last executing test programs:

2m18.734244125s ago: executing program 1 (id=6):
r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000))
r1 = creat(&(0x7f0000003dc0)='./file0\x00', 0x27)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x12)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffc71)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{}, 0xfffffffc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0)=[0x7fffffff, 0x53e56ed2], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x120)
mount(&(0x7f0000000500)=@loop={'/dev/loop', 0x0}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='romfs\x00', 0xa00010, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x5)

2m18.693543096s ago: executing program 0 (id=1):
r0 = socket$alg(0x26, 0x5, 0x0)
ioperm(0x0, 0x8001, 0x9)
getcwd(&(0x7f00000003c0)=""/91, 0x5b)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
ioperm(0x7, 0x8, 0x2)
accept4(r0, 0x0, 0x0, 0x80800)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000002280), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
creat(0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400c044)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x16, 0x200, &(0x7f0000000880)="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"})
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020)
r5 = openat$cgroup_ro(r1, &(0x7f0000002500)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x0)

2m18.038286146s ago: executing program 2 (id=3):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket(0x10, 0x3, 0x7)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x801, 0x84)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
io_setup(0x6, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000000)=@generic={0x1, 0xa0c5, 0x8001})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0x40000000000000, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)

2m17.564443451s ago: executing program 4 (id=5):
r0 = syz_open_dev$vcsa(&(0x7f0000000240), 0xff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001040)=<r2=>0x0)
close(0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0x8000000003c)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000001100), 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @empty}, 0x1c)
syslog(0x2, 0x0, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000000), &(0x7f0000000180)=0x4)
syslog(0xa, 0x0, 0x0)
syslog(0x4, &(0x7f0000001300)=""/95, 0x5f)
ptrace$peeksig(0x4209, 0x0, &(0x7f00000001c0)={0x2a9, 0x1, 0x6}, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}])

2m17.484781663s ago: executing program 3 (id=4):
r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000))
r1 = creat(&(0x7f0000003dc0)='./file0\x00', 0x27)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x12)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffc71)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{}, 0xfffffffc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0)=[0x7fffffff, 0x53e56ed2], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x120)
mount(&(0x7f0000000500)=@loop={'/dev/loop', 0x0}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='romfs\x00', 0xa00010, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x5)

2m17.344551159s ago: executing program 1 (id=7):
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
msgsnd(0x0, &(0x7f00000000c0)={0x3}, 0x8, 0x0)
r1 = msgget(0x1, 0x0)
msgsnd(0x0, &(0x7f0000000880)={0x2}, 0x8, 0x0)
msgrcv(r1, 0x0, 0x0, 0x2, 0x1000)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {}, [{0x8, 0x3}, {0x8, 0x5}, {0x8, 0x1}, {}, {}, {}, {}, {0x8, 0x3}, {0x8, 0x5}, {0x8, 0x4}], {0x10, 0x1}}, 0x74, 0x0)
lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r3, r4, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast1}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
sendto$inet6(r2, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff", 0xf, 0x0, 0x0, 0x0)
recvfrom$inet6(r2, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000)
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b000000000000040013d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4bd36e0000b12df9438c9c4199"}, 0x48, 0xffffffffffffffff)
add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "4955b27e79a00413421ba8a1b90573b66cf93af9c44283104e2fc988cb23b6454739681465e0e71e0c4185c26d40f3d4d2cd9212372b114398d20e32f4ad591e", 0x30}, 0x48, 0x0)

2m17.145038994s ago: executing program 0 (id=8):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000fe00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB="00000015000000000000000b28460dde1065251e4c432eac6401bcf7ef4515d5712d757053789fa3faacb512c8454574b4dd5f6257285b74c93306b423ef45a75d9a82acde09a6f5", @ANYRES32=0x0, @ANYBLOB='\x00'/10], 0x48)
setuid(0x0)
mremap(&(0x7f0000ac3000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000b6a000/0x3000)=nil)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000100)})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
timer_create(0x2, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000280))

2m17.079936779s ago: executing program 2 (id=9):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd4a)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x4, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x3666b165f8ff1357})
pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000a00))
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r0, 0x0)

2m15.279834625s ago: executing program 0 (id=10):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$setperm(0x5, 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c9000001aaaaaaaaaa"], 0x22)

2m15.225930695s ago: executing program 1 (id=11):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$setperm(0x5, 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0x9b, {"a2e3ad09ed0d09f91a5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffebd}}, 0x1006)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

2m15.168499826s ago: executing program 3 (id=12):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000200)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6c, 0x0, &(0x7f0000000d00))

2m15.166497414s ago: executing program 2 (id=13):
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
r1 = msgget$private(0x0, 0x8d)
msgsnd(r1, &(0x7f00000000c0)={0x3}, 0x8, 0x0)
r2 = msgget(0x1, 0x0)
msgsnd(0x0, &(0x7f0000000880)={0x2}, 0x8, 0x0)
msgrcv(r2, 0x0, 0x0, 0x2, 0x1000)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r4, r5, 0x0)
sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
sendto$inet6(r3, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff", 0xf, 0x0, 0x0, 0x0)
recvfrom$inet6(r3, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000)
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b000000000000040013d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4bd36e0000b12df9438c9c4199"}, 0x48, 0xffffffffffffffff)
add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "4955b27e79a00413421ba8a1b90573b66cf93af9c44283104e2fc988cb23b6454739681465e0e71e0c4185c26d40f3d4d2cd9212372b114398d20e32f4ad591e", 0x30}, 0x48, 0x0)

2m14.538312633s ago: executing program 3 (id=14):
io_uring_setup(0x10000, 0x0)
r0 = io_uring_setup(0x2c4d, &(0x7f0000000200))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1)

2m13.976874259s ago: executing program 4 (id=15):
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
msgsnd(0x0, &(0x7f00000000c0)={0x3}, 0x8, 0x0)
r0 = msgget(0x1, 0x0)
msgsnd(0x0, &(0x7f0000000880)={0x2}, 0x8, 0x0)
msgrcv(r0, 0x0, 0x0, 0x2, 0x1000)

2m13.952623584s ago: executing program 2 (id=16):
r0 = socket$alg(0x26, 0x5, 0x0)
ioperm(0x0, 0x8001, 0x9)
getcwd(&(0x7f00000003c0)=""/91, 0x5b)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
ioperm(0x7, 0x8, 0x2)
accept4(r0, 0x0, 0x0, 0x80800)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000002280), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
creat(0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400c044)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x16, 0x200, &(0x7f0000000880)="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"})
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020)
r5 = openat$cgroup_ro(r1, &(0x7f0000002500)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x0)

2m13.700005498s ago: executing program 3 (id=17):
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0)
r1 = msgget$private(0x0, 0x8d)
msgsnd(r1, &(0x7f00000000c0)={0x3}, 0x8, 0x0)
r2 = msgget(0x1, 0x0)
msgsnd(0x0, &(0x7f0000000880)={0x2}, 0x8, 0x0)
msgrcv(r2, 0x0, 0x0, 0x2, 0x1000)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {}, [{0x8, 0x3}, {0x8, 0x5}, {0x8, 0x1}, {}, {}, {}, {}, {0x8, 0x3}, {0x8, 0x5}, {0x8, 0x4}], {0x10, 0x1}}, 0x74, 0x0)
lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r4, r5, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast1}, 0x1c)
sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
sendto$inet6(r3, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff", 0xf, 0x0, 0x0, 0x0)
recvfrom$inet6(r3, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000)
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b000000000000040013d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4bd36e0000b12df9438c9c4199"}, 0x48, 0xffffffffffffffff)
add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "4955b27e79a00413421ba8a1b90573b66cf93af9c44283104e2fc988cb23b6454739681465e0e71e0c4185c26d40f3d4d2cd9212372b114398d20e32f4ad591e", 0x30}, 0x48, 0x0)

2m13.45447677s ago: executing program 1 (id=18):
r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000))
r1 = creat(&(0x7f0000003dc0)='./file0\x00', 0x27)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x12)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffc71)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{}, 0xfffffffc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0)
sendmsg$tipc(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0)=[0x7fffffff, 0x53e56ed2], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x120)
mount(&(0x7f0000000500)=@loop={'/dev/loop', 0x0}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='romfs\x00', 0xa00010, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x5)

2m13.341003873s ago: executing program 4 (id=19):
r0 = syz_open_dev$vcsa(&(0x7f0000000240), 0xff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001040)=<r2=>0x0)
close(0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0x8000000003c)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000001100), 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @empty}, 0x1c)
syslog(0x2, 0x0, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000000), &(0x7f0000000180)=0x4)
syslog(0xa, 0x0, 0x0)
syslog(0x4, &(0x7f0000001300)=""/95, 0x5f)
ptrace$peeksig(0x4209, 0x0, &(0x7f00000001c0)={0x2a9, 0x1, 0x6}, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}])

2m12.368772906s ago: executing program 4 (id=20):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}], {0x14, 0x10}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2m12.314058979s ago: executing program 1 (id=21):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000fe00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB="00000015000000000000000b28460dde1065251e4c432eac6401bcf7ef4515d5712d757053789fa3faacb512c8454574b4dd5f6257285b74c93306b423ef45a75d9a82acde09a6f5", @ANYRES32=0x0, @ANYBLOB='\x00'/10], 0x48)
setuid(0x0)
mremap(&(0x7f0000ac3000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000b6a000/0x3000)=nil)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000100)})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
timer_create(0x2, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000280))

2m12.223113241s ago: executing program 4 (id=22):
r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x12)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0)
io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0)

2m11.380333106s ago: executing program 1 (id=23):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd4a)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x4, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x3666b165f8ff1357})
pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000a00))
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r0, 0x0)

0s ago: executing program 2 (id=26):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x8, 0x87, &(0x7f0000000200)=""/135, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts.
[   49.782053][ T5207] cgroup: Unknown subsys name 'net'
[   49.916077][ T5207] cgroup: Unknown subsys name 'cpuset'
[   49.924336][ T5207] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.214891][ T5207] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.289393][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.297757][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.313546][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.328199][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.332990][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   53.337038][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.351505][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.353590][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.359912][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.367779][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   53.373665][ T5226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   53.380118][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   53.387647][ T5226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.395517][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   53.401645][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.415453][ T5226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.423700][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.424185][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   53.432215][ T5226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.445651][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   53.450100][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   53.460966][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   53.461954][ T5226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.468426][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   53.475886][ T5226] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   53.491174][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.500544][ T4613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   53.519717][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   53.527487][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   53.543047][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   53.908269][ T5229] chnl_net:caif_netlink_parms(): no params data found
[   53.970309][ T5217] chnl_net:caif_netlink_parms(): no params data found
[   54.020726][ T5222] chnl_net:caif_netlink_parms(): no params data found
[   54.069981][ T5218] chnl_net:caif_netlink_parms(): no params data found
[   54.088245][ T5219] chnl_net:caif_netlink_parms(): no params data found
[   54.131259][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.139739][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.147592][ T5229] bridge_slave_0: entered allmulticast mode
[   54.155389][ T5229] bridge_slave_0: entered promiscuous mode
[   54.176760][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.184014][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.191193][ T5217] bridge_slave_0: entered allmulticast mode
[   54.198474][ T5217] bridge_slave_0: entered promiscuous mode
[   54.225784][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.235832][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.243148][ T5229] bridge_slave_1: entered allmulticast mode
[   54.249776][ T5229] bridge_slave_1: entered promiscuous mode
[   54.291867][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.299143][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.306958][ T5217] bridge_slave_1: entered allmulticast mode
[   54.313824][ T5217] bridge_slave_1: entered promiscuous mode
[   54.397836][ T5217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.423362][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.442588][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.450099][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.460767][ T5218] bridge_slave_0: entered allmulticast mode
[   54.467542][ T5218] bridge_slave_0: entered promiscuous mode
[   54.476368][ T5217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.486415][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.494093][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.501400][ T5219] bridge_slave_0: entered allmulticast mode
[   54.508246][ T5219] bridge_slave_0: entered promiscuous mode
[   54.515367][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.522555][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.529707][ T5219] bridge_slave_1: entered allmulticast mode
[   54.536468][ T5219] bridge_slave_1: entered promiscuous mode
[   54.545193][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.554606][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.561693][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.569165][ T5222] bridge_slave_0: entered allmulticast mode
[   54.575783][ T5222] bridge_slave_0: entered promiscuous mode
[   54.583617][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.590669][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.597911][ T5222] bridge_slave_1: entered allmulticast mode
[   54.604541][ T5222] bridge_slave_1: entered promiscuous mode
[   54.611480][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.618924][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.626294][ T5218] bridge_slave_1: entered allmulticast mode
[   54.633190][ T5218] bridge_slave_1: entered promiscuous mode
[   54.694468][ T5217] team0: Port device team_slave_0 added
[   54.702225][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.734148][ T5217] team0: Port device team_slave_1 added
[   54.744972][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.759446][ T5229] team0: Port device team_slave_0 added
[   54.767166][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.780119][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.799006][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.817307][ T5229] team0: Port device team_slave_1 added
[   54.850263][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.857441][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.884042][ T5217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.898197][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.928743][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.936045][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.962284][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.976943][ T5222] team0: Port device team_slave_0 added
[   54.983961][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.990940][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.017066][ T5217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.037422][ T5219] team0: Port device team_slave_0 added
[   55.045256][ T5219] team0: Port device team_slave_1 added
[   55.051425][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.058673][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.085083][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.099434][ T5222] team0: Port device team_slave_1 added
[   55.147030][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.154236][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.181060][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.195004][ T5218] team0: Port device team_slave_0 added
[   55.201330][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.211942][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.238510][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.264760][ T5218] team0: Port device team_slave_1 added
[   55.280959][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.288213][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.314559][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.327539][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.334851][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.360856][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.390436][ T5217] hsr_slave_0: entered promiscuous mode
[   55.399499][ T5217] hsr_slave_1: entered promiscuous mode
[   55.427794][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.434982][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.461233][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.478048][ T5229] hsr_slave_0: entered promiscuous mode
[   55.484559][ T5229] hsr_slave_1: entered promiscuous mode
[   55.490652][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.498485][ T5229] Cannot create hsr debugfs directory
[   55.523477][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.530477][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.560525][ T5230] Bluetooth: hci0: command tx timeout
[   55.560529][ T5233] Bluetooth: hci2: command tx timeout
[   55.561411][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.566473][ T5230] Bluetooth: hci4: command tx timeout
[   55.571897][ T5233] Bluetooth: hci1: command tx timeout
[   55.622604][ T5233] Bluetooth: hci3: command tx timeout
[   55.644252][ T5222] hsr_slave_0: entered promiscuous mode
[   55.650415][ T5222] hsr_slave_1: entered promiscuous mode
[   55.657261][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.664914][ T5222] Cannot create hsr debugfs directory
[   55.691185][ T5218] hsr_slave_0: entered promiscuous mode
[   55.697631][ T5218] hsr_slave_1: entered promiscuous mode
[   55.704133][ T5218] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.711683][ T5218] Cannot create hsr debugfs directory
[   55.720760][ T5219] hsr_slave_0: entered promiscuous mode
[   55.727863][ T5219] hsr_slave_1: entered promiscuous mode
[   55.734227][ T5219] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.741821][ T5219] Cannot create hsr debugfs directory
[   56.048107][ T5229] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   56.074585][ T5229] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   56.092205][ T5217] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.114176][ T5217] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.132615][ T5229] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   56.141535][ T5217] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.154391][ T5229] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   56.167393][ T5217] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.213139][ T5219] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   56.223222][ T5219] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   56.232076][ T5219] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   56.242245][ T5219] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   56.324641][ T5222] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.349963][ T5222] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.368716][ T5222] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.380542][ T5222] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.417222][ T5218] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.447087][ T5218] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.456963][ T5218] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.470265][ T5218] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.510586][ T5217] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.529496][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.576561][ T5229] 8021q: adding VLAN 0 to HW filter on device team0
[   56.598764][ T5217] 8021q: adding VLAN 0 to HW filter on device team0
[   56.629143][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.636452][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.647723][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.655035][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.665250][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.672320][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.689041][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.719365][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.726521][ T4031] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.749584][ T5219] 8021q: adding VLAN 0 to HW filter on device team0
[   56.780467][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.787581][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.822416][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.829557][ T1067] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.855673][ T5217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.910913][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.924339][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.012918][ T5218] 8021q: adding VLAN 0 to HW filter on device team0
[   57.040362][ T5222] 8021q: adding VLAN 0 to HW filter on device team0
[   57.060751][ T5219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.106397][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.113563][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.138113][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.145238][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.164297][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.171460][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.198586][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.205739][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.286464][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.387415][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.467345][ T5217] veth0_vlan: entered promiscuous mode
[   57.519182][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.547002][ T5217] veth1_vlan: entered promiscuous mode
[   57.626392][ T5233] Bluetooth: hci1: command tx timeout
[   57.626518][ T5230] Bluetooth: hci2: command tx timeout
[   57.637465][ T5224] Bluetooth: hci0: command tx timeout
[   57.637556][ T5233] Bluetooth: hci4: command tx timeout
[   57.697573][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.705370][ T5230] Bluetooth: hci3: command tx timeout
[   57.719701][ T5219] veth0_vlan: entered promiscuous mode
[   57.746090][ T5217] veth0_macvtap: entered promiscuous mode
[   57.769122][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.786008][ T5219] veth1_vlan: entered promiscuous mode
[   57.811116][ T5217] veth1_macvtap: entered promiscuous mode
[   57.859580][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.891693][ T5218] veth0_vlan: entered promiscuous mode
[   57.907347][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.919888][ T5217] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.930123][ T5217] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.940292][ T5217] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.951387][ T5217] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.967973][ T5222] veth0_vlan: entered promiscuous mode
[   57.977365][ T5218] veth1_vlan: entered promiscuous mode
[   58.009228][ T5222] veth1_vlan: entered promiscuous mode
[   58.035976][ T5229] veth0_vlan: entered promiscuous mode
[   58.049460][ T5218] veth0_macvtap: entered promiscuous mode
[   58.065199][ T5219] veth0_macvtap: entered promiscuous mode
[   58.081770][ T5218] veth1_macvtap: entered promiscuous mode
[   58.090701][ T5229] veth1_vlan: entered promiscuous mode
[   58.110489][ T5219] veth1_macvtap: entered promiscuous mode
[   58.161513][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.173390][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.190098][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.203297][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.214298][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.224624][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.235619][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.247243][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.268088][ T5222] veth0_macvtap: entered promiscuous mode
[   58.280961][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.292238][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.307337][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.318456][ T5218] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.327657][ T5218] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.336990][ T5218] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.346382][ T5218] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.377276][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.388030][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.398478][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.409006][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.421071][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.440486][ T5222] veth1_macvtap: entered promiscuous mode
[   58.455005][ T5229] veth0_macvtap: entered promiscuous mode
[   58.468563][ T5229] veth1_macvtap: entered promiscuous mode
[   58.474678][ T4031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.489515][ T5219] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.498873][ T4031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.502672][ T5219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.515885][ T5219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.524706][ T5219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.554386][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.565471][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.577476][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.589017][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.599057][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.609799][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.621084][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.645058][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.646294][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.664131][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.669113][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.676332][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.692211][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.702176][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.716882][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.727586][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.738175][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.749443][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.764594][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.775192][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.785371][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.796164][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.808039][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.818948][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.831077][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.860657][ T5222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.869634][ T5222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.878987][ T5222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.887735][ T5222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.908072][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.919272][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.930747][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.941919][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.952065][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.963522][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.973495][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.984776][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.997007][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.030025][ T5217] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.060370][ T5229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.071577][ T5229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.081793][ T5229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.090847][ T5229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.133421][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.152640][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.220829][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.244658][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.290057][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.298032][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.382827][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   59.405585][ T5307] =======================================================
[   59.405585][ T5307] WARNING: The mand mount option has been deprecated and
[   59.405585][ T5307]          and is ignored by this kernel. Remove the mand
[   59.405585][ T5307]          option from the mount to silence this warning.
[   59.405585][ T5307] =======================================================
[   59.412959][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   59.440405][    C1] vkms_vblank_simulate: vblank timer overrun
[   59.450346][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   59.471843][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.480789][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.487386][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.503898][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.561157][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.592228][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.613917][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.621338][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.694647][ T4031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.704417][ T5230] Bluetooth: hci4: command tx timeout
[   59.708805][ T5224] Bluetooth: hci1: command tx timeout
[   59.717188][ T5224] Bluetooth: hci2: command tx timeout
[   59.724020][ T5233] Bluetooth: hci0: command tx timeout
[   59.737246][ T4031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.793422][ T5233] Bluetooth: hci3: command tx timeout
[   60.034689][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   60.858023][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   60.870317][ T5310] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   60.878109][ T5310] syz.1.6: attempt to access beyond end of device
[   60.878109][ T5310] loop1: rw=0, sector=0, nr_sectors = 2 limit=0
[   60.912986][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   60.954464][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   60.956303][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   61.847129][ T5329] MTD: Attempt to mount non-MTD device "/dev/loop3"
[   61.862995][ T5329] syz.3.4: attempt to access beyond end of device
[   61.862995][ T5329] loop3: rw=0, sector=0, nr_sectors = 2 limit=0
[   61.993263][ T5233] Bluetooth: hci0: command tx timeout
[   62.000089][ T5233] Bluetooth: hci2: command tx timeout
[   62.011125][ T5233] Bluetooth: hci1: command tx timeout
[   62.032266][ T5233] Bluetooth: hci4: command tx timeout
[   62.032786][ T5224] Bluetooth: hci3: command tx timeout
[   62.202743][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   62.211490][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   64.266896][ T4613] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[   64.266956][ T4613] CPU: 1 UID: 0 PID: 4613 Comm: kworker/u9:1 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0
[   64.266983][ T4613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   64.267000][ T4613] Workqueue: hci3 hci_rx_work
[   64.267041][ T4613] Call Trace:
[   64.267050][ T4613]  <TASK>
[   64.267060][ T4613]  dump_stack_lvl+0x241/0x360
[   64.267086][ T4613]  ? __pfx_dump_stack_lvl+0x10/0x10
[   64.267105][ T4613]  ? __pfx__printk+0x10/0x10
[   64.267127][ T4613]  ? sysfs_create_dir_ns+0x28a/0x3a0
[   64.267147][ T4613]  ? __kmalloc_cache_noprof+0x19c/0x2c0
[   64.267173][ T4613]  sysfs_create_dir_ns+0x2ce/0x3a0
[   64.267196][ T4613]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   64.267222][ T4613]  kobject_add_internal+0x435/0x8d0
[   64.267257][ T4613]  kobject_add+0x152/0x220
[   64.267277][ T4613]  ? do_raw_spin_unlock+0x13c/0x8b0
[   64.267302][ T4613]  ? device_add+0x3e7/0xbf0
[   64.267320][ T4613]  ? __pfx_kobject_add+0x10/0x10
[   64.267339][ T4613]  ? _raw_spin_unlock+0x28/0x50
[   64.267365][ T4613]  ? get_device_parent+0x165/0x410
[   64.267386][ T4613]  device_add+0x4e5/0xbf0
[   64.267410][ T4613]  hci_conn_add_sysfs+0xe8/0x200
[   64.267433][ T4613]  le_conn_complete_evt+0xc9f/0x12e0
[   64.267458][ T4613]  ? trace_contention_end+0x3c/0x120
[   64.267475][ T4613]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   64.267491][ T4613]  ? __mutex_unlock_slowpath+0x21d/0x750
[   64.267503][ T4613]  ? __copy_skb_header+0x437/0x5b0
[   64.267518][ T4613]  ? skb_pull_data+0x112/0x230
[   64.267535][ T4613]  hci_le_enh_conn_complete_evt+0x185/0x420
[   64.267555][ T4613]  hci_event_packet+0xa55/0x1540
[   64.267571][ T4613]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   64.267588][ T4613]  ? __pfx_hci_event_packet+0x10/0x10
[   64.267600][ T4613]  ? do_raw_spin_unlock+0x13c/0x8b0
[   64.267617][ T4613]  ? hci_send_to_monitor+0xd8/0x7f0
[   64.267633][ T4613]  ? kcov_remote_start+0x97/0x7d0
[   64.267649][ T4613]  hci_rx_work+0x3e8/0xca0
[   64.267666][ T4613]  ? process_scheduled_works+0x976/0x1850
[   64.267681][ T4613]  process_scheduled_works+0xa63/0x1850
[   64.267710][ T4613]  ? __pfx_process_scheduled_works+0x10/0x10
[   64.267729][ T4613]  ? assign_work+0x364/0x3d0
[   64.267746][ T4613]  worker_thread+0x870/0xd30
[   64.267764][ T4613]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[   64.267781][ T4613]  ? __kthread_parkme+0x169/0x1d0
[   64.267798][ T4613]  ? __pfx_worker_thread+0x10/0x10
[   64.267812][ T4613]  kthread+0x2f0/0x390
[   64.267823][ T4613]  ? __pfx_worker_thread+0x10/0x10
[   64.267837][ T4613]  ? __pfx_kthread+0x10/0x10
[   64.267848][ T4613]  ret_from_fork+0x4b/0x80
[   64.267863][ T4613]  ? __pfx_kthread+0x10/0x10
[   64.267874][ T4613]  ret_from_fork_asm+0x1a/0x30
[   64.267896][ T4613]  </TASK>
[   64.267910][ T4613] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   64.267930][ T4613] Bluetooth: hci3: failed to register connection device
[   65.131259][ T5368] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   65.133257][ T5368] syz.1.18: attempt to access beyond end of device
[   65.133257][ T5368] loop1: rw=0, sector=0, nr_sectors = 2 limit=0
[   66.343695][ T4613] Bluetooth: hci3: command tx timeout
[   76.797577][  T937] cfg80211: failed to load regulatory.db
[   84.853456][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[   84.853554][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  105.828626][ T5224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  107.812618][ T5224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  108.846563][ T5224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  108.858481][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  108.860535][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  108.860711][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  108.874125][ T4613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  110.766273][ T4613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  110.782575][ T4613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  110.790404][ T5233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  110.790732][ T5233] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  110.790927][ T4613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  114.710178][ T5224] Bluetooth: hci5: command tx timeout
[  114.710481][ T5224] Bluetooth: hci6: command tx timeout
[  117.714462][ T5233] Bluetooth: hci6: command tx timeout
[  117.714509][ T5233] Bluetooth: hci5: command tx timeout
[  120.707259][ T5224] Bluetooth: hci5: command tx timeout
[  120.707292][ T5224] Bluetooth: hci6: command tx timeout
[  124.615167][ T5233] Bluetooth: hci6: command tx timeout
[  124.615200][ T5233] Bluetooth: hci5: command tx timeout
[  126.636722][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.637668][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.638054][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.638524][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.638845][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  126.639413][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  129.602508][ T5224] Bluetooth: hci0: command tx timeout
[  130.620581][ T5233] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  130.625534][ T5233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  130.626081][ T5233] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  130.626588][ T5233] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  130.626928][ T5233] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  130.627091][ T5233] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  132.612232][ T5224] Bluetooth: hci0: command tx timeout
[  132.663020][ T5224] Bluetooth: hci7: command tx timeout
[  133.634938][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  133.634971][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  133.676262][ T5233] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  135.575395][ T5233] Bluetooth: hci0: command tx timeout
[  135.575432][ T5233] Bluetooth: hci7: command tx timeout
[  135.615653][ T4613] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  135.616230][ T4613] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  135.617224][ T4613] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  135.618083][ T4613] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  135.618401][ T4613] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  137.588437][ T1067] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.580529][ T4613] Bluetooth: hci7: command tx timeout
[  138.580561][ T4613] Bluetooth: hci0: command tx timeout
[  138.580606][ T4613] Bluetooth: hci8: command tx timeout
[  141.581742][ T4613] Bluetooth: hci7: command tx timeout
[  141.581789][ T5224] Bluetooth: hci8: command tx timeout
[  144.524334][ T5224] Bluetooth: hci8: command tx timeout
[  147.524379][ T4613] Bluetooth: hci8: command tx timeout
[  148.546145][ T1067] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.589231][ T5224] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  163.590479][ T5224] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  163.590975][ T5224] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  164.552560][ T5224] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  165.772729][ T5224] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  165.773067][ T5224] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  168.782733][ T4613] Bluetooth: hci9: command tx timeout
[  171.292617][ T4613] Bluetooth: hci9: command tx timeout
[  173.312593][ T4613] Bluetooth: hci9: command tx timeout
[  176.953177][ T5224] Bluetooth: hci9: command tx timeout
[  179.516279][ T5234] Bluetooth: hci1: command 0x0406 tx timeout
[  179.516335][ T5230] Bluetooth: hci3: command 0x0406 tx timeout
[  179.516362][ T5234] Bluetooth: hci4: command 0x0406 tx timeout
[  187.476429][ T1067] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.873933][ T5226] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  189.880410][ T5226] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  189.880914][ T5230] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  189.883476][ T5230] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  189.884684][ T5230] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  189.885264][ T5230] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  189.885538][ T5230] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  189.896520][ T4613] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  189.897102][ T4613] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  189.899440][ T4613] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  190.845598][ T4613] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  190.845925][ T4613] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  192.902534][ T5224] Bluetooth: hci10: Opcode 0x0c39 failed: -110
[  193.956651][ T5233] Bluetooth: hci10: unexpected event for opcode 0x0c39
[  193.956695][ T5233] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  194.954806][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  194.954855][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  196.073333][ T5431] Bluetooth: hci10: Opcode 0x0c03 failed: -110
[  200.512664][ T5230] Bluetooth: hci11: command tx timeout
[  202.632659][ T5230] Bluetooth: hci11: command tx timeout
[  205.033716][ T5230] Bluetooth: hci11: command tx timeout
[  207.417609][ T5230] Bluetooth: hci11: command tx timeout
[  224.012596][   T30] INFO: task syz.0.10:5347 blocked for more than 147 seconds.
[  224.012630][   T30]       Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0
[  224.012644][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  224.012657][   T30] task:syz.0.10        state:D stack:25216 pid:5347  tgid:5341  ppid:5222   flags:0x00004006
[  224.012735][   T30] Call Trace:
[  224.012743][   T30]  <TASK>
[  224.012760][   T30]  __schedule+0x1843/0x4ae0
[  224.012821][   T30]  ? __pfx___schedule+0x10/0x10
[  224.012849][   T30]  ? __pfx_lock_release+0x10/0x10
[  224.012879][   T30]  ? __lock_acquire+0x1384/0x2050
[  224.012914][   T30]  ? schedule+0x90/0x320
[  224.012937][   T30]  schedule+0x14b/0x320
[  224.012964][   T30]  schedule_timeout+0xb0/0x310
[  224.012988][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  224.013009][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  224.013046][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  224.013070][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  224.013099][   T30]  __down_common+0x346/0x7f0
[  224.013128][   T30]  ? __pfx___down_common+0x10/0x10
[  224.013147][   T30]  ? _raw_spin_lock_irqsave+0xe1/0x120
[  224.013178][   T30]  ? n_tty_write+0x6ca/0x1230
[  224.013207][   T30]  down+0x84/0xc0
[  224.013230][   T30]  console_lock+0x145/0x1b0
[  224.013254][   T30]  con_flush_chars+0x6f/0x270
[  224.013279][   T30]  con_write+0x30/0x40
[  224.013302][   T30]  n_tty_write+0xd62/0x1230
[  224.013345][   T30]  ? __pfx_n_tty_write+0x10/0x10
[  224.013371][   T30]  ? __pfx_woken_wake_function+0x10/0x10
[  224.013392][   T30]  ? __virt_addr_valid+0x183/0x530
[  224.013412][   T30]  ? __virt_addr_valid+0x183/0x530
[  224.013430][   T30]  ? __virt_addr_valid+0x45f/0x530
[  224.013451][   T30]  ? __phys_addr_symbol+0x2f/0x70
[  224.013470][   T30]  ? __check_object_size+0x48e/0x900
[  224.013493][   T30]  ? __pfx_n_tty_write+0x10/0x10
[  224.013517][   T30]  file_tty_write+0x546/0x9b0
[  224.013548][   T30]  vfs_write+0xa6d/0xc90
[  224.013576][   T30]  ? __pfx_tty_write+0x10/0x10
[  224.013599][   T30]  ? __pfx_vfs_write+0x10/0x10
[  224.013638][   T30]  ? fdget_pos+0x19a/0x320
[  224.013672][   T30]  ksys_write+0x183/0x2b0
[  224.013698][   T30]  ? __pfx_ksys_write+0x10/0x10
[  224.013730][   T30]  do_syscall_64+0xf3/0x230
[  224.013749][   T30]  ? clear_bhb_loop+0x35/0x90
[  224.013768][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.013796][   T30] RIP: 0033:0x7fa110f7dff9
[  224.013816][   T30] RSP: 002b:00007fa1109ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  224.013835][   T30] RAX: ffffffffffffffda RBX: 00007fa111136130 RCX: 00007fa110f7dff9
[  224.013849][   T30] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000007
[  224.013863][   T30] RBP: 00007fa110ff0296 R08: 0000000000000000 R09: 0000000000000000
[  224.013876][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.013889][   T30] R13: 0000000000000000 R14: 00007fa111136130 R15: 00007fff3974f6c8
[  224.013918][   T30]  </TASK>
[  224.013938][   T30] 
[  224.013938][   T30] Showing all locks held in the system:
[  224.013948][   T30] 3 locks held by kworker/u8:0/11:
[  224.013960][   T30]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  224.014022][   T30]  #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  224.014074][   T30]  #2: ffffffff8fcbf248 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  225.012602][   T30] 1 lock held by khungtaskd/30:
[  225.012617][   T30]  #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  225.012685][   T30] 7 locks held by kworker/u8:6/1067:
[  225.012715][   T30] 2 locks held by getty/4989:
[  225.012728][   T30]  #0: ffff88814cab00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  225.012800][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  225.012863][   T30] 4 locks held by kworker/1:8/5304:
[  225.012876][   T30] 3 locks held by kworker/1:9/5305:
[  225.012887][   T30]  #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  225.012947][   T30]  #1: ffffc900046dfd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  225.013004][   T30]  #2: ffffffff8fcbf248 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0
[  225.013061][   T30] 4 locks held by syz.0.10/5347:
[  225.013073][   T30]  #0: ffff8880763400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  225.013128][   T30]  #1: ffff888076340130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write+0x417/0x9b0
[  225.013180][   T30]  #2: ffff8880763402e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x25e/0x1230
[  225.013238][   T30]  #3: ffffc900038a5380 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x6ca/0x1230
[  225.013297][   T30] 2 locks held by syz-executor/5396:
[  225.013352][   T30]  #0: ffffffff8fcb2750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  225.013418][   T30]  #1: ffffffff8fcbf248 (rtnl_mutex){+.+.}-{3:3}, at: cangw_pernet_exit_batch+0x20/0x90
[  225.013482][   T30] 1 lock held by syz-executor/5399:
[  225.013495][   T30]  #0: ffffffff8fcbf248 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  225.013549][   T30] 3 locks held by syz-executor/5406:
[  225.013561][   T30]  #0: ffff88802fafcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[  225.013618][   T30]  #1: ffff88802fafc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  225.013673][   T30]  #2: ffffffff8fe2baa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[  225.013729][   T30] 2 locks held by syz-executor/5410:
[  225.013741][   T30]  #0: ffffffff8fcb2750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  225.013797][   T30]  #1: ffffffff8fcbf248 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0
[  225.013854][   T30] 2 locks held by syz-executor/5414:
[  225.013865][   T30]  #0: ffffffff8fcb2750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  225.013923][   T30]  #1: ffffffff8fcbf248 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0
[  225.013976][   T30] 2 locks held by syz-executor/5422:
[  225.013987][   T30]  #0: ffffffff8fcb2750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  225.014040][   T30]  #1: ffffffff8fcbf248 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  225.014094][   T30] 2 locks held by syz-executor/5432:
[  225.014106][   T30]  #0: ffffffff8fcb2750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  225.014157][   T30]  #1: ffffffff8fcbf248 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720
[  225.014207][   T30] 2 locks held by dhcpcd/5440:
[  225.014218][   T30]  #0: ffff88807d175c08 (&sb->s_type->i_mutex_key#9){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  225.014274][   T30]  #1: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  225.014337][   T30] 1 lock held by dhcpcd/5442:
[  225.014348][   T30]  #0: ffff888063e78258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0
[  225.014403][   T30] 4 locks held by dhcpcd/5443:
[  225.014418][   T30] 
[  225.014425][   T30] =============================================
[  225.014425][   T30] 
[  225.014445][   T30] NMI backtrace for cpu 0
[  225.014461][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0
[  225.014481][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  225.014493][   T30] Call Trace:
[  225.014500][   T30]  <TASK>
[  225.014510][   T30]  dump_stack_lvl+0x241/0x360
[  225.014533][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.014553][   T30]  ? __pfx__printk+0x10/0x10
[  225.014581][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  225.014609][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  225.014630][   T30]  ? _printk+0xd5/0x120
[  225.014647][   T30]  ? __pfx__printk+0x10/0x10
[  225.014665][   T30]  ? __wake_up_klogd+0xcc/0x110
[  225.014689][   T30]  ? __pfx__printk+0x10/0x10
[  225.014708][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  225.014733][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  225.014758][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  225.014784][   T30]  watchdog+0xff4/0x1040
[  225.014809][   T30]  ? watchdog+0x1ea/0x1040
[  225.014837][   T30]  ? __pfx_watchdog+0x10/0x10
[  225.014859][   T30]  kthread+0x2f0/0x390
[  225.014878][   T30]  ? __pfx_watchdog+0x10/0x10
[  225.014901][   T30]  ? __pfx_kthread+0x10/0x10
[  225.014920][   T30]  ret_from_fork+0x4b/0x80
[  225.014943][   T30]  ? __pfx_kthread+0x10/0x10
[  225.014962][   T30]  ret_from_fork_asm+0x1a/0x30
[  225.014998][   T30]  </TASK>
[  225.015008][   T30] Sending NMI from CPU 0 to CPUs 1:
[  225.015039][    C1] NMI backtrace for cpu 1
[  225.015051][    C1] CPU: 1 UID: 0 PID: 5381 Comm: syz.4.22 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0
[  225.015070][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  225.015079][    C1] RIP: 0010:kasan_check_range+0x5/0x290
[  225.015106][    C1] Code: 8e e8 ef 4e e2 ff 90 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <41> 57 41 56 41 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37
[  225.015124][    C1] RSP: 0018:ffffc9000477f930 EFLAGS: 00000046
[  225.015138][    C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81704484
[  225.015150][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901bba28
[  225.015160][    C1] RBP: ffffc9000477fa88 R08: 0000000000000001 R09: 0000000000000000
[  225.015171][    C1] R10: dffffc0000000000 R11: fffffbfff2037746 R12: 1ffff920008eff30
[  225.015183][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000
[  225.015194][    C1] FS:  00007f30461fb6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  225.015209][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  225.015220][    C1] CR2: 00005611353f3ca3 CR3: 00000000293fe000 CR4: 00000000003526f0
[  225.015234][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  225.015243][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  225.015254][    C1] Call Trace:
[  225.015260][    C1]  <NMI>
[  225.015266][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  225.015285][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  225.015309][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  225.015328][    C1]  ? nmi_handle+0x2a/0x5a0
[  225.015351][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  225.015371][    C1]  ? nmi_handle+0x14f/0x5a0
[  225.015387][    C1]  ? nmi_handle+0x2a/0x5a0
[  225.015404][    C1]  ? kasan_check_range+0x5/0x290
[  225.015426][    C1]  ? default_do_nmi+0x63/0x160
[  225.015446][    C1]  ? exc_nmi+0x123/0x1f0
[  225.015465][    C1]  ? end_repeat_nmi+0xf/0x53
[  225.015483][    C1]  ? lock_acquire+0xd4/0x550
[  225.015505][    C1]  ? kasan_check_range+0x5/0x290
[  225.015527][    C1]  ? kasan_check_range+0x5/0x290
[  225.015555][    C1]  ? kasan_check_range+0x5/0x290
[  225.015578][    C1]  </NMI>
[  225.015584][    C1]  <TASK>
[  225.015589][    C1]  lock_acquire+0xd4/0x550
[  225.015614][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  225.015636][    C1]  ? __pfx_lock_release+0x10/0x10
[  225.015659][    C1]  ? autoremove_wake_function+0x16/0x110
[  225.015687][    C1]  _raw_spin_lock_irqsave+0xd5/0x120
[  225.015708][    C1]  ? prepare_to_wait_exclusive+0x45/0x230
[  225.015730][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  225.015751][    C1]  ? __pfx___might_resched+0x10/0x10
[  225.015775][    C1]  prepare_to_wait_exclusive+0x45/0x230
[  225.015801][    C1]  __se_sys_io_uring_enter+0x17d5/0x2bb0
[  225.015820][    C1]  ? wake_up_q+0xdc/0x120
[  225.015853][    C1]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[  225.015871][    C1]  ? do_futex+0x33b/0x560
[  225.015889][    C1]  ? __pfx_io_wake_function+0x10/0x10
[  225.015920][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  225.015944][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  225.015967][    C1]  ? do_syscall_64+0x100/0x230
[  225.015985][    C1]  ? __x64_sys_io_uring_enter+0x21/0xf0
[  225.016005][    C1]  do_syscall_64+0xf3/0x230
[  225.016021][    C1]  ? clear_bhb_loop+0x35/0x90
[  225.016037][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.016059][    C1] RIP: 0033:0x7f304537dff9
[  225.016074][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.016086][    C1] RSP: 002b:00007f30461fb038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  225.016102][    C1] RAX: ffffffffffffffda RBX: 00007f3045535f80 RCX: 00007f304537dff9
[  225.016114][    C1] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 0000000000000003
[  225.016124][    C1] RBP: 00007f30453f0296 R08: 0000000000000000 R09: 0000000000000000
[  225.016134][    C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  225.016144][    C1] R13: 0000000000000000 R14: 00007f3045535f80 R15: 00007fff260c71d8
[  225.016162][    C1]  </TASK>
[  229.465809][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  229.465828][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0
[  229.465851][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  229.465863][   T30] Call Trace:
[  229.465871][   T30]  <TASK>
[  229.465878][   T30]  dump_stack_lvl+0x241/0x360
[  229.465906][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  229.465925][   T30]  ? __pfx__printk+0x10/0x10
[  229.465941][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  229.465973][   T30]  ? vscnprintf+0x5d/0x90
[  229.465995][   T30]  panic+0x349/0x880
[  229.466014][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  229.466035][   T30]  ? __pfx_panic+0x10/0x10
[  229.466050][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  229.466072][   T30]  ? __irq_work_queue_local+0x137/0x410
[  229.466096][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  229.466116][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  229.466137][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  229.466161][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  229.466185][   T30]  watchdog+0x1033/0x1040
[  229.466218][   T30]  ? watchdog+0x1ea/0x1040
[  229.466244][   T30]  ? __pfx_watchdog+0x10/0x10
[  229.466265][   T30]  kthread+0x2f0/0x390
[  229.466283][   T30]  ? __pfx_watchdog+0x10/0x10
[  229.466304][   T30]  ? __pfx_kthread+0x10/0x10
[  229.466323][   T30]  ret_from_fork+0x4b/0x80
[  229.466346][   T30]  ? __pfx_kthread+0x10/0x10
[  229.466364][   T30]  ret_from_fork_asm+0x1a/0x30
[  229.466398][   T30]  </TASK>
[  229.466662][   T30] Kernel Offset: disabled