last executing test programs:

2m8.667601789s ago: executing program 0 (id=439):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x2200890, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000280)={0x7ff, 0xa76, 0x9, 0x9, 0x1000, 0xb})
read$FUSE(r0, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x5ecfb203)
capget(&(0x7f00000002c0)={0x20071026, r2}, &(0x7f0000000300)={0xfd08, 0x9, 0x2, 0x6, 0x8, 0x9})

2m7.969521669s ago: executing program 0 (id=442):
syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00')
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7f6b574143f09481b439ba966711ba4700ee90231baf71d39336e5fc0dc0d469ee89ffeae80cd1aba71782ff54c1bc4ef7d411601eb29d60874e3fdb99db523d041b5195702aaae5153a12a4b996", 0x4e}], 0x1}, 0x4008863)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @random="a3f0ecde0ef8"}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}})
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x100, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x143bc2, 0x1c0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
recvmmsg(r4, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/97, 0x61}, 0xd}], 0x1, 0x102, 0x0)
ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1b)
writev(r8, &(0x7f0000000880)=[{&(0x7f00000003c0)="fbd8de16d63a27098903b87a1986edf2d4d4dde16583c737f96e10027719a7c5581dd1160909641eaa27bf", 0x2b}, {&(0x7f0000000940)="767712f84c3ca07f8a67be34679ffc12cdab9727e68cbe8ef984c9ae49219c010a370115a7d44043358fe1741dd6e5e1cb2dd4138ec8ffcd6c05472d71b6ec5cd674832f4fbdee830d75561c88000000000000000000", 0x56}, {&(0x7f00000006c0)="eed9be41e2f40895990bffb2086caccb8b65ffc836d94c94201d9fbf89e8e061795b3eb45d6ed42721f466981861a9ca5b3f2ae241b75c02758a3aef4ffe8af223522b3c8d3f23", 0x47}, {&(0x7f0000003880)="5a00365815a769d33dfb46d4cad4a3920279f09a38b9c738dd1d301a859096f93a0252d2caa692df69a9186131f61f28ff0623681c59f6a635e4e8a98fc3697ee45d125057aa39e17dfd9ae4afa1473d5a54ab8c7284efda390e21ac91edfc05b5daa13ff5e2c2c2782b0bda4e6f30fb7bf342b719f5592ef1c11a7e6d5aea2534369422637a6a92ffcd640bf10b9ab0accf02203499024141020430d0dd6cb9cfe5aa12263b948a2d069aeae91fd75d0615f247670a3fcd8462ad2b4b4293dd91a8fb0ca89ab9246a045dfd6883b46997be023822e8fd39b23401d4de84f064c266a405274fb0134ac07ca05fa5719a35206d737aeb65514a7b2e2e8723eaab5f1d270024ab59077e92be9ff1d9d1d519bc46077b3eb01f61c99b01ce12a305f00942fd11e509f3263a7fa43abeb9a00c6f8a588b6794b6aa6e0a496b8ac0671e29fdf15e1e18ed0335350e55ce8d3dad88c869a2861e1d7d254c6dd6afdc566678370aabd566f89d1a315b9b462651dbac76f6f86a97b96eeda899686647521156e53fdf59f93013d28d475381e8b32402a39a698ceb207e5ca4d88e205b573b6317f0f903dbe535ef989d3cd09074267cb035772504cb64799abb0888df6145e7766ca2a6bf9c3b598ace1fb1daac3e3a72564cd27dfadcc707d288a351439c4a231114e5f772046821b0268b4d248a79d56c3641699583e4687454723f4b417ce14fa34d1c14affe2ca6e3af1e87a2f42af21db3b52a0b8be4760899785d3ce33dcf6a88fcea9cc0524d47eb75e83f93fbdff656c9ab398fa3ebe6e742ac3e4f33def2adebe8cb1efe99706086c6ca85f53c378c1f70274cf352d16c4ec77084999e0b27b0cec496c22f323de08164f247faf000d928cdf19f32ff4289f3971322aac755d6487924a65309d66113b01a9fe4c8c2686d6bbb2eb0dce5153ee2daa295f6c637defa047cacdc7ce78a85052dfeeb15e87407e4ade706cb3311fc92c7dd94a3f1aa31b31b5e72f8f050bbe41b6de349222a6c12e720de61fcd5b15d55d7f8280ad70fe2d25dd6d1b6657dc840d2f9de22541fd36b41e5c08e8f668d7d053d14ad2264698e7a9a9007c9784817cc38c325791ac5f1740eeeeeec0c05a2553d5f4792bbb486f01ea3529dc741413b37ed3c65825bc38b702fe8af9a7494cfbe7a462e6ea033a813359755f7feccd33d981e861eec8c71135bc6d81146b423c35a76cacf4474f3767cc555460342398fe4f985e880dccaaa70ed00e22d8e49c802a3de18d7339c43e44c7d19d192c6e4860e7654e8aefedf706a18be1f25e94f5282cf8b94b81f0efbfe0241170fb1ebc554758c82cde64f629a0507ab519bd49bf13edb801cb893dc322bae16c32378daca4386de2a1257dd90a9bfa98db5d64a91753bc3f72700385a2de883ea9d2a7911befc11866dc762bcd7e4d96c1861193a7a8f82eb5c3be89b73c556251b410ea42248e119c4f2bf94d22df2e2d3d4c0a286bf013c5d17b5ae8a2765907175ef3af3d0f626dd3cf1204d798f4814c3db6040cea30ce916be54732870e1cb11270fca12d614881b5280d9d2d84d702159acce854a93702132e369cc3c39d1d778848256b3bb7d8deed9023983d2acc28bcf96463ace24b520582d93de0d849f92addd6dbcc3198385918acd4daf8474d06fda9552821e5f6637359eb35b5c766fc3aa1c7fe78a8c5cc26e86dbb61bd89c94180b4eb1ff232fe4fef74fa5429caec3bf2f7ab21bfb1dcfc93ed1c18b784f2243672c3233e9b9f040c45e8d56773eb8fc306973d40c15763c078b19e16461580bc278bd62e9afec42dd12d8582d498e425e3d6af2276ffa98058c33babf33b9d6d564408bbde21050b7495fc51cf7ea0f98a7211bbe138b5fe87d3c889a7fc749d6a354fcaff3579d16b96241f2e62f7f1439e5f2a9a44dbb00a6751edfbf4a7433a150ae18231bf921eaa4853346d2c79376bfa25f0f1ff06e6e9177311f0a4036dda4da20e08ba1437abe0a9afff151f109c53e549dd0f3a128adcbffe6c01c7ea165d64f1adb88899921ed1d92568dc722c4967a253e487c52d71fb7ed3a92ef91735d0651b20871c91545ffd2227c99e8185c6f1130c72c86986d44408cdc966317f6ff489ae99bd197a61187c6772c162a11a353d1af60e948dca9f90e4491e98982cf0a18b854163c05a6b8d7e48d905f0dc584b4f4ed2faeadf31f886ac27af6fece599ba8afc8b0ac9489773fb4007797694d8bcff945fe3610ae6d26d390ce2253194074e3d31b6601ab3dc35b5c101c5f6bcb3b7782d2c35b2d61bf02009521da4518121125c2b72d83e193554c66426eacf649eb03bd7946d6cd92c9cfd3d6580e9a4655fedf06676b13db375dbae1cc412d05318b8e82e5fa3fbff5fdf3dcfca811f96383f4bff30fb1d3f292298028d0f3ae61d60a4246c960dbd85a92e5c85e8e0b84b524af973c6f9046aa0e004ce054ec8c4476d7d1cf6868b6670cce7cc83ec4a6390a38fff21dfa98597d9a7c90d367364a560b7680625bc9ae348978da896f62bb46be4c6ca32ac3787315de", 0x71d}], 0x4)
ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0})
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r5, 0x8001}}, 0x48)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x70}}, 0x0)
close(r9)
socket$inet(0x2, 0x2, 0x1)

2m3.027820372s ago: executing program 0 (id=447):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0)

2m2.752181875s ago: executing program 0 (id=449):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX], 0xc4}, 0x1, 0x0, 0x0, 0x8814}, 0x4044004)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
getpriority(0x1, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x808001, 0x0, 0x0, 0x0, 0xfffffe0000000001, 0xfa11, 0x7}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x108)
r4 = dup(r2)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0xffffffab, 0x2, 0x0, 0x4, 0x640, 0x8}, &(0x7f0000000180)=0x20)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4014f50b, &(0x7f0000000040)={0x1, 0x700, 0x4cfd})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f00000041c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0x80000a, 0x0, 0x0, 0x2, 0x7fff}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28)
write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000080)=0x7, 0x4)
dup2(r7, r5)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6)

1m58.855147138s ago: executing program 0 (id=457):
r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x2fe6, 0x8, 0x8000, 0x48}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40})
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000300001f160040ac05720240000102030109022400010106d0040904000901030102030921cd0a53012237070905810320009df01340278e7f5fec0d1cde6fe73fde23c9301f33a793c47fad236e6d1e7c8eadd975bff561dc6144a767e81538368381626eaf956c085147b67f2d5090cd9970754844c5d5981fdf39f3cdd19c0a1bed3d049ad5865d24ee171ad607fe12bfd590b247f3797c49cc764b5a8651061f"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x101, 0x0)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x7, 0x7, 0xa)
socket$packet(0x11, 0x3, 0x300)
io_uring_enter(r0, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0)

1m55.640802013s ago: executing program 0 (id=469):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8)

1m38.575181276s ago: executing program 32 (id=469):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8)

1m8.617103196s ago: executing program 2 (id=543):
r0 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
fcntl$lock(r0, 0x24, &(0x7f0000000840)={0x1, 0x0, 0x8, 0x9, r1})
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000f9ffffffffffffff0800000091117100000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000200"/28], 0x50)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x800)
recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0xfffffffa, <r6=>0x0}, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000800)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x569, 0x1}}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000740)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x569, 0x1}}, 0x20)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xff)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002da94dc306d0491c2eb73000000010902120001050040050904690400343f0a51"], 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000038000000000000f8dbdf250c000000"], 0x14}}, 0x4000000)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x79)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000003c0)=0x7e)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0xfffffd47, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)
preadv2(r10, &(0x7f0000000100)=[{&(0x7f0000000540)=""/176, 0xb0}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f0000000600)=""/253, 0xfd}], 0x3, 0x100, 0x9, 0x8)
getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4)
close(r0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000"], 0x48)

1m5.421902927s ago: executing program 2 (id=550):
syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x9, 0x28, 0xfc, 0x10, 0x5ac, 0x291, 0x4325, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0x3, 0xe1, 0x2}}]}}]}}, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41)
syz_usb_connect$cdc_ecm(0x6, 0x65, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x8, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "32bacc"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x26f, 0x9, 0x7, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0xfc7c}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6, 0x9, 0x8}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x6, 0x7, 0x7, 0x0, 0x10}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x1, 0x3, 0x32}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x2, 0x3}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc5c}}, {0xaf, &(0x7f00000001c0)=@string={0xaf, 0x3, "be071994448f69b51d2e263d6a1f7bc95148ad61550f3ea2e10f306cb040c688bdab0c99fe1d07945d2a52da95126d05af7cfcddf20797ad884ee27fd3bd823c5b616bb4bddaa8b9a90c339d9cbecc63ed470cc782bf2c04bdd96dcbfd681b61eac078463ab29e55d1d6acf7fcb8c55bb12fa16b9632fdda1f7bef827c4d2ff67bff46502d9daa440371f4de93f733f018c73d2bcb38e3b66c8619d93e8ffb233a4c4e9d93064e6802e214e8a4"}}, {0x44, &(0x7f0000000280)=@string={0x44, 0x3, "1e16fea7130b894aa223dcc5d51bcad4aec5d7759b652916f28c753d23f4dfa7e879e39a5e6fd34d38b1a36b661d20ba0813393a46749e9d3598752991a65a88b8c7"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x814}}]})

1m0.557071046s ago: executing program 2 (id=556):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

1m0.095673559s ago: executing program 2 (id=559):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x18, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xfdb}, {0x0}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000004100000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

59.648010786s ago: executing program 2 (id=560):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r1 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xb, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0x3)
r4 = syz_open_procfs(0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x40, 0x7, 0xe2, {0xe2, 0x5, "ce071888d6e922126ae1558f07a3ffedba3b966edd08574af2849a6a46604e4e5c240bbea011663da68452e9708e0c5ff8164410f9f6991718c0655410896c721be1bfd808b8e9e642fc3b350767f274c515f33d2764d6c2d1a5a077dad211da9ef358cef6efb50d81ff61fd5eee665d702ac9ef69bd4ce756671c435b88060378435aa3f08b833ae634b5f1fefb407ea0fd4a4b0cd34002ca9f4bbc38b2178b36f615036aa2dd661b29d58230954211206c9fdbebd619bd402cf619d7c59eee079731ae572b6d717a9795377c34798820d006ec3b017c52b7789957c05c4af2"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}}, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x20, 0xb, 0xf0, "23a5b6b90a99ca1bd85b605579be97b13d45bfe65cdb0657454ebc69f7d3dc6851497ed7c9bcedaba60b896fbdb3a237002ecd9c83c4465794aac82501e15cd23c1e37cef96d54b5ba6ed9abb94aa8b75376c4ae64f2ecd1b261d0b8361195f91c7edba99eb676392b20c40337e94c0ea8e55f8544407f395ccf8fef311f8fb1fa0530d6f33eef3d837c0b17fb76e8bd096efb8af2255e04d7192dc6c046a8b55aaa30011d0a8eca1e42c370146d2cfad1786004a6281ffa17e80571330122ef2438d540fad3c944f775c47c1217631b9dcc592bbaf4bf645570ca1d89aa6e525d9a3f1f2ce8ce020210583b981b42fd"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfb}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "66b359"}, &(0x7f0000000400)={0x20, 0x82, 0x2, 'Tf'}, &(0x7f0000000480)={0x20, 0x83, 0x3, "74fa6c"}, &(0x7f00000004c0)={0x20, 0x84, 0x4, "4f0d9645"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "e9247d"}})
syz_usb_control_io(r0, &(0x7f0000000980)={0x2c, &(0x7f0000000780)={0x20, 0x7, 0x9d, {0x9d, 0x8, "2554e2d9ccfd428ff838e3664ed0c8a5161544d6aa884475eda98e2936d1f0cccf83330fe03d967884b5ecb85fd085f94e6f5669e45be35a469774987ca836d16bc0c5cebd8685ca8ee40e37a57903fc5eac0f8132e6c2c5e0c57053fde8d3bc6f64e95a09417f71abb2197273acc45e714d32a109fa977f8bd609f99bb57fa1d35ce11eb1bc4f2002729db7ebb661155b0378a0eb88669acb31e1"}}, &(0x7f0000000f00)=ANY=[@ANYBLOB="00035e0000005e03b31650363f7062d01fcd700f1a4efa2f3c44aefbe2cea53a954fd7f85283da587850eb0636292cd05efdc35a3d793a2f49ed2e2874916bb6f514ed73d2165339be2d80722981fdca5c18f3c3f33dca1e0eb039952e9954a33e75cfaa8f9a"], &(0x7f00000008c0)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xe, 0x8, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0xfc, 0xe8, 0x1, 0xfa}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x5, 0x8001}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x372f, 0x0, 0x9, [0xf]}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x7, 0xf, "3996c275", "fca6a7d1"}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfd, 0x2, 0x3, 0xe8, 0x4, 0x7f}}}, &(0x7f0000000e40)={0x84, &(0x7f00000009c0)={0x20, 0x7, 0x8a, "4e330ce0bdaddcac47b795cff92cb172a5bce3dbfdbd11f3a95b78c09078236ef16e96c47353bbccfc2d546910375f1eef1ba7e8482d30a123012a61e50b80bd8e65e47f42a30f31714db3c2e8befe4f606954c063c8b5a6ba07eb9981e04a7078dd09c54b38ab11b93de103627694e02f0c1655321935bfe45c28b5fe6f227373aa632a35ba67a3e6df"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x20, 0x20}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x38a7}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "7714"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0xff37}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000cc0)={0x40, 0x17, 0x6}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "4190"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x4b}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x3}})
r5 = epoll_create1(0x80000)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x302910}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, 0x2, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TUPLE_REPLY={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008804)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040))
r6 = syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x402)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x0})
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000f80)=""/193)

56.320252677s ago: executing program 2 (id=566):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb71d)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000009b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r9, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x5, 0xe7, 0x2, 0x101, 0x7, "ea71061d0000000001000200", 0x0, 0x80})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r11 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r11, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

53.855434011s ago: executing program 3 (id=572):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0xff00000000000000, 0xffff1000, 0x9, 0x0, 0x10})

48.439912968s ago: executing program 3 (id=582):
fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) (async)
r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1)
r1 = fsmount(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800c000b0006000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000300)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x17}, @ioring_restriction_register_op={0x0, 0x15}, @ioring_restriction_sqe_flags_allowed={0x2, 0x17}, @ioring_restriction_register_op={0x0, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x14}, @ioring_restriction_sqe_flags_allowed={0x2, 0x6}, @ioring_restriction_sqe_op={0x1, 0x17}], 0x7) (async)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000300)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x17}, @ioring_restriction_register_op={0x0, 0x15}, @ioring_restriction_sqe_flags_allowed={0x2, 0x17}, @ioring_restriction_register_op={0x0, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x14}, @ioring_restriction_sqe_flags_allowed={0x2, 0x6}, @ioring_restriction_sqe_op={0x1, 0x17}], 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0x3, 0x7fff0000}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0x3, 0x7fff0000}]})
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x2, 0x200, @mcast1, 0x53c7}, 0x1c) (async)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x2, 0x200, @mcast1, 0x53c7}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r3, &(0x7f00000002c0)="a644aeba", 0x4, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) (async)
sendto$inet6(r4, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8)
shutdown(r4, 0x1)
r5 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) (async)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000000100)=0x8, 0x4) (async)
setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000000100)=0x8, 0x4)
ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x8)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000380)='bic', 0x3)
shutdown(r3, 0x1)
clock_gettime(0xc, 0x0)
symlinkat(&(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00')

47.029406338s ago: executing program 3 (id=586):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xe26, 0x101400)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=""/92)

46.712637709s ago: executing program 3 (id=588):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r1 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xb, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0x3)
r4 = syz_open_procfs(0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x40, 0x7, 0xe3, {0xe3, 0x5, "ce071888d6e922126ae1558f07a3ffedba3b966edd08574af2849a6a46604e4e5c240bbea011663da68452e9708e0c5ff8164410f9f6991718c0655410896c721be1bfd808b8e9e642fc3b350767f274c515f33d2764d6c2d1a5a077dad211da9ef358cef6efb50d81ff61fd5eee665d702ac9ef69bd4ce756671c435b88060378435aa3f08b833ae634b5f1fefb407ea0fd4a4b0cd34002ca9f4bbc38b2178b36f615036aa2dd661b29d58230954211206c9fdbebd619bd402cf619d7c59eee079731ae572b6d717a9795377c34798820d006ec3b017c52b7789957c05c4af22e"}}, 0x0}, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x20, 0xb, 0xf0, "23a5b6b90a99ca1bd85b605579be97b13d45bfe65cdb0657454ebc69f7d3dc6851497ed7c9bcedaba60b896fbdb3a237002ecd9c83c4465794aac82501e15cd23c1e37cef96d54b5ba6ed9abb94aa8b75376c4ae64f2ecd1b261d0b8361195f91c7edba99eb676392b20c40337e94c0ea8e55f8544407f395ccf8fef311f8fb1fa0530d6f33eef3d837c0b17fb76e8bd096efb8af2255e04d7192dc6c046a8b55aaa30011d0a8eca1e42c370146d2cfad1786004a6281ffa17e80571330122ef2438d540fad3c944f775c47c1217631b9dcc592bbaf4bf645570ca1d89aa6e525d9a3f1f2ce8ce020210583b981b42fd"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfb}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "66b359"}, &(0x7f0000000400)={0x20, 0x82, 0x2, 'Tf'}, &(0x7f0000000480)={0x20, 0x83, 0x3, "74fa6c"}, &(0x7f00000004c0)={0x20, 0x84, 0x4, "4f0d9645"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "e9247d"}})
syz_usb_control_io(r0, &(0x7f0000000980)={0x2c, &(0x7f0000000780)={0x20, 0x7, 0x9d, {0x9d, 0x8, "2554e2d9ccfd428ff838e3664ed0c8a5161544d6aa884475eda98e2936d1f0cccf83330fe03d967884b5ecb85fd085f94e6f5669e45be35a469774987ca836d16bc0c5cebd8685ca8ee40e37a57903fc5eac0f8132e6c2c5e0c57053fde8d3bc6f64e95a09417f71abb2197273acc45e714d32a109fa977f8bd609f99bb57fa1d35ce11eb1bc4f2002729db7ebb661155b0378a0eb88669acb31e1"}}, &(0x7f0000000f00)=ANY=[@ANYBLOB="00035e0000005e03b31650363f7062d01fcd700f1a4efa2f3c44aefbe2cea53a954fd7f85283da587850eb0636292cd05efdc35a3d793a2f49ed2e2874916bb6f514ed73d2165339be2d80722981fdca5c18f3c3f33dca1e0eb039952e9954a33e75cfaa8f9a"], &(0x7f00000008c0)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xe, 0x8, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0xfc, 0xe8, 0x1, 0xfa}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x5, 0x8001}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x372f, 0x0, 0x9, [0xf]}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x7, 0xf, "3996c275", "fca6a7d1"}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfd, 0x2, 0x3, 0xe8, 0x4, 0x7f}}}, &(0x7f0000000e40)={0x84, &(0x7f00000009c0)={0x20, 0x7, 0x8a, "4e330ce0bdaddcac47b795cff92cb172a5bce3dbfdbd11f3a95b78c09078236ef16e96c47353bbccfc2d546910375f1eef1ba7e8482d30a123012a61e50b80bd8e65e47f42a30f31714db3c2e8befe4f606954c063c8b5a6ba07eb9981e04a7078dd09c54b38ab11b93de103627694e02f0c1655321935bfe45c28b5fe6f227373aa632a35ba67a3e6df"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x20, 0x20}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x38a7}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "7714"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0xff37}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000cc0)={0x40, 0x17, 0x6}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "4190"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x4b}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x3}})
r5 = epoll_create1(0x80000)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x302910}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, 0x2, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TUPLE_REPLY={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008804)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040))
r6 = syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x402)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x0})
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000f80)=""/193)

44.613600311s ago: executing program 3 (id=590):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x20008000, 0x0, 0x56, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
setrlimit(0x7, &(0x7f0000000180))
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0xf)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18)
connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r6, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x13be, 0x3a000)
ioctl$EVIOCGKEY(r8, 0x80404518, &(0x7f0000000080))

41.714769389s ago: executing program 3 (id=593):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556334da6912a7cff38294dc89d1d1b07a705251e6102000000c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e78693e9bd1c1b78000000000000000000000000000035fe39a78fdbb0e98e50c7bf6945bd19df0d03b00cdc7dc2c8429319ed73f403d0ca666545cbcc61a32644fc6019901de83dacb9d1ab268ee74b41434a2b7d1e5cdcedb198f7bca12fc4493d5a9e2ef94af3161a7f0bad4f362fe71290f975fa8f89f2f1b37f4fc1ce6d6d06540e3d7f309286d3f6cd12547aba5d7226ef6b24940c1acb41bc4ad4ee3dc992d70ac487e57c179a2c8e3e43bf99", 0x105}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x10, 0x0, 0x400000000000009}]})

41.082947033s ago: executing program 33 (id=566):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb71d)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000009b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r9, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x5, 0xe7, 0x2, 0x101, 0x7, "ea71061d0000000001000200", 0x0, 0x80})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r11 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r11, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

30.951977162s ago: executing program 1 (id=605):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4ff5677c1a"}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x2c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$getflags(0xffffffffffffffff, 0x401)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getgroups(0x0, &(0x7f0000000080))
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48)

26.366968621s ago: executing program 34 (id=593):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="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", 0x105}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x10, 0x0, 0x400000000000009}]})

26.350776161s ago: executing program 1 (id=611):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$kcm(0x2d, 0x2, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
socket(0xa, 0x1, 0x0)
socket(0xa, 0x1, 0x0)
socket(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x488, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x45c, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x7, 0x6560, 0x80000000, {0x3, 0x1, 0xb, 0x4, 0x3, 0x7}, {0x8, 0x1, 0x401, 0x2, 0x1, 0x101}, 0x3, 0x8, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x4, 0x5, 0x744, 0x53e, 0xfffffffc, 0x6, 0x9, 0xd24, 0xffffffc0, 0x6, 0x7, 0x78, 0x0, 0x101, 0x6, 0xd2a, 0x1000, 0x10001, 0x4, 0x80000000, 0x1, 0x101, 0xa3e, 0x4ad, 0x1de5, 0xc5, 0x4, 0x2b2, 0x1, 0x4, 0x2cec, 0x2, 0xbe, 0x1, 0xffff8000, 0xffffffff, 0x9e4c, 0x5, 0x401, 0x8, 0x80000001, 0x380, 0x8, 0x2, 0x7f, 0x9, 0x3, 0x2b7, 0x6, 0xfb1, 0x8001, 0x75b7eda1, 0x80000001, 0x1, 0x1, 0x3ff, 0x4, 0xbd0c, 0xfffffff8, 0x0, 0x2, 0x8, 0x9, 0x8, 0x9, 0x7, 0x9000000, 0x7fffffff, 0x2, 0x6, 0x19e2, 0x9, 0xd05e, 0x1, 0x1, 0x1, 0x3, 0x8, 0x10, 0x6, 0x5, 0x6, 0xa89e, 0x8, 0x4, 0x4, 0xa000, 0x3, 0xfd, 0x80000001, 0xf594, 0x1, 0x9, 0x7, 0x10000, 0x7, 0x3, 0xd7, 0xa73, 0x6, 0x8, 0x9, 0x8, 0x6, 0x3, 0x1000, 0x9, 0x9, 0x6, 0x3ff, 0xfffffffa, 0x81, 0x5, 0x47, 0xc33f, 0xe, 0xd, 0x3, 0x1, 0xffffffff, 0x6, 0xe6fd, 0x3, 0x2, 0x641, 0x188, 0x200, 0xc0000000, 0x3, 0x6, 0x6, 0x5, 0x3, 0xa6a5, 0x1000, 0x9, 0x3ff, 0xffffffff, 0x1, 0x2, 0x88, 0x6, 0x8e75, 0x0, 0x6, 0x80000001, 0x6, 0x0, 0x9, 0x38, 0x1, 0x2, 0x6, 0x8, 0x0, 0x7, 0x5, 0x5, 0xfffffe01, 0x10001, 0x6, 0x4, 0x42c, 0x8e8, 0xffff8000, 0x8, 0x1, 0xc, 0x2, 0x40, 0x99f, 0xb, 0xc1e6, 0x1b, 0x7f, 0x5ce, 0x10, 0x4, 0x5, 0x7, 0x5, 0x8000, 0x6, 0x7, 0xd, 0x8, 0x40, 0x81, 0x7, 0x9, 0x3b6, 0x0, 0x8, 0x40000000, 0xe2, 0x97, 0x3, 0x2, 0x81, 0x5, 0x3, 0x0, 0x6, 0x5635, 0x7ff, 0xe, 0x1, 0xce93, 0x8, 0x2, 0x8, 0xf4, 0x4, 0x5, 0x10, 0x6, 0x576, 0x7, 0x7, 0x0, 0x86, 0x7, 0x7f, 0xb, 0x0, 0x200, 0x5, 0x1, 0xd, 0xa, 0x800, 0x3, 0x6, 0x8, 0xbc, 0x2, 0x0, 0x0, 0x4, 0x7bd5dfb7, 0xcdc, 0x7, 0xa, 0x4, 0x4839, 0x4, 0x3, 0x8, 0x5e11, 0x2, 0x0, 0x6e8, 0x6f, 0x7433, 0xfffffffa]}]}, @TCA_FW_INDEV={0x14, 0x3, 'macsec0\x00'}]}}]}, 0x488}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x3c, r6, 0x1, 0x0, 0x10, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
fanotify_init(0xf00, 0x0)
fanotify_init(0x1a, 0x800)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
pipe2$9p(&(0x7f0000001900), 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}})

24.929086855s ago: executing program 1 (id=615):
r0 = syz_io_uring_setup(0x499, &(0x7f0000000f40)={0x0, 0xd144, 0x0, 0x40000000, 0x37f}, &(0x7f00000001c0), &(0x7f0000000000))
r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001c80)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)={0x20, 0x1, 0x1, 0x4}, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0)

22.146960657s ago: executing program 1 (id=617):
setsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7f6b574143f09481b439ba966711ba4700ee90231baf71d39336e5f50dc0d469ee89ffeae80cd1aba71782ff54c1bc4ef7d411601eb29d60874e3fdb99db523d041b", 0x42}], 0x1}, 0x4008863)
r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
r2 = dup(r1)
ioctl$TCFLSH(r2, 0x540b, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
open(0x0, 0x143bc2, 0x1c0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffffdd, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x20003, @empty, 0x8d}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x1, 0x3, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)

21.463745763s ago: executing program 4 (id=619):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

21.278707607s ago: executing program 4 (id=620):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (fail_nth: 2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)

20.827289451s ago: executing program 4 (id=621):
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbc000000aaaabb08060001080006310002aaaaaaaaaa00ac1414c4aaaaaaaaaabbac1414aa"], 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
write$nbd(r1, &(0x7f00000002c0)={0x67446698, 0x0, 0x4, 0x3, 0x1, "1d07979c62a7103eb51bfbc1c0bf5f17305befb9877a38212528d5a0f528cf2c2e01dd87ab0784b1e23481f332bf39fd0e63ccd7fba30eb2d800d7560bea55443599204cf1b06a99a9e3aea0db0c96fda64df13af4b595faf5b5d8775f7ff345836e38ac345cd5dea0fd0e7df591a44409e0e60f2f1167558aaa1f512665b7e1bf33b031e3c2799be601f3f4351474a547962f05f73263b98fae73fdc245ef0dce"}, 0xb1)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_wolinfo={0x5, 0x0, 0x2, "f9090800"}})
writev(r0, &(0x7f0000000980)=[{&(0x7f0000000180)='Wg', 0x2}, {0x0}], 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
syz_emit_ethernet(0x5e, &(0x7f0000000240)={@remote, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x0, 0x1}}, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x21, 0x3, 0x0, 0x0, "8a3ead03433a142b003be753a8bf6aeb72606ba6d03183e8a03a4f0882ea4f833b928aca9ed7f06bbf586083142b03460bfd0efabb6080860bc0b32d0ea76e85"}}}}, &(0x7f0000000040)={0x1, 0x3, [0x7e4, 0x629, 0x294, 0x582]})
sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)

20.659109855s ago: executing program 1 (id=622):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (fail_nth: 2)

20.1668787s ago: executing program 1 (id=623):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={0x0, 0x0, 0x10}, 0x18)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x52, 0xa, 0x3, "3258c5c00e7f94ae1e008faa001b0000f4ff4000000000000000e91aba2800", 0x31424752})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
shutdown(r5, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x2, @private2, 0x80}}, [0xb69b, 0x1, 0x9, 0x8, 0x2, 0x4cc16f28, 0x9, 0x1, 0x9, 0x6a, 0xc0b4, 0x1, 0x0, 0x63, 0x3]}, &(0x7f0000000080)=0x100)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@getae={0x4c, 0x1f, 0x400, 0x70bd28, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, 0x4d2, 0x2, 0x43}, @in6=@rand_addr=' \x01\x00', 0x7}, [@offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000019380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000019340)={&(0x7f0000019300)={0x28, 0x140b, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
r9 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_TIOCOUTQ(r9, 0x5411, &(0x7f0000000040))
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {0x7ffd}, @broadcast, @broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xae, 0xe0}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

19.808795754s ago: executing program 4 (id=624):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = inotify_init()
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000020000000400000003"], 0x50)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r2, &(0x7f0000000080), 0x20000000}, 0x20)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
io_setup(0x2e, &(0x7f0000000200)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0xfe, 0x4}])
inotify_add_watch(r1, &(0x7f00000000c0)='./file1\x00', 0x4000423)
write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600040000ff7f08000000000002003e00ecffffff98030000000000004b000000000000005600000000000000000000000000380001"], 0x78)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x328, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "c70e97e5c87cf33b5b649727cf9a36bcbd0c9cb7e445"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "6852b826023e46a6a8c25aabb1387759d7580479be45021778a4aba6"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xa4, 0x3, "78f8933008c5d591fb64d703f8e0653d511d4ad7267f40ad35fcaef9da985f041e0b8e5c68f7d00fdf502fdb114723d60a846cf7c08ebb212188191457a943dd5cfc650ddf97434a077af24c21749d577df98d96e4b6e8a5d10ec7dabdb0734628cb32780da8aaa375ee34a7fbd59e89877f8841aa4e4925fdebf68b32558106a04071d2ccd4cb82979f9b54c564f1b93c75fb5ff71c5f59ac1f1f9ef2cb265b"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "e4b9a9ab73f83d88d21deefa661aaa34e2f7c07e9e3910336e32d51c"}}, @TIPC_NLA_NODE_ID={0x30, 0x3, "1bd05ed503f2a92828f0c6287568a78333f5410691ab4f084df3a7961bf19388dc0213205b08355d58b4f1e0"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

18.664554503s ago: executing program 4 (id=625):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
io_setup(0xbf, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(0x0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x3c}, 0x20)

16.314926708s ago: executing program 4 (id=626):
r0 = syz_io_uring_complete(0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e23, 0x3, 'wrr\x00', 0xe, 0x7, 0x49}, 0x2c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0xa, 0x81, 0x37}, {@local, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x19}, {@local, 0x4e20, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
accept4$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e, 0x800)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='2P', 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x1ff}, 0x1c)

3.510781013s ago: executing program 35 (id=623):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={0x0, 0x0, 0x10}, 0x18)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x52, 0xa, 0x3, "3258c5c00e7f94ae1e008faa001b0000f4ff4000000000000000e91aba2800", 0x31424752})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
shutdown(r5, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x2, @private2, 0x80}}, [0xb69b, 0x1, 0x9, 0x8, 0x2, 0x4cc16f28, 0x9, 0x1, 0x9, 0x6a, 0xc0b4, 0x1, 0x0, 0x63, 0x3]}, &(0x7f0000000080)=0x100)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@getae={0x4c, 0x1f, 0x400, 0x70bd28, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, 0x4d2, 0x2, 0x43}, @in6=@rand_addr=' \x01\x00', 0x7}, [@offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000019380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000019340)={&(0x7f0000019300)={0x28, 0x140b, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
r9 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_TIOCOUTQ(r9, 0x5411, &(0x7f0000000040))
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {0x7ffd}, @broadcast, @broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xae, 0xe0}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

0s ago: executing program 36 (id=626):
r0 = syz_io_uring_complete(0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e23, 0x3, 'wrr\x00', 0xe, 0x7, 0x49}, 0x2c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0xa, 0x81, 0x37}, {@local, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x19}, {@local, 0x4e20, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
accept4$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e, 0x800)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='2P', 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x1ff}, 0x1c)

kernel console output (not intermixed with test programs):

USB device number 20 using dummy_hcd
[  192.559183][ T5974] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  192.669115][ T5891] usb 5-1: device descriptor read/64, error -71
[  192.739188][ T5974] usb 3-1: Using ep0 maxpacket: 32
[  192.746251][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  192.751300][ T5974] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  192.751327][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.751345][ T5974] usb 3-1: Product: syz
[  192.751358][ T5974] usb 3-1: Manufacturer: syz
[  192.751370][ T5974] usb 3-1: SerialNumber: syz
[  192.765512][ T5974] usb 3-1: config 0 descriptor??
[  192.813922][ T5974] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12
[  192.881274][ T5974] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[  192.919177][ T5891] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  193.059207][ T5891] usb 5-1: device descriptor read/64, error -71
[  193.169805][ T5891] usb usb5-port1: attempt power cycle
[  193.564634][ T5891] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  193.582075][ T5891] usb 5-1: device descriptor read/8, error -71
[  194.337170][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  194.337395][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  194.549757][ T5891] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  194.572172][ T5891] usb 5-1: device descriptor read/8, error -71
[  194.788331][ T5891] usb usb5-port1: unable to enumerate USB device
[  195.186842][ T5974] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8
[  195.298163][ T5974] usb 3-1: USB disconnect, device number 17
[  195.843420][ T7188] process 'syz.4.356' launched './file0' with NULL argv: empty string added
[  196.260783][ T7194] FAULT_INJECTION: forcing a failure.
[  196.260783][ T7194] name failslab, interval 1, probability 0, space 0, times 0
[  196.260807][ T7194] CPU: 1 UID: 0 PID: 7194 Comm: syz.0.355 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  196.260822][ T7194] Tainted: [L]=SOFTLOCKUP
[  196.260825][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  196.260834][ T7194] Call Trace:
[  196.260839][ T7194]  <TASK>
[  196.260844][ T7194]  dump_stack_lvl+0xe8/0x150
[  196.260863][ T7194]  should_fail_ex+0x46c/0x600
[  196.260881][ T7194]  ? dst_alloc+0x105/0x170
[  196.260895][ T7194]  should_failslab+0xa8/0x100
[  196.260906][ T7194]  ? dst_alloc+0x105/0x170
[  196.260919][ T7194]  kmem_cache_alloc_noprof+0x84/0x6c0
[  196.260937][ T7194]  dst_alloc+0x105/0x170
[  196.260953][ T7194]  ip_route_output_key_hash_rcu+0x1560/0x23e0
[  196.260970][ T7194]  ? ip_route_output_key_hash+0xc1/0x280
[  196.260981][ T7194]  ip_route_output_key_hash+0x174/0x280
[  196.260993][ T7194]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  196.261011][ T7194]  ip_route_output_flow+0x2a/0x150
[  196.261026][ T7194]  ? security_sk_classify_flow+0x70/0x180
[  196.261042][ T7194]  udp_sendmsg+0x142e/0x2170
[  196.261061][ T7194]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  196.261073][ T7194]  ? __pfx_udp_sendmsg+0x10/0x10
[  196.261093][ T7194]  ? __lock_acquire+0x6b6/0x2cf0
[  196.261107][ T7194]  ? smack_socket_sendmsg+0x1a7/0x520
[  196.261135][ T7194]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  196.261147][ T7194]  ? sock_rps_record_flow+0x19/0x410
[  196.261161][ T7194]  ? inet_sendmsg+0x29c/0x370
[  196.261172][ T7194]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  196.261188][ T7194]  __sock_sendmsg+0x19c/0x270
[  196.261207][ T7194]  ____sys_sendmsg+0x534/0x810
[  196.261223][ T7194]  ? __pfx_____sys_sendmsg+0x10/0x10
[  196.261240][ T7194]  ? import_iovec+0x74/0xa0
[  196.261252][ T7194]  ___sys_sendmsg+0x21f/0x2a0
[  196.261266][ T7194]  ? __pfx____sys_sendmsg+0x10/0x10
[  196.261282][ T7194]  ? kstrtouint+0x6e/0xe0
[  196.261308][ T7194]  ? __fget_files+0x2a/0x420
[  196.261319][ T7194]  ? __fget_files+0x3a6/0x420
[  196.261334][ T7194]  __sys_sendmmsg+0x22d/0x430
[  196.261350][ T7194]  ? __pfx___sys_sendmmsg+0x10/0x10
[  196.261367][ T7194]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  196.261389][ T7194]  ? ksys_write+0x230/0x260
[  196.261405][ T7194]  ? __pfx_ksys_write+0x10/0x10
[  196.261423][ T7194]  __x64_sys_sendmmsg+0xa0/0xc0
[  196.261437][ T7194]  do_syscall_64+0xec/0xf80
[  196.261446][ T7194]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.261456][ T7194]  ? trace_irq_disable+0x37/0x100
[  196.261467][ T7194]  ? clear_bhb_loop+0x60/0xb0
[  196.261479][ T7194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.261488][ T7194] RIP: 0033:0x7fd1f577f749
[  196.261499][ T7194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.261507][ T7194] RSP: 002b:00007fd1f39a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  196.261519][ T7194] RAX: ffffffffffffffda RBX: 00007fd1f59d6180 RCX: 00007fd1f577f749
[  196.261527][ T7194] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000005
[  196.261534][ T7194] RBP: 00007fd1f39a4090 R08: 0000000000000000 R09: 0000000000000000
[  196.261540][ T7194] R10: 0000000000000f1c R11: 0000000000000246 R12: 0000000000000001
[  196.261546][ T7194] R13: 00007fd1f59d6218 R14: 00007fd1f59d6180 R15: 00007fff58bc8778
[  196.261562][ T7194]  </TASK>
[  197.053262][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'.
[  198.014788][ T7205] FAULT_INJECTION: forcing a failure.
[  198.014788][ T7205] name failslab, interval 1, probability 0, space 0, times 0
[  198.014811][ T7205] CPU: 1 UID: 0 PID: 7205 Comm: syz.1.343 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  198.014827][ T7205] Tainted: [L]=SOFTLOCKUP
[  198.014830][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  198.014837][ T7205] Call Trace:
[  198.014841][ T7205]  <TASK>
[  198.014846][ T7205]  dump_stack_lvl+0xe8/0x150
[  198.014864][ T7205]  should_fail_ex+0x46c/0x600
[  198.014882][ T7205]  should_failslab+0xa8/0x100
[  198.014893][ T7205]  __kmalloc_noprof+0xe0/0x7e0
[  198.014909][ T7205]  ? tomoyo_encode+0x28b/0x550
[  198.014922][ T7205]  tomoyo_encode+0x28b/0x550
[  198.014934][ T7205]  tomoyo_realpath_from_path+0x58d/0x5d0
[  198.014950][ T7205]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  198.014964][ T7205]  tomoyo_path_number_perm+0x1e8/0x5a0
[  198.014979][ T7205]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  198.014993][ T7205]  ? __lock_acquire+0x6b6/0x2cf0
[  198.015008][ T7205]  ? do_raw_spin_lock+0x121/0x290
[  198.015036][ T7205]  ? __fget_files+0x2a/0x420
[  198.015049][ T7205]  ? __fget_files+0x2a/0x420
[  198.015058][ T7205]  ? __fget_files+0x3a6/0x420
[  198.015068][ T7205]  ? __fget_files+0x2a/0x420
[  198.015080][ T7205]  security_file_ioctl+0xcb/0x2d0
[  198.015096][ T7205]  __se_sys_ioctl+0x47/0x170
[  198.015111][ T7205]  do_syscall_64+0xec/0xf80
[  198.015122][ T7205]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.015132][ T7205]  ? trace_irq_disable+0x37/0x100
[  198.015143][ T7205]  ? clear_bhb_loop+0x60/0xb0
[  198.015155][ T7205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.015165][ T7205] RIP: 0033:0x7fe5f6d6f749
[  198.015175][ T7205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.015184][ T7205] RSP: 002b:00007fe5f4fce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  198.015195][ T7205] RAX: ffffffffffffffda RBX: 00007fe5f6fc5fa0 RCX: 00007fe5f6d6f749
[  198.015203][ T7205] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003
[  198.015209][ T7205] RBP: 00007fe5f4fce090 R08: 0000000000000000 R09: 0000000000000000
[  198.015216][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  198.015222][ T7205] R13: 00007fe5f6fc6038 R14: 00007fe5f6fc5fa0 R15: 00007ffe22c3df98
[  198.015238][ T7205]  </TASK>
[  198.015249][ T7205] ERROR: Out of memory at tomoyo_realpath_from_path.
[  198.290532][ T7209] netlink: 180 bytes leftover after parsing attributes in process `syz.4.362'.
[  198.321653][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'.
[  198.384778][   T37] kauditd_printk_skb: 87 callbacks suppressed
[  198.384790][   T37] audit: type=1326 audit(1767589437.121:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7210 comm="syz.3.363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84f99ff749 code=0x0
[  198.449149][ T1245] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  198.579162][ T1245] usb 1-1: device descriptor read/64, error -71
[  198.819167][ T1245] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  198.842697][ T7224] syz_tun: entered allmulticast mode
[  198.949222][ T1245] usb 1-1: device descriptor read/64, error -71
[  199.062614][ T1245] usb usb1-port1: attempt power cycle
[  199.311512][ T7176] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  199.419877][ T1245] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  199.440150][ T1245] usb 1-1: device descriptor read/8, error -71
[  199.464583][ T7176] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  199.464614][ T7176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.464633][ T7176] usb 5-1: Product: syz
[  199.464647][ T7176] usb 5-1: Manufacturer: syz
[  199.464660][ T7176] usb 5-1: SerialNumber: syz
[  199.478245][ T7176] usb 5-1: config 0 descriptor??
[  199.484078][ T7176] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 024
[  199.686267][ T1245] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  199.732378][ T1245] usb 1-1: device descriptor read/8, error -71
[  199.841936][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'.
[  200.502766][ T1245] usb usb1-port1: unable to enumerate USB device
[  200.732238][ T7176]  (null): failure reading functionality
[  200.748565][ T7176] i2c i2c-1: failure reading functionality
[  200.766412][ T7228] SQUASHFS error: Failed to read block 0x0: -5
[  200.771972][ T7176] i2c i2c-1: connected i2c-tiny-usb device
[  200.946536][ T5983] usb 5-1: USB disconnect, device number 24
[  201.144876][ T7254] capability: warning: `syz.3.377' uses 32-bit capabilities (legacy support in use)
[  201.160439][ T7254] program syz.3.377 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  201.259945][ T7258] syzkaller0: tun_chr_ioctl cmd 1074025677
[  201.260079][ T7258] syzkaller0: linktype set to 0
[  201.506131][ T5817] Bluetooth: hci3: command 0x0406 tx timeout
[  201.506182][ T5816] Bluetooth: hci0: command 0x0406 tx timeout
[  201.508290][ T5818] Bluetooth: hci2: command 0x0406 tx timeout
[  202.899138][ T5983] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  203.049101][ T5983] usb 4-1: Using ep0 maxpacket: 32
[  203.051852][ T5983] usb 4-1: unable to get BOS descriptor or descriptor too short
[  203.056322][ T5983] usb 4-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.40
[  203.056350][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.056369][ T5983] usb 4-1: Product: syz
[  203.056382][ T5983] usb 4-1: Manufacturer: 츸Й섟꽈�࿴ጰ齴蠤쫩煎웞漾ѭ�轖Ę즉�ᡩ쩔蹆崶⾛䮱舡侵彃ㅿ蘖脤┋ㄌꬦ쓂굄�턊踲쉌킼ٟ㨇�픥�몕ꈅꕕ뱸퓢�ꄧⵀ먰�㮩ျｼ㵢負䇅馔䯴Җ먴�갨짛縯࿼僄勽㫶�謫蹼辘Ⱞ㛺ᥥ镄鰑툳㶚�
[  203.056418][ T5983] usb 4-1: SerialNumber: syz
[  203.328905][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'.
[  203.918066][ T7275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.918599][ T7275] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.375563][ T7283] input: syz1 as /devices/virtual/input/input15
[  204.822633][ T5983] usbhid 4-1:1.0: can't add hid device: -71
[  204.822867][ T5983] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  204.839444][ T5983] usb 4-1: USB disconnect, device number 14
[  205.209119][ T5983] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  205.340500][ T5983] usb 3-1: device descriptor read/64, error -71
[  205.366453][ T7264] syz.3.380 (7264) used greatest stack depth: 18552 bytes left
[  205.584477][ T7302] syzkaller0: tun_chr_ioctl cmd 1074025677
[  205.584624][ T7302] syzkaller0: linktype set to 0
[  205.599973][ T5983] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  205.671987][ T5892] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  205.730578][ T5983] usb 3-1: device descriptor read/64, error -71
[  205.852425][ T5983] usb usb3-port1: attempt power cycle
[  206.686191][ T5892] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  206.686223][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0
[  206.696872][ T5892] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  206.696901][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  206.696920][ T5892] usb 1-1: Product: syz
[  206.696933][ T5892] usb 1-1: Manufacturer: syz
[  206.696947][ T5892] usb 1-1: SerialNumber: syz
[  206.706972][ T5892] usb 1-1: config 0 descriptor??
[  206.736103][ T5892] usb 1-1: selecting invalid altsetting 0
[  207.049296][ T5983] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  207.087258][ T5983] usb 3-1: device descriptor read/8, error -71
[  207.123616][ T7295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.141237][ T7295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.167619][ T5974] usb 1-1: USB disconnect, device number 27
[  207.502819][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'.
[  208.189183][ T5983] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  208.402014][ T5983] usb 3-1: device descriptor read/8, error -71
[  208.511378][ T5970] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  208.529668][ T5983] usb usb3-port1: unable to enumerate USB device
[  208.660898][ T5970] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  208.660924][ T5970] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  208.662075][ T5970] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  208.662101][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  208.662119][ T5970] usb 2-1: SerialNumber: syz
[  209.418881][ T5970] usb 2-1: 0:2 : does not exist
[  209.418974][ T5970] usb 2-1: unit 255 not found!
[  209.458000][ T5970] usb 2-1: USB disconnect, device number 8
[  209.597015][ T7360] 8021q: VLANs not supported on gre0
[  209.909173][ T5970] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  210.058971][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  210.059373][ T5970] usb 4-1: Using ep0 maxpacket: 32
[  210.082688][ T5970] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  210.082713][ T5970] usb 4-1: config 0 has no interface number 0
[  210.087878][ T5970] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  210.087902][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.087919][ T5970] usb 4-1: Product: syz
[  210.087932][ T5970] usb 4-1: Manufacturer: syz
[  210.087945][ T5970] usb 4-1: SerialNumber: syz
[  210.158777][ T5970] usb 4-1: config 0 descriptor??
[  210.172783][ T5970] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  210.172820][ T5970] usb 4-1: selecting invalid altsetting 1
[  210.172835][ T5970] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  210.176753][ T5970] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  210.177674][ T5970] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  210.177761][ T5970] usb 4-1: media controller created
[  210.271332][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  210.505205][ T5970] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  210.505262][ T5970] zl10353_read_register: readreg error (reg=127, ret==-71)
[  210.507699][ T5970] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  210.639690][ T5970] usb 4-1: USB disconnect, device number 15
[  211.050947][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'.
[  211.256177][ T5813] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  213.000085][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'.
[  213.892484][ T5974] IPVS: starting estimator thread 0...
[  214.216927][ T7399] IPVS: using max 7 ests per chain, 16800 per kthread
[  214.562348][ T7392] syzkaller0: tun_chr_ioctl cmd 1074025677
[  214.562471][ T7392] syzkaller0: linktype set to 0
[  215.262694][ T7408] FAULT_INJECTION: forcing a failure.
[  215.262694][ T7408] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  215.262729][ T7408] CPU: 1 UID: 0 PID: 7408 Comm: syz.1.409 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  215.262753][ T7408] Tainted: [L]=SOFTLOCKUP
[  215.262759][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  215.262770][ T7408] Call Trace:
[  215.262777][ T7408]  <TASK>
[  215.262785][ T7408]  dump_stack_lvl+0xe8/0x150
[  215.262813][ T7408]  should_fail_ex+0x46c/0x600
[  215.262840][ T7408]  _copy_from_user+0x2d/0xb0
[  215.262858][ T7408]  __copy_msghdr+0x3c5/0x5b0
[  215.262884][ T7408]  ___sys_sendmsg+0x1a5/0x2a0
[  215.262907][ T7408]  ? __pfx____sys_sendmsg+0x10/0x10
[  215.262932][ T7408]  ? kstrtouint+0x6e/0xe0
[  215.262978][ T7408]  ? __fget_files+0x2a/0x420
[  215.262995][ T7408]  ? __fget_files+0x3a6/0x420
[  215.263024][ T7408]  __sys_sendmmsg+0x22d/0x430
[  215.263052][ T7408]  ? __pfx___sys_sendmmsg+0x10/0x10
[  215.263083][ T7408]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  215.263118][ T7408]  ? ksys_write+0x230/0x260
[  215.263143][ T7408]  ? __pfx_ksys_write+0x10/0x10
[  215.263181][ T7408]  __x64_sys_sendmmsg+0xa0/0xc0
[  215.263203][ T7408]  do_syscall_64+0xec/0xf80
[  215.263220][ T7408]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.263238][ T7408]  ? trace_irq_disable+0x37/0x100
[  215.263257][ T7408]  ? clear_bhb_loop+0x60/0xb0
[  215.263278][ T7408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.263294][ T7408] RIP: 0033:0x7fe5f6d6f749
[  215.263312][ T7408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.263329][ T7408] RSP: 002b:00007fe5f4fce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  215.263349][ T7408] RAX: ffffffffffffffda RBX: 00007fe5f6fc5fa0 RCX: 00007fe5f6d6f749
[  215.263364][ T7408] RDX: 0000000000000001 RSI: 00002000000051c0 RDI: 0000000000000003
[  215.263376][ T7408] RBP: 00007fe5f4fce090 R08: 0000000000000000 R09: 0000000000000000
[  215.263388][ T7408] R10: 0000000000004040 R11: 0000000000000246 R12: 0000000000000001
[  215.263400][ T7408] R13: 00007fe5f6fc6038 R14: 00007fe5f6fc5fa0 R15: 00007ffe22c3df98
[  215.263431][ T7408]  </TASK>
[  217.805604][ T7410] syzkaller0: tun_chr_ioctl cmd 1074025677
[  217.805802][ T7410] syzkaller0: linktype set to 0
[  218.159195][ T6006] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  218.393285][ T6006] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  218.393311][ T6006] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  218.394760][ T6006] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  218.394785][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  218.394804][ T6006] usb 5-1: SerialNumber: syz
[  218.449173][ T6320] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  218.601028][ T6320] usb 3-1: device descriptor read/64, error -71
[  218.880443][ T6320] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  219.019213][ T6320] usb 3-1: device descriptor read/64, error -71
[  219.149624][ T6320] usb usb3-port1: attempt power cycle
[  219.539453][ T6320] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  219.689366][ T7437] FAULT_INJECTION: forcing a failure.
[  219.689366][ T7437] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  219.689407][ T7437] CPU: 1 UID: 0 PID: 7437 Comm: syz.0.415 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  219.689437][ T7437] Tainted: [L]=SOFTLOCKUP
[  219.689444][ T7437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  219.689456][ T7437] Call Trace:
[  219.689470][ T7437]  <TASK>
[  219.689478][ T7437]  dump_stack_lvl+0xe8/0x150
[  219.689508][ T7437]  should_fail_ex+0x46c/0x600
[  219.689540][ T7437]  _copy_from_user+0x2d/0xb0
[  219.689560][ T7437]  kstrtouint_from_user+0xc4/0x170
[  219.689588][ T7437]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  219.689631][ T7437]  proc_fail_nth_write+0x88/0x200
[  219.689657][ T7437]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  219.689689][ T7437]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  219.689716][ T7437]  vfs_write+0x287/0xb40
[  219.689751][ T7437]  ? __pfx_vfs_write+0x10/0x10
[  219.689779][ T7437]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  219.689798][ T7437]  ? lockdep_hardirqs_on+0x7b/0x110
[  219.689816][ T7437]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  219.689834][ T7437]  ? mutex_lock_nested+0x154/0x1d0
[  219.689856][ T7437]  ? fdget_pos+0x253/0x320
[  219.689884][ T7437]  ksys_write+0x14b/0x260
[  219.689906][ T7437]  ? __fget_files+0x3a6/0x420
[  219.689927][ T7437]  ? __pfx_ksys_write+0x10/0x10
[  219.689964][ T7437]  do_syscall_64+0xec/0xf80
[  219.689983][ T7437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.690000][ T7437]  ? trace_irq_disable+0x37/0x100
[  219.690020][ T7437]  ? clear_bhb_loop+0x60/0xb0
[  219.690042][ T7437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.690061][ T7437] RIP: 0033:0x7fd1f577e1ff
[  219.690077][ T7437] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  219.690095][ T7437] RSP: 002b:00007fd1f39e6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  219.690115][ T7437] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd1f577e1ff
[  219.690129][ T7437] RDX: 0000000000000001 RSI: 00007fd1f39e60a0 RDI: 0000000000000009
[  219.690142][ T7437] RBP: 00007fd1f39e6090 R08: 0000000000000000 R09: 0000000000000000
[  219.690154][ T7437] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  219.690166][ T7437] R13: 00007fd1f59d6038 R14: 00007fd1f59d5fa0 R15: 00007fff58bc8778
[  219.690200][ T7437]  </TASK>
[  220.008782][ T6006] usb 5-1: 0:2 : does not exist
[  220.014194][ T6006] usb 5-1: unit 255 not found!
[  220.222501][ T6006] usb 5-1: USB disconnect, device number 25
[  220.792127][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  221.499189][  T805] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  221.679166][  T805] usb 2-1: Using ep0 maxpacket: 8
[  221.684198][  T805] usb 2-1: unable to get BOS descriptor or descriptor too short
[  221.688676][  T805] usb 2-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config
[  221.688701][  T805] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  221.688804][  T805] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  221.758064][  T805] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  221.758306][  T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.758327][  T805] usb 2-1: Product: syz
[  221.758341][  T805] usb 2-1: Manufacturer: syz
[  221.758353][  T805] usb 2-1: SerialNumber: syz
[  222.101953][  T805] cdc_ncm 2-1:1.0: skipping garbage
[  222.102341][  T805] cdc_ncm 2-1:1.0: skipping garbage
[  222.102358][  T805] cdc_ncm 2-1:1.0: skipping garbage
[  222.102369][  T805] cdc_ncm 2-1:1.0: skipping garbage
[  222.102383][  T805] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  222.102424][  T805] cdc_ncm 2-1:1.0: bind() failure
[  222.196929][  T805] usb 2-1: USB disconnect, device number 9
[  222.769172][ T5972] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  222.940637][ T5972] usb 4-1: Using ep0 maxpacket: 16
[  222.957887][ T5972] usb 4-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9
[  222.957966][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.957986][ T5972] usb 4-1: Product: syz
[  222.957999][ T5972] usb 4-1: Manufacturer: syz
[  222.958013][ T5972] usb 4-1: SerialNumber: syz
[  223.077042][ T5972] usb 4-1: config 0 descriptor??
[  223.419327][ T7466] syzkaller0: tun_chr_ioctl cmd 1074025677
[  223.419487][ T7466] syzkaller0: linktype set to 0
[  223.459445][ T6320] usb 3-1: device descriptor read/8, error -71
[  223.462946][ T5972] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected.
[  224.007600][ T7469] FAULT_INJECTION: forcing a failure.
[  224.007600][ T7469] name failslab, interval 1, probability 0, space 0, times 0
[  224.007639][ T7469] CPU: 1 UID: 0 PID: 7469 Comm: syz.1.425 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  224.007665][ T7469] Tainted: [L]=SOFTLOCKUP
[  224.007672][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  224.007684][ T7469] Call Trace:
[  224.007692][ T7469]  <TASK>
[  224.007700][ T7469]  dump_stack_lvl+0xe8/0x150
[  224.007731][ T7469]  should_fail_ex+0x46c/0x600
[  224.007760][ T7469]  should_failslab+0xa8/0x100
[  224.007781][ T7469]  __kmalloc_noprof+0xe0/0x7e0
[  224.007806][ T7469]  ? tomoyo_encode+0x28b/0x550
[  224.007830][ T7469]  tomoyo_encode+0x28b/0x550
[  224.007854][ T7469]  tomoyo_realpath_from_path+0x58d/0x5d0
[  224.007875][ T7469]  ? tomoyo_domain+0xd9/0x130
[  224.007900][ T7469]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  224.007925][ T7469]  tomoyo_path_number_perm+0x1e8/0x5a0
[  224.007952][ T7469]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  224.007975][ T7469]  ? __lock_acquire+0x6b6/0x2cf0
[  224.008001][ T7469]  ? do_raw_spin_lock+0x121/0x290
[  224.008061][ T7469]  ? __fget_files+0x2a/0x420
[  224.008084][ T7469]  ? __fget_files+0x2a/0x420
[  224.008102][ T7469]  ? __fget_files+0x3a6/0x420
[  224.008120][ T7469]  ? __fget_files+0x2a/0x420
[  224.008143][ T7469]  security_file_ioctl+0xcb/0x2d0
[  224.008170][ T7469]  __se_sys_ioctl+0x47/0x170
[  224.008197][ T7469]  do_syscall_64+0xec/0xf80
[  224.008216][ T7469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.008234][ T7469]  ? trace_irq_disable+0x37/0x100
[  224.008254][ T7469]  ? clear_bhb_loop+0x60/0xb0
[  224.008276][ T7469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.008294][ T7469] RIP: 0033:0x7fe5f6d6f749
[  224.008312][ T7469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.008327][ T7469] RSP: 002b:00007fe5f4fce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  224.008347][ T7469] RAX: ffffffffffffffda RBX: 00007fe5f6fc5fa0 RCX: 00007fe5f6d6f749
[  224.008362][ T7469] RDX: 0000200000000080 RSI: 00000000c020aa07 RDI: 0000000000000003
[  224.008375][ T7469] RBP: 00007fe5f4fce090 R08: 0000000000000000 R09: 0000000000000000
[  224.008386][ T7469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.008398][ T7469] R13: 00007fe5f6fc6038 R14: 00007fe5f6fc5fa0 R15: 00007ffe22c3df98
[  224.008430][ T7469]  </TASK>
[  224.008538][ T7469] ERROR: Out of memory at tomoyo_realpath_from_path.
[  224.433568][ T5972] pwc: send_video_command error -71
[  224.433587][ T5972] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  224.433701][ T5972] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  224.491119][ T5972] usb 4-1: USB disconnect, device number 16
[  225.839155][  T805] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  226.001568][  T805] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  226.001594][  T805] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  226.003030][  T805] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  226.003056][  T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  226.003075][  T805] usb 1-1: SerialNumber: syz
[  226.389120][ T5983] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  226.786678][ T5983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  226.786736][ T5983] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  226.786820][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.885997][ T5983] usb 3-1: config 0 descriptor??
[  226.973886][ T5983] pwc: Askey VC010 type 2 USB webcam detected.
[  227.383784][ T5983] pwc: recv_control_msg error -32 req 02 val 2b00
[  227.388071][ T5983] pwc: recv_control_msg error -32 req 02 val 2700
[  227.428172][  T805] usb 1-1: 0:2 : does not exist
[  227.439159][  T805] usb 1-1: unit 255 not found!
[  227.575712][ T7488] FAULT_INJECTION: forcing a failure.
[  227.575712][ T7488] name failslab, interval 1, probability 0, space 0, times 0
[  227.575750][ T7488] CPU: 1 UID: 0 PID: 7488 Comm: syz.1.431 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  227.575778][ T7488] Tainted: [L]=SOFTLOCKUP
[  227.575785][ T7488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  227.575796][ T7488] Call Trace:
[  227.575804][ T7488]  <TASK>
[  227.575815][ T7488]  dump_stack_lvl+0xe8/0x150
[  227.575845][ T7488]  should_fail_ex+0x46c/0x600
[  227.575874][ T7488]  ? __alloc_skb+0x1dc/0x3a0
[  227.575895][ T7488]  should_failslab+0xa8/0x100
[  227.575914][ T7488]  ? __alloc_skb+0x1dc/0x3a0
[  227.575930][ T7488]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  227.575956][ T7488]  ? __local_bh_enable_ip+0x1c3/0x2c0
[  227.575981][ T7488]  ? __alloc_skb+0x198/0x3a0
[  227.576002][ T7488]  __alloc_skb+0x1dc/0x3a0
[  227.576026][ T7488]  netlink_sendmsg+0x5c6/0xb30
[  227.576059][ T7488]  ? __pfx_netlink_sendmsg+0x10/0x10
[  227.576092][ T7488]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  227.576115][ T7488]  ? __pfx_netlink_sendmsg+0x10/0x10
[  227.576139][ T7488]  __sock_sendmsg+0x21c/0x270
[  227.576167][ T7488]  ____sys_sendmsg+0x508/0x810
[  227.576194][ T7488]  ? __pfx_____sys_sendmsg+0x10/0x10
[  227.576225][ T7488]  ? import_iovec+0x74/0xa0
[  227.576248][ T7488]  ___sys_sendmsg+0x21f/0x2a0
[  227.576272][ T7488]  ? __pfx____sys_sendmsg+0x10/0x10
[  227.576330][ T7488]  ? __fget_files+0x2a/0x420
[  227.576349][ T7488]  ? __fget_files+0x3a6/0x420
[  227.576379][ T7488]  __x64_sys_sendmsg+0x1a1/0x260
[  227.576404][ T7488]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  227.576436][ T7488]  ? __pfx_ksys_write+0x10/0x10
[  227.576473][ T7488]  do_syscall_64+0xec/0xf80
[  227.576492][ T7488]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.576510][ T7488]  ? trace_irq_disable+0x37/0x100
[  227.576528][ T7488]  ? clear_bhb_loop+0x60/0xb0
[  227.576551][ T7488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.576569][ T7488] RIP: 0033:0x7fe5f6d6f749
[  227.576587][ T7488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.576603][ T7488] RSP: 002b:00007fe5f4fce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  227.576624][ T7488] RAX: ffffffffffffffda RBX: 00007fe5f6fc5fa0 RCX: 00007fe5f6d6f749
[  227.576638][ T7488] RDX: 0000000004004004 RSI: 00002000000002c0 RDI: 0000000000000003
[  227.576651][ T7488] RBP: 00007fe5f4fce090 R08: 0000000000000000 R09: 0000000000000000
[  227.576663][ T7488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.576682][ T7488] R13: 00007fe5f6fc6038 R14: 00007fe5f6fc5fa0 R15: 00007ffe22c3df98
[  227.576714][ T7488]  </TASK>
[  227.604846][ T5983] pwc: recv_control_msg error -32 req 04 val 1000
[  228.192596][  T805] usb 1-1: USB disconnect, device number 28
[  229.021378][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  229.332927][  T805] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  229.492947][  T805] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  229.493057][  T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.495859][  T805] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  229.495885][  T805] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  229.496115][  T805] usb 2-1: Manufacturer: syz
[  229.577144][  T805] usb 2-1: config 0 descriptor??
[  229.752724][  T805] rc_core: IR keymap rc-hauppauge not found
[  229.752746][  T805] Registered IR keymap rc-empty
[  229.797446][  T805] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  229.866470][  T805] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16
[  230.292128][ T5983] pwc: recv_control_msg error -71 req 04 val 1300
[  230.292773][ T5983] pwc: recv_control_msg error -71 req 04 val 1400
[  230.293383][ T5983] pwc: recv_control_msg error -71 req 02 val 2000
[  230.296530][ T5983] pwc: recv_control_msg error -71 req 02 val 2100
[  230.336835][ T5983] pwc: recv_control_msg error -71 req 04 val 1500
[  230.343513][ T5983] pwc: recv_control_msg error -71 req 02 val 2500
[  230.399271][ T5983] pwc: recv_control_msg error -71 req 02 val 2400
[  230.401170][ T5983] pwc: recv_control_msg error -71 req 02 val 2600
[  230.402279][ T5983] pwc: recv_control_msg error -71 req 02 val 2900
[  230.403863][ T5983] pwc: recv_control_msg error -71 req 02 val 2800
[  230.406565][ T5983] pwc: recv_control_msg error -71 req 04 val 1100
[  230.451522][ T5983] pwc: recv_control_msg error -71 req 04 val 1200
[  230.615745][ T5983] pwc: Registered as video103.
[  230.733585][ T5983] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17
[  231.822014][ T5810] Bluetooth: hci1: command 0x0405 tx timeout
[  232.354417][ T5983] usb 3-1: USB disconnect, device number 26
[  233.760173][ T5870] usb 2-1: USB disconnect, device number 10
[  234.632914][ T7537] syzkaller0: tun_chr_ioctl cmd 1074025677
[  234.634139][ T7537] syzkaller0: linktype set to 0
[  236.219230][ T5983] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  236.380820][ T5983] usb 3-1: Using ep0 maxpacket: 8
[  236.383243][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  236.383275][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  236.383297][ T5983] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  236.383319][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  236.383345][ T5983] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  236.383383][ T5983] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  236.383404][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.388373][ T5983] usb 3-1: config 0 descriptor??
[  236.486863][ T7545] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  236.785384][ T7560] FAULT_INJECTION: forcing a failure.
[  236.785384][ T7560] name failslab, interval 1, probability 0, space 0, times 0
[  236.785467][ T7560] CPU: 1 UID: 0 PID: 7560 Comm: syz.4.452 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  236.785494][ T7560] Tainted: [L]=SOFTLOCKUP
[  236.785501][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  236.785513][ T7560] Call Trace:
[  236.785521][ T7560]  <TASK>
[  236.785529][ T7560]  dump_stack_lvl+0xe8/0x150
[  236.785559][ T7560]  should_fail_ex+0x46c/0x600
[  236.785590][ T7560]  should_failslab+0xa8/0x100
[  236.785611][ T7560]  __kmalloc_noprof+0xe0/0x7e0
[  236.785636][ T7560]  ? bpf_test_init+0x9f/0x150
[  236.785665][ T7560]  bpf_test_init+0x9f/0x150
[  236.785691][ T7560]  bpf_prog_test_run_skb+0x376/0x1d50
[  236.785720][ T7560]  ? __fget_files+0x2a/0x420
[  236.785744][ T7560]  ? __fget_files+0x2a/0x420
[  236.785770][ T7560]  ? __fget_files+0x3a6/0x420
[  236.785788][ T7560]  ? __fget_files+0x2a/0x420
[  236.785812][ T7560]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  236.785836][ T7560]  bpf_prog_test_run+0x2cd/0x340
[  236.785863][ T7560]  __sys_bpf+0x562/0x860
[  236.785885][ T7560]  ? __pfx___sys_bpf+0x10/0x10
[  236.785903][ T7560]  ? rt_mutex_slowunlock+0x1be/0x2e0
[  236.785943][ T7560]  ? ksys_write+0x230/0x260
[  236.785971][ T7560]  ? __pfx_ksys_write+0x10/0x10
[  236.786001][ T7560]  __x64_sys_bpf+0x7c/0x90
[  236.786021][ T7560]  do_syscall_64+0xec/0xf80
[  236.786039][ T7560]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.786056][ T7560]  ? trace_irq_disable+0x37/0x100
[  236.786075][ T7560]  ? clear_bhb_loop+0x60/0xb0
[  236.786097][ T7560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.786116][ T7560] RIP: 0033:0x7fac3184f749
[  236.786132][ T7560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.786149][ T7560] RSP: 002b:00007fac2faae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  236.786170][ T7560] RAX: ffffffffffffffda RBX: 00007fac31aa5fa0 RCX: 00007fac3184f749
[  236.786185][ T7560] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  236.786197][ T7560] RBP: 00007fac2faae090 R08: 0000000000000000 R09: 0000000000000000
[  236.786209][ T7560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  236.786221][ T7560] R13: 00007fac31aa6038 R14: 00007fac31aa5fa0 R15: 00007ffe8a333928
[  236.786253][ T7560]  </TASK>
[  238.122342][ T7565] netlink: 92 bytes leftover after parsing attributes in process `syz.1.453'.
[  238.122367][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'.
[  238.809373][ T5813] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  239.089130][ T5890] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  239.401447][ T5974] usb 3-1: USB disconnect, device number 27
[  239.402057][ T5890] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  239.404276][ T5890] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  239.404291][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.404301][ T5890] usb 4-1: Product: syz
[  239.404308][ T5890] usb 4-1: Manufacturer: syz
[  239.404316][ T5890] usb 4-1: SerialNumber: syz
[  240.071742][ T5890] usb 4-1: config 0 descriptor??
[  240.087169][ T5890] usb 4-1: can't set config #0, error -71
[  240.137403][ T5890] usb 4-1: USB disconnect, device number 17
[  240.639277][ T5890] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  240.643993][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  240.819112][ T5890] usb 1-1: device descriptor read/64, error -32
[  240.953038][   T37] audit: type=1326 audit(1767589479.681:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f6d6f749 code=0x7ffc0000
[  240.953327][   T37] audit: type=1326 audit(1767589479.701:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fe5f6d6f749 code=0x7ffc0000
[  240.953598][   T37] audit: type=1326 audit(1767589479.701:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f6d6f749 code=0x7ffc0000
[  240.953935][   T37] audit: type=1326 audit(1767589479.701:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f6d6f749 code=0x7ffc0000
[  241.030345][   T37] audit: type=1326 audit(1767589479.701:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5f6d6f749 code=0x7ffc0000
[  241.030410][   T37] audit: type=1326 audit(1767589479.701:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f6d6f749 code=0x7ffc0000
[  241.030452][   T37] audit: type=1326 audit(1767589479.701:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f6d6f749 code=0x7ffc0000
[  241.030493][   T37] audit: type=1326 audit(1767589479.701:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5f6d6f749 code=0x7ffc0000
[  241.030535][   T37] audit: type=1326 audit(1767589479.701:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f6d6f749 code=0x7ffc0000
[  241.030576][   T37] audit: type=1326 audit(1767589479.701:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f6d6f749 code=0x7ffc0000
[  241.069061][ T5890] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  241.299984][ T5890] usb 1-1: device descriptor read/64, error -71
[  241.308861][ T7587] netlink: 148 bytes leftover after parsing attributes in process `syz.2.461'.
[  241.333925][ T7591] 9pnet_fd: Insufficient options for proto=fd
[  241.409624][ T5890] usb usb1-port1: attempt power cycle
[  241.460103][ T7593] FAULT_INJECTION: forcing a failure.
[  241.460103][ T7593] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  241.460219][ T7593] CPU: 1 UID: 0 PID: 7593 Comm: syz.1.462 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  241.460245][ T7593] Tainted: [L]=SOFTLOCKUP
[  241.460258][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  241.460270][ T7593] Call Trace:
[  241.460278][ T7593]  <TASK>
[  241.460286][ T7593]  dump_stack_lvl+0xe8/0x150
[  241.460316][ T7593]  should_fail_ex+0x46c/0x600
[  241.460346][ T7593]  _copy_from_user+0x2d/0xb0
[  241.460366][ T7593]  ___sys_sendmsg+0x158/0x2a0
[  241.460392][ T7593]  ? __pfx____sys_sendmsg+0x10/0x10
[  241.460449][ T7593]  ? __fget_files+0x2a/0x420
[  241.460468][ T7593]  ? __fget_files+0x3a6/0x420
[  241.460497][ T7593]  __x64_sys_sendmsg+0x1a1/0x260
[  241.460519][ T7593]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  241.460550][ T7593]  ? __pfx_ksys_write+0x10/0x10
[  241.460585][ T7593]  do_syscall_64+0xec/0xf80
[  241.460603][ T7593]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.460620][ T7593]  ? trace_irq_disable+0x37/0x100
[  241.460639][ T7593]  ? clear_bhb_loop+0x60/0xb0
[  241.460661][ T7593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.460679][ T7593] RIP: 0033:0x7fe5f6d6f749
[  241.460696][ T7593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  241.460712][ T7593] RSP: 002b:00007fe5f4fce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  241.460731][ T7593] RAX: ffffffffffffffda RBX: 00007fe5f6fc5fa0 RCX: 00007fe5f6d6f749
[  241.460744][ T7593] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  241.460754][ T7593] RBP: 00007fe5f4fce090 R08: 0000000000000000 R09: 0000000000000000
[  241.460764][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.460774][ T7593] R13: 00007fe5f6fc6038 R14: 00007fe5f6fc5fa0 R15: 00007ffe22c3df98
[  241.460804][ T7593]  </TASK>
[  242.844589][ T7597] warning: `syz.4.463' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  242.847093][ T5890] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  242.870077][ T5890] usb 1-1: device descriptor read/8, error -71
[  243.109108][ T5890] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  243.129879][ T5890] usb 1-1: device descriptor read/8, error -71
[  243.239585][ T5890] usb usb1-port1: unable to enumerate USB device
[  243.809351][ T5890] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  244.002137][ T5890] usb 2-1: not running at top speed; connect to a high speed hub
[  244.004927][ T5890] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  244.004959][ T5890] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  244.195288][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  244.195317][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.195337][ T5890] usb 2-1: Product: syz
[  244.195351][ T5890] usb 2-1: Manufacturer: syz
[  244.195365][ T5890] usb 2-1: SerialNumber: syz
[  244.545640][ T5890] cdc_ncm 2-1:1.0: bind() failure
[  244.633222][ T5890] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  244.633276][ T5890] cdc_ncm 2-1:1.1: bind() failure
[  244.692813][ T5890] usb 2-1: USB disconnect, device number 11
[  245.190478][ T6006] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  245.339194][ T6006] usb 4-1: Using ep0 maxpacket: 32
[  245.341497][ T6006] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  245.341585][ T6006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.391107][ T6006] usb 4-1: config 0 descriptor??
[  245.509776][ T7636] syzkaller0: tun_chr_ioctl cmd 1074025677
[  245.510383][ T7636] syzkaller0: linktype set to 0
[  245.644750][ T6006] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  245.979265][ T6006] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  245.982038][ T6006] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  245.982093][ T6006] usb 4-1: media controller created
[  246.050773][ T6006] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  246.239178][ T5919] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  246.421537][ T6006] DVB: Unable to find symbol dib7000p_attach()
[  246.421553][ T6006] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  247.249138][ T6006] rc_core: IR keymap rc-dib0700-rc5 not found
[  247.249160][ T6006] Registered IR keymap rc-empty
[  247.249669][ T6006] dvb-usb: could not initialize remote control.
[  247.249679][ T6006] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  247.302321][ T6006] usb 4-1: USB disconnect, device number 18
[  247.435355][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'.
[  247.453467][ T5919] usb 3-1: Using ep0 maxpacket: 8
[  247.456647][ T5919] usb 3-1: too many configurations: 141, using maximum allowed: 8
[  247.459795][ T5919] usb 3-1: config index 0 descriptor too short (expected 259, got 18)
[  247.459819][ T5919] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  247.459846][ T5919] usb 3-1: can't read configurations, error -22
[  247.542941][ T6006] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  247.699450][ T5870] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  247.735194][ T5919] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  247.855653][ T5870] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  247.855683][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.855702][ T5870] usb 5-1: Product: syz
[  247.855716][ T5870] usb 5-1: Manufacturer: syz
[  247.855729][ T5870] usb 5-1: SerialNumber: syz
[  247.905587][ T5870] usb 5-1: config 0 descriptor??
[  248.019179][ T5919] usb 3-1: Using ep0 maxpacket: 8
[  248.105555][ T5919] usb 3-1: too many configurations: 141, using maximum allowed: 8
[  248.121429][ T5919] usb 3-1: config index 0 descriptor too short (expected 259, got 18)
[  248.121456][ T5919] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  248.121484][ T5919] usb 3-1: can't read configurations, error -22
[  248.123377][   T10] usb 5-1: USB disconnect, device number 26
[  248.129250][ T5919] usb usb3-port1: attempt power cycle
[  252.009124][ T1245] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  252.581139][ T1245] usb 2-1: not running at top speed; connect to a high speed hub
[  252.590456][ T1245] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  252.590477][ T1245] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  253.582156][ T1245] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  253.582175][ T1245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.582185][ T1245] usb 2-1: Product: syz
[  253.582192][ T1245] usb 2-1: Manufacturer: syz
[  253.582199][ T1245] usb 2-1: SerialNumber: syz
[  254.789258][ T1245] cdc_ncm 2-1:1.0: bind() failure
[  254.852075][ T1245] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  254.852102][ T1245] cdc_ncm 2-1:1.1: bind() failure
[  254.956640][ T1245] usb 2-1: USB disconnect, device number 12
[  255.694746][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  255.694814][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  255.990632][ T1245] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  256.379304][ T1245] usb 2-1: Using ep0 maxpacket: 8
[  256.396002][ T1245] usb 2-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config
[  256.396028][ T1245] usb 2-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  256.396063][ T1245] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  256.396085][ T1245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.409181][  T805] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  260.609705][  T805] usb 5-1: Using ep0 maxpacket: 8
[  260.675653][  T805] usb 5-1: device descriptor read/all, error -71
[  260.879431][  T880] usb 2-1: USB disconnect, device number 13
[  261.379115][ T5890] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  261.569160][ T5890] usb 3-1: Using ep0 maxpacket: 8
[  261.604091][ T5890] usb 3-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config
[  261.604119][ T5890] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  261.604152][ T5890] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  261.604173][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.895831][ T5813] Bluetooth: hci1: command 0x0405 tx timeout
[  263.268033][ T7710] binder: 7706:7710 ioctl 4018620d 0 returned -22
[  263.428278][ T7710] binder: BINDER_SET_CONTEXT_MGR already set
[  263.430343][ T7710] binder: 7706:7710 ioctl 4018620d 200000000040 returned -16
[  263.957641][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  263.983646][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  263.987389][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  264.541262][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  265.791291][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  265.965761][ T5869] usb 3-1: USB disconnect, device number 31
[  266.221083][ T7717] netlink: 52 bytes leftover after parsing attributes in process `syz.3.499'.
[  266.704867][ T7718] binder: BC_ATTEMPT_ACQUIRE not supported
[  266.704883][ T7718] binder: 7716:7718 ioctl c0306201 2000000001c0 returned -22
[  266.744857][ T7705] lo speed is unknown, defaulting to 1000
[  267.088312][ T7723] netlink: 2 bytes leftover after parsing attributes in process `syz.2.501'.
[  267.102378][ T7726] cgroup: none used incorrectly
[  267.347493][ T5890] IPVS: starting estimator thread 0...
[  267.680371][ T7731] IPVS: using max 8 ests per chain, 19200 per kthread
[  267.852581][ T5804] Bluetooth: hci5: command tx timeout
[  269.721015][ T7705] chnl_net:caif_netlink_parms(): no params data found
[  269.962475][ T5869] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  269.962609][ T5804] Bluetooth: hci5: command tx timeout
[  270.322220][ T5869] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  270.323694][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  270.323747][ T5869] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  270.323773][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0
[  270.326217][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  270.326268][ T5869] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  270.326294][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0
[  270.389109][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  270.389762][ T5869] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  270.389790][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0
[  270.439538][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  270.439594][ T5869] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  270.439620][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0
[  270.443581][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  270.443636][ T5869] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  270.443662][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0
[  270.500027][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  270.500083][ T5869] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  270.500098][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0
[  270.501128][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  270.501180][ T5869] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  270.501204][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0
[  270.529159][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  270.529207][ T5869] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  270.529221][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0
[  270.557197][ T5869] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  270.557219][ T5869] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  270.557230][ T5869] usb 3-1: Product: syz
[  270.557237][ T5869] usb 3-1: Manufacturer: syz
[  270.557245][ T5869] usb 3-1: SerialNumber: syz
[  270.684760][ T5869] usb 3-1: config 0 descriptor??
[  270.700720][ T6006] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  270.736857][ T5869] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  270.895707][ T6006] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  270.898478][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.898502][ T6006] usb 5-1: Product: syz
[  270.898516][ T6006] usb 5-1: Manufacturer: syz
[  270.898539][ T6006] usb 5-1: SerialNumber: syz
[  271.078687][ T6006] usb 5-1: config 0 descriptor??
[  271.098192][ T5890] usb 3-1: USB disconnect, device number 32
[  271.250762][ T5890] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  271.261758][ T6006] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 029
[  271.830042][ T6006]  (null): failure reading functionality
[  271.848313][ T7755] FAULT_INJECTION: forcing a failure.
[  271.848313][ T7755] name failslab, interval 1, probability 0, space 0, times 0
[  271.848347][ T7755] CPU: 0 UID: 0 PID: 7755 Comm: syz.3.508 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  271.848373][ T7755] Tainted: [L]=SOFTLOCKUP
[  271.848380][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  271.848399][ T7755] Call Trace:
[  271.848407][ T7755]  <TASK>
[  271.848415][ T7755]  dump_stack_lvl+0xe8/0x150
[  271.848446][ T7755]  should_fail_ex+0x46c/0x600
[  271.848483][ T7755]  should_failslab+0xa8/0x100
[  271.848503][ T7755]  __kmalloc_noprof+0xe0/0x7e0
[  271.848529][ T7755]  ? tomoyo_encode+0x28b/0x550
[  271.848552][ T7755]  tomoyo_encode+0x28b/0x550
[  271.848576][ T7755]  tomoyo_realpath_from_path+0x58d/0x5d0
[  271.848606][ T7755]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  271.848631][ T7755]  tomoyo_path_number_perm+0x1e8/0x5a0
[  271.848659][ T7755]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  271.848683][ T7755]  ? __lock_acquire+0x6b6/0x2cf0
[  271.848710][ T7755]  ? do_raw_spin_lock+0x121/0x290
[  271.848763][ T7755]  ? __fget_files+0x2a/0x420
[  271.848786][ T7755]  ? __fget_files+0x2a/0x420
[  271.848804][ T7755]  ? __fget_files+0x3a6/0x420
[  271.848823][ T7755]  ? __fget_files+0x2a/0x420
[  271.848847][ T7755]  security_file_ioctl+0xcb/0x2d0
[  271.848875][ T7755]  __se_sys_ioctl+0x47/0x170
[  271.848901][ T7755]  do_syscall_64+0xec/0xf80
[  271.848920][ T7755]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.848938][ T7755]  ? trace_irq_disable+0x37/0x100
[  271.848957][ T7755]  ? clear_bhb_loop+0x60/0xb0
[  271.848981][ T7755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.848998][ T7755] RIP: 0033:0x7f84f99ff749
[  271.849016][ T7755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.849032][ T7755] RSP: 002b:00007f84f7c24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  271.849053][ T7755] RAX: ffffffffffffffda RBX: 00007f84f9c56180 RCX: 00007f84f99ff749
[  271.849067][ T7755] RDX: 00002000000004c0 RSI: 0000000000003b83 RDI: 0000000000000005
[  271.849080][ T7755] RBP: 00007f84f7c24090 R08: 0000000000000000 R09: 0000000000000000
[  271.849092][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  271.849103][ T7755] R13: 00007f84f9c56218 R14: 00007f84f9c56180 R15: 00007ffd9b9df338
[  271.849135][ T7755]  </TASK>
[  271.924287][ T7755] ERROR: Out of memory at tomoyo_realpath_from_path.
[  272.019294][ T5804] Bluetooth: hci5: command tx timeout
[  272.708365][ T6006] i2c i2c-1: failure reading functionality
[  272.749681][ T6006] i2c i2c-1: connected i2c-tiny-usb device
[  272.789993][ T7744] SQUASHFS error: Failed to read block 0x0: -5
[  273.368237][ T5890] usb 5-1: USB disconnect, device number 29
[  274.221469][ T5804] Bluetooth: hci5: command tx timeout
[  274.429530][ T7756] syzkaller0: tun_chr_ioctl cmd 1074025677
[  274.429696][ T7756] syzkaller0: linktype set to 0
[  276.479975][ T7788] tmpfs: Unknown parameter 'quotð<­»FCg#&¡ä«?{ÃŽËa'
[  276.805644][ T7790] overlay: ./file0 is not a directory
[  277.338333][   T37] kauditd_printk_skb: 5 callbacks suppressed
[  277.338351][   T37] audit: type=1326 audit(1767589516.081:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85486f749 code=0x7ffc0000
[  277.338674][   T37] audit: type=1326 audit(1767589516.081:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85486f749 code=0x7ffc0000
[  277.388058][   T37] audit: type=1326 audit(1767589516.081:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85486f749 code=0x7ffc0000
[  277.393515][   T37] audit: type=1326 audit(1767589516.141:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85486f749 code=0x7ffc0000
[  277.393563][   T37] audit: type=1326 audit(1767589516.141:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85486f749 code=0x7ffc0000
[  277.409346][   T37] audit: type=1326 audit(1767589516.161:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa85486f749 code=0x7ffc0000
[  277.409829][   T37] audit: type=1326 audit(1767589516.161:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85486f749 code=0x7ffc0000
[  277.410993][   T37] audit: type=1326 audit(1767589516.161:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85486f749 code=0x7ffc0000
[  277.412240][   T37] audit: type=1326 audit(1767589516.161:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85486f749 code=0x7ffc0000
[  277.414257][   T37] audit: type=1326 audit(1767589516.161:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7795 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa85486f749 code=0x7ffc0000
[  280.786907][ T7801] syzkaller0: tun_chr_ioctl cmd 1074025677
[  280.787046][ T7801] syzkaller0: linktype set to 0
[  281.159200][ T5890] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  281.325139][ T5890] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  281.325169][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.325188][ T5890] usb 3-1: Product: syz
[  281.325201][ T5890] usb 3-1: Manufacturer: syz
[  281.325214][ T5890] usb 3-1: SerialNumber: syz
[  281.514727][ T5890] usb 3-1: config 0 descriptor??
[  281.527233][ T5890] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 033
[  281.738621][ T7820] binder: 7819:7820 ioctl 4018620d 0 returned -22
[  281.866918][ T7820] binder: BINDER_SET_CONTEXT_MGR already set
[  281.866934][ T7820] binder: 7819:7820 ioctl 4018620d 200000000040 returned -16
[  281.977840][ T5890]  (null): failure reading functionality
[  282.000976][ T7816] SQUASHFS error: Failed to read block 0x0: -5
[  282.006033][ T5890] i2c i2c-1: failure reading functionality
[  282.026608][ T5890] i2c i2c-1: connected i2c-tiny-usb device
[  282.045519][ T7823] FAULT_INJECTION: forcing a failure.
[  282.045519][ T7823] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  282.045553][ T7823] CPU: 0 UID: 0 PID: 7823 Comm: syz.4.523 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  282.045579][ T7823] Tainted: [L]=SOFTLOCKUP
[  282.045586][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  282.045597][ T7823] Call Trace:
[  282.045605][ T7823]  <TASK>
[  282.045612][ T7823]  dump_stack_lvl+0xe8/0x150
[  282.045641][ T7823]  should_fail_ex+0x46c/0x600
[  282.045671][ T7823]  _copy_to_user+0x31/0xb0
[  282.045692][ T7823]  simple_read_from_buffer+0xe1/0x170
[  282.045716][ T7823]  proc_fail_nth_read+0x1b6/0x220
[  282.045745][ T7823]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  282.045774][ T7823]  ? rw_verify_area+0x2ac/0x4e0
[  282.045796][ T7823]  ? ringbuf_map_alloc+0x268/0x380
[  282.045814][ T7823]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  282.045840][ T7823]  vfs_read+0x206/0xa30
[  282.045873][ T7823]  ? __pfx_vfs_read+0x10/0x10
[  282.045899][ T7823]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  282.045918][ T7823]  ? lockdep_hardirqs_on+0x7b/0x110
[  282.045935][ T7823]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  282.045954][ T7823]  ? mutex_lock_nested+0x154/0x1d0
[  282.045976][ T7823]  ? fdget_pos+0x253/0x320
[  282.046004][ T7823]  ksys_read+0x14b/0x260
[  282.046029][ T7823]  ? __pfx_ksys_read+0x10/0x10
[  282.046064][ T7823]  do_syscall_64+0xec/0xf80
[  282.046083][ T7823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.046100][ T7823]  ? trace_irq_disable+0x37/0x100
[  282.046119][ T7823]  ? clear_bhb_loop+0x60/0xb0
[  282.046142][ T7823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.046161][ T7823] RIP: 0033:0x7fac3184e15c
[  282.046178][ T7823] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  282.046200][ T7823] RSP: 002b:00007fac2faae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  282.046219][ T7823] RAX: ffffffffffffffda RBX: 00007fac31aa5fa0 RCX: 00007fac3184e15c
[  282.046233][ T7823] RDX: 000000000000000f RSI: 00007fac2faae0a0 RDI: 0000000000000003
[  282.046244][ T7823] RBP: 00007fac2faae090 R08: 0000000000000000 R09: 0000000000000000
[  282.046255][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.046267][ T7823] R13: 00007fac31aa6038 R14: 00007fac31aa5fa0 R15: 00007ffe8a333928
[  282.046300][ T7823]  </TASK>
[  282.209646][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.351850][  T805] usb 3-1: USB disconnect, device number 33
[  282.359398][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.359642][ T7705] bridge_slave_0: entered allmulticast mode
[  282.394418][ T7705] bridge_slave_0: entered promiscuous mode
[  282.847889][ T7834] input: syz1 as /devices/virtual/input/input19
[  284.521615][ T3560] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.521650][ T3560] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  285.039540][ T7852] binder: 7851:7852 ioctl 4018620d 0 returned -22
[  285.114092][ T7854] binder: BINDER_SET_CONTEXT_MGR already set
[  285.114108][ T7854] binder: 7851:7854 ioctl 4018620d 200000000040 returned -16
[  285.499772][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.499912][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.500154][ T7705] bridge_slave_1: entered allmulticast mode
[  285.557144][ T7705] bridge_slave_1: entered promiscuous mode
[  285.558640][ T7842] netlink: 2 bytes leftover after parsing attributes in process `syz.1.529'.
[  286.834059][ T7869] input: syz1 as /devices/virtual/input/input20
[  287.373040][  T805] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  287.599787][  T805] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  287.599818][  T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.599837][  T805] usb 2-1: Product: syz
[  287.599851][  T805] usb 2-1: Manufacturer: syz
[  287.599871][  T805] usb 2-1: SerialNumber: syz
[  287.623189][  T805] usb 2-1: config 0 descriptor??
[  287.627873][  T805] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 014
[  288.053119][  T805]  (null): failure reading functionality
[  288.056390][  T805] i2c i2c-1: failure reading functionality
[  288.062436][ T7860] SQUASHFS error: Failed to read block 0x0: -5
[  288.070632][  T805] i2c i2c-1: connected i2c-tiny-usb device
[  288.149803][  T805] usb 2-1: USB disconnect, device number 14
[  290.689244][  T805] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  290.820556][  T805] usb 3-1: device descriptor read/64, error -71
[  291.089230][  T805] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  291.144893][ T7886] binder: 7884:7886 ioctl 4018620d 0 returned -22
[  291.219199][  T805] usb 3-1: device descriptor read/64, error -71
[  291.225661][ T7888] binder: BINDER_SET_CONTEXT_MGR already set
[  291.225676][ T7888] binder: 7884:7888 ioctl 4018620d 200000000040 returned -16
[  291.340249][  T805] usb usb3-port1: attempt power cycle
[  291.689982][  T805] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  291.710219][  T805] usb 3-1: device descriptor read/8, error -71
[  291.876241][ T7897] loop2: detected capacity change from 0 to 7
[  291.893750][ T7897] Dev loop2: unable to read RDB block 7
[  291.893795][ T7897]  loop2: unable to read partition table
[  291.894003][ T7897] loop2: partition table beyond EOD, truncated
[  291.895916][ T7897] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  291.936990][ T7897] tmpfs: Bad value for 'mpol'
[  291.969260][  T805] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  291.990107][  T805] usb 3-1: device descriptor read/8, error -71
[  292.103150][  T805] usb usb3-port1: unable to enumerate USB device
[  292.208585][ T7899] netlink: 'syz.1.548': attribute type 5 has an invalid length.
[  292.208607][ T7899] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.548'.
[  292.549097][  T805] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  292.704453][  T805] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  292.704483][  T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.704502][  T805] usb 2-1: Product: syz
[  292.704516][  T805] usb 2-1: Manufacturer: syz
[  292.704528][  T805] usb 2-1: SerialNumber: syz
[  292.759843][  T805] usb 2-1: config 0 descriptor??
[  292.777972][  T805] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 015
[  293.212463][  T805]  (null): failure reading functionality
[  293.215018][  T805] i2c i2c-1: failure reading functionality
[  293.218716][ T7901] SQUASHFS error: Failed to read block 0x0: -5
[  293.243304][  T805] i2c i2c-1: connected i2c-tiny-usb device
[  293.319862][  T805] usb 2-1: USB disconnect, device number 15
[  293.841334][   T43] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  293.945783][ T3560] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.945820][ T3560] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  293.999122][   T43] usb 3-1: Using ep0 maxpacket: 16
[  294.002331][   T43] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  294.002355][   T43] usb 3-1: config 0 has no interface number 0
[  294.005293][   T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  294.005319][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.005337][   T43] usb 3-1: Product: syz
[  294.005350][   T43] usb 3-1: Manufacturer: syz
[  294.005364][   T43] usb 3-1: SerialNumber: syz
[  294.062216][   T43] usb 3-1: config 0 descriptor??
[  294.065359][   T43] hub 3-1:0.132: bad descriptor, ignoring hub
[  294.065395][   T43] hub 3-1:0.132: probe with driver hub failed with error -5
[  294.084174][ T7890] netlink: 2 bytes leftover after parsing attributes in process `syz.4.545'.
[  294.216314][   T43] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input22
[  294.297195][ T7705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.689268][   T43] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  295.551815][   T43] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  295.551844][   T43] usb 2-1: config 0 interface 0 has no altsetting 0
[  295.601241][   T43] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  295.601270][   T43] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  295.601290][   T43] usb 2-1: Product: syz
[  295.601303][   T43] usb 2-1: Manufacturer: syz
[  295.601317][   T43] usb 2-1: SerialNumber: syz
[  295.646221][ T7705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.690826][   T43] usb 2-1: config 0 descriptor??
[  295.722643][   T43] usb 2-1: selecting invalid altsetting 0
[  297.376390][ T7919] overlayfs: conflicting lowerdir path
[  298.067225][ T5870] usb 2-1: USB disconnect, device number 16
[  298.689317][ T5870] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  298.840359][ T5870] usb 2-1: Using ep0 maxpacket: 32
[  298.842602][ T5870] usb 2-1: config 0 has an invalid interface number: 109 but max is 0
[  298.842626][ T5870] usb 2-1: config 0 has no interface number 0
[  298.845366][ T5870] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  298.845392][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.845410][ T5870] usb 2-1: Product: syz
[  298.845423][ T5870] usb 2-1: Manufacturer: syz
[  298.845436][ T5870] usb 2-1: SerialNumber: syz
[  298.914825][ T5870] usb 2-1: config 0 descriptor??
[  299.084333][ T3560] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.084368][ T3560] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  299.151404][ T5870] mdc800 2-1:0.109: probe fails -> wrong Interface
[  299.218469][ T5870] usb 2-1: USB disconnect, device number 17
[  299.539721][ T5155] usb 3-1: reset high-speed USB device number 38 using dummy_hcd
[  299.584210][ T5155] usb 3-1: device reset changed ep0 maxpacket size!
[  299.603318][  T805] usb 3-1: USB disconnect, device number 38
[  300.463849][ T7944] cgroup: none used incorrectly
[  301.266067][ T7943] netlink: 2 bytes leftover after parsing attributes in process `syz.1.563'.
[  301.279632][ T7705] team0: Port device team_slave_0 added
[  301.307018][ T7705] team0: Port device team_slave_1 added
[  302.454619][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'.
[  302.539113][  T805] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  303.709587][  T805] usb 3-1: device descriptor read/64, error -71
[  304.139165][  T805] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  304.289812][  T805] usb 3-1: Using ep0 maxpacket: 8
[  304.295254][  T805] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  304.295282][  T805] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  304.295305][  T805] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  304.295327][  T805] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  304.295365][  T805] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  304.295386][  T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.508348][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.508366][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.508392][ T7705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.585498][  T805] usb 3-1: GET_CAPABILITIES returned 0
[  304.585642][  T805] usbtmc 3-1:16.0: can't read capabilities
[  304.605470][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.605487][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.605513][ T7705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.875037][  T880] usb 3-1: USB disconnect, device number 40
[  305.936206][ T3560] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.936242][ T3560] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  307.595380][ T7705] hsr_slave_0: entered promiscuous mode
[  307.596713][ T7705] hsr_slave_1: entered promiscuous mode
[  307.597626][ T7705] debugfs: 'hsr0' already exists in 'hsr'
[  307.597650][ T7705] Cannot create hsr debugfs directory
[  309.761913][ T8016] FAULT_INJECTION: forcing a failure.
[  309.761913][ T8016] name failslab, interval 1, probability 0, space 0, times 0
[  309.761971][ T8016] CPU: 1 UID: 0 PID: 8016 Comm: syz.1.581 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  309.761998][ T8016] Tainted: [L]=SOFTLOCKUP
[  309.762005][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  309.762018][ T8016] Call Trace:
[  309.762025][ T8016]  <TASK>
[  309.762033][ T8016]  dump_stack_lvl+0xe8/0x150
[  309.762063][ T8016]  should_fail_ex+0x46c/0x600
[  309.762092][ T8016]  ? __alloc_skb+0x1dc/0x3a0
[  309.762111][ T8016]  should_failslab+0xa8/0x100
[  309.762131][ T8016]  ? __alloc_skb+0x1dc/0x3a0
[  309.762148][ T8016]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  309.762174][ T8016]  ? __local_bh_enable_ip+0x1c3/0x2c0
[  309.762199][ T8016]  ? __alloc_skb+0x198/0x3a0
[  309.762219][ T8016]  __alloc_skb+0x1dc/0x3a0
[  309.762244][ T8016]  netlink_sendmsg+0x5c6/0xb30
[  309.762279][ T8016]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.762311][ T8016]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  309.762334][ T8016]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.762365][ T8016]  __sock_sendmsg+0x21c/0x270
[  309.762396][ T8016]  ____sys_sendmsg+0x508/0x810
[  309.762424][ T8016]  ? __pfx_____sys_sendmsg+0x10/0x10
[  309.762456][ T8016]  ? import_iovec+0x74/0xa0
[  309.762479][ T8016]  ___sys_sendmsg+0x21f/0x2a0
[  309.762503][ T8016]  ? __pfx____sys_sendmsg+0x10/0x10
[  309.762531][ T8016]  ? trace_sched_exit_tp+0x36/0xf0
[  309.762556][ T8016]  ? __schedule+0x1475/0x5070
[  309.762607][ T8016]  ? __fget_files+0x2a/0x420
[  309.762626][ T8016]  ? __fget_files+0x3a6/0x420
[  309.762655][ T8016]  __x64_sys_sendmsg+0x1a1/0x260
[  309.762681][ T8016]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  309.762727][ T8016]  do_syscall_64+0xec/0xf80
[  309.762744][ T8016]  ? rcu_is_watching+0x15/0xb0
[  309.762761][ T8016]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.762780][ T8016]  ? clear_bhb_loop+0x60/0xb0
[  309.762802][ T8016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.762821][ T8016] RIP: 0033:0x7fe5f6d6f749
[  309.762838][ T8016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.762854][ T8016] RSP: 002b:00007fe5f4f8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  309.762875][ T8016] RAX: ffffffffffffffda RBX: 00007fe5f6fc6180 RCX: 00007fe5f6d6f749
[  309.762890][ T8016] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008
[  309.762902][ T8016] RBP: 00007fe5f4f8c090 R08: 0000000000000000 R09: 0000000000000000
[  309.762915][ T8016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  309.762926][ T8016] R13: 00007fe5f6fc6218 R14: 00007fe5f6fc6180 R15: 00007ffe22c3df98
[  309.762957][ T8016]  </TASK>
[  310.558640][ T8019] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0
[  311.921058][ T8027] netlink: 2 bytes leftover after parsing attributes in process `syz.1.584'.
[  312.379160][ T5972] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  312.539173][  T805] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  312.574142][ T5972] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  312.574174][ T5972] usb 5-1: config 0 interface 0 has no altsetting 0
[  312.577835][ T5972] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  312.577863][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  312.577882][ T5972] usb 5-1: Product: syz
[  312.577895][ T5972] usb 5-1: Manufacturer: syz
[  312.577908][ T5972] usb 5-1: SerialNumber: syz
[  312.643916][ T5972] usb 5-1: config 0 descriptor??
[  312.667922][ T5972] usb 5-1: selecting invalid altsetting 0
[  312.703440][  T805] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  312.703469][  T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.703486][  T805] usb 4-1: Product: syz
[  312.703499][  T805] usb 4-1: Manufacturer: syz
[  312.703512][  T805] usb 4-1: SerialNumber: syz
[  312.746479][  T805] usb 4-1: config 0 descriptor??
[  312.774039][  T805] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 019
[  313.217732][  T805]  (null): failure reading functionality
[  313.273357][ T8037] SQUASHFS error: Failed to read block 0x0: -5
[  313.273789][  T805] i2c i2c-1: failure reading functionality
[  313.336034][  T805] i2c i2c-1: connected i2c-tiny-usb device
[  313.399847][ T8029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.400371][ T8029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.427048][ T5973] usb 4-1: USB disconnect, device number 19
[  313.634297][   T43] usb 5-1: USB disconnect, device number 30
[  314.296083][ T7705] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  314.345533][ T8040] hpfs: hpfs_map_sector(): read error
[  314.504819][ T7705] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  316.873477][ T7705] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  317.162209][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  317.162279][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  317.488341][ T7705] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  319.620271][ T8067] FAULT_INJECTION: forcing a failure.
[  319.620271][ T8067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  319.620332][ T8067] CPU: 1 UID: 0 PID: 8067 Comm: syz.1.596 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  319.620359][ T8067] Tainted: [L]=SOFTLOCKUP
[  319.620374][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  319.620386][ T8067] Call Trace:
[  319.620394][ T8067]  <TASK>
[  319.620402][ T8067]  dump_stack_lvl+0xe8/0x150
[  319.620431][ T8067]  should_fail_ex+0x46c/0x600
[  319.620461][ T8067]  strncpy_from_user+0x36/0x2c0
[  319.620488][ T8067]  getname_flags+0xf3/0x540
[  319.620510][ T8067]  do_sys_openat2+0xbc/0x200
[  319.620534][ T8067]  ? __pfx_do_sys_openat2+0x10/0x10
[  319.620556][ T8067]  ? ksys_write+0x230/0x260
[  319.620583][ T8067]  ? __pfx_ksys_write+0x10/0x10
[  319.620611][ T8067]  __x64_sys_openat+0x138/0x170
[  319.620637][ T8067]  do_syscall_64+0xec/0xf80
[  319.620656][ T8067]  ? rcu_is_watching+0x15/0xb0
[  319.620672][ T8067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.620691][ T8067]  ? clear_bhb_loop+0x60/0xb0
[  319.620714][ T8067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.620732][ T8067] RIP: 0033:0x7fe5f6d6f749
[  319.620749][ T8067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.620766][ T8067] RSP: 002b:00007fe5f4f8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  319.620787][ T8067] RAX: ffffffffffffffda RBX: 00007fe5f6fc6180 RCX: 00007fe5f6d6f749
[  319.620802][ T8067] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: ffffffffffffff9c
[  319.620816][ T8067] RBP: 00007fe5f4f8c090 R08: 0000000000000000 R09: 0000000000000000
[  319.620829][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.620840][ T8067] R13: 00007fe5f6fc6218 R14: 00007fe5f6fc6180 R15: 00007ffe22c3df98
[  319.620872][ T8067]  </TASK>
[  321.908684][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  321.947976][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  321.957311][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  321.960550][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  321.961321][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  322.022957][ T5804] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  322.026409][ T5804] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  322.055044][ T5804] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  322.057268][ T5804] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  322.091936][ T5804] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  322.657215][ T8077] lo speed is unknown, defaulting to 1000
[  322.889167][ T8078] lo speed is unknown, defaulting to 1000
[  324.094370][ T5804] Bluetooth: hci4: command tx timeout
[  324.572219][ T5804] Bluetooth: hci6: command tx timeout
[  324.933284][ T8096] FAULT_INJECTION: forcing a failure.
[  324.933284][ T8096] name failslab, interval 1, probability 0, space 0, times 0
[  324.933320][ T8096] CPU: 1 UID: 0 PID: 8096 Comm: syz.4.603 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  324.933346][ T8096] Tainted: [L]=SOFTLOCKUP
[  324.933353][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  324.933364][ T8096] Call Trace:
[  324.933372][ T8096]  <TASK>
[  324.933380][ T8096]  dump_stack_lvl+0xe8/0x150
[  324.933410][ T8096]  should_fail_ex+0x46c/0x600
[  324.933440][ T8096]  should_failslab+0xa8/0x100
[  324.933460][ T8096]  __kmalloc_noprof+0xe0/0x7e0
[  324.933486][ T8096]  ? tomoyo_encode+0x28b/0x550
[  324.933509][ T8096]  tomoyo_encode+0x28b/0x550
[  324.933534][ T8096]  tomoyo_realpath_from_path+0x58d/0x5d0
[  324.933556][ T8096]  ? tomoyo_domain+0xd9/0x130
[  324.933580][ T8096]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  324.933605][ T8096]  tomoyo_path_number_perm+0x1e8/0x5a0
[  324.933632][ T8096]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  324.933656][ T8096]  ? __lock_acquire+0x6b6/0x2cf0
[  324.933683][ T8096]  ? do_raw_spin_lock+0x121/0x290
[  324.933737][ T8096]  ? __fget_files+0x2a/0x420
[  324.933760][ T8096]  ? __fget_files+0x2a/0x420
[  324.933778][ T8096]  ? __fget_files+0x3a6/0x420
[  324.933796][ T8096]  ? __fget_files+0x2a/0x420
[  324.933827][ T8096]  security_file_ioctl+0xcb/0x2d0
[  324.933854][ T8096]  __se_sys_ioctl+0x47/0x170
[  324.933880][ T8096]  do_syscall_64+0xec/0xf80
[  324.933899][ T8096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.933917][ T8096]  ? trace_irq_disable+0x37/0x100
[  324.933936][ T8096]  ? clear_bhb_loop+0x60/0xb0
[  324.933959][ T8096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.933978][ T8096] RIP: 0033:0x7fac3184f749
[  324.933995][ T8096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.934011][ T8096] RSP: 002b:00007fac2faae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  324.934031][ T8096] RAX: ffffffffffffffda RBX: 00007fac31aa5fa0 RCX: 00007fac3184f749
[  324.934045][ T8096] RDX: 0000000000000000 RSI: 000000008004745a RDI: 0000000000000005
[  324.934057][ T8096] RBP: 00007fac2faae090 R08: 0000000000000000 R09: 0000000000000000
[  324.934069][ T8096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.934081][ T8096] R13: 00007fac31aa6038 R14: 00007fac31aa5fa0 R15: 00007ffe8a333928
[  324.934114][ T8096]  </TASK>
[  324.934133][ T8096] ERROR: Out of memory at tomoyo_realpath_from_path.
[  326.169443][ T5804] Bluetooth: hci4: command tx timeout
[  326.589157][ T5890] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  326.649166][ T5804] Bluetooth: hci6: command tx timeout
[  326.757211][ T5890] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  326.757241][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.792232][ T5890] usb 5-1: config 0 descriptor??
[  326.807160][ T5890] cp210x 5-1:0.0: cp210x converter detected
[  327.056099][ T5890] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32
[  327.056140][ T5890] cp210x 5-1:0.0: querying part number failed
[  327.087218][ T5890] usb 5-1: cp210x converter now attached to ttyUSB0
[  328.386400][ T5804] Bluetooth: hci4: command tx timeout
[  329.097772][ T5804] Bluetooth: hci6: command tx timeout
[  329.374688][ T8107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.377058][ T8107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.409281][ T5804] Bluetooth: hci4: command tx timeout
[  330.841334][ T6006] usb 5-1: USB disconnect, device number 31
[  330.872770][ T6006] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  330.890135][ T6006] cp210x 5-1:0.0: device disconnected
[  331.139248][ T5804] Bluetooth: hci6: command tx timeout
[  333.183533][ T8129] FAULT_INJECTION: forcing a failure.
[  333.183533][ T8129] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  333.183573][ T8129] CPU: 1 UID: 0 PID: 8129 Comm: syz.4.612 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  333.183630][ T8129] Tainted: [L]=SOFTLOCKUP
[  333.183645][ T8129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  333.183671][ T8129] Call Trace:
[  333.183687][ T8129]  <TASK>
[  333.183704][ T8129]  dump_stack_lvl+0xe8/0x150
[  333.183766][ T8129]  should_fail_ex+0x46c/0x600
[  333.183833][ T8129]  _copy_to_user+0x31/0xb0
[  333.183880][ T8129]  simple_read_from_buffer+0xe1/0x170
[  333.183937][ T8129]  proc_fail_nth_read+0x1b6/0x220
[  333.183981][ T8129]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  333.184010][ T8129]  ? rw_verify_area+0x2ac/0x4e0
[  333.184033][ T8129]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  333.184060][ T8129]  vfs_read+0x206/0xa30
[  333.184092][ T8129]  ? __pfx_vfs_read+0x10/0x10
[  333.184118][ T8129]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  333.184138][ T8129]  ? lockdep_hardirqs_on+0x7b/0x110
[  333.184155][ T8129]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  333.184174][ T8129]  ? mutex_lock_nested+0x154/0x1d0
[  333.184195][ T8129]  ? fdget_pos+0x253/0x320
[  333.184224][ T8129]  ksys_read+0x14b/0x260
[  333.184251][ T8129]  ? __pfx_ksys_read+0x10/0x10
[  333.184294][ T8129]  do_syscall_64+0xec/0xf80
[  333.184311][ T8129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.184337][ T8129]  ? clear_bhb_loop+0x60/0xb0
[  333.184360][ T8129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.184378][ T8129] RIP: 0033:0x7fac3184e15c
[  333.184395][ T8129] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  333.184412][ T8129] RSP: 002b:00007fac2faae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  333.184433][ T8129] RAX: ffffffffffffffda RBX: 00007fac31aa5fa0 RCX: 00007fac3184e15c
[  333.184448][ T8129] RDX: 000000000000000f RSI: 00007fac2faae0a0 RDI: 0000000000000006
[  333.184460][ T8129] RBP: 00007fac2faae090 R08: 0000000000000000 R09: 0000000000000000
[  333.184471][ T8129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.184483][ T8129] R13: 00007fac31aa6038 R14: 00007fac31aa5fa0 R15: 00007ffe8a333928
[  333.184516][ T8129]  </TASK>
[  333.670763][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  333.689766][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  333.698277][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  333.720319][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  333.743042][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  334.359262][ T5983] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  334.528467][ T8077] chnl_net:caif_netlink_parms(): no params data found
[  334.543012][ T5983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  334.543072][ T5983] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  334.543097][ T5983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  334.543122][ T5983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  334.543143][ T5983] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  334.545994][ T5983] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  334.546021][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  334.546040][ T5983] usb 2-1: Product: syz
[  334.546054][ T5983] usb 2-1: Manufacturer: syz
[  334.546067][ T5983] usb 2-1: SerialNumber: syz
[  334.599214][ T6006] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  334.688334][ T5983] usb 2-1: config 0 descriptor??
[  334.892665][ T6006] usb 5-1: device descriptor read/64, error -71
[  334.963900][ T5983] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  334.963926][ T5983] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  335.160410][ T5983] radio-si470x 2-1:0.0: software version 0, hardware version 0
[  335.160435][ T5983] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  335.160455][ T5983] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  335.161638][ T6006] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  335.299677][ T6006] usb 5-1: device descriptor read/64, error -71
[  335.364732][ T5983] radio-si470x 2-1:0.0: submitting int urb failed (-90)
[  335.412017][ T6006] usb usb5-port1: attempt power cycle
[  335.784408][ T6006] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  335.831413][ T6006] usb 5-1: device descriptor read/8, error -71
[  335.852638][ T5813] Bluetooth: hci2: command tx timeout
[  336.109267][ T6006] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  336.129808][ T6006] usb 5-1: device descriptor read/8, error -71
[  336.176535][ T5983] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71
[  336.176917][ T5983] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22
[  336.235315][ T5983] usb 2-1: USB disconnect, device number 18
[  336.249701][ T6006] usb usb5-port1: unable to enumerate USB device
[  337.406482][ T5983] IPVS: starting estimator thread 0...
[  337.519388][ T8148] IPVS: using max 7 ests per chain, 16800 per kthread
[  337.691100][ T8152] FAULT_INJECTION: forcing a failure.
[  337.691100][ T8152] name failslab, interval 1, probability 0, space 0, times 0
[  337.691137][ T8152] CPU: 1 UID: 0 PID: 8152 Comm: syz.4.620 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  337.691164][ T8152] Tainted: [L]=SOFTLOCKUP
[  337.691171][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  337.691183][ T8152] Call Trace:
[  337.691190][ T8152]  <TASK>
[  337.691199][ T8152]  dump_stack_lvl+0xe8/0x150
[  337.691229][ T8152]  should_fail_ex+0x46c/0x600
[  337.691258][ T8152]  ? __alloc_skb+0x1dc/0x3a0
[  337.691277][ T8152]  should_failslab+0xa8/0x100
[  337.691296][ T8152]  ? __alloc_skb+0x1dc/0x3a0
[  337.691313][ T8152]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  337.691339][ T8152]  ? lockdep_hardirqs_on+0x7b/0x110
[  337.691360][ T8152]  ? __alloc_skb+0x198/0x3a0
[  337.691380][ T8152]  __alloc_skb+0x1dc/0x3a0
[  337.691404][ T8152]  netlink_sendmsg+0x5c6/0xb30
[  337.691437][ T8152]  ? __pfx_netlink_sendmsg+0x10/0x10
[  337.691469][ T8152]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  337.691493][ T8152]  ? __pfx_netlink_sendmsg+0x10/0x10
[  337.691518][ T8152]  __sock_sendmsg+0x21c/0x270
[  337.691548][ T8152]  ____sys_sendmsg+0x508/0x810
[  337.691577][ T8152]  ? __pfx_____sys_sendmsg+0x10/0x10
[  337.691608][ T8152]  ? import_iovec+0x74/0xa0
[  337.691630][ T8152]  ___sys_sendmsg+0x21f/0x2a0
[  337.691655][ T8152]  ? __pfx____sys_sendmsg+0x10/0x10
[  337.691712][ T8152]  ? __fget_files+0x2a/0x420
[  337.691731][ T8152]  ? __fget_files+0x3a6/0x420
[  337.691761][ T8152]  __x64_sys_sendmsg+0x1a1/0x260
[  337.691785][ T8152]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  337.691818][ T8152]  ? __pfx_ksys_write+0x10/0x10
[  337.691861][ T8152]  do_syscall_64+0xec/0xf80
[  337.691879][ T8152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.691897][ T8152]  ? trace_irq_disable+0x37/0x100
[  337.691916][ T8152]  ? clear_bhb_loop+0x60/0xb0
[  337.691939][ T8152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.691957][ T8152] RIP: 0033:0x7fac3184f749
[  337.691974][ T8152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.691991][ T8152] RSP: 002b:00007fac2faae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  337.692011][ T8152] RAX: ffffffffffffffda RBX: 00007fac31aa5fa0 RCX: 00007fac3184f749
[  337.692026][ T8152] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  337.692039][ T8152] RBP: 00007fac2faae090 R08: 0000000000000000 R09: 0000000000000000
[  337.692051][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  337.692062][ T8152] R13: 00007fac31aa6038 R14: 00007fac31aa5fa0 R15: 00007ffe8a333928
[  337.692094][ T8152]  </TASK>
[  337.929583][ T5813] Bluetooth: hci2: command tx timeout
[  338.104228][ T8078] chnl_net:caif_netlink_parms(): no params data found
[  338.336680][ T8159] FAULT_INJECTION: forcing a failure.
[  338.336680][ T8159] name failslab, interval 1, probability 0, space 0, times 0
[  338.336715][ T8159] CPU: 1 UID: 0 PID: 8159 Comm: syz.1.622 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  338.336750][ T8159] Tainted: [L]=SOFTLOCKUP
[  338.336757][ T8159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  338.336773][ T8159] Call Trace:
[  338.336781][ T8159]  <TASK>
[  338.336789][ T8159]  dump_stack_lvl+0xe8/0x150
[  338.336821][ T8159]  should_fail_ex+0x46c/0x600
[  338.336850][ T8159]  ? __alloc_skb+0x1dc/0x3a0
[  338.336870][ T8159]  should_failslab+0xa8/0x100
[  338.336889][ T8159]  ? __alloc_skb+0x1dc/0x3a0
[  338.336906][ T8159]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  338.336932][ T8159]  ? lockdep_hardirqs_on+0x7b/0x110
[  338.336952][ T8159]  ? __alloc_skb+0x198/0x3a0
[  338.336972][ T8159]  __alloc_skb+0x1dc/0x3a0
[  338.336996][ T8159]  netlink_sendmsg+0x5c6/0xb30
[  338.337030][ T8159]  ? __pfx_netlink_sendmsg+0x10/0x10
[  338.337062][ T8159]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  338.337084][ T8159]  ? __pfx_netlink_sendmsg+0x10/0x10
[  338.337108][ T8159]  __sock_sendmsg+0x21c/0x270
[  338.337138][ T8159]  ____sys_sendmsg+0x508/0x810
[  338.337166][ T8159]  ? __pfx_____sys_sendmsg+0x10/0x10
[  338.337197][ T8159]  ? import_iovec+0x74/0xa0
[  338.337219][ T8159]  ___sys_sendmsg+0x21f/0x2a0
[  338.337243][ T8159]  ? __pfx____sys_sendmsg+0x10/0x10
[  338.337301][ T8159]  ? __fget_files+0x2a/0x420
[  338.337320][ T8159]  ? __fget_files+0x3a6/0x420
[  338.337349][ T8159]  __x64_sys_sendmsg+0x1a1/0x260
[  338.337375][ T8159]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  338.337407][ T8159]  ? __pfx_ksys_write+0x10/0x10
[  338.337443][ T8159]  do_syscall_64+0xec/0xf80
[  338.337470][ T8159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.337488][ T8159]  ? trace_irq_disable+0x37/0x100
[  338.337506][ T8159]  ? clear_bhb_loop+0x60/0xb0
[  338.337529][ T8159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.337547][ T8159] RIP: 0033:0x7fe5f6d6f749
[  338.337565][ T8159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  338.337581][ T8159] RSP: 002b:00007fe5f4fce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  338.337602][ T8159] RAX: ffffffffffffffda RBX: 00007fe5f6fc5fa0 RCX: 00007fe5f6d6f749
[  338.337616][ T8159] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000004
[  338.337629][ T8159] RBP: 00007fe5f4fce090 R08: 0000000000000000 R09: 0000000000000000
[  338.337641][ T8159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  338.337653][ T8159] R13: 00007fe5f6fc6038 R14: 00007fe5f6fc5fa0 R15: 00007ffe22c3df98
[  338.337684][ T8159]  </TASK>
[  338.665106][ T8130] lo speed is unknown, defaulting to 1000
[  339.755855][ T3560] bridge_slave_1: left allmulticast mode
[  339.755885][ T3560] bridge_slave_1: left promiscuous mode
[  339.756144][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.019018][ T5813] Bluetooth: hci2: command tx timeout
[  340.258504][ T3560] bridge_slave_0: left allmulticast mode
[  340.258534][ T3560] bridge_slave_0: left promiscuous mode
[  340.284502][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.459393][ T5813] Bluetooth: hci2: command tx timeout
[  360.603688][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  360.606989][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  360.619282][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  360.763933][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  360.764690][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  362.836731][ T5804] Bluetooth: hci0: command tx timeout
[  364.002358][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  364.024125][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  364.030187][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  364.035410][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  364.036234][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  364.889518][ T5813] Bluetooth: hci0: command tx timeout
[  366.089172][ T5813] Bluetooth: hci5: command tx timeout
[  366.971344][ T5813] Bluetooth: hci0: command tx timeout
[  368.171425][ T5813] Bluetooth: hci5: command tx timeout
[  369.049119][ T5813] Bluetooth: hci0: command tx timeout
[  370.249180][ T5813] Bluetooth: hci5: command tx timeout
[  372.330385][ T5804] Bluetooth: hci5: command tx timeout
[  378.580331][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  378.580402][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  379.235334][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  379.253049][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  379.268626][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  379.277220][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  379.287826][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  381.369258][ T5813] Bluetooth: hci3: command tx timeout
[  381.797315][ T5804] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  381.826082][ T5804] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  381.827819][ T5804] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  381.849833][ T5804] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  381.850683][ T5804] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  383.449285][ T5804] Bluetooth: hci3: command tx timeout
[  383.931279][ T5804] Bluetooth: hci7: command tx timeout
[  385.530633][ T5804] Bluetooth: hci3: command tx timeout
[  386.009229][ T5804] Bluetooth: hci7: command tx timeout
[  387.609413][ T5804] Bluetooth: hci3: command tx timeout
[  388.089221][ T5804] Bluetooth: hci7: command tx timeout
[  390.169459][ T5804] Bluetooth: hci7: command tx timeout
[  393.161253][ T5813] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  393.182983][ T5813] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  393.184511][ T5813] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  393.185757][ T5813] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  393.186622][ T5813] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  395.289699][ T5813] Bluetooth: hci8: command tx timeout
[  397.370620][ T5813] Bluetooth: hci8: command tx timeout
[  399.449225][ T5813] Bluetooth: hci8: command tx timeout
[  401.532659][ T5813] Bluetooth: hci8: command tx timeout
[  417.570274][ T5804] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  417.601695][ T5804] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  417.604082][ T5804] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  417.605458][ T5804] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  417.606340][ T5804] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  419.390928][ T5804] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  419.395689][ T5804] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  419.422589][ T5804] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  419.428488][ T5804] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  419.439987][ T5804] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  419.779067][ T5804] Bluetooth: hci9: command tx timeout
[  421.529249][ T5804] Bluetooth: hci10: command tx timeout
[  421.849186][ T5804] Bluetooth: hci9: command tx timeout
[  423.610866][ T5804] Bluetooth: hci10: command tx timeout
[  423.929131][ T5804] Bluetooth: hci9: command tx timeout
[  425.690016][ T5804] Bluetooth: hci10: command tx timeout
[  426.039066][ T5804] Bluetooth: hci9: command tx timeout
[  427.780549][ T5804] Bluetooth: hci10: command tx timeout
[  430.963365][ T3560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  432.146940][ T3560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  433.267734][ T3560] bond0 (unregistering): Released all slaves
[  439.520942][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  439.528704][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  439.546576][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  439.548512][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  439.561476][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  440.025447][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  440.025518][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  440.761631][ T8164] syz_tun (unregistering): left allmulticast mode
[  441.769160][ T5813] Bluetooth: hci1: command tx timeout
[  443.168002][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  443.182858][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  443.197428][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  443.201516][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  443.233733][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  443.849301][ T5804] Bluetooth: hci1: command tx timeout
[  445.291219][ T5804] Bluetooth: hci0: command tx timeout
[  445.586935][ T8203] lo speed is unknown, defaulting to 1000
[  445.691290][ T8209] lo speed is unknown, defaulting to 1000
[  445.734485][ T8218] lo speed is unknown, defaulting to 1000
[  445.806747][ T8215] lo speed is unknown, defaulting to 1000
[  445.887901][ T8197] lo speed is unknown, defaulting to 1000
[  445.941297][ T5804] Bluetooth: hci1: command tx timeout
[  447.369340][ T5804] Bluetooth: hci0: command tx timeout
[  448.009181][ T5804] Bluetooth: hci1: command tx timeout
[  449.303657][ T8209] chnl_net:caif_netlink_parms(): no params data found
[  449.449647][ T5804] Bluetooth: hci0: command tx timeout
[  449.535336][ T8215] chnl_net:caif_netlink_parms(): no params data found
[  450.182637][ T8197] chnl_net:caif_netlink_parms(): no params data found
[  450.200687][ T8218] chnl_net:caif_netlink_parms(): no params data found
[  450.227566][ T8203] chnl_net:caif_netlink_parms(): no params data found
[  451.529368][ T5804] Bluetooth: hci0: command tx timeout
[  454.000530][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  454.037114][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  454.047379][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  454.072446][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  454.073317][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  455.702050][ T8197] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR
[  455.797921][ T8209] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.817220][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.817529][ T8209] bridge_slave_0: entered allmulticast mode
[  455.836291][ T8209] bridge_slave_0: entered promiscuous mode
[  457.049344][ T5813] Bluetooth: hci3: command tx timeout
[  457.461817][ T5813] Bluetooth: hci2: command 0x0406 tx timeout
[  457.568230][ T8209] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.568383][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.568693][ T8209] bridge_slave_1: entered allmulticast mode
[  457.592108][ T8209] bridge_slave_1: entered promiscuous mode
[  459.129250][ T5804] Bluetooth: hci3: command tx timeout
[  459.347338][ T8215] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.347511][ T8215] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.347872][ T8215] bridge_slave_0: entered allmulticast mode
[  459.349682][ T8215] bridge_slave_0: entered promiscuous mode
[  461.217489][ T5804] Bluetooth: hci3: command tx timeout
[  463.289117][ T5804] Bluetooth: hci3: command tx timeout
[  464.111465][ T8215] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.111553][ T8215] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.111735][ T8215] bridge_slave_1: entered allmulticast mode
[  464.113189][ T8215] bridge_slave_1: entered promiscuous mode
[  466.013408][ T8209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  467.307428][ T8218] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.307641][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.307906][ T8218] bridge_slave_0: entered allmulticast mode
[  467.332159][ T8218] bridge_slave_0: entered promiscuous mode
[  467.342348][ T8209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  467.342954][ T8203] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.343076][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.343280][ T8203] bridge_slave_0: entered allmulticast mode
[  467.345700][ T8203] bridge_slave_0: entered promiscuous mode
[  468.953675][ T8263] lo speed is unknown, defaulting to 1000
[  468.966196][ T8218] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.966348][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.966642][ T8218] bridge_slave_1: entered allmulticast mode
[  468.992567][ T8218] bridge_slave_1: entered promiscuous mode
[  469.778843][ T8203] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.790893][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.791237][ T8203] bridge_slave_1: entered allmulticast mode
[  469.794024][ T8203] bridge_slave_1: entered promiscuous mode
[  469.843000][ T8215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.768830][ T8215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  473.291459][ T8209] team0: Port device team_slave_0 added
[  475.013747][ T8218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.038665][ T8209] team0: Port device team_slave_1 added
[  475.103834][ T8203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  476.883382][ T8218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  477.180365][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  477.209721][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  477.214634][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  477.216854][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  477.218318][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  478.664653][ T8203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  478.667740][ T8215] team0: Port device team_slave_0 added
[  479.293674][ T5813] Bluetooth: hci4: command tx timeout
[  479.657376][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  479.692409][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  479.693794][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  479.695047][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  479.696298][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  480.497255][ T8215] team0: Port device team_slave_1 added
[  481.369490][ T5804] Bluetooth: hci4: command tx timeout
[  482.089291][ T5804] Bluetooth: hci5: command tx timeout
[  483.181839][ T8218] team0: Port device team_slave_0 added
[  483.453405][ T5804] Bluetooth: hci4: command tx timeout
[  484.169114][ T5804] Bluetooth: hci5: command tx timeout
[  485.529045][ T5804] Bluetooth: hci4: command tx timeout
[  486.177882][ T8218] team0: Port device team_slave_1 added
[  486.249294][ T5804] Bluetooth: hci5: command tx timeout
[  488.329077][ T5804] Bluetooth: hci5: command tx timeout
[  491.038572][ T8215] batman_adv: batadv0: Adding interface: batadv_slave_0
[  491.038591][ T8215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  491.038617][ T8215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  492.963193][ T8215] batman_adv: batadv0: Adding interface: batadv_slave_1
[  492.963211][ T8215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  492.963238][ T8215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  493.064425][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_0
[  493.064437][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  493.064451][ T8218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  493.065151][ T8277] lo speed is unknown, defaulting to 1000
[  493.403293][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_1
[  493.403311][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  493.403338][ T8218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  493.633001][ T8282] lo speed is unknown, defaulting to 1000
[  495.315071][ T8215] hsr_slave_0: entered promiscuous mode
[  495.316606][ T8215] hsr_slave_1: entered promiscuous mode
[  495.317728][ T8215] debugfs: 'hsr0' already exists in 'hsr'
[  495.317753][ T8215] Cannot create hsr debugfs directory
[  498.798765][ T8218] hsr_slave_0: entered promiscuous mode
[  498.806903][ T8218] hsr_slave_1: entered promiscuous mode
[  498.807981][ T8218] debugfs: 'hsr0' already exists in 'hsr'
[  498.808006][ T8218] Cannot create hsr debugfs directory
[  500.342393][ T5813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  500.372715][ T5813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  500.374117][ T5813] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  500.375364][ T5813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  500.421552][ T5813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  501.460114][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  501.460185][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  502.489518][ T5813] Bluetooth: hci6: command tx timeout
[  504.226051][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  504.256055][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  504.257480][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  504.258772][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  504.289899][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  504.569310][ T5804] Bluetooth: hci6: command tx timeout
[  505.887449][ T8263] chnl_net:caif_netlink_parms(): no params data found
[  506.259108][ T8304] lo speed is unknown, defaulting to 1000
[  506.416007][ T5804] Bluetooth: hci1: command tx timeout
[  506.649342][ T5804] Bluetooth: hci6: command tx timeout
[  507.139135][ T8325] lo speed is unknown, defaulting to 1000
[  508.489485][ T5804] Bluetooth: hci1: command tx timeout
[  508.729330][ T5804] Bluetooth: hci6: command tx timeout
[  510.569388][ T5804] Bluetooth: hci1: command tx timeout
[  511.402374][ T8277] chnl_net:caif_netlink_parms(): no params data found
[  511.438261][ T8282] chnl_net:caif_netlink_parms(): no params data found
[  511.475165][ T8263] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.475374][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.475994][ T8263] bridge_slave_0: entered allmulticast mode
[  511.505465][ T8263] bridge_slave_0: entered promiscuous mode
[  511.600097][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.600408][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.600729][ T8263] bridge_slave_1: entered allmulticast mode
[  511.610866][ T8263] bridge_slave_1: entered promiscuous mode
[  512.649353][ T5804] Bluetooth: hci1: command tx timeout
[  514.190299][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  514.206577][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  514.217478][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  514.218514][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  514.223080][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  516.329037][ T5804] Bluetooth: hci0: command tx timeout
[  518.409279][ T5804] Bluetooth: hci0: command tx timeout
[  520.489485][ T5804] Bluetooth: hci0: command tx timeout
[  522.569749][ T5804] Bluetooth: hci0: command tx timeout
[  523.120085][ T8277] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.120297][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.120603][ T8277] bridge_slave_0: entered allmulticast mode
[  523.123368][ T8277] bridge_slave_0: entered promiscuous mode
[  523.170124][ T8282] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.170249][ T8282] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.170550][ T8282] bridge_slave_0: entered allmulticast mode
[  523.173249][ T8282] bridge_slave_0: entered promiscuous mode
[  523.260951][ T8282] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.261090][ T8282] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.261323][ T8282] bridge_slave_1: entered allmulticast mode
[  523.263992][ T8282] bridge_slave_1: entered promiscuous mode
[  523.265674][ T8277] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.265798][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.266015][ T8277] bridge_slave_1: entered allmulticast mode
[  523.321179][ T8277] bridge_slave_1: entered promiscuous mode
[  523.322989][ T8336] lo speed is unknown, defaulting to 1000
[  528.844257][ T8282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.884387][ T8277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.888221][ T8282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  529.987933][ T8277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  532.145120][ T8282] team0: Port device team_slave_0 added
[  532.677123][ T8304] chnl_net:caif_netlink_parms(): no params data found
[  532.719649][ T8282] team0: Port device team_slave_1 added
[  532.740796][ T8277] team0: Port device team_slave_0 added
[  533.946569][ T8277] team0: Port device team_slave_1 added
[  535.522205][ T8325] chnl_net:caif_netlink_parms(): no params data found
[  538.243146][ T8282] batman_adv: batadv0: Adding interface: batadv_slave_0
[  538.243164][ T8282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  538.243191][ T8282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  539.820219][ T8282] batman_adv: batadv0: Adding interface: batadv_slave_1
[  539.820236][ T8282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  539.820263][ T8282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  539.896758][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  539.910817][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  539.912181][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  539.939523][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  539.940398][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  541.108583][ T5813] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  541.122352][ T5813] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  541.124491][ T5813] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  541.126543][ T5813] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  541.152575][ T5813] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  542.009328][ T5804] Bluetooth: hci3: command tx timeout
[  543.236321][ T8304] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.236517][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.236810][ T8304] bridge_slave_0: entered allmulticast mode
[  543.259920][ T8304] bridge_slave_0: entered promiscuous mode
[  543.289161][ T5804] Bluetooth: hci7: command tx timeout
[  544.089197][ T5804] Bluetooth: hci3: command tx timeout
[  545.369025][ T5804] Bluetooth: hci7: command tx timeout
[  545.469356][ T8304] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.469469][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.469781][ T8304] bridge_slave_1: entered allmulticast mode
[  545.472550][ T8304] bridge_slave_1: entered promiscuous mode
[  546.179093][ T5804] Bluetooth: hci3: command tx timeout
[  547.468949][ T5804] Bluetooth: hci7: command tx timeout
[  548.249259][ T5804] Bluetooth: hci3: command tx timeout
[  549.529471][ T5804] Bluetooth: hci7: command tx timeout
[  554.609468][ T8383] lo speed is unknown, defaulting to 1000
[  557.075797][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.076010][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.076325][ T8325] bridge_slave_0: entered allmulticast mode
[  557.116349][ T8325] bridge_slave_0: entered promiscuous mode
[  558.336779][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.336907][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.337503][ T8325] bridge_slave_1: entered allmulticast mode
[  558.367136][ T8325] bridge_slave_1: entered promiscuous mode
[  558.390382][ T8304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  559.731583][ T8304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  559.738629][ T8392] lo speed is unknown, defaulting to 1000
[  561.023262][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  561.046729][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  561.048251][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  561.061841][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  561.062647][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  561.287165][ T8325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  561.303918][ T8336] chnl_net:caif_netlink_parms(): no params data found
[  561.391789][ T8325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  562.897092][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  562.897165][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  563.129140][ T5813] Bluetooth: hci4: command tx timeout
[  564.575001][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  564.595763][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  564.614403][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  564.615717][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  564.616598][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  565.209138][ T5813] Bluetooth: hci4: command tx timeout
[  566.658111][ T5813] Bluetooth: hci5: command tx timeout
[  567.289105][ T5813] Bluetooth: hci4: command tx timeout
[  568.733822][ T5813] Bluetooth: hci5: command tx timeout
[  569.379808][ T5813] Bluetooth: hci4: command tx timeout
[  570.809545][ T5813] Bluetooth: hci5: command tx timeout
[  572.889216][ T5813] Bluetooth: hci5: command tx timeout
[  574.270674][ T8430] lo speed is unknown, defaulting to 1000
[  575.229416][ T8435] lo speed is unknown, defaulting to 1000
[  575.814763][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  575.842573][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  575.843965][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  575.845273][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  575.949938][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  576.184138][ T8383] chnl_net:caif_netlink_parms(): no params data found
[  578.101294][ T5813] Bluetooth: hci1: command tx timeout
[  578.299025][ T8476] lo speed is unknown, defaulting to 1000
[  578.375652][ T8392] chnl_net:caif_netlink_parms(): no params data found
[  580.169937][ T5813] Bluetooth: hci1: command tx timeout
[  582.257771][ T5813] Bluetooth: hci1: command tx timeout
[  584.055202][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.066223][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.066563][ T8383] bridge_slave_0: entered allmulticast mode
[  584.085778][ T8383] bridge_slave_0: entered promiscuous mode
[  584.146511][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.156642][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.156992][ T8383] bridge_slave_1: entered allmulticast mode
[  584.180084][ T8383] bridge_slave_1: entered promiscuous mode
[  584.238473][ T8430] chnl_net:caif_netlink_parms(): no params data found
[  584.329494][ T5813] Bluetooth: hci1: command tx timeout
[  585.929813][   T38] INFO: task syz-executor:5802 blocked for more than 143 seconds.
[  585.929842][   T38]       Tainted: G             L      syzkaller #0
[  585.929853][   T38]       Blocked by coredump.
[  585.929858][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  585.929868][   T38] task:syz-executor    state:D stack:21592 pid:5802  tgid:5802  ppid:1      task_flags:0x40054c flags:0x00080003
[  585.929924][   T38] Call Trace:
[  585.929934][   T38]  <TASK>
[  585.929948][   T38]  __schedule+0x145f/0x5070
[  585.930010][   T38]  ? __pfx___schedule+0x10/0x10
[  585.930054][   T38]  rt_mutex_schedule+0x77/0xf0
[  585.930082][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[  585.930107][   T38]  ? task_blocks_on_rt_mutex+0xf12/0x1380
[  585.930148][   T38]  rt_mutex_slowlock+0x2a8/0x6b0
[  585.930173][   T38]  ? rt_mutex_slowlock+0x1c9/0x6b0
[  585.930198][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  585.930233][   T38]  ? rcu_barrier+0x4c/0x570
[  585.930258][   T38]  ? rcu_barrier+0x4c/0x570
[  585.930284][   T38]  ? rcu_barrier+0x4c/0x570
[  585.930301][   T38]  mutex_lock_nested+0x16a/0x1d0
[  585.930324][   T38]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  585.930349][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[  585.930373][   T38]  rcu_barrier+0x4c/0x570
[  585.930397][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[  585.930419][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[  585.930451][   T38]  netdev_run_todo+0x327/0xea0
[  585.930480][   T38]  ? __pfx_netif_state_change+0x10/0x10
[  585.930500][   T38]  ? __pfx_netdev_run_todo+0x10/0x10
[  585.930524][   T38]  ? kasan_quarantine_put+0xbb/0x1f0
[  585.930558][   T38]  ? netdev_state_change+0x1ca/0x220
[  585.930581][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[  585.930603][   T38]  tun_chr_close+0x13f/0x1c0
[  585.930628][   T38]  __fput+0x45b/0xa80
[  585.930660][   T38]  task_work_run+0x1d4/0x260
[  585.930690][   T38]  ? __pfx_task_work_run+0x10/0x10
[  585.930716][   T38]  ? do_exit+0x68f/0x22f0
[  585.930742][   T38]  ? do_exit+0x68f/0x22f0
[  585.930771][   T38]  do_exit+0x694/0x22f0
[  585.930799][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  585.930818][   T38]  ? lockdep_hardirqs_on+0x7b/0x110
[  585.930838][   T38]  ? __pfx_do_exit+0x10/0x10
[  585.930860][   T38]  ? rt_mutex_slowunlock+0x493/0x8a0
[  585.930883][   T38]  ? reacquire_held_locks+0x104/0x190
[  585.930909][   T38]  ? rt_spin_lock+0x1c1/0x3e0
[  585.930944][   T38]  do_group_exit+0x21c/0x2d0
[  585.930970][   T38]  ? rt_spin_unlock+0x161/0x200
[  585.930996][   T38]  get_signal+0x125d/0x1310
[  585.931038][   T38]  arch_do_signal_or_restart+0x9a/0x7a0
[  585.931064][   T38]  ? kmem_cache_free+0x18f/0x8d0
[  585.931089][   T38]  ? do_unlinkat+0x50d/0x570
[  585.931116][   T38]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  585.931153][   T38]  ? __pfx_do_unlinkat+0x10/0x10
[  585.931186][   T38]  exit_to_user_mode_loop+0x87/0x4e0
[  585.931212][   T38]  ? rcu_is_watching+0x15/0xb0
[  585.931233][   T38]  do_syscall_64+0x2c1/0xf80
[  585.931252][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.931271][   T38]  ? trace_irq_disable+0x37/0x100
[  585.931289][   T38]  ? clear_bhb_loop+0x60/0xb0
[  585.931312][   T38]  entry_SYSCALL_64_after_hwframe[  585.931312][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.931331][   T38] RIP: 0033:0x7fac3184ecf7
[  585.931348][   T38] RSP: 002b:00007ffe8a332bb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[  585.931368][   T38] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fac3184ecf7
[  585.931381][   T38] RDX: 00007ffe8a332be0 RSI: 00007ffe8a332c70 RDI: 00007ffe8a332c70
[  585.931395][   T38] RBP: 00007ffe8a332c70 R08: 0000000000000000 R09: 0000000000000000
[  585.931408][   T38] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe8a333d00
[  585.931421][   T38] R13: 00007fac318d3d7d R14: 00000000000532e1 R15: 00007ffe8a333d40
[  585.931459][   T38]  </TASK>
[  585.931521][   T38] INFO: task syz.1.623:8164 blocked for more than 143 seconds.
[  585.931537][   T38]       Tainted: G             L      syzkaller #0
[  585.931547][   T38]       Blocked by coredump.
[  585.931553][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  585.931562][   T38] task:syz.1.623       state:D stack:25208 pid:8164  tgid:8161  ppid:6462   task_flags:0x40054c flags:0x00080003
[  585.931612][   T38] Call Trace:
[  585.931619][   T38]  <TASK>
[  585.931630][   T38]  __schedule+0x145f/0x5070
[  585.931686][   T38]  ? __pfx___schedule+0x10/0x10
[  585.931729][   T38]  rt_mutex_schedule+0x77/0xf0
[  585.931756][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[  585.931780][   T38]  ? task_blocks_on_rt_mutex+0xf12/0x1380
[  585.931821][   T38]  rt_mutex_slowlock+0x2a8/0x6b0
[  585.931846][   T38]  ? rt_mutex_slowlock+0x1c9/0x6b0
[  585.931870][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  585.931906][   T38]  ? rcu_barrier+0x4c/0x570
[  585.931929][   T38]  ? rcu_barrier+0x4c/0x570
[  585.931955][   T38]  ? rcu_barrier+0x4c/0x570
[  585.931972][   T38]  mutex_lock_nested+0x16a/0x1d0
[  585.931994][   T38]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  585.932019][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[  585.932042][   T38]  rcu_barrier+0x4c/0x570
[  585.932067][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[  585.932089][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[  585.932112][   T38]  netdev_run_todo+0x327/0xea0
[  585.932140][   T38]  ? __pfx_netif_state_change+0x10/0x10
[  585.932159][   T38]  ? __pfx_netdev_run_todo+0x10/0x10
[  585.932184][   T38]  ? kasan_quarantine_put+0xbb/0x1f0
[  585.932218][   T38]  ? netdev_state_change+0x1ca/0x220
[  585.932241][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[  585.932263][   T38]  tun_chr_close+0x13f/0x1c0
[  585.932287][   T38]  __fput+0x45b/0xa80
[  585.932319][   T38]  task_work_run+0x1d4/0x260
[  585.932349][   T38]  ? __pfx_task_work_run+0x10/0x10
[  585.932374][   T38]  ? do_exit+0x68f/0x22f0
[  585.932399][   T38]  ? do_exit+0x68f/0x22f0
[  585.932428][   T38]  do_exit+0x694/0x22f0
[  585.932462][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  585.932481][   T38]  ? lockdep_hardirqs_on+0x7b/0x110
[  585.932501][   T38]  ? __pfx_do_exit+0x10/0x10
[  585.932523][   T38]  ? rt_mutex_slowunlock+0x493/0x8a0
[  585.932546][   T38]  ? reacquire_held_locks+0x104/0x190
[  585.932571][   T38]  ? rt_spin_lock+0x1c1/0x3e0
[  585.932605][   T38]  do_group_exit+0x21c/0x2d0
[  585.932631][   T38]  ? rt_spin_unlock+0x161/0x200
[  585.932657][   T38]  get_signal+0x125d/0x1310
[  585.932699][   T38]  arch_do_signal_or_restart+0x9a/0x7a0
[  585.932730][   T38]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  585.932777][   T38]  exit_to_user_mode_loop+0x87/0x4e0
[  585.932802][   T38]  ? rcu_is_watching+0x15/0xb0
[  585.932823][   T38]  do_syscall_64+0x2c1/0xf80
[  585.932841][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.932859][   T38]  ? trace_irq_disable+0x37/0x100
[  585.932878][   T38]  ? clear_bhb_loop+0x60/0xb0
[  585.932903][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.932921][   T38] RIP: 0033:0x7fe5f6d6f749
[  585.932937][   T38] RSP: 002b:00007fe5f4f8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  585.932956][   T38] RAX: 000000000000005c RBX: 00007fe5f6fc6180 RCX: 00007fe5f6d6f749
[  585.932970][   T38] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  585.932983][   T38] RBP: 00007fe5f6df3f91 R08: 0000000000000000 R09: 0000000000000000
[  585.932996][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  585.933008][   T38] R13: 00007fe5f6fc6218 R14: 00007fe5f6fc6180 R15: 00007ffe22c3df98
[  585.933040][   T38]  </TASK>
[  585.933105][   T38] 
[  585.933105][   T38] Showing all locks held in the system:
[  585.933118][   T38] 1 lock held by khungtaskd/38:
[  585.933129][   T38]  #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  585.933193][   T38] 3 locks held by kworker/u8:5/89:
[  585.933203][   T38]  #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  585.933255][   T38]  #1: ffffc900015dfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  585.933301][   T38]  #2: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  585.933354][   T38] 7 locks held by kworker/0:2/880:
[  585.933383][   T38] 4 locks held by kworker/u8:16/3560:
[  585.933394][   T38]  #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  585.933447][   T38]  #1: ffffc9000d8ffbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  585.933492][   T38]  #2: ffffffff8e8989e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0
[  585.933537][   T38]  #3: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.933584][   T38] 2 locks held by getty/5562:
[  585.933594][   T38]  #0: ffff88814e42d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  585.933641][   T38]  #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460
[  585.933685][   T38] 1 lock held by syz-executor/5802:
[  585.933696][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.933743][   T38] 3 locks held by kworker/1:3/5869:
[  585.933754][   T38]  #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  585.933799][   T38]  #1: ffffc900056b7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  585.933843][   T38]  #2: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  585.933894][   T38] 1 lock held by syz-executor/8077:
[  585.933905][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.933949][   T38] 1 lock held by syz-executor/8078:
[  585.933960][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.934004][   T38] 1 lock held by syz.3.593/8086:
[  585.934014][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.934059][   T38] 2 locks held by syz-executor/8130:
[  585.934070][   T38]  #0: ffffffff8e8989e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570
[  585.934113][   T38]  #1: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.934157][   T38] 1 lock held by syz.1.623/8164:
[  585.934167][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.934212][   T38] 1 lock held by syz-executor/8197:
[  585.934222][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.934267][   T38] 1 lock held by syz-executor/8203:
[  585.934278][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.934322][   T38] 1 lock held by syz-executor/8209:
[  585.934333][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.934377][   T38] 1 lock held by syz-executor/8215:
[  585.934388][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.934432][   T38] 1 lock held by syz-executor/8218:
[  585.934448][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.934495][   T38] 1 lock held by syz-executor/8263:
[  585.934506][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.934551][   T38] 1 lock held by syz-executor/8277:
[  585.934562][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.934606][   T38] 1 lock held by syz-executor/8282:
[  585.934617][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.934662][   T38] 1 lock held by syz-executor/8304:
[  585.934673][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.934717][   T38] 1 lock held by syz-executor/8325:
[  585.934727][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.934772][   T38] 1 lock held by syz-executor/8336:
[  585.934783][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  585.934829][   T38] 2 locks held by syz-executor/8383:
[  585.934840][   T38]  #0: ffffffff8e021f08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  585.934890][   T38]  #1: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90
[  585.934936][   T38] 2 locks held by syz-executor/8392:
[  585.934946][   T38]  #0: ffffffff8edb5040 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  585.934994][   T38]  #1: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90
[  585.935039][   T38] 2 locks held by syz-executor/8430:
[  585.935050][   T38]  #0: ffffffff8edd12c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  585.935099][   T38]  #1: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90
[  585.935142][   T38] 1 lock held by syz-executor/8435:
[  585.935153][   T38]  #0: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90
[  585.935198][   T38] 2 locks held by syz-executor/8476:
[  585.935208][   T38]  #0: ffffffff8e8989e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570
[  585.935251][   T38]  #1: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60
[  585.935301][   T38] 
[  585.935305][   T38] =============================================
[  585.935305][   T38] 
[  585.935320][   T38] NMI backtrace for cpu 1
[  585.935342][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  585.935368][   T38] Tainted: [L]=SOFTLOCKUP
[  585.935375][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  585.935386][   T38] Call Trace:
[  585.935393][   T38]  <TASK>
[  585.935401][   T38]  dump_stack_lvl+0xe8/0x150
[  585.935427][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[  585.935456][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  585.935478][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  585.935505][   T38]  sys_info+0x135/0x170
[  585.935524][   T38]  watchdog+0xf95/0xfe0
[  585.935549][   T38]  ? watchdog+0x20a/0xfe0
[  585.935576][   T38]  kthread+0x711/0x8a0
[  585.935604][   T38]  ? __pfx_watchdog+0x10/0x10
[  585.935622][   T38]  ? __pfx_kthread+0x10/0x10
[  585.935644][   T38]  ? rt_spin_unlock+0x150/0x200
[  585.935671][   T38]  ? rt_spin_unlock+0x161/0x200
[  585.935692][   T38]  ? __pfx_kthread+0x10/0x10
[  585.935716][   T38]  ret_from_fork+0x510/0xa50
[  585.935738][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  585.935756][   T38]  ? __switch_to+0xc9e/0x1480
[  585.935785][   T38]  ? __pfx_kthread+0x10/0x10
[  585.935810][   T38]  ret_from_fork_asm+0x1a/0x30
[  585.935851][   T38]  </TASK>
[  585.935858][   T38] Sending NMI from CPU 1 to CPUs 0:
[  585.935890][    C0] NMI backtrace for cpu 0
[  585.935906][    C0] CPU: 0 UID: 0 PID: 880 Comm: kworker/0:2 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  585.935932][    C0] Tainted: [L]=SOFTLOCKUP
[  585.935938][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  585.935950][    C0] Workqueue: events_long defense_work_handler
[  585.935977][    C0] RIP: 0010:check_preemption_disabled+0x2a/0xe0
[  585.935998][    C0] Code: 55 41 57 41 56 53 65 8b 05 47 64 e1 06 65 8b 0d 3c 64 e1 06 f7 c1 ff ff ff 7f 74 0c 5b 41 5e 41 5f 5d e9 d9 a3 03 00 cc 9c 59 <f7> c1 00 02 00 00 74 ea 65 4c 8b 3c 25 08 10 b3 91 41 f6 47 2f 04
[  585.936013][    C0] RSP: 0018:ffffc900044166a8 EFLAGS: 00000046
[  585.936027][    C0] RAX: 0000000000000000 RBX: 0000000000000202 RCX: 0000000000000046
[  585.936039][    C0] RDX: 0000000000000006 RSI: ffffffff8cfdefe4 RDI: ffffffff8b3f57e0
[  585.936052][    C0] RBP: ffff888024646740 R08: ffffc90004417898 R09: 0000000000000000
[  585.936064][    C0] R10: ffffc90004416858 R11: fffff52000882d0d R12: 0000000000000006
[  585.936077][    C0] R13: 0000000000000006 R14: ffffffff8d5ae940 R15: ffff888024645ac0
[  585.936090][    C0] FS:  0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000
[  585.936105][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  585.936117][    C0] CR2: 00007ffc2c73a048 CR3: 000000007af88000 CR4: 00000000003526f0
[  585.936133][    C0] Call Trace:
[  585.936140][    C0]  <TASK>
[  585.936148][    C0]  lock_release+0x25a/0x3b0
[  585.936171][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  585.936194][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  585.936213][    C0]  unwind_next_frame+0x1ab1/0x23d0
[  585.936237][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  585.936258][    C0]  ? handle_softirqs+0x1df/0x650
[  585.936278][    C0]  ? skb_release_data+0x62d/0x7c0
[  585.936298][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  585.936319][    C0]  arch_stack_walk+0x11c/0x150
[  585.936341][    C0]  ? __local_bh_enable_ip+0x171/0x2c0
[  585.936361][    C0]  stack_trace_save+0x9c/0xe0
[  585.936380][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  585.936398][    C0]  ? __asan_memcpy+0x40/0x70
[  585.936421][    C0]  ? __lock_acquire+0x6b6/0x2cf0
[  585.936443][    C0]  kasan_save_track+0x3e/0x80
[  585.936464][    C0]  ? kasan_save_track+0x3e/0x80
[  585.936484][    C0]  ? kasan_save_free_info+0x46/0x50
[  585.936502][    C0]  ? __kasan_slab_free+0x5c/0x80
[  585.936524][    C0]  ? kmem_cache_free+0x18f/0x8d0
[  585.936547][    C0]  ? skb_release_data+0x62d/0x7c0
[  585.936565][    C0]  ? consume_skb+0x9e/0xf0
[  585.936583][    C0]  ? nft_synproxy_eval_v6+0x376/0x560
[  585.936600][    C0]  ? nft_synproxy_do_eval+0x3d7/0x570
[  585.936617][    C0]  ? nft_do_chain+0x40c/0x1920
[  585.936633][    C0]  ? nft_do_chain_inet+0x25d/0x340
[  585.936649][    C0]  ? nf_hook_slow+0xc5/0x220
[  585.936670][    C0]  ? NF_HOOK+0x206/0x3a0
[  585.936684][    C0]  ? ip6_input+0x16a/0x270
[  585.936705][    C0]  ? NF_HOOK+0x30c/0x3a0
[  585.936718][    C0]  ? __netif_receive_skb+0xd3/0x380
[  585.936734][    C0]  ? process_backlog+0x315/0x8f0
[  585.936750][    C0]  ? __napi_poll+0xae/0x520
[  585.936764][    C0]  ? net_rx_action+0x64a/0xdb0
[  585.936780][    C0]  ? handle_softirqs+0x1df/0x650
[  585.936814][    C0]  kasan_save_free_info+0x46/0x50
[  585.936832][    C0]  __kasan_slab_free+0x5c/0x80
[  585.936855][    C0]  kmem_cache_free+0x18f/0x8d0
[  585.936877][    C0]  ? skb_release_data+0x62d/0x7c0
[  585.936898][    C0]  skb_release_data+0x62d/0x7c0
[  585.936922][    C0]  consume_skb+0x9e/0xf0
[  585.936940][    C0]  nft_synproxy_eval_v6+0x376/0x560
[  585.936960][    C0]  ? __pfx_nft_synproxy_eval_v6+0x10/0x10
[  585.936980][    C0]  ? nf_ip_checksum+0x13c/0x510
[  585.936998][    C0]  nft_synproxy_do_eval+0x3d7/0x570
[  585.937018][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  585.937043][    C0]  nft_do_chain+0x40c/0x1920
[  585.937061][    C0]  ? nft_do_chain+0x16a1/0x1920
[  585.937078][    C0]  ? ip_vs_fill_iph_skb_off+0x30a/0x7b0
[  585.937101][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  585.937116][    C0]  ? ipv6_find_hdr+0xc78/0x1050
[  585.937149][    C0]  nft_do_chain_inet+0x25d/0x340
[  585.937165][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  585.937182][    C0]  ? nf_conntrack_in+0x1a1/0x15d0
[  585.937202][    C0]  ? NF_HOOK+0x9a/0x3a0
[  585.937216][    C0]  ? NF_HOOK+0x9a/0x3a0
[  585.937231][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  585.937248][    C0]  nf_hook_slow+0xc5/0x220
[  585.937272][    C0]  NF_HOOK+0x206/0x3a0
[  585.937287][    C0]  ? __pfx_ip6_input_finish+0x10/0x10
[  585.937303][    C0]  ? NF_HOOK+0x9a/0x3a0
[  585.937317][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  585.937332][    C0]  ? __pfx_ip6_input_finish+0x10/0x10
[  585.937353][    C0]  ip6_input+0x16a/0x270
[  585.937367][    C0]  ? ip6_input+0x23/0x270
[  585.937383][    C0]  NF_HOOK+0x30c/0x3a0
[  585.937397][    C0]  ? skb_orphan+0xaf/0xd0
[  585.937412][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  585.937436][    C0]  ? NF_HOOK+0x9a/0x3a0
[  585.937450][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  585.937466][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  585.937493][    C0]  ? process_backlog+0x272/0x8f0
[  585.937510][    C0]  __netif_receive_skb+0xd3/0x380
[  585.937528][    C0]  ? process_backlog+0x272/0x8f0
[  585.937545][    C0]  process_backlog+0x315/0x8f0
[  585.937567][    C0]  __napi_poll+0xae/0x520
[  585.937584][    C0]  net_rx_action+0x64a/0xdb0
[  585.937607][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  585.937624][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  585.937652][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  585.937683][    C0]  handle_softirqs+0x1df/0x650
[  585.937714][    C0]  __local_bh_enable_ip+0x171/0x2c0
[  585.937734][    C0]  ? update_defense_level+0xec/0xd80
[  585.937758][    C0]  update_defense_level+0x8d2/0xd80
[  585.937783][    C0]  ? update_defense_level+0xec/0xd80
[  585.937807][    C0]  ? __pfx_update_defense_level+0x10/0x10
[  585.937831][    C0]  ? do_raw_spin_lock+0x121/0x290
[  585.937854][    C0]  ? process_scheduled_works+0x9ef/0x1770
[  585.937876][    C0]  defense_work_handler+0x2d/0xd0
[  585.937900][    C0]  ? process_scheduled_works+0x9ef/0x1770
[  585.937918][    C0]  process_scheduled_works+0xad1/0x1770
[  585.937948][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  585.937966][    C0]  ? do_raw_spin_lock+0x121/0x290
[  585.937991][    C0]  worker_thread+0x8a0/0xda0
[  585.938019][    C0]  kthread+0x711/0x8a0
[  585.938042][    C0]  ? __pfx_worker_thread+0x10/0x10
[  585.938061][    C0]  ? __pfx_kthread+0x10/0x10
[  585.938081][    C0]  ? rt_spin_unlock+0x150/0x200
[  585.938104][    C0]  ? rt_spin_unlock+0x161/0x200
[  585.938124][    C0]  ? __pfx_kthread+0x10/0x10
[  585.938146][    C0]  ret_from_fork+0x510/0xa50
[  585.938165][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  585.938182][    C0]  ? __switch_to+0xc9e/0x1480
[  585.938207][    C0]  ? __pfx_kthread+0x10/0x10
[  585.938229][    C0]  ret_from_fork_asm+0x1a/0x30
[  585.938259][    C0]  </TASK>
[  586.279603][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[  586.279633][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  586.279661][   T38] Tainted: [L]=SOFTLOCKUP
[  586.279668][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  586.279680][   T38] Call Trace:
[  586.279688][   T38]  <TASK>
[  586.279698][   T38]  vpanic+0x1e0/0x670
[  586.279730][   T38]  panic+0xb9/0xc0
[  586.279753][   T38]  ? __pfx_panic+0x10/0x10
[  586.279778][   T38]  ? preempt_schedule_thunk+0x16/0x30
[  586.279804][   T38]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  586.279832][   T38]  watchdog+0xfdf/0xfe0
[  586.279858][   T38]  ? watchdog+0x20a/0xfe0
[  586.279886][   T38]  kthread+0x711/0x8a0
[  586.279914][   T38]  ? __pfx_watchdog+0x10/0x10
[  586.279933][   T38]  ? __pfx_kthread+0x10/0x10
[  586.279954][   T38]  ? rt_spin_unlock+0x150/0x200
[  586.279983][   T38]  ? rt_spin_unlock+0x161/0x200
[  586.280004][   T38]  ? __pfx_kthread+0x10/0x10
[  586.280029][   T38]  ret_from_fork+0x510/0xa50
[  586.280052][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  586.280071][   T38]  ? __switch_to+0xc9e/0x1480
[  586.280100][   T38]  ? __pfx_kthread+0x10/0x10
[  586.280126][   T38]  ret_from_fork_asm+0x1a/0x30
[  586.280166][   T38]  </TASK>
[  586.280545][   T38] Kernel Offset: disabled