100
[ 1542.468024][T21169]  should_fail_ex+0x46c/0x600
[ 1542.468053][T21169]  should_failslab+0xa8/0x100
[ 1542.468080][T21169]  __kmalloc_cache_noprof+0x6f/0x6c0
[ 1542.468105][T21169]  ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[ 1542.468208][T21169]  sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[ 1542.468241][T21169]  sctp_association_new+0x15d3/0x25f0
[ 1542.468272][T21169]  sctp_connect_new_asoc+0x2c5/0x690
[ 1542.468293][T21169]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1542.468313][T21169]  ? rt_spin_unlock+0x161/0x200
[ 1542.468335][T21169]  ? lock_sock_nested+0x5f/0x130
[ 1542.468360][T21169]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1542.468376][T21169]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1542.468398][T21169]  sctp_sendmsg+0x14fd/0x2590
[ 1542.468435][T21169]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1542.468462][T21169]  ? __pfx___schedule+0x10/0x10
[ 1542.468489][T21169]  ? finish_task_switch+0x266/0x950
[ 1542.468525][T21169]  ? sock_rps_record_flow+0x19/0x410
[ 1542.468554][T21169]  ? inet_sendmsg+0x2f4/0x370
[ 1542.468584][T21169]  __sock_sendmsg+0x19c/0x270
[ 1542.468613][T21169]  ____sys_sendmsg+0x534/0x820
[ 1542.468639][T21169]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1542.468663][T21169]  ? ___sys_sendmsg+0x205/0x2a0
[ 1542.468686][T21169]  ? ____sys_sendmsg+0x10/0x820
[ 1542.468710][T21169]  ___sys_sendmsg+0x21f/0x2a0
[ 1542.468733][T21169]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1542.468787][T21169]  ? __fget_files+0x2a/0x420
[ 1542.468812][T21169]  ? __fget_files+0x3a6/0x420
[ 1542.468846][T21169]  __sys_sendmmsg+0x22d/0x430
[ 1542.468872][T21169]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1542.468904][T21169]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1542.468939][T21169]  ? ksys_write+0x230/0x260
[ 1542.468970][T21169]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1542.468993][T21169]  do_syscall_64+0xfa/0xfa0
[ 1542.469020][T21169]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1542.469038][T21169]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1542.469055][T21169]  ? clear_bhb_loop+0x60/0xb0
[ 1542.469076][T21169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1542.469093][T21169] RIP: 0033:0x7f5b8ef0f749
[ 1542.469109][T21169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1542.469124][T21169] RSP: 002b:00007f5b8d12c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1542.469149][T21169] RAX: ffffffffffffffda RBX: 00007f5b8f166180 RCX: 00007f5b8ef0f749
[ 1542.469162][T21169] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000006
[ 1542.469173][T21169] RBP: 00007f5b8d12c090 R08: 0000000000000000 R09: 0000000000000000
[ 1542.469183][T21169] R10: 0000000006000010 R11: 0000000000000246 R12: 0000000000000001
[ 1542.469194][T21169] R13: 00007f5b8f166218 R14: 00007f5b8f166180 R15: 00007ffd5f64aa38
[ 1542.469222][T21169]  </TASK>
[ 1543.404710][   T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1543.564610][   T10] usb 5-1: Using ep0 maxpacket: 16
[ 1543.568340][   T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1543.568375][   T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1543.568399][   T10] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[ 1543.568429][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1543.568466][   T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1543.568491][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1543.578466][   T10] usb 5-1: config 0 descriptor??
[ 1543.997204][   T10] hid (null): unknown global tag 0xd
[ 1543.998684][   T10] hid (null): invalid report_size 27418
[ 1544.243101][T21161] 9pnet_fd: Insufficient options for proto=fd
[ 1544.288790][T17158] usb 5-1: USB disconnect, device number 19
[ 1544.642979][T21092] lo speed is unknown, defaulting to 1000
[ 1545.318340][T21206] FAULT_INJECTION: forcing a failure.
[ 1545.318340][T21206] name failslab, interval 1, probability 0, space 0, times 0
[ 1545.318380][T21206] CPU: 0 UID: 0 PID: 21206 Comm: syz.8.5650 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1545.318407][T21206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1545.318422][T21206] Call Trace:
[ 1545.318432][T21206]  <TASK>
[ 1545.318442][T21206]  dump_stack_lvl+0x189/0x250
[ 1545.318482][T21206]  ? __pfx____ratelimit+0x10/0x10
[ 1545.318516][T21206]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1545.318551][T21206]  ? __pfx__printk+0x10/0x10
[ 1545.318597][T21206]  should_fail_ex+0x46c/0x600
[ 1545.318645][T21206]  should_failslab+0xa8/0x100
[ 1545.318680][T21206]  __kmalloc_cache_noprof+0x6f/0x6c0
[ 1545.318712][T21206]  ? sctp_add_bind_addr+0xb0/0x370
[ 1545.318741][T21206]  ? sctp_add_bind_addr+0x8c/0x370
[ 1545.318773][T21206]  sctp_add_bind_addr+0x8c/0x370
[ 1545.318810][T21206]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 1545.318845][T21206]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 1545.318876][T21206]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1545.318910][T21206]  ? sctp_v6_is_any+0x64/0x80
[ 1545.318945][T21206]  ? sctp_copy_one_addr+0x93/0x360
[ 1545.318979][T21206]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1545.319010][T21206]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1545.319041][T21206]  sctp_connect_new_asoc+0x2e0/0x690
[ 1545.319068][T21206]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1545.319094][T21206]  ? rt_spin_unlock+0x161/0x200
[ 1545.319122][T21206]  ? lock_sock_nested+0x5f/0x130
[ 1545.319155][T21206]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1545.319176][T21206]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1545.319209][T21206]  sctp_sendmsg+0x14fd/0x2590
[ 1545.319259][T21206]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1545.319293][T21206]  ? __lock_acquire+0xab9/0xd20
[ 1545.319345][T21206]  ? sock_rps_record_flow+0x19/0x410
[ 1545.319384][T21206]  ? inet_sendmsg+0x2f4/0x370
[ 1545.319423][T21206]  __sock_sendmsg+0x19c/0x270
[ 1545.319461][T21206]  __sys_sendto+0x3c7/0x520
[ 1545.319490][T21206]  ? __pfx___sys_sendto+0x10/0x10
[ 1545.319545][T21206]  ? ksys_write+0x230/0x260
[ 1545.319577][T21206]  ? __pfx_ksys_write+0x10/0x10
[ 1545.319617][T21206]  __x64_sys_sendto+0xde/0x100
[ 1545.319647][T21206]  do_syscall_64+0xfa/0xfa0
[ 1545.319679][T21206]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1545.319712][T21206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1545.319735][T21206]  ? clear_bhb_loop+0x60/0xb0
[ 1545.319763][T21206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1545.319786][T21206] RIP: 0033:0x7f7eb0e9f749
[ 1545.319806][T21206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1545.319825][T21206] RSP: 002b:00007f7eaf106038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1545.319849][T21206] RAX: ffffffffffffffda RBX: 00007f7eb10f5fa0 RCX: 00007f7eb0e9f749
[ 1545.319867][T21206] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[ 1545.319882][T21206] RBP: 00007f7eaf106090 R08: 000020000005ffe4 R09: 000000000000001c
[ 1545.319898][T21206] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002
[ 1545.319912][T21206] R13: 00007f7eb10f6038 R14: 00007f7eb10f5fa0 R15: 00007fff33613aa8
[ 1545.319950][T21206]  </TASK>
[ 1545.750124][T21092] lo speed is unknown, defaulting to 1000
[ 1547.053912][T21220] ./file0: Can't open blockdev
[ 1549.002215][T21092] lo speed is unknown, defaulting to 1000
[ 1549.796729][T19716] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1549.827915][T19716] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1549.829753][T19716] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1549.838732][T19716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1549.839744][T19716] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1551.241035][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1551.241113][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1551.944202][T19722] Bluetooth: hci1: command tx timeout
[ 1552.162295][T21257] lo speed is unknown, defaulting to 1000
[ 1552.900993][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5681'.
[ 1554.310962][T21092] lo speed is unknown, defaulting to 1000
[ 1554.570609][T19722] Bluetooth: hci1: command tx timeout
[ 1556.644511][T19716] Bluetooth: hci1: command tx timeout
[ 1556.831371][ T8746] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1556.983730][ T8746] usb 6-1: Using ep0 maxpacket: 16
[ 1557.004482][ T8746] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1557.004575][ T8746] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[ 1557.004623][ T8746] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1557.004652][ T8746] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1557.004691][ T8746] usb 6-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1A, changing to 0xA
[ 1557.004719][ T8746] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0xA has invalid maxpacket 239, setting to 64
[ 1557.009347][ T8746] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1557.009379][ T8746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1557.009403][ T8746] usb 6-1: Product: syz
[ 1557.009419][ T8746] usb 6-1: Manufacturer: syz
[ 1557.009449][ T8746] usb 6-1: SerialNumber: syz
[ 1557.272410][T21327] FAULT_INJECTION: forcing a failure.
[ 1557.272410][T21327] name failslab, interval 1, probability 0, space 0, times 0
[ 1557.272447][T21327] CPU: 0 UID: 0 PID: 21327 Comm: syz.8.5694 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1557.272473][T21327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1557.272488][T21327] Call Trace:
[ 1557.272497][T21327]  <TASK>
[ 1557.272515][T21327]  dump_stack_lvl+0x189/0x250
[ 1557.272556][T21327]  ? __pfx____ratelimit+0x10/0x10
[ 1557.272589][T21327]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1557.272624][T21327]  ? __pfx__printk+0x10/0x10
[ 1557.272659][T21327]  ? __pfx___might_resched+0x10/0x10
[ 1557.272682][T21327]  ? fs_reclaim_acquire+0x7d/0x100
[ 1557.272721][T21327]  should_fail_ex+0x46c/0x600
[ 1557.272759][T21327]  should_failslab+0xa8/0x100
[ 1557.272794][T21327]  __kmalloc_noprof+0xcc/0x7d0
[ 1557.272825][T21327]  ? tomoyo_encode+0x28b/0x550
[ 1557.272859][T21327]  tomoyo_encode+0x28b/0x550
[ 1557.272892][T21327]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1557.272924][T21327]  ? tomoyo_domain+0xda/0x130
[ 1557.272960][T21327]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1557.272998][T21327]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1557.273038][T21327]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1557.273070][T21327]  ? __seccomp_filter+0xaa6/0x1e10
[ 1557.273138][T21327]  ? __fget_files+0x2a/0x420
[ 1557.273177][T21327]  ? __fget_files+0x3a6/0x420
[ 1557.273208][T21327]  ? __fget_files+0x2a/0x420
[ 1557.273245][T21327]  security_file_ioctl+0xcb/0x2d0
[ 1557.273272][T21327]  __se_sys_ioctl+0x47/0x170
[ 1557.273302][T21327]  do_syscall_64+0xfa/0xfa0
[ 1557.273333][T21327]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1557.273365][T21327]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1557.273389][T21327]  ? clear_bhb_loop+0x60/0xb0
[ 1557.273417][T21327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1557.273440][T21327] RIP: 0033:0x7f7eb0e9f749
[ 1557.273460][T21327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1557.273481][T21327] RSP: 002b:00007f7eaf106038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1557.273505][T21327] RAX: ffffffffffffffda RBX: 00007f7eb10f5fa0 RCX: 00007f7eb0e9f749
[ 1557.273528][T21327] RDX: 00002000000001c0 RSI: 0000000000005452 RDI: 0000000000000004
[ 1557.273544][T21327] RBP: 00007f7eaf106090 R08: 0000000000000000 R09: 0000000000000000
[ 1557.273558][T21327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1557.273573][T21327] R13: 00007f7eb10f6038 R14: 00007f7eb10f5fa0 R15: 00007fff33613aa8
[ 1557.273613][T21327]  </TASK>
[ 1557.298943][T21327] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1558.723948][T19716] Bluetooth: hci1: command tx timeout
[ 1558.875752][T21333] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1559.325373][ T8746] usb 6-1: USB disconnect, device number 9
[ 1560.666191][T21257] chnl_net:caif_netlink_parms(): no params data found
[ 1560.922203][T21373] dvmrp3: entered allmulticast mode
[ 1561.102598][T21092] lo speed is unknown, defaulting to 1000
[ 1561.179487][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1561.209827][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1561.261370][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1561.339750][T21381] sctp: [Deprecated]: syz.4.5712 (pid 21381) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1561.339750][T21381] Use struct sctp_sack_info instead
[ 1562.982385][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1563.071471][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1563.493909][T21257] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1563.494073][T21257] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1563.494334][T21257] bridge_slave_0: entered allmulticast mode
[ 1563.509285][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1563.538018][T21257] bridge_slave_0: entered promiscuous mode
[ 1563.556462][T21257] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1563.570912][T21257] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1563.571218][T21257] bridge_slave_1: entered allmulticast mode
[ 1563.603548][T21257] bridge_slave_1: entered promiscuous mode
[ 1563.725164][T21401] FAULT_INJECTION: forcing a failure.
[ 1563.725164][T21401] name failslab, interval 1, probability 0, space 0, times 0
[ 1563.725201][T21401] CPU: 0 UID: 0 PID: 21401 Comm: syz.0.5719 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1563.725228][T21401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1563.725242][T21401] Call Trace:
[ 1563.725251][T21401]  <TASK>
[ 1563.725262][T21401]  dump_stack_lvl+0x189/0x250
[ 1563.725302][T21401]  ? __pfx____ratelimit+0x10/0x10
[ 1563.725335][T21401]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1563.725369][T21401]  ? __pfx__printk+0x10/0x10
[ 1563.725403][T21401]  ? __pfx___might_resched+0x10/0x10
[ 1563.725430][T21401]  ? fs_reclaim_acquire+0x7d/0x100
[ 1563.725468][T21401]  should_fail_ex+0x46c/0x600
[ 1563.725507][T21401]  should_failslab+0xa8/0x100
[ 1563.725542][T21401]  __kmalloc_node_track_caller_noprof+0xcf/0x7e0
[ 1563.725575][T21401]  ? vfs_parse_fs_qstr+0x111/0x1e0
[ 1563.725622][T21401]  kmemdup_nul+0x36/0xf0
[ 1563.725651][T21401]  vfs_parse_fs_qstr+0x111/0x1e0
[ 1563.725684][T21401]  ? legacy_init_fs_context+0x51/0xc0
[ 1563.725706][T21401]  ? __pfx_vfs_parse_fs_qstr+0x10/0x10
[ 1563.725743][T21401]  ? alloc_fs_context+0x670/0x7e0
[ 1563.725787][T21401]  do_new_mount+0x297/0xa10
[ 1563.725818][T21401]  ? safesetid_security_capable+0xa9/0x1a0
[ 1563.725846][T21401]  ? security_capable+0x7e/0x2e0
[ 1563.725878][T21401]  ? __pfx_do_new_mount+0x10/0x10
[ 1563.725910][T21401]  ? ns_capable+0x8a/0xf0
[ 1563.725956][T21401]  __se_sys_mount+0x313/0x410
[ 1563.725995][T21401]  ? __pfx___se_sys_mount+0x10/0x10
[ 1563.726033][T21401]  ? do_syscall_64+0xbe/0xfa0
[ 1563.726064][T21401]  ? __x64_sys_mount+0x20/0xc0
[ 1563.726099][T21401]  do_syscall_64+0xfa/0xfa0
[ 1563.726130][T21401]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1563.726162][T21401]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1563.726184][T21401]  ? clear_bhb_loop+0x60/0xb0
[ 1563.726212][T21401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1563.726235][T21401] RIP: 0033:0x7f5b8ef0f749
[ 1563.726256][T21401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1563.726276][T21401] RSP: 002b:00007f5b8d16e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1563.726300][T21401] RAX: ffffffffffffffda RBX: 00007f5b8f165fa0 RCX: 00007f5b8ef0f749
[ 1563.726318][T21401] RDX: 0000200000000600 RSI: 00002000000005c0 RDI: 0000200000000580
[ 1563.726335][T21401] RBP: 00007f5b8d16e090 R08: 0000200000000000 R09: 0000000000000000
[ 1563.726350][T21401] R10: 0000000002800004 R11: 0000000000000246 R12: 0000000000000002
[ 1563.726365][T21401] R13: 00007f5b8f166038 R14: 00007f5b8f165fa0 R15: 00007ffd5f64aa38
[ 1563.726402][T21401]  </TASK>
[ 1563.893477][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1563.951236][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1564.198290][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1564.425920][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1564.499137][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1564.560312][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1564.599468][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1564.779177][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1564.897004][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1564.948320][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1565.028216][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1565.159935][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1566.049227][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1566.129863][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1566.229074][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1568.631711][T21257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1569.340357][T21257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1574.096311][T21432] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5732'.
[ 1578.271369][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1578.300623][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1578.580483][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1578.822356][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1578.852174][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1578.883478][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1578.913511][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1578.962167][T21437] Bluetooth: hci6: command 0x0406 tx timeout
[ 1578.962349][T21437] Bluetooth: hci5: command 0x0406 tx timeout
[ 1578.977239][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1579.008725][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1579.030310][T21437] Bluetooth: hci7: command 0x0405 tx timeout
[ 1579.039225][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1579.071412][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1579.101021][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1579.132137][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1579.162318][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1580.494498][T21092] bond0: (slave syz_tun): Releasing backup interface
[ 1580.576488][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1580.611063][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1580.871844][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1580.904973][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1580.937846][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1580.969674][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1581.000322][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1581.035625][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1581.067453][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1581.100330][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1581.133349][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1581.164435][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1581.196228][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1581.229611][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1581.872486][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1582.625514][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1582.661676][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1582.710911][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1582.743099][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1582.777482][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1582.809130][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1582.841917][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1582.876105][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1583.309140][T21257] team0: Port device team_slave_0 added
[ 1586.893416][T21450] FAULT_INJECTION: forcing a failure.
[ 1586.893416][T21450] name failslab, interval 1, probability 0, space 0, times 0
[ 1586.893455][T21450] CPU: 0 UID: 0 PID: 21450 Comm: syz.4.5739 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1586.893482][T21450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1586.893496][T21450] Call Trace:
[ 1586.893506][T21450]  <TASK>
[ 1586.893516][T21450]  dump_stack_lvl+0x189/0x250
[ 1586.893557][T21450]  ? __pfx____ratelimit+0x10/0x10
[ 1586.893589][T21450]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1586.893623][T21450]  ? __pfx__printk+0x10/0x10
[ 1586.893658][T21450]  ? __pfx___might_resched+0x10/0x10
[ 1586.893683][T21450]  ? fs_reclaim_acquire+0x7d/0x100
[ 1586.893719][T21450]  should_fail_ex+0x46c/0x600
[ 1586.893757][T21450]  should_failslab+0xa8/0x100
[ 1586.893792][T21450]  __kmalloc_noprof+0xcc/0x7d0
[ 1586.893823][T21450]  ? tomoyo_encode+0x28b/0x550
[ 1586.893857][T21450]  tomoyo_encode+0x28b/0x550
[ 1586.893891][T21450]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1586.893922][T21450]  ? tomoyo_domain+0xda/0x130
[ 1586.893958][T21450]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1586.894001][T21450]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1586.894040][T21450]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1586.894073][T21450]  ? __seccomp_filter+0xaa6/0x1e10
[ 1586.894139][T21450]  ? __fget_files+0x2a/0x420
[ 1586.894177][T21450]  ? __fget_files+0x3a6/0x420
[ 1586.894207][T21450]  ? __fget_files+0x2a/0x420
[ 1586.894243][T21450]  security_file_ioctl+0xcb/0x2d0
[ 1586.894270][T21450]  __se_sys_ioctl+0x47/0x170
[ 1586.894299][T21450]  do_syscall_64+0xfa/0xfa0
[ 1586.894329][T21450]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1586.894362][T21450]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1586.894384][T21450]  ? clear_bhb_loop+0x60/0xb0
[ 1586.894412][T21450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1586.894443][T21450] RIP: 0033:0x7f289ed4f749
[ 1586.894462][T21450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1586.894481][T21450] RSP: 002b:00007f289cfb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1586.894504][T21450] RAX: ffffffffffffffda RBX: 00007f289efa5fa0 RCX: 00007f289ed4f749
[ 1586.894522][T21450] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000004
[ 1586.894536][T21450] RBP: 00007f289cfb6090 R08: 0000000000000000 R09: 0000000000000000
[ 1586.894550][T21450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1586.894565][T21450] R13: 00007f289efa6038 R14: 00007f289efa5fa0 R15: 00007ffc1063bcf8
[ 1586.894603][T21450]  </TASK>
[ 1586.894626][T21450] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1587.909545][T21257] team0: Port device team_slave_1 added
[ 1590.969897][T16643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1591.006559][T16643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1591.009801][T16643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1591.018604][T16643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1591.020550][T16643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1591.081956][T21460] bond0: Removing last ns target with arp_interval on
[ 1593.201948][ T5810] Bluetooth: hci0: command tx timeout
[ 1594.787767][T21257] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1594.787788][T21257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1594.787821][T21257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1594.937005][T21257] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1594.937024][T21257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1594.937055][T21257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1595.292093][ T5810] Bluetooth: hci0: command tx timeout
[ 1597.364779][ T5810] Bluetooth: hci0: command tx timeout
[ 1599.461470][ T5810] Bluetooth: hci0: command tx timeout
[ 1601.589345][T21257] hsr_slave_0: entered promiscuous mode
[ 1602.427461][T21257] hsr_slave_1: entered promiscuous mode
[ 1602.428529][T21257] debugfs: 'hsr0' already exists in 'hsr'
[ 1602.428557][T21257] Cannot create hsr debugfs directory
[ 1602.887005][T21466] lo speed is unknown, defaulting to 1000
[ 1607.890964][T21500] dvmrp3: left allmulticast mode
[ 1612.651578][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1612.651648][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1613.322212][T16643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1613.370886][T16643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1613.376886][T16643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1613.479941][T16643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1613.518608][T16643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1613.845707][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1614.550957][T19716] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1614.592076][T19716] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1614.593495][T19716] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1614.594395][T19716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1615.600765][T19716] Bluetooth: hci3: command tx timeout
[ 1616.730644][T19716] Bluetooth: hci4: command tx timeout
[ 1617.680399][T19716] Bluetooth: hci3: command tx timeout
[ 1618.800361][T19716] Bluetooth: hci4: command tx timeout
[ 1619.870365][T19716] Bluetooth: hci3: command tx timeout
[ 1621.120378][T19716] Bluetooth: hci4: command tx timeout
[ 1621.993660][T19716] Bluetooth: hci3: command tx timeout
[ 1623.211407][T19716] Bluetooth: hci4: command tx timeout
[ 1630.811371][T21511] lo speed is unknown, defaulting to 1000
[ 1633.766749][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1633.786044][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1633.801775][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1633.807113][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1633.808144][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1636.002384][T19716] Bluetooth: hci1: command tx timeout
[ 1638.079183][T19716] Bluetooth: hci1: command tx timeout
[ 1640.789098][T19716] Bluetooth: hci1: command tx timeout
[ 1642.799010][T19716] Bluetooth: hci1: command tx timeout
[ 1648.010224][T21517] lo speed is unknown, defaulting to 1000
[ 1653.145168][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1654.333607][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1654.527531][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1654.668739][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1654.688681][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1656.838211][T19716] Bluetooth: hci0: command tx timeout
[ 1658.993493][T19716] Bluetooth: hci0: command tx timeout
[ 1659.086364][T21546] lo speed is unknown, defaulting to 1000
[ 1661.159318][T19716] Bluetooth: hci0: command tx timeout
[ 1663.417857][T19716] Bluetooth: hci0: command tx timeout
[ 1674.054960][T21572] lo speed is unknown, defaulting to 1000
[ 1674.148043][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1674.148126][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1676.918671][ T5810] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1676.960269][ T5810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1676.965710][T16643] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1677.006625][T16643] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1677.007776][T16643] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1677.052760][T19716] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1677.390943][T19716] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1677.421599][T19716] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1677.423378][T19716] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1677.424377][T19716] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1679.126967][T19716] Bluetooth: hci7: command tx timeout
[ 1681.076808][T19716] Bluetooth: hci8: command tx timeout
[ 1681.332305][T19716] Bluetooth: hci7: command tx timeout
[ 1683.956857][T19716] Bluetooth: hci8: command tx timeout
[ 1683.956897][T19716] Bluetooth: hci7: command tx timeout
[ 1685.996951][ T5810] Bluetooth: hci7: command tx timeout
[ 1685.996988][ T5810] Bluetooth: hci8: command tx timeout
[ 1688.081815][T19716] Bluetooth: hci8: command tx timeout
[ 1696.543506][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1696.569912][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1696.582643][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1696.591419][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1696.592329][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1698.715812][T19716] Bluetooth: hci3: command tx timeout
[ 1700.795745][T19716] Bluetooth: hci3: command tx timeout
[ 1702.875780][T19716] Bluetooth: hci3: command tx timeout
[ 1704.955597][T19716] Bluetooth: hci3: command tx timeout
[ 1710.418831][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1710.428749][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1710.440547][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1710.449632][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1710.450567][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1710.610737][T21617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1712.555067][T19716] Bluetooth: hci5: command tx timeout
[ 1712.745897][T21655] FAULT_INJECTION: forcing a failure.
[ 1712.745897][T21655] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1712.745936][T21655] CPU: 1 UID: 0 PID: 21655 Comm: syz.8.5819 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1712.745964][T21655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1712.745979][T21655] Call Trace:
[ 1712.745988][T21655]  <TASK>
[ 1712.745999][T21655]  dump_stack_lvl+0x189/0x250
[ 1712.746041][T21655]  ? __pfx____ratelimit+0x10/0x10
[ 1712.746074][T21655]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1712.746110][T21655]  ? __pfx__printk+0x10/0x10
[ 1712.746153][T21655]  should_fail_ex+0x46c/0x600
[ 1712.746192][T21655]  _copy_to_user+0x31/0xb0
[ 1712.746222][T21655]  simple_read_from_buffer+0xe1/0x170
[ 1712.746261][T21655]  proc_fail_nth_read+0x1b6/0x220
[ 1712.746290][T21655]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1712.746319][T21655]  ? rw_verify_area+0x2ac/0x4e0
[ 1712.746347][T21655]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1712.746376][T21655]  vfs_read+0x206/0xa30
[ 1712.746420][T21655]  ? __pfx_vfs_read+0x10/0x10
[ 1712.746445][T21655]  ? try_to_take_rt_mutex+0x7fd/0xac0
[ 1712.746483][T21655]  ? mutex_lock_nested+0x154/0x1d0
[ 1712.746509][T21655]  ? fdget_pos+0x253/0x320
[ 1712.746552][T21655]  ksys_read+0x14b/0x260
[ 1712.746579][T21655]  ? __fget_files+0x2a/0x420
[ 1712.746612][T21655]  ? __pfx_ksys_read+0x10/0x10
[ 1712.746644][T21655]  ? do_syscall_64+0xbe/0xfa0
[ 1712.746682][T21655]  do_syscall_64+0xfa/0xfa0
[ 1712.746713][T21655]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1712.746745][T21655]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1712.746770][T21655]  ? clear_bhb_loop+0x60/0xb0
[ 1712.746798][T21655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1712.746820][T21655] RIP: 0033:0x7f7eb0e9e15c
[ 1712.746841][T21655] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1712.746861][T21655] RSP: 002b:00007f7eaf0e5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1712.746886][T21655] RAX: ffffffffffffffda RBX: 00007f7eb10f6090 RCX: 00007f7eb0e9e15c
[ 1712.746904][T21655] RDX: 000000000000000f RSI: 00007f7eaf0e50a0 RDI: 0000000000000004
[ 1712.746918][T21655] RBP: 00007f7eaf0e5090 R08: 0000000000000000 R09: 0000000000000000
[ 1712.746933][T21655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1712.746947][T21655] R13: 00007f7eb10f6128 R14: 00007f7eb10f6090 R15: 00007fff33613aa8
[ 1712.746985][T21655]  </TASK>
[ 1714.634972][T19716] Bluetooth: hci5: command tx timeout
[ 1715.252677][T21607] lo speed is unknown, defaulting to 1000
[ 1716.714757][T19716] Bluetooth: hci5: command tx timeout
[ 1718.794919][T19716] Bluetooth: hci5: command tx timeout
[ 1725.559891][T21665] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5824'.
[ 1729.668550][T21611] lo speed is unknown, defaulting to 1000
[ 1735.527249][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1735.527356][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1737.593529][T19716] Bluetooth: hci4: command 0x0406 tx timeout
[ 1739.868406][T19716] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1739.875279][T19716] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1739.892426][T19716] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1740.138251][T19716] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1740.139129][T19716] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1740.876697][ T5810] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1740.902983][ T5810] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1740.917255][ T5810] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1740.918585][ T5810] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1740.919454][ T5810] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1742.874121][ T5810] Bluetooth: hci9: command tx timeout
[ 1744.793468][ T5810] Bluetooth: hci10: command tx timeout
[ 1744.953252][ T5810] Bluetooth: hci9: command tx timeout
[ 1746.873075][ T5810] Bluetooth: hci10: command tx timeout
[ 1748.350683][ T5810] Bluetooth: hci9: command tx timeout
[ 1748.953427][ T5810] Bluetooth: hci10: command tx timeout
[ 1750.632971][T19716] Bluetooth: hci9: command tx timeout
[ 1751.032954][T19716] Bluetooth: hci10: command tx timeout
[ 1754.342693][T21631] lo speed is unknown, defaulting to 1000
[ 1758.072374][ T5810] Bluetooth: hci1: command 0x0406 tx timeout
[ 1766.253635][ T5810] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1766.288966][ T5810] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1766.290880][ T5810] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1766.340827][ T5810] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1766.372195][ T5810] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1770.683894][T21649] lo speed is unknown, defaulting to 1000
[ 1770.711856][T19716] Bluetooth: hci11: command tx timeout
[ 1772.428125][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1772.747972][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1772.774734][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1772.808679][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1772.891203][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1772.900135][T19716] Bluetooth: hci11: command tx timeout
[ 1772.949275][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1773.047272][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1773.174096][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1773.227784][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1773.327843][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1773.448044][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1773.548171][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1773.574695][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1773.673858][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1773.729075][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1773.773946][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1773.828833][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1773.891129][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1773.928395][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1773.976037][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1774.107138][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1774.298839][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1774.448605][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1774.479193][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1774.598847][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1774.673804][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1774.998117][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1775.198757][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1775.291629][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1775.373911][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1775.473692][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1775.501514][T19716] Bluetooth: hci11: command tx timeout
[ 1775.596972][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1775.623755][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1775.711924][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1775.749438][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1775.840753][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1775.941170][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1776.492617][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1776.575437][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1776.628580][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1776.678424][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1776.728035][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1776.903664][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1776.947518][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1776.973844][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1777.027926][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1777.107435][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1777.240059][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1777.340446][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1777.495022][T16643] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1777.513718][T16643] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1777.521709][T16643] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1777.523025][T16643] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1777.654654][T16643] Bluetooth: hci11: command tx timeout
[ 1778.010540][T16643] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1778.551244][T16643] Bluetooth: hci0: command 0x0406 tx timeout
[ 1779.671467][   T39] INFO: task syz-executor:19731 blocked for more than 143 seconds.
[ 1779.671495][   T39]       Not tainted syzkaller #0
[ 1779.671508][   T39]       Blocked by coredump.
[ 1779.671515][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1779.671528][   T39] task:syz-executor    state:D stack:20208 pid:19731 tgid:19731 ppid:1      task_flags:0x40054c flags:0x00080003
[ 1779.671589][   T39] Call Trace:
[ 1779.671599][   T39]  <TASK>
[ 1779.671616][   T39]  __schedule+0x16f3/0x4c20
[ 1779.671684][   T39]  ? __pfx___schedule+0x10/0x10
[ 1779.671737][   T39]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1779.671787][   T39]  rt_mutex_schedule+0x77/0xf0
[ 1779.671812][   T39]  rt_mutex_slowlock_block+0x5ba/0x6d0
[ 1779.671840][   T39]  ? task_blocks_on_rt_mutex+0xf12/0x1380
[ 1779.671888][   T39]  rt_mutex_slowlock+0x2b1/0x6e0
[ 1779.671920][   T39]  ? rt_mutex_slowlock+0x1c9/0x6e0
[ 1779.671949][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1779.671975][   T39]  ? __lock_acquire+0xab9/0xd20
[ 1779.672019][   T39]  ? rcu_barrier+0x4c/0x570
[ 1779.672060][   T39]  ? rcu_barrier+0x4c/0x570
[ 1779.672083][   T39]  mutex_lock_nested+0x16a/0x1d0
[ 1779.672108][   T39]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1779.672137][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[ 1779.672167][   T39]  rcu_barrier+0x4c/0x570
[ 1779.672197][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[ 1779.672227][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[ 1779.672257][   T39]  netdev_run_todo+0x327/0xea0
[ 1779.672292][   T39]  ? __pfx_netif_state_change+0x10/0x10
[ 1779.672330][   T39]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1779.672360][   T39]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1779.672404][   T39]  ? netdev_state_change+0x1ca/0x220
[ 1779.672431][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[ 1779.672462][   T39]  tun_chr_close+0x13f/0x1c0
[ 1779.672494][   T39]  __fput+0x45b/0xa80
[ 1779.672532][   T39]  task_work_run+0x1d4/0x260
[ 1779.672559][   T39]  ? __pfx_task_work_run+0x10/0x10
[ 1779.672581][   T39]  ? do_exit+0x6b0/0x2300
[ 1779.672615][   T39]  ? do_exit+0x6b0/0x2300
[ 1779.672654][   T39]  do_exit+0x6b5/0x2300
[ 1779.672689][   T39]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1779.672736][   T39]  ? __pfx_do_exit+0x10/0x10
[ 1779.672774][   T39]  ? rt_mutex_slowunlock+0x493/0x8a0
[ 1779.672802][   T39]  ? rt_spin_lock+0x1c1/0x3e0
[ 1779.672845][   T39]  do_group_exit+0x21c/0x2d0
[ 1779.672867][   T39]  ? rt_spin_unlock+0x161/0x200
[ 1779.672899][   T39]  get_signal+0x125d/0x1310
[ 1779.672958][   T39]  arch_do_signal_or_restart+0xa0/0x790
[ 1779.672990][   T39]  ? __pfx___x64_sys_wait4+0x10/0x10
[ 1779.673015][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1779.673061][   T39]  ? exit_to_user_mode_loop+0x40/0x130
[ 1779.673098][   T39]  exit_to_user_mode_loop+0x72/0x130
[ 1779.673131][   T39]  do_syscall_64+0x2bd/0xfa0
[ 1779.673165][   T39]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1779.673198][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1779.673222][   T39]  ? clear_bhb_loop+0x60/0xb0
[ 1779.673251][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1779.673275][   T39] RIP: 0033:0x7f289ed45897
[ 1779.673296][   T39] RSP: 002b:00007ffc1063c050 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[ 1779.673320][   T39] RAX: 000000000000009f RBX: 000000000000009f RCX: 00007f289ed45897
[ 1779.673337][   T39] RDX: 0000000040000000 RSI: 00007ffc1063c0bc RDI: 00000000ffffffff
[ 1779.673353][   T39] RBP: 00007ffc1063c0bc R08: 0000000000000000 R09: 0000000000000000
[ 1779.673367][   T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000034
[ 1779.673381][   T39] R13: 0000555568926590 R14: 00000000001842fa R15: 00007ffc1063c110
[ 1779.673419][   T39]  </TASK>
[ 1779.673444][   T39] INFO: task syz-executor:21257 blocked for more than 143 seconds.
[ 1779.673461][   T39]       Not tainted syzkaller #0
[ 1779.673473][   T39]       Blocked by coredump.
[ 1779.673480][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1779.673491][   T39] task:syz-executor    state:D stack:17800 pid:21257 tgid:21257 ppid:1      task_flags:0x40054c flags:0x00080003
[ 1779.673547][   T39] Call Trace:
[ 1779.673555][   T39]  <TASK>
[ 1779.673570][   T39]  __schedule+0x16f3/0x4c20
[ 1779.673631][   T39]  ? __pfx___schedule+0x10/0x10
[ 1779.673685][   T39]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1779.673721][   T39]  rt_mutex_schedule+0x77/0xf0
[ 1779.673745][   T39]  rt_mutex_slowlock_block+0x5ba/0x6d0
[ 1779.673780][   T39]  ? task_blocks_on_rt_mutex+0xf12/0x1380
[ 1779.673829][   T39]  rt_mutex_slowlock+0x2b1/0x6e0
[ 1779.673859][   T39]  ? rt_mutex_slowlock+0x1c9/0x6e0
[ 1779.673888][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1779.673913][   T39]  ? __lock_acquire+0xab9/0xd20
[ 1779.673957][   T39]  ? rcu_barrier+0x4c/0x570
[ 1779.673997][   T39]  ? rcu_barrier+0x4c/0x570
[ 1779.674017][   T39]  mutex_lock_nested+0x16a/0x1d0
[ 1779.674042][   T39]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1779.674073][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[ 1779.674104][   T39]  rcu_barrier+0x4c/0x570
SYZFAIL: failed to send rpc
fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe)
[ 1779.674133][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[ 1779.674164][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[ 1779.674194][   T39]  netdev_run_todo+0x327/0xea0
[ 1779.674227][   T39]  ? __pfx_netif_state_change+0x10/0x10
[ 1779.674265][   T39]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1779.674294][   T39]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1779.674338][   T39]  ? netdev_state_change+0x1ca/0x220
[ 1779.674364][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[ 1779.674394][   T39]  tun_chr_close+0x13f/0x1c0
[ 1779.674426][   T39]  __fput+0x45b/0xa80
[ 1779.674463][   T39]  task_work_run+0x1d4/0x260
[ 1779.674490][   T39]  ? __pfx_task_work_run+0x10/0x10
[ 1779.674513][   T39]  ? do_exit+0x6b0/0x2300
[ 1779.674547][   T39]  ? do_exit+0x6b0/0x2300
[ 1779.674587][   T39]  do_exit+0x6b5/0x2300
[ 1779.674621][   T39]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1779.674668][   T39]  ? __pfx_do_exit+0x10/0x10
[ 1779.674700][   T39]  ? rt_mutex_slowunlock+0x493/0x8a0
[ 1779.674728][   T39]  ? rt_spin_lock+0x1c1/0x3e0
[ 1779.674777][   T39]  do_group_exit+0x21c/0x2d0
[ 1779.674799][   T39]  ? rt_spin_unlock+0x161/0x200
[ 1779.674829][   T39]  get_signal+0x125d/0x1310
[ 1779.674883][   T39]  arch_do_signal_or_restart+0xa0/0x790
[ 1779.674907][   T39]  ? fput_close_sync+0x119/0x200
[ 1779.674934][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1779.674980][   T39]  ? exit_to_user_mode_loop+0x40/0x130
[ 1779.675015][   T39]  exit_to_user_mode_loop+0x72/0x130
[ 1779.675048][   T39]  do_syscall_64+0x2bd/0xfa0
[ 1779.675080][   T39]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1779.675113][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1779.675137][   T39]  ? clear_bhb_loop+0x60/0xb0
[ 1779.675166][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1779.675189][   T39] RIP: 0033:0x7fba618015dc
[ 1779.675208][   T39] RSP: 002b:00007fff10f65cc0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1779.675231][   T39] RAX: 000000000000004c RBX: 00007fba62584620 RCX: 00007fba618015dc
[ 1779.675247][   T39] RDX: 000000000000004c RSI: 00007fba62584670 RDI: 0000000000000003
[ 1779.675262][   T39] RBP: 0000000000000000 R08: 00007fff10f65d14 R09: 000000000000000c
[ 1779.675278][   T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 1779.675293][   T39] R13: 0000000000000000 R14: 00007fba62584670 R15: 0000000000000000
[ 1779.675330][   T39]  </TASK>
[ 1779.675371][   T39] 
[ 1779.675371][   T39] Showing all locks held in the system:
[ 1779.675387][   T39] 4 locks held by rcuc/0/20:
[ 1779.675403][   T39] 1 lock held by khungtaskd/39:
[ 1779.675416][   T39]  #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1779.675499][   T39] 13 locks held by kworker/u8:10/3594:
[ 1779.675515][   T39] 2 locks held by getty/5555:
[ 1779.675529][   T39]  #0: ffff88823bf6e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1779.675587][   T39]  #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400
[ 1779.675652][   T39] 4 locks held by kworker/u9:4/5810:
[ 1779.675666][   T39]  #0: ffff888064887938 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1779.675726][   T39]  #1: ffffc90004a47ba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1779.675794][   T39]  #2: ffff888038528e88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[ 1779.675937][   T39]  #3: ffff8880385280a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[ 1779.676008][   T39] 11 locks held by kworker/u8:2/18260:
[ 1779.676024][   T39] 1 lock held by syz-executor/19731:
[ 1779.676038][   T39]  #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 1779.676095][   T39] 1 lock held by syz-executor/21257:
[ 1779.676108][   T39]  #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 1779.676161][   T39] 1 lock held by syz.0.5722/21412:
[ 1779.676175][   T39]  #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 1779.676229][   T39] 1 lock held by syz-executor/21466:
[ 1779.676243][   T39]  #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 1779.676296][   T39] 1 lock held by syz.5.5760/21500:
[ 1779.676310][   T39]  #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 1779.676365][   T39] 1 lock held by syz-executor/21511:
[ 1779.676378][   T39]  #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 1779.676431][   T39] 2 locks held by syz-executor/21517:
[ 1779.676445][   T39]  #0: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[ 1779.676498][   T39]  #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 1779.676551][   T39] 2 locks held by syz-executor/21546:
[ 1779.676564][   T39]  #0: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[ 1779.676615][   T39]  #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 1779.676669][   T39] 2 locks held by syz-executor/21572:
[ 1779.676683][   T39]  #0: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[ 1779.676734][   T39]  #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 1779.676796][   T39] 2 locks held by syz-executor/21607:
[ 1779.676810][   T39]  #0: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[ 1779.676861][   T39]  #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 1779.676916][   T39] 2 locks held by syz-executor/21611:
[ 1779.676929][   T39]  #0: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[ 1779.676980][   T39]  #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 1779.677034][   T39] 6 locks held by kworker/u8:5/21617:
[ 1779.677048][   T39]  #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1779.677106][   T39]  #1: ffffc90004fffba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1779.677164][   T39]  #2: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820
[ 1779.677218][   T39]  #3: ffff88805accf0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0
[ 1779.677303][   T39]  #4: ffff888027ec3300 (&devlink->lock_key#25){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0
[ 1779.677363][   T39]  #5: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 1779.677415][   T39] 2 locks held by syz-executor/21631:
[ 1779.677429][   T39]  #0: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[ 1779.677479][   T39]  #1: ffffffff8e8638f8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990
[ 1779.677533][   T39] 4 locks held by syz-executor/21649:
[ 1779.677548][   T39] 4 locks held by syz-executor/21682:
[ 1779.677562][   T39]  #0: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[ 1779.677613][   T39]  #1: ffffffff8e5cc2e0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
[ 1779.677669][   T39]  #2: ffffffff8e5cc520 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
[ 1779.677725][   T39]  #3: ffff88802ef71118 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0
[ 1779.677797][   T39] 4 locks held by syz-executor/21685:
[ 1779.677810][   T39]  #0: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[ 1779.677860][   T39]  #1: ffffffff8e5cc2e0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
[ 1779.677916][   T39]  #2: ffffffff8e5cc520 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
[ 1779.677971][   T39]  #3: ffff88802ef71118 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0
[ 1779.678029][   T39] 4 locks held by syz-executor/21706:
[ 1779.678042][   T39]  #0: ffffffff8e8569e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[ 1779.678094][   T39]  #1: ffffffff8e5cc2e0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
[ 1779.678150][   T39]  #2: ffffffff8e5cc520 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
[ 1779.678205][   T39]  #3: ffff88802ef71118 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0
[ 1779.678262][   T39] 1 lock held by syz-executor/21719:
[ 1779.678276][   T39]  #0: ffffffff8e8638f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[ 1779.678340][   T39] 4 locks held by syz.8.5844/21724:
[ 1779.678354][   T39] 
[ 1779.678361][   T39] =============================================
[ 1779.678361][   T39] 
[ 1779.678372][   T39] NMI backtrace for cpu 1
[ 1779.678391][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1779.678441][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1779.678466][   T39] Call Trace:
[ 1779.678483][   T39]  <TASK>
[ 1779.678500][   T39]  dump_stack_lvl+0x189/0x250
[ 1779.678570][   T39]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1779.678632][   T39]  ? __pfx__printk+0x10/0x10
[ 1779.678713][   T39]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1779.678774][   T39]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1779.678805][   T39]  ? __pfx__printk+0x10/0x10
[ 1779.678838][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1779.678866][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1779.678896][   T39]  watchdog+0xf60/0xfa0
[ 1779.678936][   T39]  ? watchdog+0x1e2/0xfa0
[ 1779.678974][   T39]  kthread+0x711/0x8a0
[ 1779.679012][   T39]  ? __pfx_watchdog+0x10/0x10
[ 1779.679042][   T39]  ? __pfx_kthread+0x10/0x10
[ 1779.679073][   T39]  ? rt_spin_unlock+0x150/0x200
[ 1779.679104][   T39]  ? rt_spin_unlock+0x161/0x200
[ 1779.679129][   T39]  ? __pfx_kthread+0x10/0x10
[ 1779.679164][   T39]  ret_from_fork+0x4bc/0x870
[ 1779.679194][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[ 1779.679230][   T39]  ? __switch_to_asm+0x39/0x70
[ 1779.679251][   T39]  ? __switch_to_asm+0x33/0x70
[ 1779.679272][   T39]  ? __pfx_kthread+0x10/0x10
[ 1779.679307][   T39]  ret_from_fork_asm+0x1a/0x30
[ 1779.679349][   T39]  </TASK>
[ 1779.679358][   T39] Sending NMI from CPU 1 to CPUs 0:
[ 1779.679386][    C0] NMI backtrace for cpu 0
[ 1779.679402][    C0] CPU: 0 UID: 0 PID: 18260 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1779.679423][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1779.679437][    C0] Workqueue: bat_events batadv_dat_purge
[ 1779.679506][    C0] RIP: 0010:mark_lock+0x1/0x190
[ 1779.679534][    C0] Code: df 48 8b 2c 24 e9 b0 fd ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 41 55 41 54 53 8b 46 20 89 c1 81 e1 00 00 03 00 83 f9
[ 1779.679552][    C0] RSP: 0018:ffffc9000d456598 EFLAGS: 00000046
[ 1779.679567][    C0] RAX: 0000000000000003 RBX: 0000000000000005 RCX: 0000000000000005
[ 1779.679579][    C0] RDX: 0000000000000008 RSI: ffff88801cb68c28 RDI: ffff88801cb68000
[ 1779.679593][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81736c15
[ 1779.679606][    C0] R10: ffffc9000d4567f8 R11: ffffffff81aacc60 R12: 0000000000000003
[ 1779.679620][    C0] R13: 0000000000000001 R14: ffff88801cb68c28 R15: ffff88801cb68c48
[ 1779.679634][    C0] FS:  0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000
[ 1779.679650][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1779.679664][    C0] CR2: 00007f7024ee60be CR3: 0000000026256000 CR4: 00000000003526f0
[ 1779.679681][    C0] Call Trace:
[ 1779.679688][    C0]  <TASK>
[ 1779.679696][    C0]  __lock_acquire+0x6a8/0xd20
[ 1779.679744][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1779.679770][    C0]  lock_acquire+0x120/0x360
[ 1779.679795][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1779.679824][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1779.679847][    C0]  ? kthread+0x711/0x8a0
[ 1779.679873][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1779.679897][    C0]  unwind_next_frame+0xc2/0x2390
[ 1779.679921][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1779.679948][    C0]  ? unwind_next_frame+0xa5/0x2390
[ 1779.679973][    C0]  ? worker_thread+0x8a0/0xda0
[ 1779.679997][    C0]  ? skb_release_data+0x62d/0x7c0
[ 1779.680024][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1779.680046][    C0]  arch_stack_walk+0x11c/0x150
[ 1779.680073][    C0]  ? kthread+0x711/0x8a0
[ 1779.680102][    C0]  stack_trace_save+0x9c/0xe0
[ 1779.680121][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1779.680144][    C0]  ? __lock_acquire+0xab9/0xd20
[ 1779.680169][    C0]  kasan_save_track+0x3e/0x80
[ 1779.680193][    C0]  ? kasan_save_track+0x3e/0x80
[ 1779.680214][    C0]  ? __kasan_save_free_info+0x46/0x50
[ 1779.680233][    C0]  ? __kasan_slab_free+0x5c/0x80
[ 1779.680256][    C0]  ? kmem_cache_free+0x19a/0x910
[ 1779.680280][    C0]  ? skb_release_data+0x62d/0x7c0
[ 1779.680301][    C0]  ? consume_skb+0x9e/0xf0
[ 1779.680319][    C0]  ? nft_synproxy_eval_v4+0x376/0x560
[ 1779.680347][    C0]  ? nft_synproxy_do_eval+0x345/0x570
[ 1779.680373][    C0]  ? nft_do_chain+0x40c/0x1920
[ 1779.680397][    C0]  ? nft_do_chain_inet+0x25d/0x340
[ 1779.680422][    C0]  ? nf_hook_slow+0xc5/0x220
[ 1779.680442][    C0]  ? NF_HOOK+0x206/0x3a0
[ 1779.680459][    C0]  ? NF_HOOK+0x30c/0x3a0
[ 1779.680475][    C0]  ? __netif_receive_skb+0x143/0x380
[ 1779.680502][    C0]  ? process_backlog+0x31e/0x900
[ 1779.680519][    C0]  ? __napi_poll+0xb6/0x540
[ 1779.680544][    C0]  ? net_rx_action+0x5f7/0xda0
[ 1779.680560][    C0]  ? handle_softirqs+0x22f/0x710
[ 1779.680581][    C0]  ? __local_bh_enable_ip+0x1a0/0x2e0
[ 1779.680602][    C0]  ? __batadv_dat_purge+0x344/0x400
[ 1779.680626][    C0]  ? batadv_dat_purge+0x20/0x70
[ 1779.680648][    C0]  ? process_scheduled_works+0xae1/0x17b0
[ 1779.680669][    C0]  ? worker_thread+0x8a0/0xda0
[ 1779.680690][    C0]  ? kthread+0x711/0x8a0
[ 1779.680733][    C0]  __kasan_save_free_info+0x46/0x50
[ 1779.680751][    C0]  __kasan_slab_free+0x5c/0x80
[ 1779.680777][    C0]  kmem_cache_free+0x19a/0x910
[ 1779.680802][    C0]  ? skb_release_data+0x62d/0x7c0
[ 1779.680826][    C0]  skb_release_data+0x62d/0x7c0
[ 1779.680851][    C0]  consume_skb+0x9e/0xf0
[ 1779.680872][    C0]  nft_synproxy_eval_v4+0x376/0x560
[ 1779.680903][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[ 1779.680932][    C0]  ? nf_ip_checksum+0x13c/0x510
[ 1779.680960][    C0]  nft_synproxy_do_eval+0x345/0x570
[ 1779.680990][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[ 1779.681030][    C0]  nft_do_chain+0x40c/0x1920
[ 1779.681064][    C0]  ? __perf_event_task_sched_in+0xec/0x17e0
[ 1779.681086][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[ 1779.681126][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1779.681158][    C0]  nft_do_chain_inet+0x25d/0x340
[ 1779.681184][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1779.681209][    C0]  ? __lock_acquire+0xab9/0xd20
[ 1779.681239][    C0]  ? NF_HOOK+0x9a/0x3a0
[ 1779.681257][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1779.681284][    C0]  nf_hook_slow+0xc5/0x220
[ 1779.681314][    C0]  NF_HOOK+0x206/0x3a0
[ 1779.681337][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1779.681357][    C0]  ? NF_HOOK+0x9a/0x3a0
[ 1779.681373][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1779.681390][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[ 1779.681410][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1779.681430][    C0]  ? skb_dst+0x4f/0xd0
[ 1779.681448][    C0]  ? ip_local_deliver+0x12a/0x1b0
[ 1779.681468][    C0]  NF_HOOK+0x30c/0x3a0
[ 1779.681486][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1779.681504][    C0]  ? NF_HOOK+0x9a/0x3a0
[ 1779.681521][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1779.681539][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1779.681563][    C0]  ? __pfx_ip_rcv+0x10/0x10
[ 1779.681579][    C0]  __netif_receive_skb+0x143/0x380
[ 1779.681610][    C0]  ? process_backlog+0x27b/0x900
[ 1779.681626][    C0]  process_backlog+0x31e/0x900
[ 1779.681650][    C0]  __napi_poll+0xb6/0x540
[ 1779.681678][    C0]  net_rx_action+0x5f7/0xda0
[ 1779.681703][    C0]  ? __pfx_net_rx_action+0x10/0x10
[ 1779.681722][    C0]  ? kvm_sched_clock_read+0x11/0x20
[ 1779.681752][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[ 1779.681779][    C0]  handle_softirqs+0x22f/0x710
[ 1779.681805][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1779.681833][    C0]  __local_bh_enable_ip+0x1a0/0x2e0
[ 1779.681854][    C0]  ? rt_spin_lock+0x1c1/0x3e0
[ 1779.681876][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1779.681899][    C0]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1779.681923][    C0]  ? rt_spin_unlock+0x150/0x200
[ 1779.681947][    C0]  ? rt_spin_unlock+0x161/0x200
[ 1779.681967][    C0]  ? __pfx_batadv_dat_to_purge+0x10/0x10
[ 1779.681994][    C0]  __batadv_dat_purge+0x344/0x400
[ 1779.682025][    C0]  ? __batadv_dat_purge+0xae/0x400
[ 1779.682048][    C0]  ? __pfx_batadv_dat_to_purge+0x10/0x10
[ 1779.682075][    C0]  batadv_dat_purge+0x20/0x70
[ 1779.682097][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[ 1779.682118][    C0]  process_scheduled_works+0xae1/0x17b0
[ 1779.682154][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1779.682184][    C0]  worker_thread+0x8a0/0xda0
[ 1779.682220][    C0]  kthread+0x711/0x8a0
[ 1779.682248][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1779.682270][    C0]  ? __pfx_kthread+0x10/0x10
[ 1779.682295][    C0]  ? rt_spin_unlock+0x150/0x200
[ 1779.682318][    C0]  ? rt_spin_unlock+0x161/0x200
[ 1779.682338][    C0]  ? __pfx_kthread+0x10/0x10
[ 1779.682365][    C0]  ret_from_fork+0x4bc/0x870
[ 1779.682388][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1779.682412][    C0]  ? __switch_to_asm+0x39/0x70
[ 1779.682430][    C0]  ? __switch_to_asm+0x33/0x70
[ 1779.682447][    C0]  ? __pfx_kthread+0x10/0x10
[ 1779.682474][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1779.682500][    C0]  </TASK>
[ 1781.020014][T16643] Bluetooth: hci12: command tx timeout
[ 1783.336500][ T5810] Bluetooth: hci12: command tx timeout
[ 1785.483550][T16643] Bluetooth: hci12: command tx timeout
[ 1787.513961][ T5810] Bluetooth: hci12: command tx timeout
[ 1790.051204][T21685] lo speed is unknown, defaulting to 1000