last executing test programs:

17.258084178s ago: executing program 2 (id=3458):
socket$netlink(0x10, 0x3, 0xf)
socket$inet6_sctp(0xa, 0x1, 0x84)
pipe(&(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$kcm(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x2b, 0x1, 0x1)
socket(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffe84, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000)

16.776867483s ago: executing program 2 (id=3459):
r0 = socket$packet(0x11, 0x3, 0x300)
sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000005c0)="a27a7300a4fd9f14594112d39574", 0xe}], 0x1, &(0x7f0000004340)=ANY=[@ANYBLOB="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"], 0x2470}, 0x4c000) (fail_nth: 2)

16.61422095s ago: executing program 2 (id=3461):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000040))
r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000600)={0x0, 0xb, 0x39, "8e649eaf61763492c145a547aebb62e7f35dae2c3873754d6173d4c235dc85c1f6f5ca66f5345d220f9208cdf93da504ccb0060a4d6fbbf166d306e2", 0x20, "e9abbdd69c98996b859c55b1cae6bb1416f5543654643382f672c4c13986c62019913d2c774f6a9b053fe85b093beb78087832ff633835f1ca907644"})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000003c0)=0x10)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140)={r4, 0xffe00000}, &(0x7f0000000280)=0x8)
r5 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001900000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060300000000000000000000000000140007800800114000f50000050015000c00000005000100060000000500050002000000050004000000000011000300686173683a69702c706f727400000000090002"], 0x60}}, 0x804)
syz_clone(0x20100, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000020605000000000000006d7874eae44cea1404000100000005000100070000000c0007800800134000000005090002ca634fed662a590ab7d0f5673baa15130073797a31000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x58}}, 0x4000)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3", 0x10)
r10 = accept4$alg(r9, 0x0, 0x0, 0x800)
sendmmsg(r10, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[{0x10, 0x117, 0x4}], 0x10}}], 0x2, 0x2000c011)
setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc)
setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4)

15.602723591s ago: executing program 2 (id=3464):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4)
sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="4d8e5ca74b", 0x5}], 0x1}, 0x0)
sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20000090)
recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000062)

15.445391089s ago: executing program 2 (id=3465):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
readv(r0, 0x0, 0x0)

12.463235832s ago: executing program 3 (id=3472):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c01", @ANYRES16=r1, @ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e0000000000000000001400020069703667726574617030000000000000300001800800", @ANYRES8, @ANYBLOB="080003000300000008000100", @ANYRES32=r0, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

12.07073719s ago: executing program 2 (id=3475):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000008c0)={0x34, &(0x7f00000006c0)={0x20, 0x8, 0x1, "a2"}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}])
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0)
r3 = dup(r2)
ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d06, &(0x7f00000001c0)={0x200, 0x8})
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

11.806228981s ago: executing program 3 (id=3477):
sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'netdevsim0\x00', <r3=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x37, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x9, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r3, 0x25, 0x4, @val=@tcx}, 0x1c)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000380)={0x50, 0x0, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x37}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x20008090)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800)

11.018850467s ago: executing program 3 (id=3480):
syz_emit_ethernet(0x67, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@mpls_uc={0x8847, {[{0x3, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0xffff8, 0x0, 0x1}, {0x0, 0x0, 0x1}], @generic="d00dca9f92821074193b228dc843426a01e19878ef6fe72f87394a20c770debba5eb248e999e4ae527551d7d0ee9b30bb3c1eda06a96710721d99d47ccbcc0ccbcdf93a4c7854d4dc1"}}}}, &(0x7f0000000500)={0x0, 0x2, [0x8a9, 0xd73, 0xe7c, 0xa5c]})
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000005c0), 0x4)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
socket$packet(0x11, 0x2, 0x300)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001500)=[{&(0x7f00000002c0)="02044a00ea0e6000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8223f0ffff74c43824cee84400007ffe18c99e70d67b732f9b5702de81f5227339737f498ace51634fff71a17f3f94d83cf5bd840e3b96ad4078c2", 0x5e}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c309", 0x46}, {&(0x7f0000000080)="088d85d21609000a3164ae439862807a158983661a6d2341", 0x18}, {&(0x7f0000002340)="b72abab9439ca41f5cf14d643508a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67a6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f83fd548e872bc197d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceeb2c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbf303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87beca6aae023c9571b8e389ff3f4c692b6fb1acc53da3ca629686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e33305000000000000004892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7254eba59bff3546bf21afc7445a4f1bc92c7b013f34962ff029e0f2926acf6c8a25fecea5b0b810656c981535492a2a4159dcfd0bf98085dc9612159fa0ad837a22eaffce80405367931ef3eacbf5a663175acc306eb075c52265d0c6dfaab30bb997fd7b71c2e0bf02b408c3b0b85f8ca7cec337655e1c2db77", 0xe9f}, {&(0x7f00000003c0)="453bef5f3c3fc987a36a9e92", 0xc}], 0x5}, 0x40040)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0xffff, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x5, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x7, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0x51, 0x8, 0x800, 0x6, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x805, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x0, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0xfffffffd, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x802, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x4000006, 0x0, 0x24a, 0x2, 0xfffffff7, 0xfffffffe, 0x3, 0xc000, 0x5, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x100007ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x4, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0xd, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x0, 0x7aae, 0x5, 0x2, 0x7fffdff7, 0x8000, 0x5, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x10, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x0, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0xb, 0xc3, 0x7, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x3, 0x0, 0x1, 0x9, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x9, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x404f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})
socket$key(0xf, 0x3, 0x2)
ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000800)={0x2, &(0x7f00000007c0)=[{0x7, 0xf8, &(0x7f0000000600)="771a0eb6b0a38ff6f4545dfa5e3927ff8301534521d70e50d97dbc23030db7c9be19e13ac3c5b61264e5ef332b7f7ff1ce8eaa2989e8dc4dba4b9a6e3a3a0ab6dd530ed15d14142625b589853661aa50e43d4a5402350ceb0f41019baf7755ae3aa206b23d683aa53f685919afe52c9ee98982b418bfd84df18b23461da41e3525c6acfac8e1753577b067283f5ecd679257450c3889c65f3aff6cefda50c3126a51774f998578be4f1e9b96c4c91fcaa169a869ef3824afc4b7426692f996ee5d859aeaebb2775d1f2c127b1d4f2c850a15fbbb0419b5fe877824347d182fe1165634163ba5dbf2c544e5b241a167cf28606fe4e2b11f59", 0x1, 0x1}, {0x180, 0x85, &(0x7f0000000700)="12a31de2c6b8d905d3360645caccd50eb35aae9e8066c574c507bf38fd01588e4b4769ca6c6842c92e52bf99c05a1c989372136339592dd9dc103c172300073de5e2c4913fcd0ff6e2c819af3fe758a4ccef342baf4538bf175c0895420a8cf00edb86369fb68374e73108b86d533c0f309f745305e2dcd352c3d2ee34d002e3624eb6ba34"}]})
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02000000b4fd2247136c6b0e9abbf26820bdc99e3426"], 0xf)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
syz_emit_ethernet(0xfef3, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200649078020000000100000004001000628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74882ed6741e7632daeaec0c95f2ad1cd68fb3d9fd3efe8e4ea8b5ec967448ddd6a3215990e1b896120966af96b22cf049f0"], 0x0)
wait4(r5, 0x0, 0x40000000, 0x0)
ioctl$FS_IOC_GETVERSION(r6, 0xc040ff0b, &(0x7f0000000200))

9.862022252s ago: executing program 0 (id=3484):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29", 0x92}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}], 0x2, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16=r1, @ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00000000000000000014000200697036677265746170300000000000003000018008000100", @ANYRES8, @ANYBLOB="080003000300000008000100", @ANYRES32=r0], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

9.344729325s ago: executing program 0 (id=3486):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c01", @ANYRES16=r1, @ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e0000000000000000001400020069703667726574617030000000000000300001800800", @ANYRES8, @ANYBLOB="080003000300000008000100", @ANYRES32=r0, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

8.731087715s ago: executing program 1 (id=3488):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000005324e06800009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10) (async, rerun: 32)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x40) (rerun: 32)

8.612760746s ago: executing program 0 (id=3490):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0)
pread64(r1, &(0x7f00000027c0)=""/4096, 0x1000, 0x10000)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4147, 0x1033}], 0x1, 0x8b3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})
syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x2361, 0x0, 0x2}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000))

8.612543455s ago: executing program 1 (id=3491):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000040)={@random="c3ad7f0ceb48", @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "bd840366895a00", "5ffcdefa1209238765e5aa44ad3f0cffbf8afee4fef22b92d8f5b29a3c12815f377ff57a10ead173ac9c060cc614b139", "3b8c59189dbe67c7cbaa01fcddb47747f776f9c7e94037bc6797e8ba", {"ebe6bbc0d809ed10ebfb59d68d027875", "b3d595a3cba60a67cea66407a8a585a9"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000003f80)=""/218, 0xda}], 0x1}, 0xfff}], 0x1, 0x2, 0x0) (fail_nth: 2)

7.898075417s ago: executing program 1 (id=3492):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c040007031a000900", 0x33a)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x6404481c)

7.500100614s ago: executing program 1 (id=3494):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x2, 0x0)
r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x0, 0x4, 0x0, 0x9, <r3=>0x0})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0)
fcntl$setown(r2, 0x8, r3)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$audio(0xffffff9c, 0x0, 0x48100, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000000)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xf, 0x80000006}, 0x0, 0x0)

6.070077364s ago: executing program 4 (id=3497):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380))
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0)

6.039041161s ago: executing program 1 (id=3498):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000000)={0x0, 0x1, 0x3})

5.966345336s ago: executing program 4 (id=3499):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c01", @ANYRES16=r1, @ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e0000000000000000001400020069703667726574617030000000000000300001800800", @ANYRES8, @ANYBLOB="080003000300000008000100", @ANYRES32=r0, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

5.867513822s ago: executing program 3 (id=3500):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}})
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040))
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
sendfile(r6, r5, &(0x7f0000000000)=0x9, 0x80000000000006)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r8, 0x431, 0x70bd28, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}}, 0x0)
preadv(r0, &(0x7f0000000040), 0x0, 0x91, 0x2)

3.094645168s ago: executing program 0 (id=3501):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x10}, @NL80211_ATTR_IE={0x1d, 0x2a, [@mesh_chsw={0x76, 0x6, {0x9, 0x7, 0x34, 0x101}}, @supported_rates={0x1, 0x7, [{0xc, 0x1}, {0x3}, {0x16}, {0x6}, {0x48, 0x1}, {0x9}, {0x5e, 0x1}]}, @challenge={0x10, 0x1, 0x74}, @channel_switch={0x25, 0x3, {0x1, 0xbc, 0xf9}}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x10000}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000080) (async)
r2 = timerfd_create(0x2, 0x80000) (async)
r3 = accept4$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev}, &(0x7f0000000280)=0x10, 0x800)
poll(&(0x7f00000002c0)=[{r2, 0x110}, {r0, 0x584}, {r3, 0x10}, {r0, 0x84db}, {r0, 0x2110}, {r0, 0x2000}, {r0, 0x402}, {}, {r0, 0x40e4}, {r0, 0x1046}], 0xa, 0x9) (async)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x28}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20008085)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000004c0)={0x0, <r5=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000500)={r5}) (async)
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0xc740, 0x0) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000580)={0xb8b5, <r7=>0x0, 0x1})
ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f00000005c0)={0x3ff, r7}) (async)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x14c, r8, 0x8, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x7e}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xa000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0xce1}, {0x8, 0x15, 0x67ddf3a7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0xd}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x8001}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008040) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@ipv4_getaddr={0x74, 0x16, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x78, 0x41, 0xc8, r9}, [@IFA_TARGET_NETNSID={0x8}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010102}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x3c5}, @IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LABEL={0x14, 0x3, 'wg1\x00'}, @IFA_FLAGS={0x8, 0x8, 0x81a}, @IFA_LOCAL={0x8, 0x2, @empty}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004880}, 0x40054) (async)
getpeername$packet(r0, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x14)
syz_open_dev$evdev(&(0x7f0000000b00), 0x10000, 0x2000) (async, rerun: 64)
r10 = socket$netlink(0x10, 0x3, 0xe) (rerun: 64)
socket$inet_udp(0x2, 0x2, 0x0) (async)
sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x6c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x22c0}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async, rerun: 32)
r11 = add_key(&(0x7f0000000d00)='rxrpc_s\x00', &(0x7f0000000d40)={'syz', 0x0}, &(0x7f0000000d80)="e84938af73294d49c5d7d954c03052f3336448add8de4b56606af4336c0c1993ab4f6444fd41b0c95eb2acff48a8c95cc935b9d007e043279bc54271e5596224f1ece77bd092f1823fcf2bff1588c1ab33b57b5f5cdec707f99c783dd6231187a69d0e0c49fe74f0541c130456ea46", 0x6f, 0xfffffffffffffffe) (rerun: 32)
add_key$keyring(&(0x7f0000000c80), &(0x7f0000000cc0)={'syz', 0x0}, 0x0, 0x0, r11) (async, rerun: 32)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async, rerun: 32)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000e80)={0x0, <r12=>0x0, <r13=>0x0}, &(0x7f0000000ec0)=0xc) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000f00)=<r14=>0x0) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, <r15=>0x0}, 0x800)
mount$binder(0x0, &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40), 0x1080404, &(0x7f0000001000)={[{@stats}, {@max={'max', 0x3d, 0x3}}, {@stats}, {@stats}, {}], [{@hash}, {@fowner_eq={'fowner', 0x3d, r12}}, {@euid_gt={'euid>', r14}}, {@uid_gt={'uid>', r15}}, {@obj_type={'obj_type', 0x3d, '/dev/dri/renderD128\x00'}}]}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001140)={{0x1, 0x1, 0x18, r6, {r15, r13}}, './file0\x00'})

3.048480585s ago: executing program 3 (id=3502):
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (rerun: 64)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64)
r3 = socket$rds(0x15, 0x5, 0x0) (rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/raw\x00')
pread64(r6, &(0x7f0000000500)=""/15, 0xf, 0x40000000007)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r7, &(0x7f0000000800)=ANY=[], 0x141) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async)
ioctl$KVM_TDX_INIT_MEM_REGION(r7, 0xc008aeba, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00001ad000/0x3000)=nil, 0x54000, 0x2}}) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', <r9=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0xc8, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x1, 0xb}, {0xd, 0x5}}, [@TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf8, 0x8, 0xf, 0x629, 0x1, 0x2, 0x3, 0x2}}, {0x8, 0x2, [0x3, 0x800]}}, {{0x1c, 0x1, {0x0, 0x4, 0x9, 0x9, 0x0, 0x3, 0xff, 0x1}}, {0x6, 0x2, [0x9a]}}, {{0x1c, 0x1, {0x6, 0x10, 0x7, 0x5, 0x3, 0x9, 0x8a, 0x5}}, {0xe, 0x2, [0x66a8, 0x1, 0xfb08, 0x40, 0x0]}}, {{0x1c, 0x1, {0x8, 0xbe, 0xff7f, 0xfffff1e7, 0x0, 0x0, 0x4, 0x5}}, {0xe, 0x2, [0x5, 0x80, 0x40, 0x81, 0x0]}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) (async)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) (async)
sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)

2.74969788s ago: executing program 4 (id=3503):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x4000)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x59c9, 0x81)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f00000000c0))
ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000002480)={0x0, &(0x7f0000002400)=[0xffffffffffffffff, &(0x7f0000000100)="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", &(0x7f0000001100)="0451d2bb371d71a487e39a99276e72e440fdad4911370e60d96dde62ac8f5e470fd5713e90bea63bec1fed86b177e99e32ba5caf068b937fdee0028ac304d7661ecd762e843be01c464c9df1eec4d832a96affc57db1", &(0x7f0000001180)="77a8fe8cdc57ee74624371a5790e14b11c4167b35227ff1fa2ae35a1771c3c3d405b898a5d34e111df5074", &(0x7f00000011c0)="d4b68a2b950c79261619bbed8bb7db", &(0x7f0000001200)="eb014eadaa2e324a38ae132ab47b57dfb8dc94ec2b40acdc2153ab7ce9379922352ac2d67cc81e4ea80660307e9c5f85f80ca0a4a3d3ec80de941a1bb48179647815a52311c3a0317f592b0e5ffc51dc45375b84e70aebf9930ec43dc039f06740ecb5b95efb0c9194aeff9dad8bdd91e09a2a32c3ad0f41393bf717d1851c9952ad9fcc2bfa6c4e4109d2efe1a1edaa5ad7ad830a7812b1d3ffafb2b06505cf26239a46d493bb7a9860de723e891bbdb58ff14d4144b80e6b899c1f40941dd94cf90fff8bae159b4a0e20bddc787cd87490d3e541bf5ac718f50f9f84c47c39c49095042a5baa6d9f97e18fbb0fb5eb3d3e701a", &(0x7f0000001300)="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", &(0x7f0000002300)="83da83aa86950f3325e6c2960ad1c80eb7d7829d967860f9f88d4c7692ec01c15607bbab9f3b857131a82b9ddd29bb703c50f6753cf266232843a78bfaf7074f2b87c6ff7c7b053902cb757120e1e82b6375ef62c814a15fdefccbf148b55a3a2fbe1a1f5b4bfd7c66c4f116ec3d846d15a6292a022197da8dd8ae27997f7d57d68ceef47c57463a7e8412e0a0efcb0544ad5186072d02c02cdbb19ddd39535b81c4ffa0c8ae25a0d750050d4b75cad502a8", &(0x7f00000023c0)="6d5219be00ac1bc84507406dac574e177321bdbd"], 0x8})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002600)={<r3=>0x0}, &(0x7f0000002640)=0xc)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000026c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x26f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002740)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000027c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002840)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002940)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f00000028c0), &(0x7f0000002900)='%+9llu \x00'}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000002980)={{0x1, 0x1, 0x18, <r9=>r1}, './file0\x00'})
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002ac0)={0x6, 0x10, &(0x7f00000024c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xdd48}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @generic={0x1, 0xf, 0x8, 0xb408, 0x1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb54}]}, &(0x7f0000002540)='GPL\x00', 0x7, 0x54, &(0x7f0000002580)=""/84, 0x61800, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002680)={0x0, 0x10, 0x7ff, 0x7f}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000029c0)=[r4, 0x1, r5, r6, r7, r8, 0xffffffffffffffff, r9], &(0x7f0000002a00)=[{0x5, 0x3, 0xb, 0x1}, {0x1, 0x4, 0x2, 0x4}, {0x3, 0x4, 0xb, 0xb}, {0x2, 0x1, 0x4, 0xa}, {0x4, 0x1, 0x2, 0x1}, {0x1, 0x5, 0x3, 0x9}, {0x1, 0x3, 0xa, 0x3}, {0x1, 0x3, 0x0, 0xc}, {0x4, 0x5, 0x6, 0x9}, {0x3, 0x4, 0x2}], 0x10, 0x4}, 0x94)
r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002b80), 0x2a2740, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003cc0)={r11, 0x0, 0x0, 0xa8, 0xfffffffffffffffe, &(0x7f0000002bc0)=""/168, 0x7, 0x0, 0x30, 0x1000, &(0x7f0000002c80)="529e3842975e5cf60b6b0a5cbe87d58f228c91d7387cf10a0c61c83c5e70da494ae10bb0c55952c4f09094411022079a", &(0x7f0000002cc0)="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", 0x0, 0x0, 0xaa}, 0x50)
read$ptp(r11, &(0x7f0000003d40)=""/4096, 0x1000)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000004e40)={r11, &(0x7f0000004d40)="030a58e90a18183aeb9236237ee82d83f90034088b401ced31f02022e11c3b3ddb5b2d5891e471df9d4c8484", &(0x7f0000004d80)=""/167}, 0x20)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000004e80), 0x2, 0x0)
sendmsg$802154_dgram(r11, &(0x7f0000004fc0)={&(0x7f0000004ec0)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14, &(0x7f0000004f80)={&(0x7f0000004f00)="252a1fc510066dbcf8a3b566ba12492636c234d8ebc5114ba1a5dfb43a2558ce241fd8e9714afb77e32e9f08879ae3faa6aaf7821a1fb73205387a92a23c151a22e7c2e0d724e126c1c3", 0x4a}, 0x1, 0x0, 0x0, 0x4004001}, 0x4800)
sendmsg$TIPC_CMD_GET_NODES(r11, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x4000000)
preadv(r4, &(0x7f0000005940)=[{&(0x7f0000005100)=""/156, 0x9c}, {&(0x7f00000051c0)=""/254, 0xfe}, {&(0x7f00000052c0)=""/217, 0xd9}, {&(0x7f00000053c0)=""/141, 0x8d}, {&(0x7f0000005480)=""/172, 0xac}, {&(0x7f0000005540)=""/252, 0xfc}, {&(0x7f0000005640)=""/225, 0xe1}, {&(0x7f0000005740)=""/253, 0xfd}, {&(0x7f0000005840)=""/216, 0xd8}], 0x9, 0x1ff, 0x1)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0xc0884113, &(0x7f0000005a00)={0x1, 0x8, 0xfdf, 0x9, 0x9, 0x2, 0x40, 0x3d, 0xfffffffffffffff7, 0x7, 0x81, 0x4})
unshare(0x400)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000006c80)={{r11, <r12=>0xffffffffffffffff}, &(0x7f0000006c00), &(0x7f0000006c40)=r10}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000006d80)={0x6, 0x1e, &(0x7f0000005ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @alu={0x4, 0x0, 0xa, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f0000005bc0)='syzkaller\x00', 0xd, 0x1000, &(0x7f0000005c00)=""/4096, 0x40f00, 0x0, '\x00', r3, 0x25, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000006cc0)=[r7, r6, r5, r7, r12, r9], &(0x7f0000006d00)=[{0x1, 0x1, 0x2, 0x5}, {0x0, 0x3, 0x5, 0x6}, {0x0, 0x3, 0x8}, {0x4, 0x2, 0x8, 0x2}, {0x3, 0x3, 0xd, 0xa}, {0x0, 0x5, 0x10, 0x8}], 0x10, 0x9}, 0x94)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r9, 0x40184152, &(0x7f0000006f40)={0x0, &(0x7f0000006f00)=[&(0x7f0000006e40)="5ec6d3b04016ec9bf600fa3371d493e4daef32a9b2", &(0x7f0000006e80)="935f56636ae99c49318b85107bd4fac16f50114c19825d5985ce91c58e632cd1332f760007d6925484874415d64f1fb5d6f69844245496e8c6a4124153770578f0b6c9101b93b7ea32eee8ed9dc73d96dca22b93954d0d8baa00be739e88d67b381a0500f6"], 0xb3e2})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000075c0)={0x14, &(0x7f0000007440)={0x20, 0xc, 0x101, {0x101, 0x3, "4668128ebc37cb306eff4a52b80faf713c3bb7276992c2ee90e92269076c98e6ff9b853dc8ac59a8e6aa03be54e70df19d45179c5aec8520ca8ccad598755ec60c633b2008b129b684cec01fdf2aab3980fc93668ad5a72dba7c922db87d357d65025acf62f247a1d874499ac2a2752071f75f2a8f8a68804410720da1b90b5f881e87653754b86c0a20fee3c1693523841522773bbba916f6204c38f99fd0ed399634c0d586fb570eb9d53ddbb44caba468e539828016a26d63d82840db8827b265aae6e6c90a27d1863b0fc5b4364933d4f7ef8ca8f92b553ca639def5aab18dc4aeae69df85780441c253019180ff54d0a60f574db3c40b6bf8bf746059"}}, &(0x7f0000007580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000007900)={0x44, &(0x7f0000007600)={0x20, 0x0, 0xff, "9d2a4b64e5426e1eaa0f0af81cc0e57a86f035ae755287b5f13fc30c8c3fdad8acfee4008bce11f08c8b9d154a9ddd5c571d3aaa11cb1c7d2a29a774c1b0da1700064199a47ea1cc7199858ee7c5ee44165a445f365a73401be7fd4af97d6fadc855cb7bde2b4e090aeee3f8a883f1d875d87be4e6f2d6148dc55f0db7160d70cf656840f1aba92515796713a035a408f07f85dec2708252937439ae891d3dc53a72ecccf158d3a33d5e1af5bc3d283954ec8f25c2a6f986a75017ea369fd2ca1df05e2d1be11717443dff0dd19cfb6299a8565dbda33d9a57938ba64795f1d158101595c5bf84e20bf3e660b3cbe810df4c66514bad87a67314220546ab3c"}, &(0x7f0000007740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000007780)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000077c0)={0x20, 0x80, 0x1c, {0x8, 0x401, 0x5, 0x8, 0x40, 0x7ff, 0x1, 0x9, 0x8000, 0xfdb2, 0xdd78, 0xd}}, &(0x7f0000007800)={0x20, 0x85, 0x4, 0x99e}, &(0x7f0000007840)={0x20, 0x83, 0x2}, &(0x7f0000007880)={0x20, 0x87, 0x2, 0x4}, &(0x7f00000078c0)={0x20, 0x89, 0x2, 0x1}})

2.307573694s ago: executing program 3 (id=3504):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0xd})
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000010026bd7000fcdbf62500000000", @ANYRES32=0x0, @ANYBLOB="621d020000000000140003007465616d3000000000000000"], 0x6c}}, 0x20084084)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000003c0)={0xb, 0x9, 0xffffffff}, 0xc)
r4 = socket$inet6(0xa, 0x80002, 0x0)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[], 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000100000000000000020000000e9ce0100b6a86693f3e8346611b7548a187091b75add36b43859079517e9cf706ccc8889a7ac2db42e9c5a3e39fac18b5296e2b09a2f6ed54440b0223f0fbdbd35c4d7b97465172eafe27acd9082966a2fe539df9a0abcf2b14b061b605cedb16110a0a19496f4d490f82e5f6d0af216dbf15010edb8e02b5fa59fa5a6996bfcc03e552719295363a26636000100000000000078a3768e520d3c95f06a12658bd017"], 0x2c, 0x1)
getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/254, 0x145)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
sendmmsg$inet6(r4, &(0x7f0000004400)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xc, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000280)="84ad638877b82d234e8cf1073c71161207604865624044ac6fbd263a9699de10de9114e6bc0efd6e126a9b958a97b09f6d98d1b2a72044c0eccc1ae3171fcad6d309bc05c68abc1643f49b26fcff5b9147b85c4846983ed594325a79ee07b1c2b6a849215c456a58ea728602c4080e112c0cfb6101b95316ccd16eb8a1dfc346e12b3ef155b7bb4f3d477b4cc529f2f104a7", 0x92}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000149615b42c1a2e00360000002f00000000000000"], 0x18}}], 0x1, 0x24044081)

1.96953196s ago: executing program 4 (id=3505):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29", 0x92}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}], 0x2, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16=r1, @ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00000000000000000014000200697036677265746170300000000000003000018008000100", @ANYRES8, @ANYBLOB="080003000300000008000100", @ANYRES32=r0], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.345917505s ago: executing program 1 (id=3506):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x84)
add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37, 0x10, &(0x7f0000000000)={0x1}, 0xfffffffffffffd00}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
recvmmsg(r1, &(0x7f0000000100), 0x3ffffe8, 0x2, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x3f6e4000)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}})

1.325692814s ago: executing program 4 (id=3507):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x2, 0x0)
r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x0, 0x4, 0x0, 0x9, <r3=>0x0})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0)
fcntl$setown(r2, 0x8, r3)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$audio(0xffffff9c, 0x0, 0x48100, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000000)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xf, 0x80000006}, 0x0, 0x0)

162.957651ms ago: executing program 0 (id=3508):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0)

52.026157ms ago: executing program 4 (id=3509):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408b", 0x8e}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}], 0x2, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16=r1, @ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00000000000000000014000200697036677265746170300000000000003000018008000100", @ANYRES8, @ANYBLOB="080003000300000008000100", @ANYRES32=r0, @ANYBLOB="14000200"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

0s ago: executing program 0 (id=3510):
syz_open_dev$usbmon(&(0x7f0000000100), 0x2, 0x802)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xd3)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r4 = memfd_create(&(0x7f0000000180)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17}\xdc\x8a\r8\x06D-\xf4nN8\x0f\xba\xc4\x19\x9f\xd9?!\xd3\x8b\xd2\xa4\x88\x9f\xfdH\x11\x19\xf4aX8!\x8c\xedn\x17NEwC\xc4\xe0\x8d\x97\"\xbfC3M\xa0\x93A\x18\x00\x00\x00\xfb\x00\x00\x00', 0x3)
ftruncate(r4, 0xffff)
r5 = socket$unix(0x1, 0x5, 0x0)
close(r5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x94)
ioctl$XFS_IOC_GETVERSION(r5, 0x80087601, 0x0)
fcntl$addseals(r4, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000000c0)={r4, 0x0, 0x2000, 0x1000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1)
syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]})
r8 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r8}, 0x57)
close_range(r7, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

2465'.
[  502.471098][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  502.471166][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  502.727056][   T37] kauditd_printk_skb: 20 callbacks suppressed
[  502.727075][   T37] audit: type=1326 audit(1778875220.360:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12439 comm="syz.2.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  502.728760][   T37] audit: type=1326 audit(1778875220.360:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12439 comm="syz.2.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  502.728814][   T37] audit: type=1326 audit(1778875220.360:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12439 comm="syz.2.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  502.728862][   T37] audit: type=1326 audit(1778875220.360:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12439 comm="syz.2.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  502.728909][   T37] audit: type=1326 audit(1778875220.360:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12439 comm="syz.2.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8e445fcbc2 code=0x7ffc0000
[  502.728957][   T37] audit: type=1326 audit(1778875220.360:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12439 comm="syz.2.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8e445fcc57 code=0x7ffc0000
[  502.729007][   T37] audit: type=1326 audit(1778875220.360:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12439 comm="syz.2.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8e445b9b51 code=0x7ffc0000
[  502.729062][   T37] audit: type=1326 audit(1778875220.360:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12439 comm="syz.2.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8e445fdc49 code=0x7ffc0000
[  502.729115][   T37] audit: type=1326 audit(1778875220.360:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12439 comm="syz.2.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  502.729162][   T37] audit: type=1326 audit(1778875220.360:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12439 comm="syz.2.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  503.255749][T12456] kAFS: No cell specified
[  503.298008][T12456] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2474'.
[  503.379977][T12462] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  504.907606][T12477] netlink: 'syz.3.2478': attribute type 27 has an invalid length.
[  504.907628][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2478'.
[  505.095573][T12481] netlink: 'syz.2.2480': attribute type 2 has an invalid length.
[  505.285411][T12491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2484'.
[  505.633888][   T60] Bluetooth: hci2: unexpected event for opcode 0x0803
[  506.992604][T12513] netlink: 'syz.3.2492': attribute type 27 has an invalid length.
[  506.992625][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2492'.
[  507.443782][T12525] trusted_key: encrypted_key: insufficient parameters specified
[  508.385524][T12529] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2499'.
[  508.536221][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2501'.
[  508.694551][T12541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2502'.
[  508.717832][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2503'.
[  508.718534][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2501'.
[  508.718989][T12539] team0: left promiscuous mode
[  508.719007][T12539] team_slave_0: left promiscuous mode
[  508.719161][T12539] team_slave_1: left promiscuous mode
[  508.719941][T12539] netdevsim netdevsim4 netdevsim1: left promiscuous mode
[  508.757033][T12539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2501'.
[  508.963395][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2501'.
[  509.073703][T12551] netlink: 'syz.3.2506': attribute type 27 has an invalid length.
[  509.073718][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2506'.
[  510.542521][T12568] netlink: 'syz.3.2512': attribute type 22 has an invalid length.
[  510.542543][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2512'.
[  510.542569][T12568] bond0: option ad_select: unable to set because the bond device is up
[  510.788447][ T5718] IPVS: starting estimator thread 0...
[  510.802735][T12582] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2517'.
[  510.870553][T12586] IPVS: using max 7 ests per chain, 16800 per kthread
[  511.737809][T12610] netlink: 'syz.4.2527': attribute type 22 has an invalid length.
[  511.737841][T12610] bond0: option ad_select: unable to set because the bond device is up
[  516.554928][T12677] netlink: 'syz.2.2550': attribute type 10 has an invalid length.
[  516.608514][T12677] macvlan1: entered promiscuous mode
[  516.608544][T12677] macvlan1: entered allmulticast mode
[  516.613069][T12677] veth1_vlan: entered allmulticast mode
[  516.616745][T12677] team0: Port device macvlan1 added
[  516.862227][T12688] netlink: 'syz.3.2554': attribute type 10 has an invalid length.
[  517.090914][T12696] __nla_validate_parse: 4 callbacks suppressed
[  517.090933][T12696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2555'.
[  517.450500][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2560'.
[  517.452014][T12705] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  518.969597][T12679] kexec: Could not allocate control_code_buffer
[  520.073352][T12742] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2571'.
[  520.545488][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'.
[  521.169228][T12733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  522.788255][T12733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  523.703841][T12767] netlink: 'syz.2.2581': attribute type 1 has an invalid length.
[  523.706089][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2581'.
[  524.313170][T12733] hsr0: left allmulticast mode
[  524.313203][T12733] hsr_slave_0: left allmulticast mode
[  524.313222][T12733] hsr_slave_1: left allmulticast mode
[  524.345861][ T6404] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.345930][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2581'.
[  524.351664][ T6404] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.351967][ T6404] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.352054][ T6404] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.611207][T12773] netlink: 'syz.1.2587': attribute type 29 has an invalid length.
[  524.611228][T12773] netlink: 'syz.1.2587': attribute type 19 has an invalid length.
[  525.696463][T12788] vcan0: tx drop: invalid da for name 0x0400000000000000
[  529.110854][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2596'.
[  529.266920][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2600'.
[  529.266944][T12824] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2600'.
[  529.415446][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2601'.
[  531.748064][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2614'.
[  531.849726][T12868] trusted_key: encrypted_key: insufficient parameters specified
[  532.868503][T12870] netlink: 'syz.0.2617': attribute type 21 has an invalid length.
[  532.868526][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2617'.
[  532.868553][T12870] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  533.004088][T12877] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2619'.
[  533.076292][   T60] Bluetooth: hci3: unexpected event for opcode 0x0c1c
[  533.585161][T12900] netlink: 'syz.1.2627': attribute type 1 has an invalid length.
[  533.607243][    C0] Unknown status report in ack skb
[  533.867994][T12910] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2632'.
[  534.802846][T12922] trusted_key: encrypted_key: insufficient parameters specified
[  535.876635][T12945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2644'.
[  537.398306][T12959] trusted_key: encrypted_key: insufficient parameters specified
[  537.820499][T12971] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2657'.
[  538.293065][T12977] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2657'.
[  540.613180][T12996] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2663'.
[  540.962317][T13000] trusted_key: encrypted_key: insufficient parameters specified
[  543.532042][   T37] kauditd_printk_skb: 122 callbacks suppressed
[  543.532056][   T37] audit: type=1326 audit(1778875261.160:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13019 comm="syz.2.2671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  543.532089][   T37] audit: type=1326 audit(1778875261.170:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13019 comm="syz.2.2671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  543.537370][   T37] audit: type=1326 audit(1778875261.170:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13019 comm="syz.2.2671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  543.537405][   T37] audit: type=1326 audit(1778875261.170:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13019 comm="syz.2.2671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  543.538270][   T37] audit: type=1326 audit(1778875261.170:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13019 comm="syz.2.2671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  543.538305][   T37] audit: type=1326 audit(1778875261.170:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13019 comm="syz.2.2671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  543.552622][   T37] audit: type=1326 audit(1778875261.190:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13019 comm="syz.2.2671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  543.552754][   T37] audit: type=1326 audit(1778875261.190:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13019 comm="syz.2.2671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  543.552885][   T37] audit: type=1326 audit(1778875261.190:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13019 comm="syz.2.2671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  543.564347][   T37] audit: type=1326 audit(1778875261.200:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13019 comm="syz.2.2671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8e445fce59 code=0x7ffc0000
[  544.134520][T13029] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.2673'.
[  544.523844][T13039] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2679'.
[  544.771423][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'.
[  545.525018][T13052] trusted_key: encrypted_key: insufficient parameters specified
[  546.644917][T13059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2687'.
[  546.666585][T13059] 8021q: adding VLAN 0 to HW filter on device bond0
[  546.691144][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2686'.
[  546.931897][T13068] fuse: Unknown parameter 'ÿÿ0x0000000000000004'
[  547.775088][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2694'.
[  547.820576][T13074] netlink: 'syz.1.2692': attribute type 10 has an invalid length.
[  547.912106][T13074] 8021q: adding VLAN 0 to HW filter on device team0
[  547.939532][T13079] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2695'.
[  547.954667][T13074] bond0: (slave team0): Enslaving as an active interface with an up link
[  548.093215][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2699'.
[  548.600200][T13102] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2707'.
[  548.773980][T13108] ipvlan1: entered promiscuous mode
[  548.774015][T13108] ipvlan1: entered allmulticast mode
[  548.774029][T13108] veth0_vlan: entered allmulticast mode
[  548.989599][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'.
[  549.316434][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2713'.
[  549.466415][T13127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2715'.
[  549.898636][T13146] bond0: mtu greater than device maximum
[  551.386395][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2729'.
[  551.577543][T13168] netlink: 'syz.3.2733': attribute type 11 has an invalid length.
[  551.648170][   T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  551.648213][   T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  551.648239][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  551.648255][   T60] Workqueue: hci3 hci_rx_work
[  551.648308][   T60] Call Trace:
[  551.648318][   T60]  <TASK>
[  551.648327][   T60]  dump_stack_lvl+0xe8/0x150
[  551.648359][   T60]  sysfs_create_dir_ns+0x271/0x2a0
[  551.648398][   T60]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  551.648426][   T60]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  551.648487][   T60]  ? rt_spin_unlock+0x160/0x200
[  551.648515][   T60]  kobject_add_internal+0x631/0xd10
[  551.648562][   T60]  kobject_add+0x163/0x240
[  551.648613][   T60]  ? __pfx_kobject_add+0x10/0x10
[  551.648658][   T60]  ? get_device_parent+0x370/0x3a0
[  551.648691][   T60]  device_add+0x408/0xbb0
[  551.648724][   T60]  hci_conn_add_sysfs+0xd5/0x210
[  551.648757][   T60]  le_conn_complete_evt+0x10e6/0x16b0
[  551.648806][   T60]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  551.648844][   T60]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  551.648876][   T60]  ? lockdep_hardirqs_on+0x7a/0x110
[  551.648911][   T60]  ? skb_pull_data+0xfb/0x200
[  551.648953][   T60]  hci_le_conn_complete_evt+0x187/0x470
[  551.648998][   T60]  hci_event_packet+0x659/0xef0
[  551.649036][   T60]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  551.649059][   T60]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  551.649093][   T60]  ? __pfx_hci_event_packet+0x10/0x10
[  551.649122][   T60]  ? rt_spin_unlock+0x14f/0x200
[  551.649158][   T60]  ? hci_send_to_monitor+0xe2/0x590
[  551.649185][   T60]  hci_rx_work+0x3ee/0x1040
[  551.649230][   T60]  ? process_scheduled_works+0xa70/0x1860
[  551.649260][   T60]  process_scheduled_works+0xb5d/0x1860
[  551.649324][   T60]  ? __pfx_process_scheduled_works+0x10/0x10
[  551.649359][   T60]  ? assign_work+0x3d5/0x5e0
[  551.649392][   T60]  worker_thread+0xa53/0xfc0
[  551.649452][   T60]  kthread+0x388/0x470
[  551.649487][   T60]  ? __pfx_worker_thread+0x10/0x10
[  551.649511][   T60]  ? __pfx_kthread+0x10/0x10
[  551.649546][   T60]  ret_from_fork+0x514/0xb70
[  551.649578][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[  551.649612][   T60]  ? __switch_to+0xc79/0x1410
[  551.649654][   T60]  ? __pfx_kthread+0x10/0x10
[  551.649702][   T60]  ret_from_fork_asm+0x1a/0x30
[  551.649752][   T60]  </TASK>
[  551.649886][   T60] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  551.649935][   T60] Bluetooth: hci3: failed to register connection device
[  552.542797][T13188] trusted_key: encrypted_key: insufficient parameters specified
[  554.947423][T13201] netlink: 'syz.2.2740': attribute type 18 has an invalid length.
[  555.263453][T13213] veth0_to_bridge: entered promiscuous mode
[  555.264078][T13213] macvtap1: entered allmulticast mode
[  555.264098][T13213] veth0_to_bridge: entered allmulticast mode
[  555.341479][T13213] veth0_to_bridge: left allmulticast mode
[  555.341595][T13213] veth0_to_bridge: left promiscuous mode
[  555.375157][T13220] netlink: 'syz.3.2748': attribute type 11 has an invalid length.
[  559.521809][T13255] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2760'.
[  559.521970][T13255] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  559.525312][T13255] netlink: 'syz.4.2760': attribute type 2 has an invalid length.
[  563.060423][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  563.060498][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  567.739934][T13340] kAFS: unable to lookup cell 'syz1'
[  567.863730][   T37] kauditd_printk_skb: 623 callbacks suppressed
[  567.863746][   T37] audit: type=1326 audit(1778875285.490:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13349 comm="syz.4.2794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08564ce59 code=0x7ffc0000
[  567.877073][   T37] audit: type=1326 audit(1778875285.510:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13349 comm="syz.4.2794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08564ce59 code=0x7ffc0000
[  567.911220][   T37] audit: type=1326 audit(1778875285.540:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13349 comm="syz.4.2794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08564ce59 code=0x7ffc0000
[  567.923230][   T37] audit: type=1326 audit(1778875285.550:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13349 comm="syz.4.2794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe08564ce59 code=0x7ffc0000
[  567.923397][   T37] audit: type=1326 audit(1778875285.550:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13349 comm="syz.4.2794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08564ce59 code=0x7ffc0000
[  567.923522][   T37] audit: type=1326 audit(1778875285.550:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13349 comm="syz.4.2794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08564ce59 code=0x7ffc0000
[  567.931536][   T37] audit: type=1326 audit(1778875285.560:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13349 comm="syz.4.2794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08564ce59 code=0x7ffc0000
[  567.931603][   T37] audit: type=1326 audit(1778875285.570:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13349 comm="syz.4.2794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe08564ce59 code=0x7ffc0000
[  567.931653][   T37] audit: type=1326 audit(1778875285.570:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13349 comm="syz.4.2794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe08564ce59 code=0x7ffc0000
[  568.211498][T13357] netlink: 'syz.4.2797': attribute type 1 has an invalid length.
[  568.211516][T13357] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2797'.
[  568.211537][T13357] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2797'.
[  568.258847][T13359] netlink: 'syz.3.2796': attribute type 11 has an invalid length.
[  569.973872][T13376] netlink: 'syz.2.2801': attribute type 15 has an invalid length.
[  570.107903][T13376] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  570.265078][T13385] netlink: 'syz.1.2805': attribute type 11 has an invalid length.
[  570.475247][T13391] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2807'.
[  570.707322][T13397] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  572.468280][T13412] netlink: 'syz.4.2816': attribute type 15 has an invalid length.
[  572.589868][T13418] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2820'.
[  572.589898][T13418] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  572.635378][T13416] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  572.876431][T13429] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  573.307838][T13448] bond0: option arp_interval: invalid value (18446744073709551615)
[  573.307866][T13448] bond0: option arp_interval: allowed values 0 - 2147483647
[  574.748508][T13462] bridge0: port 3(netdevsim0) entered blocking state
[  574.749326][T13462] bridge0: port 3(netdevsim0) entered disabled state
[  574.763260][T13462] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  574.832155][T13462] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  576.157715][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2842'.
[  578.229255][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2855'.
[  578.465943][T13526] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  580.262558][T13551] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2868'.
[  580.595898][T13568] trusted_key: encrypted_key: insufficient parameters specified
[  582.675450][T13597] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2885'.
[  583.978726][T13609] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2890'.
[  585.223601][T13177] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  585.311308][T13177] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  585.314037][T13177] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  585.360669][T13177] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  585.368203][T13177] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  585.689839][T13658] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[  585.855416][T13666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2914'.
[  586.867453][T13177] Bluetooth: hci0: unexpected event for opcode 0x2041
[  587.395780][T13689] 9p: Bad value for 'rfdno'
[  587.460456][T13177] Bluetooth: hci5: command tx timeout
[  587.748488][T13643] hsr0 speed is unknown, defaulting to 1000
[  588.047595][T13710] netlink: 'syz.3.2927': attribute type 25 has an invalid length.
[  588.384626][T13715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2929'.
[  589.608772][T13177] Bluetooth: hci5: command tx timeout
[  590.113183][T12961] syz_tun (unregistering): left allmulticast mode
[  590.426025][T13743] netlink: 'syz.1.2937': attribute type 21 has an invalid length.
[  590.426158][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'.
[  590.469221][T13743] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  591.620435][T13177] Bluetooth: hci5: command tx timeout
[  591.840024][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.849716][T13643] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.849949][T13643] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.850200][T13643] bridge_slave_0: entered allmulticast mode
[  592.868464][T13643] bridge_slave_0: entered promiscuous mode
[  592.948243][T13643] bridge0: port 2(bridge_slave_1) entered blocking state
[  592.948349][T13643] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.948554][T13643] bridge_slave_1: entered allmulticast mode
[  592.988067][T13643] bridge_slave_1: entered promiscuous mode
[  593.825531][T13177] Bluetooth: hci5: command tx timeout
[  594.343130][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.419172][T13643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  594.424830][T13643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  596.259437][T13643] team0: Port device team_slave_0 added
[  596.278500][T13643] team0: Port device team_slave_1 added
[  597.228934][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.331712][T13643] batman_adv: batadv0: Adding interface: batadv_slave_0
[  597.331726][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  597.331749][T13643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  597.334423][T13643] batman_adv: batadv0: Adding interface: batadv_slave_1
[  597.334439][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  597.334468][T13643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  597.507385][T13643] hsr_slave_0: entered promiscuous mode
[  597.508858][T13643] hsr_slave_1: entered promiscuous mode
[  597.509912][T13643] debugfs: 'hsr0' already exists in 'hsr'
[  597.509944][T13643] Cannot create hsr debugfs directory
[  599.211740][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.663111][   T13] bridge_slave_1: left allmulticast mode
[  603.663250][   T13] bridge_slave_1: left promiscuous mode
[  603.704563][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.914837][   T13] bridge_slave_0: left allmulticast mode
[  603.914995][   T13] bridge_slave_0: left promiscuous mode
[  603.915267][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  605.912555][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  606.003441][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  606.045326][   T13] bond0 (unregistering): Released all slaves
[  606.071630][   T13] bond1 (unregistering): Released all slaves
[  606.155421][   T13] bond2 (unregistering): Released all slaves
[  607.177821][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1
[  608.242894][T13944] wg1: entered promiscuous mode
[  608.242924][T13944] wg1: entered allmulticast mode
[  608.249786][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3001'.
[  608.335116][T13944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2999'.
[  608.335141][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2999'.
[  608.540770][T13954] 8021q: adding VLAN 0 to HW filter on device bond0
[  608.608914][T13957] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3002'.
[  608.657702][T13962] 9p: Bad value for 'rfdno'
[  610.929510][T13988] trusted_key: encrypted_key: insufficient parameters specified
[  611.005898][T13991] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3014'.
[  611.540763][T13991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  614.213576][T14041] trusted_key: encrypted_key: insufficient parameters specified
[  617.805413][T14073] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3032'.
[  617.860389][T14075] trusted_key: encrypted_key: insufficient parameters specified
[  618.691126][T14099] netlink: 'syz.4.3041': attribute type 11 has an invalid length.
[  618.878566][T14109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3044'.
[  619.846612][   T13] hsr_slave_0: left promiscuous mode
[  619.889597][   T13] hsr_slave_1: left promiscuous mode
[  619.898680][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  619.898778][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  619.993199][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  619.993229][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  620.601256][   T13] veth1_macvtap: left promiscuous mode
[  620.603407][   T13] veth0_macvtap: left promiscuous mode
[  620.603735][   T13] veth1_vlan: left promiscuous mode
[  620.604114][   T13] veth0_vlan: left promiscuous mode
[  622.011771][ T6404] smbdirect: ib_dev[syz2] removed
[  622.674278][ T5714] hsr0 speed is unknown, defaulting to 1000
[  622.674327][ T5714] infiniband syz2: ib_query_port failed (-19)
[  622.722130][T14161] trusted_key: encrypted_key: insufficient parameters specified
[  622.724731][T13643] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  622.781211][T13643] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  622.783204][T13643] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  622.858431][T13643] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  623.009452][T13643] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  623.048267][T13643] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  623.049490][T13643] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  623.109643][T14170] 9pnet_fd: p9_fd_create_unix (14170): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  623.276005][T13643] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  623.789154][T13643] 8021q: adding VLAN 0 to HW filter on device bond0
[  623.833034][T13643] 8021q: adding VLAN 0 to HW filter on device team0
[  623.862263][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.862462][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state
[  623.867529][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[  623.867662][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  624.424274][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  624.424348][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  624.897263][T14203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3060'.
[  624.939879][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3060'.
[  625.258539][   T13] IPVS: stop unused estimator thread 0...
[  625.715693][T14236] batadv_slave_1: entered promiscuous mode
[  625.743659][T14234] batadv_slave_1: left promiscuous mode
[  626.171386][T13643] 8021q: adding VLAN 0 to HW filter on device batadv0
[  626.827804][T14250] could not allocate digest TFM handle sha256-asm
[  627.890865][T13643] veth0_vlan: entered promiscuous mode
[  627.918758][T13643] veth1_vlan: entered promiscuous mode
[  627.983523][T13643] veth0_macvtap: entered promiscuous mode
[  627.989756][T13643] veth1_macvtap: entered promiscuous mode
[  628.025529][T13643] batman_adv: batadv0: Interface activated: batadv_slave_0
[  628.056359][T13643] batman_adv: batadv0: Interface activated: batadv_slave_1
[  628.087166][ T1030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  628.087438][ T1030] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  628.087477][ T1030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  628.087513][ T1030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  629.396372][ T3354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  629.396396][ T3354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  629.477223][T14278] netlink: 'syz.1.3082': attribute type 14 has an invalid length.
[  629.674440][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  629.674461][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  629.925546][ T6404] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  630.022464][ T6404] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  630.024541][ T6404] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  630.025853][ T6404] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  630.365234][   T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  630.389389][   T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  630.403358][   T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  630.406518][   T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  630.407567][   T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  630.836868][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'.
[  631.697059][T14320] netlink: 'syz.1.3094': attribute type 14 has an invalid length.
[  631.967529][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3098'.
[  632.231322][T14339] syz.1.3102 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  632.580526][   T60] Bluetooth: hci1: command tx timeout
[  632.630198][T14349] netlink: 'syz.0.3106': attribute type 14 has an invalid length.
[  633.872685][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3113'.
[  633.872707][T14370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3113'.
[  634.057344][T14380] netlink: 'syz.0.3117': attribute type 13 has an invalid length.
[  634.167524][T14301] bridge0: port 1(bridge_slave_0) entered blocking state
[  634.167767][T14301] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.167952][T14301] bridge_slave_0: entered allmulticast mode
[  634.192899][T14301] bridge_slave_0: entered promiscuous mode
[  634.212973][T14301] bridge0: port 2(bridge_slave_1) entered blocking state
[  634.213100][T14301] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.213321][T14301] bridge_slave_1: entered allmulticast mode
[  634.218071][T14301] bridge_slave_1: entered promiscuous mode
[  634.299709][T14301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  634.315371][T14301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  634.406790][T14387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3119'.
[  634.478970][T14387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3119'.
[  634.668195][   T60] Bluetooth: hci1: command tx timeout
[  634.804341][T14301] team0: Port device team_slave_0 added
[  634.895646][T14301] team0: Port device team_slave_1 added
[  634.919071][T14401] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3124'.
[  634.919099][T14401] IPv6: NLM_F_CREATE should be specified when creating new route
[  634.919880][T14401] IPv6: Can't replace route, no match found
[  634.973313][T14301] batman_adv: batadv0: Adding interface: batadv_slave_0
[  634.973331][T14301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.973361][T14301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.978030][T14301] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.978045][T14301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.978073][T14301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  635.139167][T14301] hsr_slave_0: entered promiscuous mode
[  635.146514][T14301] hsr_slave_1: entered promiscuous mode
[  635.147525][T14301] debugfs: 'hsr0' already exists in 'hsr'
[  635.147551][T14301] Cannot create hsr debugfs directory
[  635.244740][ T5714] IPVS: starting estimator thread 0...
[  635.371900][T14412] netlink: 'syz.2.3129': attribute type 13 has an invalid length.
[  635.391679][T14408] IPVS: using max 8 ests per chain, 19200 per kthread
[  635.687671][T14425] FAULT_INJECTION: forcing a failure.
[  635.687671][T14425] name failslab, interval 1, probability 0, space 0, times 1
[  635.687705][T14425] CPU: 0 UID: 0 PID: 14425 Comm: syz.0.3132 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  635.687728][T14425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  635.687741][T14425] Call Trace:
[  635.687750][T14425]  <TASK>
[  635.687759][T14425]  dump_stack_lvl+0xe8/0x150
[  635.687801][T14425]  should_fail_ex+0x46b/0x600
[  635.687842][T14425]  should_failslab+0xa8/0x100
[  635.687868][T14425]  kmem_cache_alloc_noprof+0x87/0x680
[  635.687891][T14425]  ? dst_alloc+0x105/0x170
[  635.687921][T14425]  ? __pfx_ip6_dst_gc+0x10/0x10
[  635.687947][T14425]  dst_alloc+0x105/0x170
[  635.687980][T14425]  ip6_pol_route+0xafb/0x13d0
[  635.688005][T14425]  ? ip6_pol_route+0x160/0x13d0
[  635.688034][T14425]  ? __pfx_ip6_pol_route+0x10/0x10
[  635.688059][T14425]  ? __lock_acquire+0x6b5/0x2cf0
[  635.688104][T14425]  fib6_rule_lookup+0x36b/0x730
[  635.688129][T14425]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  635.688155][T14425]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  635.688182][T14425]  ? ip6_route_output_flags+0x2e/0x5d0
[  635.688210][T14425]  ? ip6_route_output_flags+0x2e/0x5d0
[  635.688242][T14425]  ? dev_get_by_index_rcu+0xf4/0x110
[  635.688280][T14425]  ip6_route_output_flags+0x364/0x5d0
[  635.688306][T14425]  ? ip6_route_output_flags+0x2e/0x5d0
[  635.688336][T14425]  ip6_dst_lookup_tail+0x1c3/0x15a0
[  635.688370][T14425]  ? __lock_acquire+0x6b5/0x2cf0
[  635.688407][T14425]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  635.688444][T14425]  ? __lock_acquire+0x6b5/0x2cf0
[  635.688482][T14425]  ip6_dst_lookup_flow+0x89/0x150
[  635.688516][T14425]  tcp_v6_connect+0xcec/0x1b10
[  635.688536][T14425]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  635.688582][T14425]  ? __pfx_tcp_v6_connect+0x10/0x10
[  635.688613][T14425]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  635.688645][T14425]  mptcp_connect+0x56b/0x830
[  635.688676][T14425]  __inet_stream_connect+0x25a/0xdd0
[  635.688717][T14425]  ? __pfx___inet_stream_connect+0x10/0x10
[  635.688742][T14425]  ? __local_bh_enable+0x1e1/0x2f0
[  635.688789][T14425]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  635.688812][T14425]  ? lockdep_hardirqs_on+0x7a/0x110
[  635.688846][T14425]  inet_stream_connect+0x66/0xa0
[  635.688879][T14425]  __sys_connect+0x315/0x450
[  635.688908][T14425]  ? __pfx___sys_connect+0x10/0x10
[  635.688955][T14425]  ? rcu_is_watching+0x15/0xb0
[  635.688995][T14425]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.689019][T14425]  __x64_sys_connect+0x7a/0x90
[  635.689046][T14425]  do_syscall_64+0x15f/0xf80
[  635.689073][T14425]  ? trace_irq_disable+0x3b/0x140
[  635.689117][T14425]  ? clear_bhb_loop+0x40/0x90
[  635.689147][T14425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.689178][T14425] RIP: 0033:0x7f1e3efbce59
[  635.689203][T14425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  635.689223][T14425] RSP: 002b:00007f1e3d1f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  635.689246][T14425] RAX: ffffffffffffffda RBX: 00007f1e3f236090 RCX: 00007f1e3efbce59
[  635.689262][T14425] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003
[  635.689276][T14425] RBP: 00007f1e3d1f5090 R08: 0000000000000000 R09: 0000000000000000
[  635.689290][T14425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  635.689303][T14425] R13: 00007f1e3f236128 R14: 00007f1e3f236090 R15: 00007ffe8752d588
[  635.689366][T14425]  </TASK>
[  635.867849][T14427] netlink: 'syz.3.3135': attribute type 11 has an invalid length.
[  636.348799][T14301] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  636.348828][T14301] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.533084][T14438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3138'.
[  636.537848][T14439] FAULT_INJECTION: forcing a failure.
[  636.537848][T14439] name failslab, interval 1, probability 0, space 0, times 0
[  636.537890][T14439] CPU: 0 UID: 0 PID: 14439 Comm: syz.0.3137 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  636.537913][T14439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  636.537925][T14439] Call Trace:
[  636.537932][T14439]  <TASK>
[  636.537941][T14439]  dump_stack_lvl+0xe8/0x150
[  636.537969][T14439]  should_fail_ex+0x46b/0x600
[  636.538007][T14439]  should_failslab+0xa8/0x100
[  636.538033][T14439]  __kmalloc_noprof+0xdf/0x7b0
[  636.538056][T14439]  ? tomoyo_encode+0x28b/0x550
[  636.538092][T14439]  tomoyo_encode+0x28b/0x550
[  636.538129][T14439]  tomoyo_realpath_from_path+0x58d/0x5d0
[  636.538170][T14439]  ? tomoyo_path_number_perm+0x219/0x630
[  636.538197][T14439]  tomoyo_path_number_perm+0x246/0x630
[  636.538226][T14439]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  636.538257][T14439]  ? sb_end_write+0xe9/0x1c0
[  636.538286][T14439]  ? vfs_write+0x9ce/0xba0
[  636.538364][T14439]  ? ksys_write+0x202/0x270
[  636.538396][T14439]  security_file_ioctl+0xc3/0x2a0
[  636.538428][T14439]  __se_sys_ioctl+0x47/0x170
[  636.538455][T14439]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.538478][T14439]  do_syscall_64+0x15f/0xf80
[  636.538505][T14439]  ? trace_irq_disable+0x3b/0x140
[  636.538530][T14439]  ? clear_bhb_loop+0x40/0x90
[  636.538557][T14439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.538578][T14439] RIP: 0033:0x7f1e3efbce59
[  636.538597][T14439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.538615][T14439] RSP: 002b:00007f1e3d1f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  636.538637][T14439] RAX: ffffffffffffffda RBX: 00007f1e3f236090 RCX: 00007f1e3efbce59
[  636.538653][T14439] RDX: 0000200000000780 RSI: 00000000c4c85512 RDI: 0000000000000006
[  636.538667][T14439] RBP: 00007f1e3d1f5090 R08: 0000000000000000 R09: 0000000000000000
[  636.538679][T14439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  636.538692][T14439] R13: 00007f1e3f236128 R14: 00007f1e3f236090 R15: 00007ffe8752d588
[  636.538725][T14439]  </TASK>
[  636.538759][T14439] ERROR: Out of memory at tomoyo_realpath_from_path.
[  636.741116][   T60] Bluetooth: hci1: command tx timeout
[  637.016358][T14301] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  637.016408][T14301] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.315515][T14450] netlink: 'syz.2.3142': attribute type 13 has an invalid length.
[  637.449993][T14454] FAULT_INJECTION: forcing a failure.
[  637.449993][T14454] name failslab, interval 1, probability 0, space 0, times 0
[  637.450028][T14454] CPU: 1 UID: 0 PID: 14454 Comm: syz.0.3144 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  637.450054][T14454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  637.450069][T14454] Call Trace:
[  637.450084][T14454]  <TASK>
[  637.450091][T14454]  dump_stack_lvl+0xe8/0x150
[  637.450115][T14454]  should_fail_ex+0x46b/0x600
[  637.450158][T14454]  should_failslab+0xa8/0x100
[  637.450179][T14454]  __kmalloc_noprof+0xdf/0x7b0
[  637.450203][T14454]  ? do_handle_open+0x4f2/0x970
[  637.450255][T14454]  do_handle_open+0x4f2/0x970
[  637.450307][T14454]  ? __pfx_do_handle_open+0x10/0x10
[  637.450340][T14454]  ? ksys_write+0x248/0x270
[  637.450369][T14454]  ? __pfx_ksys_write+0x10/0x10
[  637.450403][T14454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.450428][T14454]  do_syscall_64+0x15f/0xf80
[  637.450456][T14454]  ? trace_irq_disable+0x3b/0x140
[  637.450482][T14454]  ? clear_bhb_loop+0x40/0x90
[  637.450511][T14454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.450534][T14454] RIP: 0033:0x7f1e3efbce59
[  637.450555][T14454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  637.450575][T14454] RSP: 002b:00007f1e3d216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  637.450599][T14454] RAX: ffffffffffffffda RBX: 00007f1e3f235fa0 RCX: 00007f1e3efbce59
[  637.450615][T14454] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003
[  637.450630][T14454] RBP: 00007f1e3d216090 R08: 0000000000000000 R09: 0000000000000000
[  637.450644][T14454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  637.450658][T14454] R13: 00007f1e3f236038 R14: 00007f1e3f235fa0 R15: 00007ffe8752d588
[  637.450695][T14454]  </TASK>
[  637.673256][T14301] team0: Port device netdevsim1 removed
[  637.726534][T14301] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  637.726574][T14301] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.208679][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3150'.
[  638.371804][T14301] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  638.371831][T14301] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.445125][T14468] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.822800][   T60] Bluetooth: hci1: command tx timeout
[  639.248884][T14301] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  639.370178][T14301] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  639.376297][T14301] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  639.479537][T14301] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  639.506254][T14301] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  639.665213][T14301] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  639.863419][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  639.905991][T14301] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  639.959108][T14301] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  640.205660][T14301] 8021q: adding VLAN 0 to HW filter on device bond0
[  640.324365][T14301] 8021q: adding VLAN 0 to HW filter on device team0
[  640.351564][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state
[  640.351734][ T6404] bridge0: port 1(bridge_slave_0) entered forwarding state
[  640.411955][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  640.412078][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  640.921980][T14528] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3169'.
[  643.053958][T14301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  643.521742][T14576] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3180'.
[  643.601984][T14579] netlink: 'syz.2.3182': attribute type 11 has an invalid length.
[  644.308605][T14301] veth0_vlan: entered promiscuous mode
[  644.353761][T14301] veth1_vlan: entered promiscuous mode
[  644.402887][T14301] veth0_macvtap: entered promiscuous mode
[  644.422726][T14301] veth1_macvtap: entered promiscuous mode
[  644.467219][T14301] batman_adv: batadv0: Interface activated: batadv_slave_0
[  644.564422][T14301] batman_adv: batadv0: Interface activated: batadv_slave_1
[  644.622898][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  644.624237][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  644.626323][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  644.706986][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  644.891735][T14603] netlink: 'syz.1.3189': attribute type 13 has an invalid length.
[  646.817389][T14616] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3193'.
[  646.947946][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  646.947968][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  647.401360][T14620] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3195'.
[  647.401625][T14620] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3195'.
[  647.440362][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  647.440383][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  648.096858][T14631] netlink: 'syz.0.3199': attribute type 14 has an invalid length.
[  648.479090][T14641] FAULT_INJECTION: forcing a failure.
[  648.479090][T14641] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  648.479123][T14641] CPU: 1 UID: 0 PID: 14641 Comm: syz.0.3202 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  648.479143][T14641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  648.479153][T14641] Call Trace:
[  648.479160][T14641]  <TASK>
[  648.479167][T14641]  dump_stack_lvl+0xe8/0x150
[  648.479191][T14641]  should_fail_ex+0x46b/0x600
[  648.479223][T14641]  _copy_from_user+0x2d/0xb0
[  648.479243][T14641]  __copy_msghdr+0x3c5/0x5b0
[  648.479269][T14641]  ___sys_sendmsg+0x213/0x360
[  648.479290][T14641]  ? __lock_acquire+0x6b5/0x2cf0
[  648.479317][T14641]  ? __pfx____sys_sendmsg+0x10/0x10
[  648.479369][T14641]  ? __fget_files+0x2a/0x420
[  648.479384][T14641]  ? __fget_files+0x3a6/0x420
[  648.479407][T14641]  __sys_sendmmsg+0x282/0x4e0
[  648.479440][T14641]  ? __pfx___sys_sendmmsg+0x10/0x10
[  648.479486][T14641]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.479513][T14641]  __x64_sys_sendmmsg+0xa0/0xc0
[  648.479537][T14641]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.479554][T14641]  do_syscall_64+0x15f/0xf80
[  648.479575][T14641]  ? trace_irq_disable+0x3b/0x140
[  648.479595][T14641]  ? clear_bhb_loop+0x40/0x90
[  648.479615][T14641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.479632][T14641] RIP: 0033:0x7f1e3efbce59
[  648.479647][T14641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  648.479661][T14641] RSP: 002b:00007f1e3d216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  648.479679][T14641] RAX: ffffffffffffffda RBX: 00007f1e3f235fa0 RCX: 00007f1e3efbce59
[  648.479693][T14641] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003
[  648.479703][T14641] RBP: 00007f1e3d216090 R08: 0000000000000000 R09: 0000000000000000
[  648.479713][T14641] R10: 0000000024080058 R11: 0000000000000246 R12: 0000000000000001
[  648.479723][T14641] R13: 00007f1e3f236038 R14: 00007f1e3f235fa0 R15: 00007ffe8752d588
[  648.479749][T14641]  </TASK>
[  648.868104][T13177] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  648.922703][T13177] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  648.944738][T13177] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  648.977437][T13177] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  649.036316][T13177] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  649.289854][T14654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3208'.
[  649.719462][T14665] netlink: 'syz.0.3211': attribute type 14 has an invalid length.
[  650.399273][T14678] FAULT_INJECTION: forcing a failure.
[  650.399273][T14678] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  650.399305][T14678] CPU: 0 UID: 0 PID: 14678 Comm: syz.0.3214 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  650.399327][T14678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  650.399338][T14678] Call Trace:
[  650.399345][T14678]  <TASK>
[  650.399353][T14678]  dump_stack_lvl+0xe8/0x150
[  650.399381][T14678]  should_fail_ex+0x46b/0x600
[  650.399418][T14678]  _copy_from_user+0x2d/0xb0
[  650.399441][T14678]  kstrtouint_from_user+0xd6/0x180
[  650.399475][T14678]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  650.399521][T14678]  proc_fail_nth_write+0x8e/0x210
[  650.399575][T14678]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  650.399613][T14678]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  650.399648][T14678]  vfs_write+0x2a3/0xba0
[  650.399679][T14678]  ? __pfx_vfs_write+0x10/0x10
[  650.399704][T14678]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  650.399731][T14678]  ? lockdep_hardirqs_on+0x7a/0x110
[  650.399755][T14678]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  650.399781][T14678]  ? mutex_lock_nested+0x152/0x1d0
[  650.399800][T14678]  ? fdget_pos+0x252/0x320
[  650.399824][T14678]  ksys_write+0x156/0x270
[  650.399846][T14678]  ? __pfx_ksys_write+0x10/0x10
[  650.399873][T14678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.399893][T14678]  do_syscall_64+0x15f/0xf80
[  650.399916][T14678]  ? trace_irq_disable+0x3b/0x140
[  650.399937][T14678]  ? clear_bhb_loop+0x40/0x90
[  650.399960][T14678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.399978][T14678] RIP: 0033:0x7f1e3ef7d68e
[  650.400003][T14678] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  650.400019][T14678] RSP: 002b:00007f1e3d1f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  650.400038][T14678] RAX: ffffffffffffffda RBX: 00007f1e3d1f56c0 RCX: 00007f1e3ef7d68e
[  650.400052][T14678] RDX: 0000000000000001 RSI: 00007f1e3d1f50a0 RDI: 0000000000000006
[  650.400064][T14678] RBP: 00007f1e3d1f5090 R08: 0000000000000000 R09: 0000000000000000
[  650.400075][T14678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  650.400086][T14678] R13: 00007f1e3f236128 R14: 00007f1e3f236090 R15: 00007ffe8752d588
[  650.400119][T14678]  </TASK>
[  651.221946][T13177] Bluetooth: hci4: command tx timeout
[  651.477827][T14711] netlink: 'syz.4.3223': attribute type 14 has an invalid length.
[  651.751604][ T5257] veth0_macvtap: left promiscuous mode
[  651.825854][T14724] FAULT_INJECTION: forcing a failure.
[  651.825854][T14724] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  651.825888][T14724] CPU: 0 UID: 0 PID: 14724 Comm: syz.4.3227 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  651.825911][T14724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  651.825924][T14724] Call Trace:
[  651.825932][T14724]  <TASK>
[  651.825941][T14724]  dump_stack_lvl+0xe8/0x150
[  651.825970][T14724]  should_fail_ex+0x46b/0x600
[  651.826011][T14724]  _copy_to_user+0x31/0xb0
[  651.826043][T14724]  bpf_prog_test_run_raw_tp+0x511/0x6c0
[  651.826096][T14724]  ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10
[  651.826127][T14724]  ? __fget_files+0x2a/0x420
[  651.826155][T14724]  ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10
[  651.826185][T14724]  bpf_prog_test_run+0x2cd/0x340
[  651.826220][T14724]  __sys_bpf+0x643/0x950
[  651.826251][T14724]  ? __pfx___sys_bpf+0x10/0x10
[  651.826280][T14724]  ? rt_mutex_slowunlock+0x1cb/0x300
[  651.826324][T14724]  ? ksys_write+0x248/0x270
[  651.826353][T14724]  ? __pfx_ksys_write+0x10/0x10
[  651.826385][T14724]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.826410][T14724]  __x64_sys_bpf+0x7c/0x90
[  651.826434][T14724]  do_syscall_64+0x15f/0xf80
[  651.826475][T14724]  ? trace_irq_disable+0x3b/0x140
[  651.826509][T14724]  ? clear_bhb_loop+0x40/0x90
[  651.826537][T14724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.826559][T14724] RIP: 0033:0x7fd83fd4ce59
[  651.826579][T14724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  651.826599][T14724] RSP: 002b:00007fd83df9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  651.826622][T14724] RAX: ffffffffffffffda RBX: 00007fd83ffc5fa0 RCX: 00007fd83fd4ce59
[  651.826639][T14724] RDX: 0000000000000010 RSI: 0000200000000bc0 RDI: 000000000000000a
[  651.826652][T14724] RBP: 00007fd83df9e090 R08: 0000000000000000 R09: 0000000000000000
[  651.826665][T14724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  651.826678][T14724] R13: 00007fd83ffc6038 R14: 00007fd83ffc5fa0 R15: 00007ffc9e7e61b8
[  651.826711][T14724]  </TASK>
[  652.684373][T14749] netlink: 'syz.0.3236': attribute type 14 has an invalid length.
[  653.303100][T13177] Bluetooth: hci4: command tx timeout
[  653.338545][T14646] bridge0: port 1(bridge_slave_0) entered blocking state
[  653.358370][T14646] bridge0: port 1(bridge_slave_0) entered disabled state
[  653.358634][T14646] bridge_slave_0: entered allmulticast mode
[  653.384861][T14646] bridge_slave_0: entered promiscuous mode
[  653.389222][T14646] bridge0: port 2(bridge_slave_1) entered blocking state
[  653.389489][T14646] bridge0: port 2(bridge_slave_1) entered disabled state
[  653.389719][T14646] bridge_slave_1: entered allmulticast mode
[  653.423273][T14646] bridge_slave_1: entered promiscuous mode
[  653.569563][T14763] FAULT_INJECTION: forcing a failure.
[  653.569563][T14763] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  653.569603][T14763] CPU: 1 UID: 0 PID: 14763 Comm: syz.0.3239 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  653.569632][T14763] Tainted: [L]=SOFTLOCKUP
[  653.569640][T14763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  653.569653][T14763] Call Trace:
[  653.569662][T14763]  <TASK>
[  653.569671][T14763]  dump_stack_lvl+0xe8/0x150
[  653.569704][T14763]  should_fail_ex+0x46b/0x600
[  653.569747][T14763]  _copy_from_iter+0x1d3/0x1670
[  653.569783][T14763]  ? __pfx__copy_from_iter+0x10/0x10
[  653.569804][T14763]  ? trace_kmalloc+0x2a/0xf0
[  653.569832][T14763]  ? rcu_is_watching+0x15/0xb0
[  653.569876][T14763]  file_tty_write+0x4c9/0xa10
[  653.569912][T14763]  vfs_write+0x629/0xba0
[  653.569947][T14763]  ? __pfx_vfs_write+0x10/0x10
[  653.569984][T14763]  ? __fget_files+0x2a/0x420
[  653.570015][T14763]  ksys_write+0x156/0x270
[  653.570042][T14763]  ? __pfx_ksys_write+0x10/0x10
[  653.570077][T14763]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.570114][T14763]  do_syscall_64+0x15f/0xf80
[  653.570141][T14763]  ? trace_irq_disable+0x3b/0x140
[  653.570167][T14763]  ? clear_bhb_loop+0x40/0x90
[  653.570194][T14763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.570217][T14763] RIP: 0033:0x7f1e3efbce59
[  653.570241][T14763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  653.570259][T14763] RSP: 002b:00007f1e3d216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  653.570281][T14763] RAX: ffffffffffffffda RBX: 00007f1e3f235fa0 RCX: 00007f1e3efbce59
[  653.570297][T14763] RDX: 00000000fffffecc RSI: 0000200000000240 RDI: 0000000000000007
[  653.570311][T14763] RBP: 00007f1e3d216090 R08: 0000000000000000 R09: 0000000000000000
[  653.570325][T14763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  653.570338][T14763] R13: 00007f1e3f236038 R14: 00007f1e3f235fa0 R15: 00007ffe8752d588
[  653.570374][T14763]  </TASK>
[  653.866946][T14646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  653.895567][T14646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  654.164204][T14646] team0: Port device team_slave_0 added
[  654.194066][T14646] team0: Port device team_slave_1 added
[  655.592419][T13177] Bluetooth: hci4: command tx timeout
[  655.889648][T14646] batman_adv: batadv0: Adding interface: batadv_slave_0
[  655.889667][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.889698][T14646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  655.957402][T14646] batman_adv: batadv0: Adding interface: batadv_slave_1
[  655.957420][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.957449][T14646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  656.686595][T14646] hsr_slave_0: entered promiscuous mode
[  656.937286][T14646] hsr_slave_1: entered promiscuous mode
[  656.951830][T14646] debugfs: 'hsr0' already exists in 'hsr'
[  656.951856][T14646] Cannot create hsr debugfs directory
[  657.620762][T13177] Bluetooth: hci4: command tx timeout
[  657.732500][T14799] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  659.115578][T14824] netlink: 'syz.0.3255': attribute type 24 has an invalid length.
[  659.525159][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3259'.
[  659.548979][T14646] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  659.549017][T14646] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.849292][T14838] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3261'.
[  660.050437][ T5718] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  660.127475][T14843] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3264'.
[  660.185082][ T5718] usb 5-1: device descriptor read/64, error -71
[  660.231340][T14646] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  660.231380][T14646] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.420417][ T5718] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  660.550468][ T5718] usb 5-1: device descriptor read/64, error -71
[  660.652120][T14646] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  660.652146][T14646] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.813993][ T5718] usb usb5-port1: attempt power cycle
[  661.277305][ T5718] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  661.336647][ T5718] usb 5-1: device descriptor read/8, error -71
[  661.553419][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3270'.
[  661.594422][ T5718] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  661.611533][ T5718] usb 5-1: device descriptor read/8, error -71
[  661.671091][T14646] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  661.671128][T14646] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.746056][ T5718] usb usb5-port1: unable to enumerate USB device
[  662.133195][T14876] netlink: 'syz.0.3274': attribute type 24 has an invalid length.
[  662.367291][T14881] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3277'.
[  662.844203][T14646] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  662.898387][T14646] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  662.963842][T14646] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  663.117461][T14646] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  663.139248][T14646] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  663.207263][T14646] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  663.239781][T14646] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  663.305863][T14646] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  663.535120][T14900] FAULT_INJECTION: forcing a failure.
[  663.535120][T14900] name failslab, interval 1, probability 0, space 0, times 0
[  663.535155][T14900] CPU: 1 UID: 0 PID: 14900 Comm: syz.0.3284 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  663.535184][T14900] Tainted: [L]=SOFTLOCKUP
[  663.535191][T14900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  663.535204][T14900] Call Trace:
[  663.535212][T14900]  <TASK>
[  663.535221][T14900]  dump_stack_lvl+0xe8/0x150
[  663.535252][T14900]  should_fail_ex+0x46b/0x600
[  663.535292][T14900]  should_failslab+0xa8/0x100
[  663.535338][T14900]  __kmalloc_noprof+0xdf/0x7b0
[  663.535363][T14900]  ? tomoyo_encode+0x28b/0x550
[  663.535406][T14900]  tomoyo_encode+0x28b/0x550
[  663.535454][T14900]  tomoyo_realpath_from_path+0x58d/0x5d0
[  663.535496][T14900]  ? tomoyo_domain+0xd7/0x130
[  663.535551][T14900]  ? tomoyo_path_number_perm+0x219/0x630
[  663.535583][T14900]  tomoyo_path_number_perm+0x246/0x630
[  663.535616][T14900]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  663.535652][T14900]  ? __lock_acquire+0x6b5/0x2cf0
[  663.535688][T14900]  ? do_raw_spin_lock+0x12b/0x2f0
[  663.535753][T14900]  ? __fget_files+0x2a/0x420
[  663.535777][T14900]  ? __fget_files+0x2a/0x420
[  663.535797][T14900]  ? __fget_files+0x3a6/0x420
[  663.535817][T14900]  ? __fget_files+0x2a/0x420
[  663.535842][T14900]  security_file_ioctl+0xc3/0x2a0
[  663.535876][T14900]  __se_sys_ioctl+0x47/0x170
[  663.535904][T14900]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.535929][T14900]  do_syscall_64+0x15f/0xf80
[  663.535959][T14900]  ? trace_irq_disable+0x3b/0x140
[  663.535986][T14900]  ? clear_bhb_loop+0x40/0x90
[  663.536015][T14900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.536042][T14900] RIP: 0033:0x7f1e3efbce59
[  663.536063][T14900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  663.536082][T14900] RSP: 002b:00007f1e3d216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  663.536107][T14900] RAX: ffffffffffffffda RBX: 00007f1e3f235fa0 RCX: 00007f1e3efbce59
[  663.536124][T14900] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  663.536139][T14900] RBP: 00007f1e3d216090 R08: 0000000000000000 R09: 0000000000000000
[  663.536154][T14900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  663.536168][T14900] R13: 00007f1e3f236038 R14: 00007f1e3f235fa0 R15: 00007ffe8752d588
[  663.536206][T14900]  </TASK>
[  663.538616][T14900] ERROR: Out of memory at tomoyo_realpath_from_path.
[  664.082354][T14646] 8021q: adding VLAN 0 to HW filter on device bond0
[  664.191416][T14646] 8021q: adding VLAN 0 to HW filter on device team0
[  664.293692][ T3354] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.293816][ T3354] bridge0: port 1(bridge_slave_0) entered forwarding state
[  664.456116][ T3354] bridge0: port 2(bridge_slave_1) entered blocking state
[  664.456310][ T3354] bridge0: port 2(bridge_slave_1) entered forwarding state
[  664.710673][T14921] netlink: 'syz.1.3290': attribute type 21 has an invalid length.
[  664.710696][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'.
[  664.715427][T14921] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  664.917936][T14927] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3292'.
[  665.170406][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  665.330370][   T10] usb 1-1: Using ep0 maxpacket: 32
[  665.333207][   T10] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  665.333236][   T10] usb 1-1: config 0 has no interface number 0
[  665.333287][   T10] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  665.333314][   T10] usb 1-1: config 0 interface 85 has no altsetting 0
[  665.336868][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  665.336897][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.336919][   T10] usb 1-1: Product: syz
[  665.336940][   T10] usb 1-1: Manufacturer: syz
[  665.336961][   T10] usb 1-1: SerialNumber: syz
[  665.453952][   T10] usb 1-1: config 0 descriptor??
[  665.470105][T14939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3295'.
[  665.488927][   T10] appletouch 1-1:0.85: Could not find int-in endpoint
[  665.488960][   T10] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[  665.514847][   T10] usbhid 1-1:0.85: couldn't find an input interrupt endpoint
[  666.298177][T14646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  668.582332][T14968] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3305'.
[  668.687709][ T5714] usb 1-1: USB disconnect, device number 9
[  669.021032][T14646] veth0_vlan: entered promiscuous mode
[  669.042969][T14984] netlink: 'syz.1.3309': attribute type 25 has an invalid length.
[  669.079105][T14646] veth1_vlan: entered promiscuous mode
[  669.241710][T14646] veth0_macvtap: entered promiscuous mode
[  669.270857][T14646] veth1_macvtap: entered promiscuous mode
[  669.325663][T14646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  669.609807][T14646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  669.652432][ T6404] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  669.652962][ T6404] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  669.692752][ T3354] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  669.696680][ T3354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  669.905625][T15005] netlink: 'syz.2.3314': attribute type 11 has an invalid length.
[  671.285826][T15020] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3317'.
[  671.372698][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.372723][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.760290][T15025] FAULT_INJECTION: forcing a failure.
[  671.760290][T15025] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  671.760330][T15025] CPU: 0 UID: 0 PID: 15025 Comm: syz.0.3319 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  671.760358][T15025] Tainted: [L]=SOFTLOCKUP
[  671.760366][T15025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  671.760379][T15025] Call Trace:
[  671.760394][T15025]  <TASK>
[  671.760401][T15025]  dump_stack_lvl+0xe8/0x150
[  671.760424][T15025]  should_fail_ex+0x46b/0x600
[  671.760453][T15025]  _copy_to_user+0x31/0xb0
[  671.760472][T15025]  simple_read_from_buffer+0xe1/0x170
[  671.760499][T15025]  proc_fail_nth_read+0x1be/0x230
[  671.760525][T15025]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  671.760551][T15025]  ? rw_verify_area+0x2ac/0x4e0
[  671.760567][T15025]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  671.760592][T15025]  vfs_read+0x212/0xa80
[  671.760614][T15025]  ? __pfx_vfs_read+0x10/0x10
[  671.760632][T15025]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  671.760653][T15025]  ? lockdep_hardirqs_on+0x7a/0x110
[  671.760671][T15025]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  671.760710][T15025]  ? mutex_lock_nested+0x152/0x1d0
[  671.760724][T15025]  ? fdget_pos+0x252/0x320
[  671.760745][T15025]  ksys_read+0x156/0x270
[  671.760764][T15025]  ? __pfx_ksys_read+0x10/0x10
[  671.760788][T15025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.760807][T15025]  do_syscall_64+0x15f/0xf80
[  671.760828][T15025]  ? trace_irq_disable+0x3b/0x140
[  671.760846][T15025]  ? clear_bhb_loop+0x40/0x90
[  671.760866][T15025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.760882][T15025] RIP: 0033:0x7f1e3ef7d68e
[  671.760897][T15025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  671.760910][T15025] RSP: 002b:00007f1e3d215fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  671.760927][T15025] RAX: ffffffffffffffda RBX: 00007f1e3d2166c0 RCX: 00007f1e3ef7d68e
[  671.760938][T15025] RDX: 000000000000000f RSI: 00007f1e3d2160a0 RDI: 0000000000000005
[  671.760948][T15025] RBP: 00007f1e3d216090 R08: 0000000000000000 R09: 0000000000000000
[  671.760957][T15025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  671.760966][T15025] R13: 00007f1e3f236038 R14: 00007f1e3f235fa0 R15: 00007ffe8752d588
[  671.760992][T15025]  </TASK>
[  673.371027][  T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.371049][  T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.390357][ T5718] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  673.552734][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  673.552766][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  673.552789][ T5718] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  673.552831][ T5718] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  673.552854][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.615509][ T5718] usb 5-1: config 0 descriptor??
[  674.083509][ T5718] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  674.083550][ T5718] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  674.083581][ T5718] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  674.083613][ T5718] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  674.083640][ T5718] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  674.083670][ T5718] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  674.083700][ T5718] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  674.083730][ T5718] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  674.083760][ T5718] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  674.083789][ T5718] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  674.283330][ T5718] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  675.065752][   T37] audit: type=1326 audit(1778875393.706:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15038 comm="syz.2.3326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7fc00000
[  675.065814][   T37] audit: type=1326 audit(1778875393.706:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15038 comm="syz.2.3326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e445fce59 code=0x7fc00000
[  675.065874][   T37] audit: type=1326 audit(1778875393.706:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15038 comm="syz.2.3326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7fc00000
[  675.065924][   T37] audit: type=1326 audit(1778875393.706:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15038 comm="syz.2.3326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7fc00000
[  675.130420][   T37] audit: type=1326 audit(1778875393.716:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15038 comm="syz.2.3326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7fc00000
[  675.130583][   T37] audit: type=1326 audit(1778875393.716:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15038 comm="syz.2.3326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7fc00000
[  675.130723][   T37] audit: type=1326 audit(1778875393.716:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15038 comm="syz.2.3326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7fc00000
[  675.130880][   T37] audit: type=1326 audit(1778875393.716:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15038 comm="syz.2.3326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7fc00000
[  675.131031][   T37] audit: type=1326 audit(1778875393.716:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15038 comm="syz.2.3326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7fc00000
[  675.131178][   T37] audit: type=1326 audit(1778875393.716:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15038 comm="syz.2.3326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e445fce59 code=0x7fc00000
[  675.818125][   T31] usb 5-1: USB disconnect, device number 11
[  675.906009][T15062] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3330'.
[  676.287265][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  676.409205][   T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  676.426047][   T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  676.439164][   T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  676.466755][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  676.920381][   T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  676.964747][T15085] FAULT_INJECTION: forcing a failure.
[  676.964747][T15085] name failslab, interval 1, probability 0, space 0, times 0
[  676.964785][T15085] CPU: 1 UID: 0 PID: 15085 Comm: syz.0.3336 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  676.964816][T15085] Tainted: [L]=SOFTLOCKUP
[  676.964824][T15085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  676.964842][T15085] Call Trace:
[  676.964850][T15085]  <TASK>
[  676.964858][T15085]  dump_stack_lvl+0xe8/0x150
[  676.964891][T15085]  should_fail_ex+0x46b/0x600
[  676.964934][T15085]  should_failslab+0xa8/0x100
[  676.964964][T15085]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[  676.964989][T15085]  ? __alloc_skb+0x1d0/0x7d0
[  676.965014][T15085]  ? lockdep_hardirqs_on+0x7a/0x110
[  676.965050][T15085]  __alloc_skb+0x1d0/0x7d0
[  676.965100][T15085]  netlink_sendmsg+0x5d4/0xb40
[  676.965141][T15085]  ? __pfx_netlink_sendmsg+0x10/0x10
[  676.965181][T15085]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  676.965209][T15085]  ? __pfx_netlink_sendmsg+0x10/0x10
[  676.965238][T15085]  sock_write_iter+0x4a1/0x4f0
[  676.965278][T15085]  ? __pfx_sock_write_iter+0x10/0x10
[  676.965338][T15085]  do_iter_readv_writev+0x62b/0x8d0
[  676.965372][T15085]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  676.965399][T15085]  ? __lock_acquire+0x6b5/0x2cf0
[  676.965440][T15085]  ? rw_verify_area+0x25b/0x4e0
[  676.965470][T15085]  vfs_writev+0x345/0x9a0
[  676.965514][T15085]  ? __pfx_vfs_writev+0x10/0x10
[  676.965564][T15085]  ? __fget_files+0x2a/0x420
[  676.965589][T15085]  ? __fget_files+0x3a6/0x420
[  676.965610][T15085]  ? __fget_files+0x2a/0x420
[  676.965641][T15085]  do_writev+0x15a/0x2e0
[  676.965698][T15085]  ? __pfx_do_writev+0x10/0x10
[  676.965764][T15085]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.965788][T15085]  do_syscall_64+0x15f/0xf80
[  676.965818][T15085]  ? trace_irq_disable+0x3b/0x140
[  676.965846][T15085]  ? clear_bhb_loop+0x40/0x90
[  676.965876][T15085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.965899][T15085] RIP: 0033:0x7f1e3efbce59
[  676.965920][T15085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  676.965940][T15085] RSP: 002b:00007f1e3d216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  676.965965][T15085] RAX: ffffffffffffffda RBX: 00007f1e3f235fa0 RCX: 00007f1e3efbce59
[  676.965982][T15085] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[  676.965997][T15085] RBP: 00007f1e3d216090 R08: 0000000000000000 R09: 0000000000000000
[  676.966012][T15085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  676.966026][T15085] R13: 00007f1e3f236038 R14: 00007f1e3f235fa0 R15: 00007ffe8752d588
[  676.966064][T15085]  </TASK>
[  677.090528][   T31] usb 5-1: Using ep0 maxpacket: 32
[  677.095807][   T31] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  677.095827][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.351195][   T31] usb 5-1: config 0 descriptor??
[  677.406175][   T31] as10x_usb: device has been detected
[  677.426399][   T31] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  677.526341][   T31] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  679.018387][   T60] Bluetooth: hci0: command tx timeout
[  679.895192][T15095] FAULT_INJECTION: forcing a failure.
[  679.895192][T15095] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  679.895273][T15095] CPU: 0 UID: 0 PID: 15095 Comm: syz.0.3338 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  679.895309][T15095] Tainted: [L]=SOFTLOCKUP
[  679.895316][T15095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  679.895333][T15095] Call Trace:
[  679.895340][T15095]  <TASK>
[  679.895347][T15095]  dump_stack_lvl+0xe8/0x150
[  679.895368][T15095]  should_fail_ex+0x46b/0x600
[  679.895397][T15095]  _copy_to_user+0x31/0xb0
[  679.895416][T15095]  simple_read_from_buffer+0xe1/0x170
[  679.895444][T15095]  proc_fail_nth_read+0x1be/0x230
[  679.895470][T15095]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  679.895497][T15095]  ? rw_verify_area+0x2ac/0x4e0
[  679.895512][T15095]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  679.895537][T15095]  vfs_read+0x212/0xa80
[  679.895559][T15095]  ? __pfx_vfs_read+0x10/0x10
[  679.895577][T15095]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  679.895597][T15095]  ? lockdep_hardirqs_on+0x7a/0x110
[  679.895616][T15095]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  679.895635][T15095]  ? mutex_lock_nested+0x152/0x1d0
[  679.895648][T15095]  ? fdget_pos+0x252/0x320
[  679.895669][T15095]  ksys_read+0x156/0x270
[  679.895687][T15095]  ? __pfx_ksys_read+0x10/0x10
[  679.895701][T15095]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.895725][T15095]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.895741][T15095]  do_syscall_64+0x15f/0xf80
[  679.895761][T15095]  ? clear_bhb_loop+0x40/0x90
[  679.895779][T15095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.895794][T15095] RIP: 0033:0x7f1e3ef7d68e
[  679.895808][T15095] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  679.895820][T15095] RSP: 002b:00007f1e3d1f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  679.895836][T15095] RAX: ffffffffffffffda RBX: 00007f1e3d1f56c0 RCX: 00007f1e3ef7d68e
[  679.895848][T15095] RDX: 000000000000000f RSI: 00007f1e3d1f50a0 RDI: 0000000000000005
[  679.895857][T15095] RBP: 00007f1e3d1f5090 R08: 0000000000000000 R09: 0000000000000000
[  679.895866][T15095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  679.895874][T15095] R13: 00007f1e3f236128 R14: 00007f1e3f236090 R15: 00007ffe8752d588
[  679.895898][T15095]  </TASK>
[  681.063968][   T60] Bluetooth: hci0: command tx timeout
[  681.345456][   T31] as10x_usb: error during firmware upload part1
[  681.346175][   T31] Registered device nBox DVB-T Dongle
[  681.500163][ T5718] usb 5-1: USB disconnect, device number 12
[  682.937925][T15107] FAULT_INJECTION: forcing a failure.
[  682.937925][T15107] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  682.938003][T15107] CPU: 0 UID: 0 PID: 15107 Comm: syz.4.3341 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  682.938034][T15107] Tainted: [L]=SOFTLOCKUP
[  682.938041][T15107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  682.938057][T15107] Call Trace:
[  682.938063][T15107]  <TASK>
[  682.938070][T15107]  dump_stack_lvl+0xe8/0x150
[  682.938091][T15107]  should_fail_ex+0x46b/0x600
[  682.938119][T15107]  _copy_from_user+0x2d/0xb0
[  682.938136][T15107]  kstrtouint_from_user+0xd6/0x180
[  682.938161][T15107]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  682.938181][T15107]  ? lockdep_hardirqs_on+0x7a/0x110
[  682.938212][T15107]  proc_fail_nth_write+0x8e/0x210
[  682.938236][T15107]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  682.938257][T15107]  ? preempt_schedule_thunk+0x16/0x30
[  682.938282][T15107]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  682.938311][T15107]  vfs_write+0x2a3/0xba0
[  682.938334][T15107]  ? __pfx_vfs_write+0x10/0x10
[  682.938350][T15107]  ? preempt_schedule_thunk+0x16/0x30
[  682.938376][T15107]  ? _raw_spin_unlock_irqrestore+0x74/0x80
[  682.938396][T15107]  ? mutex_lock_nested+0x152/0x1d0
[  682.938410][T15107]  ? fdget_pos+0x252/0x320
[  682.938430][T15107]  ksys_write+0x156/0x270
[  682.938448][T15107]  ? __pfx_ksys_write+0x10/0x10
[  682.938463][T15107]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.938485][T15107]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.938501][T15107]  do_syscall_64+0x15f/0xf80
[  682.938521][T15107]  ? clear_bhb_loop+0x40/0x90
[  682.938540][T15107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.938554][T15107] RIP: 0033:0x7fd83fd0d68e
[  682.938567][T15107] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  682.938580][T15107] RSP: 002b:00007fd83df5bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  682.938596][T15107] RAX: ffffffffffffffda RBX: 00007fd83df5c6c0 RCX: 00007fd83fd0d68e
[  682.938607][T15107] RDX: 0000000000000001 RSI: 00007fd83df5c0a0 RDI: 0000000000000005
[  682.938616][T15107] RBP: 00007fd83df5c090 R08: 0000000000000000 R09: 0000000000000000
[  682.938625][T15107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  682.938634][T15107] R13: 00007fd83ffc6218 R14: 00007fd83ffc6180 R15: 00007ffc9e7e61b8
[  682.938657][T15107]  </TASK>
[  683.840695][   T60] Bluetooth: hci0: command tx timeout
[  683.870443][ T5718] Unregistered device nBox DVB-T Dongle
[  684.105756][ T5718] as10x_usb: device has been disconnected
[  685.866364][   T60] Bluetooth: hci0: command tx timeout
[  685.875313][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  685.875388][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  686.065186][T15128] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3342'.
[  688.633574][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode
[  688.633772][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[  688.729085][   T12] bridge0: port 3(netdevsim0) entered disabled state
[  690.121624][T15066] bridge0: port 1(bridge_slave_0) entered blocking state
[  690.122966][T15066] bridge0: port 1(bridge_slave_0) entered disabled state
[  690.123183][T15066] bridge_slave_0: entered allmulticast mode
[  690.182273][T15066] bridge_slave_0: entered promiscuous mode
[  690.199789][T15066] bridge0: port 2(bridge_slave_1) entered blocking state
[  690.199929][T15066] bridge0: port 2(bridge_slave_1) entered disabled state
[  690.200107][T15066] bridge_slave_1: entered allmulticast mode
[  690.229944][T15066] bridge_slave_1: entered promiscuous mode
[  690.318856][T15066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  690.332487][T15066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  690.452460][T15066] team0: Port device team_slave_0 added
[  690.455850][T15066] team0: Port device team_slave_1 added
[  690.586211][T15066] batman_adv: batadv0: Adding interface: batadv_slave_0
[  690.586228][T15066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  690.586259][T15066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  690.588556][T15066] batman_adv: batadv0: Adding interface: batadv_slave_1
[  690.588570][T15066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  690.588597][T15066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  690.907968][T15066] hsr_slave_0: entered promiscuous mode
[  690.909383][T15066] hsr_slave_1: entered promiscuous mode
[  690.922986][T15066] debugfs: 'hsr0' already exists in 'hsr'
[  690.923012][T15066] Cannot create hsr debugfs directory
[  691.091009][ T5867] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  691.248702][ T5867] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  691.248729][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  691.248747][ T5867] usb 5-1: config 0 has no interface number 0
[  691.254622][ T5867] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  691.254709][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.254766][ T5867] usb 5-1: Product: syz
[  691.254806][ T5867] usb 5-1: Manufacturer: syz
[  691.254844][ T5867] usb 5-1: SerialNumber: syz
[  691.319182][T15182] FAULT_INJECTION: forcing a failure.
[  691.319182][T15182] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  691.319210][T15182] CPU: 0 UID: 0 PID: 15182 Comm: syz.0.3363 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  691.319231][T15182] Tainted: [L]=SOFTLOCKUP
[  691.319236][T15182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  691.319244][T15182] Call Trace:
[  691.319250][T15182]  <TASK>
[  691.319256][T15182]  dump_stack_lvl+0xe8/0x150
[  691.319278][T15182]  should_fail_ex+0x46b/0x600
[  691.319307][T15182]  _copy_to_iter+0x1e4/0x17d0
[  691.319334][T15182]  ? __pfx__copy_to_iter+0x10/0x10
[  691.319349][T15182]  ? __pfx_woken_wake_function+0x10/0x10
[  691.319372][T15182]  ? ldsem_down_read+0x12/0x40
[  691.319397][T15182]  tty_read+0x2f1/0x6f0
[  691.319422][T15182]  ? __pfx_tty_read+0x10/0x10
[  691.319457][T15182]  vfs_read+0x58b/0xa80
[  691.319481][T15182]  ? __pfx_vfs_read+0x10/0x10
[  691.319505][T15182]  ? __fget_files+0x2a/0x420
[  691.319525][T15182]  ksys_read+0x156/0x270
[  691.319543][T15182]  ? __pfx_ksys_read+0x10/0x10
[  691.319557][T15182]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.319580][T15182]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.319596][T15182]  do_syscall_64+0x15f/0xf80
[  691.319614][T15182]  ? trace_irq_disable+0x3b/0x140
[  691.319632][T15182]  ? clear_bhb_loop+0x40/0x90
[  691.319651][T15182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.319666][T15182] RIP: 0033:0x7f1e3efbce59
[  691.319687][T15182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  691.319699][T15182] RSP: 002b:00007f1e3d1f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  691.319714][T15182] RAX: ffffffffffffffda RBX: 00007f1e3f236090 RCX: 00007f1e3efbce59
[  691.319725][T15182] RDX: 0000000000000085 RSI: 0000200000000340 RDI: 0000000000000003
[  691.319734][T15182] RBP: 00007f1e3d1f5090 R08: 0000000000000000 R09: 0000000000000000
[  691.319743][T15182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  691.319752][T15182] R13: 00007f1e3f236128 R14: 00007f1e3f236090 R15: 00007ffe8752d588
[  691.319776][T15182]  </TASK>
[  691.323144][ T5867] usb 5-1: config 0 descriptor??
[  691.650731][ T5867] ims_pcu 5-1:0.41: Missing CDC union descriptor
[  691.650788][ T5867] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22
[  691.927829][T15174] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  692.582090][T15193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3366'.
[  693.641568][    T9] usb 5-1: USB disconnect, device number 13
[  693.992428][   T12] bridge_slave_1: left allmulticast mode
[  693.992464][   T12] bridge_slave_1: left promiscuous mode
[  693.992743][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.073636][   T12] bridge_slave_0: left allmulticast mode
[  694.073664][   T12] bridge_slave_0: left promiscuous mode
[  694.073857][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.910545][   T36] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  695.090664][   T36] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  695.090720][   T36] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  695.090744][   T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.272918][   T36] gspca_main: stv0680-2.14.0 probing 041e:4007
[  695.640419][ T5714] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  695.760152][T15217] FAULT_INJECTION: forcing a failure.
[  695.760152][T15217] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  695.760181][T15217] CPU: 0 UID: 0 PID: 15217 Comm: syz.0.3374 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  695.760203][T15217] Tainted: [L]=SOFTLOCKUP
[  695.760212][T15217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  695.760242][T15217] Call Trace:
[  695.760250][T15217]  <TASK>
[  695.760259][T15217]  dump_stack_lvl+0xe8/0x150
[  695.760301][T15217]  should_fail_ex+0x46b/0x600
[  695.760364][T15217]  prepare_alloc_pages+0x22a/0x6b0
[  695.760405][T15217]  __alloc_frozen_pages_noprof+0x12f/0x380
[  695.760429][T15217]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  695.760453][T15217]  ? __pfx_policy_nodemask+0x10/0x10
[  695.760475][T15217]  ? mtree_range_walk+0x6fc/0x8b0
[  695.760501][T15217]  alloc_pages_mpol+0xd1/0x380
[  695.760523][T15217]  alloc_pages_noprof+0xd2/0x2f0
[  695.760544][T15217]  __pud_alloc+0x3a/0x460
[  695.760576][T15217]  handle_mm_fault+0xe35/0x13c0
[  695.760596][T15217]  ? handle_mm_fault+0xe7/0x13c0
[  695.760615][T15217]  ? __pfx_handle_mm_fault+0x10/0x10
[  695.760659][T15217]  ? __lock_acquire+0x6b5/0x2cf0
[  695.760684][T15217]  ? lock_mm_and_find_vma+0xa7/0x340
[  695.760707][T15217]  do_user_addr_fault+0x75b/0x1340
[  695.760738][T15217]  exc_page_fault+0x6a/0xc0
[  695.760759][T15217]  asm_exc_page_fault+0x26/0x30
[  695.760774][T15217] RIP: 0010:rep_movs_alternative+0x33/0x90
[  695.760799][T15217] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb
[  695.760813][T15217] RSP: 0018:ffffc90007dbf9d8 EFLAGS: 00050246
[  695.760827][T15217] RAX: 0000000000000002 RBX: ffffc90007dbfbc0 RCX: 0000000000000008
[  695.760838][T15217] RDX: 0000000000000000 RSI: ffffc90007dbfbc0 RDI: 00002000000012c0
[  695.760849][T15217] RBP: ffffc90007dbfb50 R08: ffffc90007dbfbc7 R09: 1ffff92000fb7f78
[  695.760861][T15217] R10: dffffc0000000000 R11: fffff52000fb7f79 R12: 1ffff92000fb7faf
[  695.760873][T15217] R13: 00002000000012c0 R14: ffffc90007dbfd88 R15: 0000000000000008
[  695.760922][T15217]  _copy_to_iter+0x255/0x17d0
[  695.760949][T15217]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  695.760980][T15217]  ? lockdep_hardirqs_on+0x7a/0x110
[  695.761010][T15217]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  695.761033][T15217]  ? rt_spin_lock+0x1e0/0x400
[  695.761049][T15217]  ? __pfx__copy_to_iter+0x10/0x10
[  695.761063][T15217]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  695.761081][T15217]  ? rt_spin_unlock+0x14f/0x200
[  695.761105][T15217]  ? rt_spin_unlock+0x160/0x200
[  695.761123][T15217]  eventfd_read+0x47d/0x740
[  695.761152][T15217]  ? __pfx_eventfd_read+0x10/0x10
[  695.761190][T15217]  vfs_read+0x58b/0xa80
[  695.761214][T15217]  ? __pfx_vfs_read+0x10/0x10
[  695.761240][T15217]  ? __fget_files+0x2a/0x420
[  695.761261][T15217]  ksys_read+0x156/0x270
[  695.761280][T15217]  ? __pfx_ksys_read+0x10/0x10
[  695.761304][T15217]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.761321][T15217]  do_syscall_64+0x15f/0xf80
[  695.761340][T15217]  ? trace_irq_disable+0x3b/0x140
[  695.761361][T15217]  ? clear_bhb_loop+0x40/0x90
[  695.761381][T15217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.761397][T15217] RIP: 0033:0x7f1e3efbce59
[  695.761411][T15217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  695.761424][T15217] RSP: 002b:00007f1e3d216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  695.761440][T15217] RAX: ffffffffffffffda RBX: 00007f1e3f235fa0 RCX: 00007f1e3efbce59
[  695.761451][T15217] RDX: 0000000000000008 RSI: 00002000000012c0 RDI: 0000000000000003
[  695.761461][T15217] RBP: 00007f1e3d216090 R08: 0000000000000000 R09: 0000000000000000
[  695.761470][T15217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  695.761480][T15217] R13: 00007f1e3f236038 R14: 00007f1e3f235fa0 R15: 00007ffe8752d588
[  695.761505][T15217]  </TASK>
[  695.810336][ T5714] usb 4-1: Using ep0 maxpacket: 32
[  695.849003][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  695.849038][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  695.849080][ T5714] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  695.849104][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.221033][ T5714] usb 4-1: config 0 descriptor??
[  696.230172][ T5714] hub 4-1:0.0: USB hub found
[  696.259659][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  696.363568][   T36] stv0680 5-1:4.0: STV(e): camera ping failed!!
[  696.381190][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  696.429580][ T5714] hub 4-1:0.0: 1 port detected
[  696.453934][   T12] bond0 (unregistering): (slave team0): Releasing backup interface
[  696.459481][T15215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.479852][T15215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.565247][   T36] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  696.565271][   T36] stv0680 5-1:4.0: last error: 211,  command = 0x74
[  696.570421][ T5723] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  696.599384][   T12] bond0 (unregistering): Released all slaves
[  696.612900][   T12] bond1 (unregistering): Released all slaves
[  696.644006][ T5714] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  696.644031][ T5714] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  696.662364][   T12] bond2 (unregistering): Released all slaves
[  696.681941][ T5714] usbhid 4-1:0.0: can't add hid device: -71
[  696.682059][ T5714] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  696.688603][   T36] usb 5-1: USB disconnect, device number 14
[  696.743450][ T5723] usb 1-1: Using ep0 maxpacket: 32
[  696.805995][ T5723] usb 1-1: config 9 has an invalid interface number: 56 but max is 0
[  696.806025][ T5723] usb 1-1: config 9 has no interface number 0
[  696.806084][ T5723] usb 1-1: config 9 interface 56 altsetting 248 endpoint 0xD has invalid wMaxPacketSize 0
[  696.806112][ T5723] usb 1-1: config 9 interface 56 has no altsetting 0
[  696.806269][   T12] bond3 (unregistering): Released all slaves
[  696.812257][ T5723] usb 1-1: string descriptor 0 read error: -22
[  696.812695][ T5723] usb 1-1: New USB device found, idVendor=0df6, idProduct=003b, bcdDevice=ca.ad
[  696.812764][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.912393][ T5714] usb 4-1: USB disconnect, device number 7
[  697.208742][ T5718] usb 1-1: USB disconnect, device number 10
[  697.515362][T15227] trusted_key: encrypted_key: insufficient parameters specified
[  701.397434][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1
[  701.435886][T15271] 9p: Bad value for 'wfdno'
[  701.436373][T15271] netlink: 'syz.4.3387': attribute type 1 has an invalid length.
[  701.436392][T15271] netlink: 'syz.4.3387': attribute type 2 has an invalid length.
[  701.685004][T15277] netlink: 'syz.3.3389': attribute type 11 has an invalid length.
[  702.141267][   T36] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  702.302577][   T36] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  702.302608][   T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.339675][   T36] usb 5-1: config 0 descriptor??
[  702.350748][   T36] cp210x 5-1:0.0: cp210x converter detected
[  702.696359][   T36] usb 5-1: cp210x converter now attached to ttyUSB0
[  705.753278][   T36] usb 5-1: USB disconnect, device number 15
[  705.790749][   T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  705.791565][   T36] cp210x 5-1:0.0: device disconnected
[  707.312728][T15338] netlink: 'syz.2.3402': attribute type 11 has an invalid length.
[  707.431698][T15335] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3401'.
[  708.486292][   T60] Bluetooth: hci5: command 0x0406 tx timeout
[  711.090919][T15375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3411'.
[  711.096169][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3411'.
[  712.871134][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3416'.
[  712.917686][T15391] netlink: 'syz.4.3418': attribute type 11 has an invalid length.
[  714.300720][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  714.358545][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  714.879616][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3428'.
[  715.032338][T15438] netlink: 'syz.3.3430': attribute type 11 has an invalid length.
[  716.451104][   T12] team0 (unregistering): Port device team_slave_1 removed
[  716.491017][   T12] team0 (unregistering): Port device team_slave_0 removed
[  716.867300][T15066] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  716.921732][T15066] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  716.922798][T15066] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  717.044925][T15066] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  717.049739][T15066] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  717.199735][T15066] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  717.230716][T15066] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  717.282094][T15066] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  720.679486][T15066] 8021q: adding VLAN 0 to HW filter on device bond0
[  720.723071][ T5718] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  720.855774][T15066] 8021q: adding VLAN 0 to HW filter on device team0
[  720.892163][ T5718] usb 5-1: device descriptor read/64, error -71
[  720.925172][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  720.953270][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  721.059385][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state
[  721.059498][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  721.131773][ T5718] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  721.260391][ T5718] usb 5-1: device descriptor read/64, error -71
[  721.371053][ T5718] usb usb5-port1: attempt power cycle
[  721.628811][   T12] IPVS: stop unused estimator thread 0...
[  721.726430][ T5718] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  721.740887][ T5718] usb 5-1: device descriptor read/8, error -71
[  721.760382][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3440'.
[  721.980584][ T5718] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  722.051050][ T5718] usb 5-1: device descriptor read/8, error -71
[  722.168147][ T5718] usb usb5-port1: unable to enumerate USB device
[  722.510193][T15518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3442'.
[  722.996769][   T12] bridge_slave_1: left allmulticast mode
[  722.996807][   T12] bridge_slave_1: left promiscuous mode
[  722.997084][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.052524][T15531] netlink: 'syz.3.3443': attribute type 11 has an invalid length.
[  723.161635][   T12] bridge_slave_0: left allmulticast mode
[  723.161671][   T12] bridge_slave_0: left promiscuous mode
[  723.163463][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.836080][T15546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3445'.
[  724.651022][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  724.694153][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  724.731901][   T12] bond0 (unregistering): (slave team0): Releasing backup interface
[  724.762894][   T12] bond0 (unregistering): Released all slaves
[  724.770811][   T12] bond1 (unregistering): Released all slaves
[  724.792102][   T12] bond2 (unregistering): Released all slaves
[  724.830673][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3445'.
[  724.859582][T15518] bond0: option lp_interval: invalid value (0)
[  724.859605][T15518] bond0: option lp_interval: allowed values 1 - 2147483647
[  725.328182][   T12] tipc: Disabling bearer <eth:hsr0>
[  725.461448][   T12] tipc: Left network mode
[  725.772899][T15583] FAULT_INJECTION: forcing a failure.
[  725.772899][T15583] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  725.772941][T15583] CPU: 1 UID: 0 PID: 15583 Comm: syz.0.3452 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  725.772973][T15583] Tainted: [L]=SOFTLOCKUP
[  725.772981][T15583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  725.772996][T15583] Call Trace:
[  725.773005][T15583]  <TASK>
[  725.773015][T15583]  dump_stack_lvl+0xe8/0x150
[  725.773049][T15583]  should_fail_ex+0x46b/0x600
[  725.773099][T15583]  prepare_alloc_pages+0x22a/0x6b0
[  725.773140][T15583]  __alloc_frozen_pages_noprof+0x12f/0x380
[  725.773177][T15583]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  725.773221][T15583]  ? __pfx_policy_nodemask+0x10/0x10
[  725.773261][T15583]  alloc_pages_mpol+0xd1/0x380
[  725.773294][T15583]  folio_alloc_mpol_noprof+0x3b/0x1e0
[  725.773327][T15583]  vma_alloc_folio_noprof+0xe1/0x1e0
[  725.773360][T15583]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  725.773402][T15583]  do_wp_page+0x1109/0x3d90
[  725.773426][T15583]  ? rt_spin_lock+0x1e0/0x400
[  725.773468][T15583]  ? preempt_count_add+0x91/0x190
[  725.773493][T15583]  ? __pfx_do_wp_page+0x10/0x10
[  725.773514][T15583]  ? rt_spin_lock+0x2ce/0x400
[  725.773541][T15583]  ? __pfx_rt_spin_lock+0x10/0x10
[  725.773570][T15583]  ? pte_offset_map_rw_nolock+0xea/0x160
[  725.773599][T15583]  handle_mm_fault+0x9f4/0x13c0
[  725.773633][T15583]  ? handle_mm_fault+0xe7/0x13c0
[  725.773663][T15583]  ? __pfx_handle_mm_fault+0x10/0x10
[  725.773706][T15583]  ? __lock_acquire+0x6b5/0x2cf0
[  725.773743][T15583]  ? lock_mm_and_find_vma+0xa7/0x340
[  725.773778][T15583]  do_user_addr_fault+0x75b/0x1340
[  725.773825][T15583]  exc_page_fault+0x6a/0xc0
[  725.773856][T15583]  asm_exc_page_fault+0x26/0x30
[  725.773879][T15583] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  725.773917][T15583] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  725.773938][T15583] RSP: 0018:ffffc90002b4f7d8 EFLAGS: 00050206
[  725.773959][T15583] RAX: ffffffff849ef901 RBX: ffff888032a44010 RCX: 000000000000039c
[  725.773976][T15583] RDX: 0000000000000000 RSI: ffff888032a44250 RDI: 0000200000002000
[  725.773992][T15583] RBP: ffffc90002b4f950 R08: ffff888032a445eb R09: 1ffff110065488bd
[  725.774013][T15583] R10: dffffc0000000000 R11: ffffed10065488be R12: 1ffff92000569f77
[  725.774031][T15583] R13: 0000200000001dc0 R14: ffffc90002b4fbc8 R15: 00000000000005dc
[  725.774057][T15583]  ? _copy_to_iter+0x1c1/0x17d0
[  725.774088][T15583]  _copy_to_iter+0x255/0x17d0
[  725.774119][T15583]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  725.774150][T15583]  ? lockdep_hardirqs_on+0x7a/0x110
[  725.774182][T15583]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  725.774214][T15583]  ? __pfx__copy_to_iter+0x10/0x10
[  725.774235][T15583]  ? rt_spin_lock+0x1e0/0x400
[  725.774262][T15583]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  725.774300][T15583]  __skb_datagram_iter+0xf8/0x980
[  725.774335][T15583]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  725.774380][T15583]  skb_copy_datagram_iter+0xb5/0x240
[  725.774420][T15583]  raw_recvmsg+0x1d4/0x770
[  725.774457][T15583]  ? __pfx_raw_recvmsg+0x10/0x10
[  725.774485][T15583]  ? sock_rps_record_flow+0x19/0x350
[  725.774520][T15583]  ? inet_recvmsg+0x101/0x120
[  725.774550][T15583]  ? __pfx_inet_recvmsg+0x10/0x10
[  725.774582][T15583]  sock_recvmsg+0x155/0x1b0
[  725.774609][T15583]  sock_read_iter+0x25a/0x330
[  725.774648][T15583]  ? __pfx_sock_read_iter+0x10/0x10
[  725.774710][T15583]  vfs_read+0x58b/0xa80
[  725.774746][T15583]  ? __pfx_vfs_read+0x10/0x10
[  725.774785][T15583]  ? __fget_files+0x2a/0x420
[  725.774817][T15583]  ksys_read+0x156/0x270
[  725.774846][T15583]  ? __pfx_ksys_read+0x10/0x10
[  725.774883][T15583]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.774910][T15583]  do_syscall_64+0x15f/0xf80
[  725.774940][T15583]  ? trace_irq_disable+0x3b/0x140
[  725.774967][T15583]  ? clear_bhb_loop+0x40/0x90
[  725.774996][T15583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.775019][T15583] RIP: 0033:0x7f1e3efbce59
[  725.775041][T15583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  725.775061][T15583] RSP: 002b:00007f1e3d1f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  725.775084][T15583] RAX: ffffffffffffffda RBX: 00007f1e3f236090 RCX: 00007f1e3efbce59
[  725.775101][T15583] RDX: 0000000000002020 RSI: 0000200000001dc0 RDI: 0000000000000004
[  725.775116][T15583] RBP: 00007f1e3d1f5090 R08: 0000000000000000 R09: 0000000000000000
[  725.775131][T15583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  725.775145][T15583] R13: 00007f1e3f236128 R14: 00007f1e3f236090 R15: 00007ffe8752d588
[  725.775183][T15583]  </TASK>
[  726.730390][ T5714] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  726.730397][ T5718] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  726.878156][T15066] 8021q: adding VLAN 0 to HW filter on device batadv0
[  726.880442][ T5718] usb 4-1: Using ep0 maxpacket: 32
[  726.894673][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  726.894702][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  726.894736][ T5718] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  726.894757][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.911601][ T5714] usb 5-1: device descriptor read/64, error -71
[  727.026916][ T5718] usb 4-1: config 0 descriptor??
[  727.041905][ T5718] hub 4-1:0.0: USB hub found
[  727.201512][ T5714] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  727.233988][ T5718] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  727.259710][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3458'.
[  727.259762][T15600] bond0: option lp_interval: invalid value (0)
[  727.259779][T15600] bond0: option lp_interval: allowed values 1 - 2147483647
[  727.331448][ T5714] usb 5-1: device descriptor read/64, error -71
[  727.444687][ T5714] usb usb5-port1: attempt power cycle
[  727.657385][ T5718] hid-generic 0003:046D:C31C.0006: item fetching failed at offset 0/1
[  727.658398][ T5718] hid-generic 0003:046D:C31C.0006: probe with driver hid-generic failed with error -22
[  727.768119][T15606] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3461'.
[  727.810401][ T5714] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  727.832068][ T5714] usb 5-1: device descriptor read/8, error -71
[  727.890706][T15607] pim6reg: entered allmulticast mode
[  727.931387][T15066] veth0_vlan: entered promiscuous mode
[  727.947315][T15066] veth1_vlan: entered promiscuous mode
[  728.014813][T15066] veth0_macvtap: entered promiscuous mode
[  728.027485][T15066] veth1_macvtap: entered promiscuous mode
[  728.065418][T15066] batman_adv: batadv0: Interface activated: batadv_slave_0
[  728.103811][T15066] batman_adv: batadv0: Interface activated: batadv_slave_1
[  728.129984][T15587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  728.131576][T15587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  728.187209][T15605] pim6reg: left allmulticast mode
[  728.281095][ T5718] usb 4-1: USB disconnect, device number 8
[  728.300859][ T5714] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  728.321955][ T5714] usb 5-1: device descriptor read/8, error -71
[  728.412125][  T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  728.446058][  T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  728.458873][ T5714] usb usb5-port1: unable to enumerate USB device
[  728.476050][  T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  728.518134][  T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  729.038548][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3467'.
[  729.090198][T15630] macsec0: entered promiscuous mode
[  729.121112][T15632] veth1_macvtap: left promiscuous mode
[  729.153234][T15632] macsec0 (unregistering): left promiscuous mode
[  729.436542][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'.
[  729.613176][T15637] FAULT_INJECTION: forcing a failure.
[  729.613176][T15637] name failslab, interval 1, probability 0, space 0, times 0
[  729.613224][T15637] CPU: 1 UID: 0 PID: 15637 Comm: syz.4.3469 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  729.613245][T15637] Tainted: [L]=SOFTLOCKUP
[  729.613250][T15637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  729.613259][T15637] Call Trace:
[  729.613264][T15637]  <TASK>
[  729.613273][T15637]  dump_stack_lvl+0xe8/0x150
[  729.613295][T15637]  should_fail_ex+0x46b/0x600
[  729.613324][T15637]  should_failslab+0xa8/0x100
[  729.613343][T15637]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[  729.613359][T15637]  ? __alloc_skb+0x1d0/0x7d0
[  729.613375][T15637]  ? lockdep_hardirqs_on+0x7a/0x110
[  729.613399][T15637]  __alloc_skb+0x1d0/0x7d0
[  729.613419][T15637]  netlink_sendmsg+0x5d4/0xb40
[  729.613444][T15637]  ? __pfx_netlink_sendmsg+0x10/0x10
[  729.613464][T15637]  ? unwind_get_return_address+0x4d/0x90
[  729.613488][T15637]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  729.613506][T15637]  ____sys_sendmsg+0x94c/0x9c0
[  729.613529][T15637]  ? __pfx_____sys_sendmsg+0x10/0x10
[  729.613581][T15637]  ? import_iovec+0x73/0xa0
[  729.613609][T15637]  ___sys_sendmsg+0x2a5/0x360
[  729.613635][T15637]  ? __lock_acquire+0x6b5/0x2cf0
[  729.613669][T15637]  ? __pfx____sys_sendmsg+0x10/0x10
[  729.613713][T15637]  ? __fget_files+0x2a/0x420
[  729.613731][T15637]  ? __fget_files+0x3a6/0x420
[  729.613751][T15637]  __x64_sys_sendmsg+0x1c3/0x2a0
[  729.613773][T15637]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  729.613800][T15637]  ? __pfx_ksys_write+0x10/0x10
[  729.613823][T15637]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.613839][T15637]  do_syscall_64+0x15f/0xf80
[  729.613857][T15637]  ? trace_irq_disable+0x3b/0x140
[  729.613874][T15637]  ? clear_bhb_loop+0x40/0x90
[  729.613892][T15637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.613906][T15637] RIP: 0033:0x7fd83fd4ce59
[  729.613919][T15637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  729.613932][T15637] RSP: 002b:00007fd83df9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  729.613948][T15637] RAX: ffffffffffffffda RBX: 00007fd83ffc5fa0 RCX: 00007fd83fd4ce59
[  729.613959][T15637] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  729.613968][T15637] RBP: 00007fd83df9e090 R08: 0000000000000000 R09: 0000000000000000
[  729.613978][T15637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  729.613987][T15637] R13: 00007fd83ffc6038 R14: 00007fd83ffc5fa0 R15: 00007ffc9e7e61b8
[  729.614010][T15637]  </TASK>
[  729.666330][   T12] hsr_slave_0: left promiscuous mode
[  729.990077][   T12] hsr_slave_1: left promiscuous mode
[  729.994181][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  729.994250][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  730.027347][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  730.027374][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  730.200533][   T12] veth1_macvtap: left promiscuous mode
[  730.204129][   T12] veth0_macvtap: left promiscuous mode
[  730.204373][   T12] veth1_vlan: left promiscuous mode
[  730.204529][   T12] veth0_vlan: left promiscuous mode
[  731.241112][   T12] team0 (unregistering): Port device team_slave_1 removed
[  731.290926][   T12] team0 (unregistering): Port device team_slave_0 removed
[  731.631703][T15635] bond0: option lp_interval: invalid value (0)
[  731.631727][T15635] bond0: option lp_interval: allowed values 1 - 2147483647
[  732.224732][ T6404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  732.224752][ T6404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  732.393108][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  732.393131][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  732.573633][T15656] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  734.019124][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3482'.
[  734.019155][T15673] bond0: option lp_interval: invalid value (0)
[  734.019175][T15673] bond0: option lp_interval: allowed values 1 - 2147483647
[  734.304481][T13177] Bluetooth: hci4: ISO packet for unknown connection handle 0
[  734.348048][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  734.403727][   T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  734.408262][   T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  734.411476][   T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  734.412313][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  735.364880][T15690] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3487'.
[  735.497075][   T12] IPVS: stop unused estimator thread 0...
[  735.785082][T15702] FAULT_INJECTION: forcing a failure.
[  735.785082][T15702] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  735.785122][T15702] CPU: 1 UID: 0 PID: 15702 Comm: syz.1.3491 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  735.785153][T15702] Tainted: [L]=SOFTLOCKUP
[  735.785161][T15702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  735.785175][T15702] Call Trace:
[  735.785184][T15702]  <TASK>
[  735.785193][T15702]  dump_stack_lvl+0xe8/0x150
[  735.785225][T15702]  should_fail_ex+0x46b/0x600
[  735.785278][T15702]  _copy_to_iter+0x1e4/0x17d0
[  735.785305][T15702]  ? csum_partial+0x239/0x2c0
[  735.785344][T15702]  ? __pfx__copy_to_iter+0x10/0x10
[  735.785382][T15702]  ? __lock_acquire+0x6b5/0x2cf0
[  735.785416][T15702]  ? __skb_checksum_complete+0x1db/0x3d0
[  735.785455][T15702]  udpv6_recvmsg+0x773/0x1390
[  735.785481][T15702]  ? __lock_acquire+0x6b5/0x2cf0
[  735.785526][T15702]  ? __pfx_udpv6_recvmsg+0x10/0x10
[  735.785556][T15702]  ? __lock_acquire+0x6b5/0x2cf0
[  735.785588][T15702]  ? inet6_recvmsg+0xe7/0x490
[  735.785614][T15702]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  735.785637][T15702]  ? security_socket_recvmsg+0x7e/0x2c0
[  735.785666][T15702]  ? __pfx_inet6_recvmsg+0x10/0x10
[  735.785692][T15702]  sock_recvmsg+0xfa/0x1b0
[  735.785716][T15702]  ____sys_recvmsg+0x1f2/0x4b0
[  735.785768][T15702]  ? __pfx_____sys_recvmsg+0x10/0x10
[  735.785812][T15702]  ? import_iovec+0x73/0xa0
[  735.785843][T15702]  ___sys_recvmsg+0x215/0x590
[  735.785877][T15702]  ? __pfx____sys_recvmsg+0x10/0x10
[  735.785911][T15702]  ? __fget_files+0x2a/0x420
[  735.785948][T15702]  ? __fget_files+0x3a6/0x420
[  735.785978][T15702]  do_recvmmsg+0x33a/0x800
[  735.786016][T15702]  ? __pfx_do_recvmmsg+0x10/0x10
[  735.786064][T15702]  ? rt_mutex_slowunlock+0x1cb/0x300
[  735.786103][T15702]  __x64_sys_recvmmsg+0x198/0x250
[  735.786155][T15702]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  735.786197][T15702]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.786223][T15702]  do_syscall_64+0x15f/0xf80
[  735.786258][T15702]  ? trace_irq_disable+0x3b/0x140
[  735.786285][T15702]  ? clear_bhb_loop+0x40/0x90
[  735.786313][T15702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.786336][T15702] RIP: 0033:0x7fa52cd6ce59
[  735.786356][T15702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  735.786376][T15702] RSP: 002b:00007fa52afc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  735.786410][T15702] RAX: ffffffffffffffda RBX: 00007fa52cfe5fa0 RCX: 00007fa52cd6ce59
[  735.786427][T15702] RDX: 0000000000000001 RSI: 0000200000008280 RDI: 0000000000000003
[  735.786442][T15702] RBP: 00007fa52afc6090 R08: 0000000000000000 R09: 0000000000000000
[  735.786457][T15702] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  735.786471][T15702] R13: 00007fa52cfe6038 R14: 00007fa52cfe5fa0 R15: 00007fff25092628
[  735.786508][T15702]  </TASK>
[  736.519204][T15708] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3492'.
[  736.614100][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3493'.
[  736.614127][T15710] bond0: option lp_interval: invalid value (0)
[  736.614140][T15710] bond0: option lp_interval: allowed values 1 - 2147483647
[  736.668423][T13177] Bluetooth: hci2: command tx timeout
[  739.432636][T13177] Bluetooth: hci2: command tx timeout
[  741.460389][T13177] Bluetooth: hci2: command tx timeout
[  741.945150][T15751] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3504'.
[  741.968219][T15751] team0: entered promiscuous mode
[  741.968237][T15751] team_slave_0: entered promiscuous mode
[  741.968401][T15751] team_slave_1: entered promiscuous mode
[  742.233830][T10902] bridge0: port 3(syz_tun) entered disabled state
[  742.290400][ T5723] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  742.424952][ T5723] usb 4-1: device descriptor read/64, error -71
[  742.425895][T10902] syz_tun (unregistering): left allmulticast mode
[  742.425927][T10902] syz_tun (unregistering): left promiscuous mode
[  742.426169][T10902] bridge0: port 3(syz_tun) entered disabled state
[  742.661829][ T5723] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  742.732108][T15674] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.732311][T15674] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.732617][T15674] bridge_slave_0: entered allmulticast mode
[  742.735225][T15674] bridge_slave_0: entered promiscuous mode
[  742.739088][T15674] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.739295][T15674] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.739965][T15674] bridge_slave_1: entered allmulticast mode
[  742.790418][ T5723] usb 4-1: device descriptor read/64, error -71
[  742.795637][T15674] bridge_slave_1: entered promiscuous mode
[  742.900888][ T5723] usb usb4-port1: attempt power cycle
[  742.985877][T15674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  743.009589][T15674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  743.384072][ T5723] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  743.490619][ T5723] usb 4-1: device descriptor read/8, error -71
[  743.552451][T13177] Bluetooth: hci2: command tx timeout
[  744.020547][ T5723] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  744.044004][ T5723] usb 4-1: device descriptor read/8, error -71
[  744.150791][ T5723] usb usb4-port1: unable to enumerate USB device
[  744.841721][T15778] ==================================================================
[  744.841740][T15778] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60
[  744.841779][T15778] Read of size 1 at addr ffff88803ec9b868 by task syz.0.3510/15778
[  744.841799][T15778] 
[  744.841815][T15778] CPU: 1 UID: 0 PID: 15778 Comm: syz.0.3510 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  744.841846][T15778] Tainted: [L]=SOFTLOCKUP
[  744.841855][T15778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  744.841870][T15778] Call Trace:
[  744.841879][T15778]  <TASK>
[  744.841889][T15778]  dump_stack_lvl+0xe8/0x150
[  744.841917][T15778]  print_address_description+0x55/0x1e0
[  744.841944][T15778]  ? _raw_spin_lock_irqsave+0x40/0x60
[  744.841971][T15778]  print_report+0x58/0x70
[  744.841994][T15778]  kasan_report+0x117/0x150
[  744.842022][T15778]  ? _raw_spin_lock_irqsave+0x40/0x60
[  744.842056][T15778]  ? rt_mutex_slowunlock+0xbf/0x8b0
[  744.842078][T15778]  __kasan_check_byte+0x2a/0x40
[  744.842103][T15778]  lock_acquire+0x84/0x350
[  744.842138][T15778]  ? rcu_is_watching+0x15/0xb0
[  744.842174][T15778]  _raw_spin_lock_irqsave+0x40/0x60
[  744.842203][T15778]  ? rt_mutex_slowunlock+0xbf/0x8b0
[  744.842226][T15778]  rt_mutex_slowunlock+0xbf/0x8b0
[  744.842253][T15778]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  744.842279][T15778]  ? __rcu_read_unlock+0x83/0xe0
[  744.842307][T15778]  ? rt_spin_unlock+0x160/0x200
[  744.842331][T15778]  dma_buf_fd+0x178/0x330
[  744.842363][T15778]  udmabuf_create+0xf26/0xfe0
[  744.842402][T15778]  ? __pfx_udmabuf_create+0x10/0x10
[  744.842437][T15778]  udmabuf_ioctl+0x1f6/0x310
[  744.842458][T15778]  ? lockdep_hardirqs_on+0x7a/0x110
[  744.842489][T15778]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  744.842515][T15778]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  744.842538][T15778]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  744.842561][T15778]  ? __se_sys_ioctl+0xed/0x170
[  744.842596][T15778]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  744.842626][T15778]  __se_sys_ioctl+0xff/0x170
[  744.842653][T15778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  744.842679][T15778]  do_syscall_64+0x15f/0xf80
[  744.842710][T15778]  ? clear_bhb_loop+0x40/0x90
[  744.842737][T15778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  744.842761][T15778] RIP: 0033:0x7f1e3efbce59
[  744.842781][T15778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  744.842802][T15778] RSP: 002b:00007f1e3d1d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  744.842827][T15778] RAX: ffffffffffffffda RBX: 00007f1e3f236180 RCX: 00007f1e3efbce59
[  744.842845][T15778] RDX: 00002000000000c0 RSI: 0000000040187542 RDI: 0000000000000008
[  744.842862][T15778] RBP: 00007f1e3f052d6f R08: 0000000000000000 R09: 0000000000000000
[  744.842877][T15778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  744.842892][T15778] R13: 00007f1e3f236218 R14: 00007f1e3f236180 R15: 00007ffe8752d588
[  744.842919][T15778]  </TASK>
[  744.842929][T15778] 
[  744.842939][T15778] Allocated by task 15778:
[  744.842950][T15778]  kasan_save_track+0x3e/0x80
[  744.842976][T15778]  __kasan_kmalloc+0x93/0xb0
[  744.842998][T15778]  __kmalloc_noprof+0x3e7/0x7b0
[  744.843038][T15778]  dma_buf_export+0x3ba/0xad0
[  744.843066][T15778]  udmabuf_create+0xee5/0xfe0
[  744.843086][T15778]  udmabuf_ioctl+0x1f6/0x310
[  744.843106][T15778]  __se_sys_ioctl+0xff/0x170
[  744.843131][T15778]  do_syscall_64+0x15f/0xf80
[  744.843159][T15778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  744.843180][T15778] 
[  744.843186][T15778] Freed by task 15780:
[  744.843196][T15778]  kasan_save_track+0x3e/0x80
[  744.843216][T15778]  kasan_save_free_info+0x46/0x50
[  744.843247][T15778]  __kasan_slab_free+0x5c/0x80
[  744.843268][T15778]  kfree+0x1c5/0x6c0
[  744.843287][T15778]  __dentry_kill+0x211/0x690
[  744.843314][T15778]  finish_dput+0xc9/0x480
[  744.843347][T15778]  __fput+0x6a3/0xa70
[  744.843380][T15778]  task_work_run+0x1d9/0x270
[  744.843413][T15778]  exit_to_user_mode_loop+0xf3/0x4d0
[  744.843440][T15778]  do_syscall_64+0x33e/0xf80
[  744.843468][T15778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  744.843489][T15778] 
[  744.843494][T15778] The buggy address belongs to the object at ffff88803ec9b800
[  744.843494][T15778]  which belongs to the cache kmalloc-1k of size 1024
[  744.843515][T15778] The buggy address is located 104 bytes inside of
[  744.843515][T15778]  freed 1024-byte region [ffff88803ec9b800, ffff88803ec9bc00)
[  744.843540][T15778] 
[  744.843546][T15778] The buggy address belongs to the physical page:
[  744.843567][T15778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3ec98
[  744.843588][T15778] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  744.843616][T15778] flags: 0x80000000000040(head|node=0|zone=1)
[  744.843642][T15778] page_type: f5(slab)
[  744.843664][T15778] raw: 0080000000000040 ffff88801a010dc0 dead000000000100 dead000000000122
[  744.843684][T15778] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  744.843711][T15778] head: 0080000000000040 ffff88801a010dc0 dead000000000100 dead000000000122
[  744.843732][T15778] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  744.843754][T15778] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  744.843774][T15778] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  744.843787][T15778] page dumped because: kasan: bad access detected
[  744.843803][T15778] page_owner tracks the page as allocated
[  744.843811][T15778] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 128332619728, free_ts 127707099198
[  744.843851][T15778]  post_alloc_hook+0x231/0x280
[  744.843875][T15778]  get_page_from_freelist+0x27c8/0x2840
[  744.843904][T15778]  __alloc_frozen_pages_noprof+0x18d/0x380
[  744.843933][T15778]  allocate_slab+0x77/0x660
[  744.843964][T15778]  refill_objects+0x33c/0x3d0
[  744.843994][T15778]  __pcs_replace_empty_main+0x373/0x720
[  744.844028][T15778]  __kmalloc_noprof+0x530/0x7b0
[  744.844051][T15778]  ieee802_11_parse_elems_full+0x159/0x2ab0
[  744.844073][T15778]  ieee80211_inform_bss+0x161/0x1160
[  744.844104][T15778]  cfg80211_inform_single_bss_data+0xd2f/0x1b80
[  744.844127][T15778]  cfg80211_inform_bss_data+0x266/0x3c40
[  744.844148][T15778]  cfg80211_inform_bss_frame_data+0x3c7/0x730
[  744.844171][T15778]  ieee80211_bss_info_update+0x794/0xa40
[  744.844202][T15778]  ieee80211_ibss_rx_queued_mgmt+0x1901/0x2cb0
[  744.844234][T15778]  ieee80211_iface_work+0x845/0x1390
[  744.844268][T15778]  cfg80211_wiphy_work+0x2cf/0x460
[  744.844294][T15778] page last free pid 5257 tgid 5257 stack trace:
[  744.844308][T15778]  __free_frozen_pages+0xfa6/0x10f0
[  744.844331][T15778]  __slab_free+0x252/0x2a0
[  744.844355][T15778]  qlist_free_all+0x99/0x100
[  744.844373][T15778]  kasan_quarantine_reduce+0x148/0x160
[  744.844394][T15778]  __kasan_slab_alloc+0x22/0x80
[  744.844416][T15778]  kmem_cache_alloc_node_noprof+0x22a/0x6e0
[  744.844439][T15778]  __alloc_skb+0x1d0/0x7d0
[  744.844463][T15778]  alloc_skb_with_frags+0xc8/0x760
[  744.844490][T15778]  sock_alloc_send_pskb+0x884/0x9a0
[  744.844521][T15778]  unix_dgram_sendmsg+0x460/0x18d0
[  744.844549][T15778]  sock_write_iter+0x4a1/0x4f0
[  744.844581][T15778]  do_iter_readv_writev+0x62b/0x8d0
[  744.844615][T15778]  vfs_writev+0x345/0x9a0
[  744.844646][T15778]  do_writev+0x15a/0x2e0
[  744.844676][T15778]  do_syscall_64+0x15f/0xf80
[  744.844704][T15778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  744.844726][T15778] 
[  744.844731][T15778] Memory state around the buggy address:
[  744.844744][T15778]  ffff88803ec9b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  744.844760][T15778]  ffff88803ec9b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  744.844776][T15778] >ffff88803ec9b800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  744.844789][T15778]                                                           ^
[  744.844802][T15778]  ffff88803ec9b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  744.844819][T15778]  ffff88803ec9b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  744.844831][T15778] ==================================================================
[  744.844850][T15778] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  744.844871][T15778] CPU: 1 UID: 0 PID: 15778 Comm: syz.0.3510 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  744.844914][T15778] Tainted: [L]=SOFTLOCKUP
[  744.844923][T15778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  744.844937][T15778] Call Trace:
[  744.844946][T15778]  <TASK>
[  744.844955][T15778]  vpanic+0x56c/0xa60
[  744.844986][T15778]  ? __pfx_vpanic+0x10/0x10
[  744.845021][T15778]  panic+0xc5/0xd0
[  744.845048][T15778]  ? __pfx_panic+0x10/0x10
[  744.845077][T15778]  ? _raw_spin_lock_irqsave+0x40/0x60
[  744.845107][T15778]  ? rcu_is_watching+0x15/0xb0
[  744.845144][T15778]  ? _raw_spin_lock_irqsave+0x40/0x60
[  744.845173][T15778]  ? _raw_spin_lock_irqsave+0x40/0x60
[  744.845202][T15778]  check_panic_on_warn+0x89/0xb0
[  744.845235][T15778]  ? _raw_spin_lock_irqsave+0x40/0x60
[  744.845263][T15778]  end_report+0x73/0x170
[  744.845288][T15778]  ? _raw_spin_lock_irqsave+0x40/0x60
[  744.845316][T15778]  kasan_report+0x128/0x150
[  744.845342][T15778]  ? _raw_spin_lock_irqsave+0x40/0x60
[  744.845376][T15778]  ? rt_mutex_slowunlock+0xbf/0x8b0
[  744.845398][T15778]  __kasan_check_byte+0x2a/0x40
[  744.845423][T15778]  lock_acquire+0x84/0x350
[  744.845456][T15778]  ? rcu_is_watching+0x15/0xb0
[  744.845493][T15778]  _raw_spin_lock_irqsave+0x40/0x60
[  744.845522][T15778]  ? rt_mutex_slowunlock+0xbf/0x8b0
[  744.845545][T15778]  rt_mutex_slowunlock+0xbf/0x8b0
[  744.845572][T15778]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  744.845598][T15778]  ? __rcu_read_unlock+0x83/0xe0
[  744.845633][T15778]  ? rt_spin_unlock+0x160/0x200
[  744.845658][T15778]  dma_buf_fd+0x178/0x330
[  744.845689][T15778]  udmabuf_create+0xf26/0xfe0
[  744.845727][T15778]  ? __pfx_udmabuf_create+0x10/0x10
[  744.845762][T15778]  udmabuf_ioctl+0x1f6/0x310
[  744.845784][T15778]  ? lockdep_hardirqs_on+0x7a/0x110
[  744.845814][T15778]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  744.845841][T15778]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  744.845864][T15778]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  744.845887][T15778]  ? __se_sys_ioctl+0xed/0x170
[  744.845916][T15778]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  744.845939][T15778]  __se_sys_ioctl+0xff/0x170
[  744.845966][T15778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  744.845990][T15778]  do_syscall_64+0x15f/0xf80
[  744.846020][T15778]  ? clear_bhb_loop+0x40/0x90
[  744.846047][T15778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  744.846075][T15778] RIP: 0033:0x7f1e3efbce59
[  744.846094][T15778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  744.846114][T15778] RSP: 002b:00007f1e3d1d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  744.846138][T15778] RAX: ffffffffffffffda RBX: 00007f1e3f236180 RCX: 00007f1e3efbce59
[  744.846156][T15778] RDX: 00002000000000c0 RSI: 0000000040187542 RDI: 0000000000000008
[  744.846172][T15778] RBP: 00007f1e3f052d6f R08: 0000000000000000 R09: 0000000000000000
[  744.846188][T15778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  744.846202][T15778] R13: 00007f1e3f236218 R14: 00007f1e3f236180 R15: 00007ffe8752d588
[  744.846231][T15778]  </TASK>
[  744.847123][T15778] Kernel Offset: disabled