last executing test programs:

30.255311547s ago: executing program 0 (id=191):
kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a", 0x78, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217", 0xa0}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(0x0, 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

26.294706184s ago: executing program 3 (id=195):
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0, 0x0, [], [0x0, 0x4], [0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0xf]})
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)}], 0x1, 0x40800)
recvmmsg$unix(r2, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000c80)}}], 0x1, 0x40002021, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r3 = getpid()
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="720ac4ff000400007110b100000000009500000000000000353ea06e65f3728560f6136aedded58dbb812cdd19370870a6bdbad92424e0d05f42ef9656182c82cac03b0826ebb4e5919825e78fb46f8f298c22a52ed109d2627a9629ce588f2012d14e5d9df1e037"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x80)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000002b00)={0x2})

25.724328586s ago: executing program 0 (id=196):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
eventfd2(0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x0, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xff000000], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
r4 = timerfd_create(0x0, 0x0)
timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
epoll_create(0x5)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000d0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3})
r5 = fsopen(&(0x7f0000000380)='romfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x0)

24.533995206s ago: executing program 2 (id=197):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325242, 0x0, [], [0x2b8], [0x0, 0x1], [0x0, 0x0, 0x2]})
sched_setparam(r0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e1c, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
mprotect(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x1)
getsockopt$inet6_buf(r7, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0)

22.839677669s ago: executing program 0 (id=200):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x2, 0x70bd27, 0x25dfdbff, {0x48, 0x1, 0x0, r0, 0x1, 0x8, 0x6, 0xb7, 0x0, 0x4, 0xe3}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r4)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r6=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r6}}], 0x20, 0x2400e044}, 0x20001080)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x9c}}, 0x4000841)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000feffff3f000000000001000085100000060000008510000004000000c608000000000000180000000000000000000000000000009500000000000000950000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x100, 0x8}, 0x94)
sendto$inet(r7, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

22.246155322s ago: executing program 4 (id=201):
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0xfffffff7)
landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x3, 0x2}, 0x18, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
ioprio_get$uid(0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff010000000100000056", 0x19}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000180), 0x4)

20.103305997s ago: executing program 3 (id=202):
fsopen(&(0x7f00000003c0)='jfs\x00', 0x1)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8183, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
io_uring_setup(0x21e9, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x383})

18.451435485s ago: executing program 1 (id=203):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, 0x0)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040840)
rseq(0x0, 0xfde1, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x4000040)
ioctl$sock_SIOCINQ(r3, 0x541b, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, 0x0, 0x0)
connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x979b, @ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x3}, 0x20)

18.44836064s ago: executing program 2 (id=204):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)

17.486613913s ago: executing program 4 (id=205):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
cachestat(r1, &(0x7f0000000140)={0xffffffff, 0x9}, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r3=>0x0, 0x2f, 0xe8, 0x2, 0x3e, 0x14, @private2, @private0, 0x1, 0x7, 0xf, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', r3, 0x2f, 0x8d, 0x2, 0x8, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x8, 0xff}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0x8}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r5 = getpgrp(0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8)
r9 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000100))
write$binfmt_script(r2, &(0x7f0000000680)={'#! ', './file0', [{0x20, '#! '}], 0xa, "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"}, 0x145)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

16.3330529s ago: executing program 2 (id=206):
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x3, 0x2}, 0x18, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
ioprio_get$uid(0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff010000000100000056", 0x19}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000180), 0x4)

16.272209569s ago: executing program 3 (id=207):
kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a", 0x78, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217", 0xa0}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(0x0, 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13.872391734s ago: executing program 4 (id=208):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x1, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xfff2, 0x10}, {0xfff1, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004844}, 0x2000c8d1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x10, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0xd39, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={<r2=>r1})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x4c}, 0x10)
close(r1)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000)
socket$netlink(0x10, 0x3, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)

13.854787208s ago: executing program 1 (id=209):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x236af4, 0x3f})
ioctl$BLKTRACESTART(r2, 0x1274, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045a00028006800000806907800000000000000004e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="508041049078396c"], 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a0500000000000000000000000000090001007a845c000000090a01040000000000000000070000000900010073797a3000000000200011800a0001006d61746368000000100002800a00010071756f7461000000080005400000000208000a400000000109000200737900000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

10.600264238s ago: executing program 0 (id=210):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
lseek(0xffffffffffffffff, 0x201, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181)
socket$nl_route(0x10, 0x3, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

10.359319264s ago: executing program 4 (id=211):
r0 = socket$inet6(0xa, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getrandom(0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x20000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x800)
r6 = socket$kcm(0x2a, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x28, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001019}, 0x20000004)
sendmsg$kcm(r6, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x20}, 0x0)
write$binfmt_aout(r4, 0x0, 0xa052)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)

10.243267319s ago: executing program 2 (id=212):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
lseek(0xffffffffffffffff, 0x201, 0x0)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181)
socket$nl_route(0x10, 0x3, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

10.192582993s ago: executing program 1 (id=213):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
read$FUSE(r3, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6d", 0x9)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r5, 0xffffae1d)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000180)="1a", 0x1, 0x8094, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
unshare(0x2c020400)

9.891700028s ago: executing program 3 (id=214):
syz_open_dev$sg(0x0, 0x0, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x40, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffff7}, @NFULA_CFG_MODE={0xa, 0x2, {0x7fffffff}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008010}, 0x20040040)
rseq(0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)

8.005109111s ago: executing program 0 (id=215):
socket$inet6(0xa, 0x80002, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r4, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)

7.0200639s ago: executing program 1 (id=216):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)

7.01892s ago: executing program 4 (id=217):
fsopen(&(0x7f00000003c0)='jfs\x00', 0x1)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8183, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
io_uring_setup(0x21e9, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x383})

5.853873282s ago: executing program 3 (id=218):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x141040, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000f40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
lseek(r5, 0x9, 0x0)
prlimit64(r0, 0xa, &(0x7f00000000c0)={0x101, 0xfc}, &(0x7f0000000280))

5.797418889s ago: executing program 2 (id=219):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, 0x0)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040840)
rseq(0x0, 0xfde1, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x4000040)
ioctl$sock_SIOCINQ(r3, 0x541b, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, 0x0, 0x0)
connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x979b, @ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x3}, 0x20)

3.677913789s ago: executing program 4 (id=220):
socket(0x1, 0x2, 0x3)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$inet6_udp(0xa, 0x2, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil)
shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x4000)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r6, 0x3)
accept4$bt_l2cap(r6, &(0x7f0000000200), 0x0, 0x800)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16)

3.67671428s ago: executing program 1 (id=230):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)

3.673096038s ago: executing program 0 (id=221):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x340, 0x3a8, 0x3a8, 0x340, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {0xff}}, 0x0, 0xa8, 0xc8, 0x700}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000000c0)={0xa}, 0x1c)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = fcntl$dupfd(r1, 0x406, r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2}}, 0x20)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x1a)
fcntl$setlease(r5, 0x400, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f00000005c0)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x4, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24040841}, 0x40008)
syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r2)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2)

1.218502796s ago: executing program 2 (id=222):
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x3, 0x2}, 0x18, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
ioprio_get$uid(0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff010000000100000056", 0x19}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000180), 0x4)

1.116729871s ago: executing program 1 (id=223):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851", 0x72}, {&(0x7f00000025c0)="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", 0x43d}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783", 0xc1}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x5, &(0x7f0000001480)}, 0x0)
recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)
syslog(0x4, 0x0, 0x0)
mprotect(&(0x7f00004e2000/0x4000)=nil, 0x4000, 0x3)

0s ago: executing program 3 (id=224):
kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a", 0x78, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217", 0xa0}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(0x0, 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts.
[   73.083696][ T5588] cgroup: Unknown subsys name 'net'
[   73.324324][ T5588] cgroup: Unknown subsys name 'cpuset'
[   73.378885][ T5588] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   75.006941][ T5588] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   77.436114][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.461714][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.472280][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.507595][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.509005][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.511222][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   77.524740][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.531694][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.535896][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.544007][ T4916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.546136][ T4916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.569773][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   77.588282][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   77.599773][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.604224][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.604983][ T4916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   77.609325][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.610234][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.610748][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   77.611730][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.620253][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.620794][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.624090][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   77.624605][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.632368][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   79.670125][ T5611] Bluetooth: hci1: command tx timeout
[   79.670253][ T5611] Bluetooth: hci0: command tx timeout
[   79.748394][ T5617] Bluetooth: hci3: command tx timeout
[   79.828891][ T5617] Bluetooth: hci2: command tx timeout
[   79.838313][ T5617] Bluetooth: hci4: command tx timeout
[   80.032494][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.033653][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.033787][ T5605] bridge_slave_0: entered allmulticast mode
[   80.035419][ T5605] bridge_slave_0: entered promiscuous mode
[   80.069705][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.069783][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.069887][ T5600] bridge_slave_0: entered allmulticast mode
[   80.071190][ T5600] bridge_slave_0: entered promiscuous mode
[   80.105375][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.105490][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.105691][ T5605] bridge_slave_1: entered allmulticast mode
[   80.113056][ T5605] bridge_slave_1: entered promiscuous mode
[   80.148212][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.148312][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.148427][ T5600] bridge_slave_1: entered allmulticast mode
[   80.149817][ T5600] bridge_slave_1: entered promiscuous mode
[   80.176739][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.176890][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.177096][ T5603] bridge_slave_0: entered allmulticast mode
[   80.181095][ T5603] bridge_slave_0: entered promiscuous mode
[   80.241119][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.241252][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.241407][ T5603] bridge_slave_1: entered allmulticast mode
[   80.243003][ T5603] bridge_slave_1: entered promiscuous mode
[   80.243837][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.243972][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.244066][ T5612] bridge_slave_0: entered allmulticast mode
[   80.245369][ T5612] bridge_slave_0: entered promiscuous mode
[   80.309443][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.322732][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.323108][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.323554][ T5612] bridge_slave_1: entered allmulticast mode
[   80.325905][ T5612] bridge_slave_1: entered promiscuous mode
[   80.337110][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.337382][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.338486][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.338664][ T5601] bridge_slave_0: entered allmulticast mode
[   80.341743][ T5601] bridge_slave_0: entered promiscuous mode
[   80.347322][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.394081][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.394410][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.394750][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.394902][ T5601] bridge_slave_1: entered allmulticast mode
[   80.397163][ T5601] bridge_slave_1: entered promiscuous mode
[   80.433770][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.592468][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.594987][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.632445][ T5605] team0: Port device team_slave_0 added
[   80.652460][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.653858][ T5600] team0: Port device team_slave_0 added
[   80.657196][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.661694][ T5605] team0: Port device team_slave_1 added
[   80.696053][ T5600] team0: Port device team_slave_1 added
[   80.715216][ T5603] team0: Port device team_slave_0 added
[   80.717596][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.767868][ T5603] team0: Port device team_slave_1 added
[   80.787004][ T5612] team0: Port device team_slave_0 added
[   80.807125][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.807138][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.807151][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.859025][ T5612] team0: Port device team_slave_1 added
[   80.859610][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.859623][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.859638][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.861721][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.861731][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.861745][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.879073][ T5601] team0: Port device team_slave_0 added
[   80.902931][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.903211][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.903238][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.934876][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.934893][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.934918][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.947526][ T5601] team0: Port device team_slave_1 added
[   80.984083][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.984106][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.984134][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.009846][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.009863][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.009888][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.056631][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.056648][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.056671][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.084395][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.084411][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.084436][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.139413][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.139429][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.139454][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.183038][ T5605] hsr_slave_0: entered promiscuous mode
[   81.184516][ T5605] hsr_slave_1: entered promiscuous mode
[   81.257344][ T5600] hsr_slave_0: entered promiscuous mode
[   81.258974][ T5600] hsr_slave_1: entered promiscuous mode
[   81.260074][ T5600] debugfs: 'hsr0' already exists in 'hsr'
[   81.260196][ T5600] Cannot create hsr debugfs directory
[   81.296121][ T5603] hsr_slave_0: entered promiscuous mode
[   81.297377][ T5603] hsr_slave_1: entered promiscuous mode
[   81.299913][ T5603] debugfs: 'hsr0' already exists in 'hsr'
[   81.299937][ T5603] Cannot create hsr debugfs directory
[   81.362800][ T5612] hsr_slave_0: entered promiscuous mode
[   81.364083][ T5612] hsr_slave_1: entered promiscuous mode
[   81.364984][ T5612] debugfs: 'hsr0' already exists in 'hsr'
[   81.365006][ T5612] Cannot create hsr debugfs directory
[   81.460151][ T5601] hsr_slave_0: entered promiscuous mode
[   81.460872][ T5601] hsr_slave_1: entered promiscuous mode
[   81.461384][ T5601] debugfs: 'hsr0' already exists in 'hsr'
[   81.461400][ T5601] Cannot create hsr debugfs directory
[   81.748492][ T5611] Bluetooth: hci1: command tx timeout
[   81.748586][ T5617] Bluetooth: hci0: command tx timeout
[   81.828649][ T5617] Bluetooth: hci3: command tx timeout
[   81.909618][ T5611] Bluetooth: hci2: command tx timeout
[   81.909711][ T5617] Bluetooth: hci4: command tx timeout
[   82.514458][ T5605] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   82.563771][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   82.579249][ T5605] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.621967][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   82.626782][ T5605] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.673076][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   82.694635][ T5605] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   82.732772][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   82.873893][ T5600] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.893016][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   82.897672][ T5600] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.940772][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   82.945236][ T5600] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.992407][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.012099][ T5600] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.053128][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.179855][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   83.232909][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.246601][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   83.274292][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.279440][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   83.311354][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.338204][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   83.362471][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.605615][ T5603] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.641295][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.657535][ T5603] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.683170][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.689334][ T5603] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.712281][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.735427][ T5603] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.755971][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.783826][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.828376][ T5611] Bluetooth: hci1: command tx timeout
[   83.828481][ T5617] Bluetooth: hci0: command tx timeout
[   83.908536][ T5617] Bluetooth: hci3: command tx timeout
[   83.921569][ T5601] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   83.961312][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.975158][ T5601] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   83.988650][ T5611] Bluetooth: hci2: command tx timeout
[   83.988827][ T5617] Bluetooth: hci4: command tx timeout
[   84.021034][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.027573][ T5605] 8021q: adding VLAN 0 to HW filter on device team0
[   84.037976][ T5601] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   84.061161][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.081083][ T5601] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   84.121215][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.157627][ T1190] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.157783][ T1190] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.179154][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.235699][ T1896] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.235789][ T1896] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.322534][ T5600] 8021q: adding VLAN 0 to HW filter on device team0
[   84.360866][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.361950][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.405052][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.406911][ T1896] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.407025][ T1896] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.526168][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   84.612808][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.615391][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.642218][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.684354][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.684463][ T4114] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.854228][ T5603] 8021q: adding VLAN 0 to HW filter on device team0
[   84.912853][ T1896] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.913054][ T1896] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.961177][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.013695][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.013926][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.150199][ T5601] 8021q: adding VLAN 0 to HW filter on device team0
[   85.194466][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.194659][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.308524][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.308716][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.697446][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.910105][ T5611] Bluetooth: hci1: command tx timeout
[   85.910149][ T5617] Bluetooth: hci0: command tx timeout
[   85.988846][ T5617] Bluetooth: hci3: command tx timeout
[   86.069292][ T5611] Bluetooth: hci2: command tx timeout
[   86.069333][ T5617] Bluetooth: hci4: command tx timeout
[   86.418363][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.852396][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.866857][ T5600] veth0_vlan: entered promiscuous mode
[   86.901676][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.952101][   T10] cfg80211: failed to load regulatory.db
[   86.996552][ T5605] veth0_vlan: entered promiscuous mode
[   87.019150][ T5600] veth1_vlan: entered promiscuous mode
[   87.092210][ T5605] veth1_vlan: entered promiscuous mode
[   87.146710][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.216687][ T5603] veth0_vlan: entered promiscuous mode
[   87.217603][ T5600] veth0_macvtap: entered promiscuous mode
[   87.230944][ T5612] veth0_vlan: entered promiscuous mode
[   87.251906][ T5600] veth1_macvtap: entered promiscuous mode
[   87.283696][ T5605] veth0_macvtap: entered promiscuous mode
[   87.286491][ T5603] veth1_vlan: entered promiscuous mode
[   87.313351][ T5612] veth1_vlan: entered promiscuous mode
[   87.326284][ T5605] veth1_macvtap: entered promiscuous mode
[   87.362354][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.394911][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.410961][ T5601] veth0_vlan: entered promiscuous mode
[   87.417160][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.449840][ T4114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.454740][ T4114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.460257][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.470065][ T4114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.506388][ T4114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.522082][ T5601] veth1_vlan: entered promiscuous mode
[   87.533174][ T5603] veth0_macvtap: entered promiscuous mode
[   87.535504][ T5612] veth0_macvtap: entered promiscuous mode
[   87.606904][ T4114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.623804][ T4114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.627196][ T4114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.633908][ T5612] veth1_macvtap: entered promiscuous mode
[   87.642752][ T5603] veth1_macvtap: entered promiscuous mode
[   87.695749][ T4114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.058854][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.087998][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.245287][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.292425][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.311330][ T5601] veth0_macvtap: entered promiscuous mode
[   88.333068][   T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.345825][  T122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.345851][  T122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.392321][   T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.421806][   T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.427975][ T5601] veth1_macvtap: entered promiscuous mode
[   88.442850][   T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.459066][   T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.462330][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.462348][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.467348][   T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.524888][   T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.582281][   T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.668093][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.669286][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.895145][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.033246][  T122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.033272][  T122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.254248][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.547784][   T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.567807][  T799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.567827][  T799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.574991][   T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.612540][   T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.617024][   T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.297740][ T5798] comedi comedi3: fl512: I/O base address not correctly aligned
[   90.964808][  T799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.964828][  T799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.214472][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.214492][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.491515][ T1896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.491538][ T1896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.462845][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.462865][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.939409][  T799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.939431][  T799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.781551][ T5818] Zero length message leads to an empty skb
[   95.816417][ T5818] Invalid ELF header type: 1027 != 1
[   98.818148][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   98.828156][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   98.838158][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   98.848158][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   98.858143][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   99.277517][ T5831] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[   99.484352][ T5833] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  106.598165][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  106.618167][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  106.628163][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  106.638154][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  106.648166][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  108.451470][    T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  109.307598][   T37] audit: type=1326 audit(1779969601.065:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  109.408449][   T37] audit: type=1326 audit(1779969601.065:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  109.408869][   T37] audit: type=1326 audit(1779969601.075:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  109.409125][   T37] audit: type=1326 audit(1779969601.075:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  109.409447][   T37] audit: type=1326 audit(1779969601.075:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  109.409672][   T37] audit: type=1326 audit(1779969601.085:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  109.410903][   T37] audit: type=1326 audit(1779969601.095:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  109.413075][   T37] audit: type=1326 audit(1779969601.105:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  109.674972][   T37] audit: type=1326 audit(1779969601.105:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  109.675030][   T37] audit: type=1326 audit(1779969601.105:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  116.653561][ T5913] process 'syz.3.28' launched './file0' with NULL argv: empty string added
[  117.312084][ T5934] comedi comedi2: c6xdigio: I/O port conflict (0x8,3)
[  117.858412][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  118.028223][   T10] usb 1-1: Using ep0 maxpacket: 32
[  119.180012][   T10] usb 1-1: device descriptor read/all, error -71
[  122.217505][ T5958] =======================================================
[  122.217505][ T5958] WARNING: The mand mount option has been deprecated and
[  122.217505][ T5958]          and is ignored by this kernel. Remove the mand
[  122.217505][ T5958]          option from the mount to silence this warning.
[  122.217505][ T5958] =======================================================
[  130.248883][   T36] IPVS: starting estimator thread 0...
[  130.378301][ T5994] IPVS: using max 16 ests per chain, 38400 per kthread
[  133.265865][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  133.265960][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  136.474714][ T6026] input: syz0 as /devices/virtual/input/input5
[  138.061746][ T6036] /dev/nullb0: Can't open blockdev
[  140.637252][ T6045] Invalid ELF header type: 3 != 1
[  149.006391][ T6081] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  149.459044][ T6083] IPVS: stopping master sync thread 6081 ...
[  151.471643][ T6100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.63'.
[  156.578734][ T6141] netlink: 244 bytes leftover after parsing attributes in process `syz.3.69'.
[  158.979143][ T6157] random: crng reseeded on system resumption
[  166.143965][ T6185] nfs: Bad value for 'source'
[  166.640573][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'.
[  167.096365][ T6200] netlink: 'syz.2.79': attribute type 9 has an invalid length.
[  167.096389][ T6200] netlink: 44 bytes leftover after parsing attributes in process `syz.2.79'.
[  170.651728][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'.
[  178.696589][   T37] kauditd_printk_skb: 4 callbacks suppressed
[  178.696629][   T37] audit: type=1326 audit(1779969670.515:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.4.94" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  178.696973][   T37] audit: type=1326 audit(1779969670.515:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.4.94" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  178.697305][   T37] audit: type=1326 audit(1779969670.515:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.4.94" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  178.697563][   T37] audit: type=1326 audit(1779969670.515:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.4.94" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  178.697810][   T37] audit: type=1326 audit(1779969670.525:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.4.94" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  178.924147][   T37] audit: type=1326 audit(1779969670.525:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.4.94" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  179.071603][   T37] audit: type=1326 audit(1779969670.535:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.4.94" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  179.071798][   T37] audit: type=1326 audit(1779969670.535:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.4.94" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  179.072039][   T37] audit: type=1326 audit(1779969670.535:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.4.94" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  179.072391][   T37] audit: type=1326 audit(1779969670.535:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.4.94" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  179.620191][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'.
[  186.057743][ T6323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.105'.
[  187.448769][   T37] kauditd_printk_skb: 4 callbacks suppressed
[  187.448812][   T37] audit: type=1326 audit(1779969679.155:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.4.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  187.449309][   T37] audit: type=1326 audit(1779969679.155:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.4.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  187.449903][   T37] audit: type=1326 audit(1779969679.155:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.4.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  187.450278][   T37] audit: type=1326 audit(1779969679.165:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.4.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  187.450664][   T37] audit: type=1326 audit(1779969679.165:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.4.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  187.451450][   T37] audit: type=1326 audit(1779969679.165:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.4.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  187.451703][   T37] audit: type=1326 audit(1779969679.175:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.4.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  187.451853][   T37] audit: type=1326 audit(1779969679.175:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.4.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  187.703723][   T37] audit: type=1326 audit(1779969679.175:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.4.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  187.705698][   T37] audit: type=1326 audit(1779969679.185:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.4.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  190.559408][ T6340] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96
[  190.567061][ T6340] netlink: 72 bytes leftover after parsing attributes in process `syz.1.108'.
[  190.567094][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'.
[  190.583374][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'.
[  194.442880][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  194.442952][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  194.921756][ T5617] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  194.921861][ T5617] CPU: 1 UID: 0 PID: 5617 Comm: kworker/u9:7 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  194.921893][ T5617] Tainted: [L]=SOFTLOCKUP
[  194.921901][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  194.921919][ T5617] Workqueue: hci1 hci_rx_work
[  194.921982][ T5617] Call Trace:
[  194.921992][ T5617]  <TASK>
[  194.922002][ T5617]  dump_stack_lvl+0xe8/0x150
[  194.922030][ T5617]  sysfs_create_dir_ns+0x271/0x2a0
[  194.922064][ T5617]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  194.922108][ T5617]  kobject_add_internal+0x631/0xd10
[  194.922140][ T5617]  kobject_add+0x163/0x240
[  194.922165][ T5617]  ? __pfx_kobject_add+0x10/0x10
[  194.922191][ T5617]  ? get_device_parent+0x370/0x3a0
[  194.922216][ T5617]  device_add+0x408/0xbb0
[  194.922252][ T5617]  hci_conn_add_sysfs+0xd5/0x210
[  194.922283][ T5617]  le_conn_complete_evt+0x10e6/0x16b0
[  194.922315][ T5617]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  194.922336][ T5617]  ? lockdep_hardirqs_on+0x7a/0x110
[  194.922365][ T5617]  ? irqentry_exit+0x218/0x8b0
[  194.922397][ T5617]  ? skb_pull_data+0xfb/0x200
[  194.922422][ T5617]  hci_le_conn_complete_evt+0x187/0x470
[  194.922450][ T5617]  hci_event_packet+0x659/0xef0
[  194.922484][ T5617]  ? __pfx____migrate_enable+0x10/0x10
[  194.922508][ T5617]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  194.922538][ T5617]  ? __pfx_hci_event_packet+0x10/0x10
[  194.922566][ T5617]  ? preempt_schedule_common+0x82/0xd0
[  194.922594][ T5617]  ? preempt_schedule_thunk+0x16/0x30
[  194.922628][ T5617]  ? hci_send_to_monitor+0xe2/0x590
[  194.922653][ T5617]  hci_rx_work+0x3ee/0x1040
[  194.922683][ T5617]  ? preempt_schedule_thunk+0x16/0x30
[  194.922715][ T5617]  ? process_scheduled_works+0xa70/0x1860
[  194.922738][ T5617]  process_scheduled_works+0xb5d/0x1860
[  194.922791][ T5617]  ? __pfx_process_scheduled_works+0x10/0x10
[  194.922819][ T5617]  ? assign_work+0x3d5/0x5e0
[  194.922845][ T5617]  worker_thread+0xa53/0xfc0
[  194.922894][ T5617]  kthread+0x388/0x470
[  194.922921][ T5617]  ? __pfx_worker_thread+0x10/0x10
[  194.922947][ T5617]  ? __pfx_kthread+0x10/0x10
[  194.922975][ T5617]  ret_from_fork+0x514/0xb70
[  194.923002][ T5617]  ? __pfx_ret_from_fork+0x10/0x10
[  194.923024][ T5617]  ? __switch_to+0xc79/0x1410
[  194.923058][ T5617]  ? __pfx_kthread+0x10/0x10
[  194.923086][ T5617]  ret_from_fork_asm+0x1a/0x30
[  194.923127][ T5617]  </TASK>
[  194.923507][ T5617] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  194.923800][ T5617] Bluetooth: hci1: failed to register connection device
[  196.654365][ T6387] overlayfs: overlapping lowerdir path
[  197.021004][ T6372] syz.0.113 uses obsolete (PF_INET,SOCK_PACKET)
[  199.224875][   T37] kauditd_printk_skb: 4 callbacks suppressed
[  199.224915][   T37] audit: type=1326 audit(1779969691.065:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6394 comm="syz.1.120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  199.225356][   T37] audit: type=1326 audit(1779969691.065:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6394 comm="syz.1.120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  199.225606][   T37] audit: type=1326 audit(1779969691.065:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6394 comm="syz.1.120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  199.225886][   T37] audit: type=1326 audit(1779969691.075:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6394 comm="syz.1.120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  199.226285][   T37] audit: type=1326 audit(1779969691.075:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6394 comm="syz.1.120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  199.226528][   T37] audit: type=1326 audit(1779969691.075:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6394 comm="syz.1.120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  199.226724][   T37] audit: type=1326 audit(1779969691.075:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6394 comm="syz.1.120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  199.227004][   T37] audit: type=1326 audit(1779969691.085:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6394 comm="syz.1.120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  199.227388][   T37] audit: type=1326 audit(1779969691.085:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6394 comm="syz.1.120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  199.227606][   T37] audit: type=1326 audit(1779969691.085:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6394 comm="syz.1.120" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a190ce59 code=0x7ffc0000
[  200.424501][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'.
[  201.036166][ T6401] Process accounting resumed
[  201.649301][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'.
[  201.910674][ T5617] Bluetooth: hci4: command 0x0406 tx timeout
[  201.910834][ T5617] Bluetooth: hci0: command 0x0406 tx timeout
[  202.649036][ T5617] Bluetooth: hci2: command 0x0406 tx timeout
[  202.684898][ T5604] Bluetooth: hci1: command 0x0406 tx timeout
[  202.803086][ T5604] Bluetooth: hci3: command 0x0406 tx timeout
[  203.954781][ T6431] warning: `syz.0.127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  207.555424][ T6445] overlayfs: overlapping lowerdir path
[  213.947650][   T37] kauditd_printk_skb: 4 callbacks suppressed
[  213.947691][   T37] audit: type=1326 audit(1779969705.765:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756275ce59 code=0x7ffc0000
[  213.983552][   T37] audit: type=1326 audit(1779969705.765:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756275ce59 code=0x7ffc0000
[  213.983914][   T37] audit: type=1326 audit(1779969705.765:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f756275ce59 code=0x7ffc0000
[  213.984090][   T37] audit: type=1326 audit(1779969705.765:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756275ce59 code=0x7ffc0000
[  213.984448][   T37] audit: type=1326 audit(1779969705.765:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756275ce59 code=0x7ffc0000
[  213.984689][   T37] audit: type=1326 audit(1779969705.775:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f756275ce59 code=0x7ffc0000
[  213.984929][   T37] audit: type=1326 audit(1779969705.775:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756275ce59 code=0x7ffc0000
[  213.985171][   T37] audit: type=1326 audit(1779969705.775:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756275ce59 code=0x7ffc0000
[  213.985531][   T37] audit: type=1326 audit(1779969705.785:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f756275ce59 code=0x7ffc0000
[  213.985747][   T37] audit: type=1326 audit(1779969705.785:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756275ce59 code=0x7ffc0000
[  214.736937][ T5712] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  215.038205][ T5712] usb 3-1: Using ep0 maxpacket: 16
[  215.051756][ T5712] usb 3-1: config 222 has an invalid interface number: 31 but max is 0
[  215.051785][ T5712] usb 3-1: config 222 has no interface number 0
[  215.051833][ T5712] usb 3-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11
[  215.051858][ T5712] usb 3-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024
[  215.051884][ T5712] usb 3-1: config 222 interface 31 has no altsetting 0
[  215.054682][ T5712] usb 3-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd
[  215.054711][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.054730][ T5712] usb 3-1: Product: syz
[  215.054743][ T5712] usb 3-1: Manufacturer: syz
[  215.054756][ T5712] usb 3-1: SerialNumber: syz
[  216.329950][ T6469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  217.548504][ T5712] ldusb 3-1:222.31: LD USB Device #0 now attached to major 180 minor 0
[  217.617990][ T5712] usb 3-1: USB disconnect, device number 2
[  217.802418][ T5712] ldusb 3-1:222.31: LD USB Device #0 now disconnected
[  219.012052][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'.
[  220.993798][    T9] IPVS: starting estimator thread 0...
[  221.094795][ T6505] IPVS: using max 12 ests per chain, 28800 per kthread
[  221.515996][ T6515] Bluetooth: MGMT ver 1.23
[  224.475467][   T37] kauditd_printk_skb: 4 callbacks suppressed
[  224.475507][   T37] audit: type=1326 audit(1779969716.295:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6526 comm="syz.4.152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  224.475910][   T37] audit: type=1326 audit(1779969716.295:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6526 comm="syz.4.152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  224.476154][   T37] audit: type=1326 audit(1779969716.305:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6526 comm="syz.4.152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  224.476428][   T37] audit: type=1326 audit(1779969716.305:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6526 comm="syz.4.152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  224.476814][   T37] audit: type=1326 audit(1779969716.305:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6526 comm="syz.4.152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  224.477030][   T37] audit: type=1326 audit(1779969716.315:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6526 comm="syz.4.152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  224.477275][   T37] audit: type=1326 audit(1779969716.315:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6526 comm="syz.4.152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  224.477490][   T37] audit: type=1326 audit(1779969716.315:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6526 comm="syz.4.152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  224.477831][   T37] audit: type=1326 audit(1779969716.325:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6526 comm="syz.4.152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  225.057101][   T37] audit: type=1326 audit(1779969716.325:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6526 comm="syz.4.152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495341ce59 code=0x7ffc0000
[  225.521189][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.153'.
[  227.902506][ T6550] IPVS: set_ctl: invalid protocol: 255 172.20.20.60:20001
[  228.418644][ T5805] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  229.244244][ T5805] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  229.244278][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  229.244305][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  229.303902][ T5805] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  229.303932][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.303952][ T5805] usb 3-1: Product: syz
[  229.303966][ T5805] usb 3-1: Manufacturer: syz
[  229.303980][ T5805] usb 3-1: SerialNumber: syz
[  229.377243][ T5805] usb 3-1: config 0 descriptor??
[  229.398968][ T6550] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  229.506985][ T5805] rc_core: IR keymap rc-streamzap not found
[  229.507006][ T5805] Registered IR keymap rc-empty
[  229.540008][ T5805] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  229.541907][ T5805] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7
[  229.636012][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'.
[  231.884233][ T5805] usb 3-1: USB disconnect, device number 3
[  235.005716][ T6583] capability: warning: `syz.1.162' uses 32-bit capabilities (legacy support in use)
[  239.344002][ T6610] Invalid ELF header type: 3 != 1
[  240.647456][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'.
[  243.543012][ T6635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.175'.
[  249.653438][ T6672] nfs: Bad value for 'source'
[  251.559957][ T6691] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  255.559645][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  255.559831][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  257.693086][ T5712] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  257.898786][ T5712] usb 3-1: device descriptor read/64, error -71
[  258.540062][ T5712] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  258.674176][ T5712] usb 3-1: device descriptor read/64, error -71
[  259.118640][ T5712] usb usb3-port1: attempt power cycle
[  276.720153][ T6804] syz.1.213 (6804) used greatest stack depth: 17120 bytes left
[  283.802446][ T6837] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  284.924898][ T4916] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  284.925814][ T4916] CPU: 0 UID: 0 PID: 4916 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  284.925845][ T4916] Tainted: [L]=SOFTLOCKUP
[  284.925852][ T4916] Hardware name: Google Google Compute Engi[  284.925852][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  284.925865][ T4916] Workqueue: hci3 hci_rx_work
[  284.925917][ T4916] Call Trace:
[  284.925925][ T4916]  <TASK>
[  284.925934][ T4916]  dump_stack_lvl+0xe8/0x150
[  284.925961][ T4916]  sysfs_create_dir_ns+0x271/0x2a0
[  284.925994][ T4916]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  284.926018][ T4916]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  284.926052][ T4916]  ? rt_spin_unlock+0x160/0x200
[  284.926077][ T4916]  kobject_add_internal+0x631/0xd10
[  284.926103][ T4916]  kobject_add+0x163/0x240
[  284.926124][ T4916]  ? __pfx_kobject_add+0x10/0x10
[  284.926147][ T4916]  ? get_device_parent+0x370/0x3a0
[  284.926171][ T4916]  device_add+0x408/0xbb0
[  284.926203][ T4916]  hci_conn_add_sysfs+0xd5/0x210
[  284.926229][ T4916]  le_conn_complete_evt+0x10e6/0x16b0
[  284.926256][ T4916]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  284.926278][ T4916]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  284.926305][ T4916]  ? lockdep_hardirqs_on+0x7a/0x110
[  284.926340][ T4916]  ? skb_pull_data+0xfb/0x200
[  284.926361][ T4916]  hci_le_conn_complete_evt+0x187/0x470
[  284.926385][ T4916]  hci_event_packet+0x659/0xef0
[  284.926415][ T4916]  ? __pfx____migrate_enable+0x10/0x10
[  284.926437][ T4916]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  284.926464][ T4916]  ? __pfx_hci_event_packet+0x10/0x10
[  284.926484][ T4916]  ? preempt_schedule_common+0x82/0xd0
[  284.926505][ T4916]  ? preempt_schedule_thunk+0x16/0x30
[  284.926534][ T4916]  ? hci_send_to_monitor+0xe2/0x590
[  284.926560][ T4916]  hci_rx_work+0x3ee/0x1040
[  284.926594][ T4916]  ? process_scheduled_works+0xa70/0x1860
[  284.926616][ T4916]  process_scheduled_works+0xb5d/0x1860
[  284.926664][ T4916]  ? __pfx_process_scheduled_works+0x10/0x10
[  284.926689][ T4916]  ? assign_work+0x3d5/0x5e0
[  284.926714][ T4916]  worker_thread+0xa53/0xfc0
[  284.926770][ T4916]  kthread+0x388/0x470
[  284.926793][ T4916]  ? __pfx_worker_thread+0x10/0x10
[  284.926810][ T4916]  ? __pfx_kthread+0x10/0x10
[  284.926835][ T4916]  ret_from_fork+0x514/0xb70
[  284.926859][ T4916]  ? __pfx_ret_from_fork+0x10/0x10
[  284.926881][ T4916]  ? __switch_to+0xc79/0x1410
[  284.926912][ T4916]  ? __pfx_kthread+0x10/0x10
[  284.926937][ T4916]  ret_from_fork_asm+0x1a/0x30
[  284.926975][ T4916]  </TASK>
[  284.946316][ T4916] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  284.946349][ T4916] Bluetooth: hci3: failed to register connection device
[  285.066556][ T4916] ==================================================================
[  285.066572][ T4916] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x208/0x2f0
[  285.066595][ T4916] Read of size 8 at addr ffff88804040a830 by task kworker/u9:1/4916
[  285.066605][ T4916] 
[  285.066614][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  285.066629][ T4916] Tainted: [L]=SOFTLOCKUP
[  285.066633][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  285.066641][ T4916] Workqueue: hci3 hci_rx_work
[  285.066657][ T4916] Call Trace:
[  285.066661][ T4916]  <TASK>
[  285.066667][ T4916]  dump_stack_lvl+0xe8/0x150
[  285.066680][ T4916]  print_address_description+0x55/0x1e0
[  285.066692][ T4916]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[  285.066706][ T4916]  print_report+0x58/0x70
[  285.066716][ T4916]  kasan_report+0x117/0x150
[  285.066730][ T4916]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[  285.066746][ T4916]  l2cap_sock_new_connection_cb+0x208/0x2f0
[  285.066763][ T4916]  l2cap_connect_cfm+0x368/0x1560
[  285.066777][ T4916]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  285.066791][ T4916]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  285.066807][ T4916]  ? lockdep_hardirqs_on+0x7a/0x110
[  285.066821][ T4916]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  285.066835][ T4916]  ? mutex_lock_nested+0x152/0x1d0
[  285.066846][ T4916]  ? hci_connect_cfm+0x2c/0x140
[  285.066855][ T4916]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  285.066866][ T4916]  hci_connect_cfm+0x95/0x140
[  285.066876][ T4916]  le_conn_complete_evt+0x1134/0x16b0
[  285.066890][ T4916]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  285.066901][ T4916]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  285.066915][ T4916]  ? lockdep_hardirqs_on+0x7a/0x110
[  285.066929][ T4916]  ? skb_pull_data+0xfb/0x200
[  285.066940][ T4916]  hci_le_conn_complete_evt+0x187/0x470
[  285.066952][ T4916]  hci_event_packet+0x659/0xef0
[  285.066968][ T4916]  ? __pfx____migrate_enable+0x10/0x10
[  285.066980][ T4916]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  285.066994][ T4916]  ? __pfx_hci_event_packet+0x10/0x10
[  285.067007][ T4916]  ? preempt_schedule_common+0x82/0xd0
[  285.067021][ T4916]  ? preempt_schedule_thunk+0x16/0x30
[  285.067036][ T4916]  ? hci_send_to_monitor+0xe2/0x590
[  285.067049][ T4916]  hci_rx_work+0x3ee/0x1040
[  285.067064][ T4916]  ? process_scheduled_works+0xa70/0x1860
[  285.067075][ T4916]  process_scheduled_works+0xb5d/0x1860
[  285.067095][ T4916]  ? __pfx_process_scheduled_works+0x10/0x10
[  285.067107][ T4916]  ? assign_work+0x3d5/0x5e0
[  285.067118][ T4916]  worker_thread+0xa53/0xfc0
[  285.067137][ T4916]  kthread+0x388/0x470
[  285.067150][ T4916]  ? __pfx_worker_thread+0x10/0x10
[  285.067160][ T4916]  ? __pfx_kthread+0x10/0x10
[  285.067173][ T4916]  ret_from_fork+0x514/0xb70
[  285.067186][ T4916]  ? __pfx_ret_from_fork+0x10/0x10
[  285.067196][ T4916]  ? __switch_to+0xc79/0x1410
[  285.067211][ T4916]  ? __pfx_kthread+0x10/0x10
[  285.067247][ T4916]  ret_from_fork_asm+0x1a/0x30
[  285.067264][ T4916]  </TASK>
[  285.067268][ T4916] 
[  285.067270][ T4916] Allocated by task 4916:
[  285.067277][ T4916]  kasan_save_track+0x3e/0x80
[  285.067292][ T4916]  __kasan_kmalloc+0x93/0xb0
[  285.067308][ T4916]  __kmalloc_noprof+0x3e7/0x7b0
[  285.067326][ T4916]  sk_prot_alloc+0xe7/0x210
[  285.067346][ T4916]  sk_alloc+0x3a/0x390
[  285.067365][ T4916]  bt_sock_alloc+0x3b/0x340
[  285.067386][ T4916]  l2cap_sock_new_connection_cb+0xf1/0x2f0
[  285.067407][ T4916]  l2cap_connect_cfm+0x368/0x1560
[  285.067419][ T4916]  hci_connect_cfm+0x95/0x140
[  285.067427][ T4916]  le_conn_complete_evt+0x1134/0x16b0
[  285.067436][ T4916]  hci_le_conn_complete_evt+0x187/0x470
[  285.067444][ T4916]  hci_event_packet+0x659/0xef0
[  285.067456][ T4916]  hci_rx_work+0x3ee/0x1040
[  285.067468][ T4916]  process_scheduled_works+0xb5d/0x1860
[  285.067476][ T4916]  worker_thread+0xa53/0xfc0
[  285.067485][ T4916]  kthread+0x388/0x470
[  285.067496][ T4916]  ret_from_fork+0x514/0xb70
[  285.067505][ T4916]  ret_from_fork_asm+0x1a/0x30
[  285.067516][ T4916] 
[  285.067518][ T4916] Freed by task 6840:
[  285.067530][ T4916]  kasan_save_track+0x3e/0x80
[  285.067539][ T4916]  kasan_save_free_info+0x46/0x50
[  285.067552][ T4916]  __kasan_slab_free+0x5c/0x80
[  285.067561][ T4916]  kfree+0x1c5/0x6c0
[  285.067570][ T4916]  __sk_destruct+0x74b/0x9d0
[  285.067582][ T4916]  l2cap_sock_cleanup_listen+0x1d9/0x580
[  285.067593][ T4916]  l2cap_sock_release+0x6e/0x270
[  285.067603][ T4916]  sock_close+0xc3/0x240
[  285.067612][ T4916]  __fput+0x461/0xa70
[  285.067620][ T4916]  task_work_run+0x1d9/0x270
[  285.067632][ T4916]  get_signal+0x11eb/0x1330
[  285.067642][ T4916]  arch_do_signal_or_restart+0xbc/0x840
[  285.067656][ T4916]  exit_to_user_mode_loop+0xa9/0x680
[  285.067667][ T4916]  do_syscall_64+0x353/0x580
[  285.067680][ T4916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.067690][ T4916] 
[  285.067692][ T4916] The buggy address belongs to the object at ffff88804040a000
[  285.067692][ T4916]  which belongs to the cache kmalloc-4k of size 4096
[  285.067701][ T4916] The buggy address is located 2096 bytes inside of
[  285.067701][ T4916]  freed 4096-byte region [ffff88804040a000, ffff88804040b000)
[  285.067712][ T4916] 
[  285.067714][ T4916] The buggy address belongs to the physical page:
[  285.067731][ T4916] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40408
[  285.067743][ T4916] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  285.067751][ T4916] flags: 0x80000000000040(head|node=0|zone=1)
[  285.067764][ T4916] page_type: f5(slab)
[  285.067774][ T4916] raw: 0080000000000040 ffff88813fe0a140 dead000000000100 dead000000000122
[  285.067783][ T4916] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  285.067793][ T4916] head: 0080000000000040 ffff88813fe0a140 dead000000000100 dead000000000122
[  285.067801][ T4916] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  285.067810][ T4916] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  285.067819][ T4916] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  285.067824][ T4916] page dumped because: kasan: bad access detected
[  285.067832][ T4916] page_owner tracks the page as allocated
[  285.067836][ T4916] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4974, tgid 4974 (udevd), ts 49167524258, free_ts 0
[  285.067854][ T4916]  post_alloc_hook+0x22d/0x280
[  285.067865][ T4916]  get_page_from_freelist+0x28b2/0x2930
[  285.067877][ T4916]  __alloc_frozen_pages_noprof+0x18d/0x380
[  285.067889][ T4916]  allocate_slab+0x77/0x660
[  285.067902][ T4916]  refill_objects+0x33c/0x3d0
[  285.067915][ T4916]  __pcs_replace_empty_main+0x373/0x720
[  285.067929][ T4916]  __kmalloc_noprof+0x530/0x7b0
[  285.067939][ T4916]  tomoyo_realpath_from_path+0xe3/0x5d0
[  285.067950][ T4916]  tomoyo_path_perm+0x283/0x560
[  285.067963][ T4916]  security_inode_getattr+0x12b/0x310
[  285.067975][ T4916]  vfs_getattr+0x23/0x70
[  285.067987][ T4916]  vfs_statx_path+0x2b/0x230
[  285.067995][ T4916]  vfs_statx+0x12e/0x200
[  285.068007][ T4916]  vfs_fstatat+0x11b/0x170
[  285.068018][ T4916]  __x64_sys_newfstatat+0x151/0x200
[  285.068031][ T4916]  do_syscall_64+0x174/0x580
[  285.068044][ T4916] page_owner free stack trace missing
[  285.068047][ T4916] 
[  285.068050][ T4916] Memory state around the buggy address:
[  285.068055][ T4916]  ffff88804040a700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  285.068062][ T4916]  ffff88804040a780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  285.068068][ T4916] >ffff88804040a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  285.068073][ T4916]                                      ^
[  285.068079][ T4916]  ffff88804040a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  285.068085][ T4916]  ffff88804040a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  285.068090][ T4916] ==================================================================
[  285.068138][ T4916] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  285.068150][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  285.068164][ T4916] Tainted: [L]=SOFTLOCKUP
[  285.068169][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  285.068176][ T4916] Workqueue: hci3 hci_rx_work
[  285.068191][ T4916] Call Trace:
[  285.068196][ T4916]  <TASK>
[  285.068200][ T4916]  vpanic+0x56c/0xa60
[  285.068214][ T4916]  ? __pfx_vpanic+0x10/0x10
[  285.068227][ T4916]  ? __pfx___schedule+0x10/0x10
[  285.068241][ T4916]  panic+0xc5/0xd0
[  285.068252][ T4916]  ? __pfx_panic+0x10/0x10
[  285.068265][ T4916]  ? preempt_schedule_common+0x82/0xd0
[  285.068283][ T4916]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[  285.068296][ T4916]  check_panic_on_warn+0x89/0xb0
[  285.068310][ T4916]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[  285.068322][ T4916]  end_report+0x73/0x170
[  285.068334][ T4916]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[  285.068346][ T4916]  kasan_report+0x128/0x150
[  285.068358][ T4916]  ? l2cap_sock_new_connection_cb+0x208/0x2f0
[  285.068372][ T4916]  l2cap_sock_new_connection_cb+0x208/0x2f0
[  285.068386][ T4916]  l2cap_connect_cfm+0x368/0x1560
[  285.068399][ T4916]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  285.068410][ T4916]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  285.068424][ T4916]  ? lockdep_hardirqs_on+0x7a/0x110
[  285.068437][ T4916]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  285.068451][ T4916]  ? mutex_lock_nested+0x152/0x1d0
[  285.068462][ T4916]  ? hci_connect_cfm+0x2c/0x140
[  285.068470][ T4916]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  285.068481][ T4916]  hci_connect_cfm+0x95/0x140
[  285.068491][ T4916]  le_conn_complete_evt+0x1134/0x16b0
[  285.068504][ T4916]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  285.068515][ T4916]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  285.068535][ T4916]  ? lockdep_hardirqs_on+0x7a/0x110
[  285.068549][ T4916]  ? skb_pull_data+0xfb/0x200
[  285.068560][ T4916]  hci_le_conn_complete_evt+0x187/0x470
[  285.068571][ T4916]  hci_event_packet+0x659/0xef0
[  285.068586][ T4916]  ? __pfx____migrate_enable+0x10/0x10
[  285.068597][ T4916]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  285.068612][ T4916]  ? __pfx_hci_event_packet+0x10/0x10
[  285.068625][ T4916]  ? preempt_schedule_common+0x82/0xd0
[  285.068638][ T4916]  ? preempt_schedule_thunk+0x16/0x30
[  285.068653][ T4916]  ? hci_send_to_monitor+0xe2/0x590
[  285.068664][ T4916]  hci_rx_work+0x3ee/0x1040
[  285.068678][ T4916]  ? process_scheduled_works+0xa70/0x1860
[  285.068689][ T4916]  process_scheduled_works+0xb5d/0x1860
[  285.068706][ T4916]  ? __pfx_process_scheduled_works+0x10/0x10
[  285.068717][ T4916]  ? assign_work+0x3d5/0x5e0
[  285.068727][ T4916]  worker_thread+0xa53/0xfc0
[  285.068743][ T4916]  kthread+0x388/0x470
[  285.068756][ T4916]  ? __pfx_worker_thread+0x10/0x10
[  285.068765][ T4916]  ? __pfx_kthread+0x10/0x10
[  285.068778][ T4916]  ret_from_fork+0x514/0xb70
[  285.068790][ T4916]  ? __pfx_ret_from_fork+0x10/0x10
[  285.068800][ T4916]  ? __switch_to+0xc79/0x1410
[  285.068815][ T4916]  ? __pfx_kthread+0x10/0x10
[  285.068827][ T4916]  ret_from_fork_asm+0x1a/0x30
[  285.068843][ T4916]  </TASK>
[  285.069483][ T4916] Kernel Offset: disabled