last executing test programs:

7m36.182166974s ago: executing program 2 (id=12):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_sec\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x8)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000006340)={0x2020}, 0x203b)

7m33.062509412s ago: executing program 2 (id=13):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]})
sendmmsg(0xffffffffffffffff, &(0x7f00000078c0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="67a873ce195a275eb1b6619e78a7d507dcb99407f421809b7caea286c5a49d313e513ee800b74dae1b396feed9ead90da8ec0806f3cc8c0942416d1022c82a", 0x3f}], 0x1}}], 0x1, 0x810)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x3}}], 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x80, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}], 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e23, 0x9, @private1, 0x106}, 0x1c)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0), 0x5f)

7m27.156126208s ago: executing program 2 (id=22):
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0x2, 0x0, 0x3, 0x2, 0x8, 0x9, 0x0, 0x0, 0x2, 0x8}}, 0x50)
vmsplice(r0, &(0x7f0000000140), 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x2000000)
r1 = fanotify_init(0x8, 0x40000)
write$binfmt_elf64(r1, &(0x7f0000000840)=ANY=[], 0x40)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x5, 0xb3, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470085000200000001001b240401015955800000aa00389b711001000000001e240501008002e0"], 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "89"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b)
write$UHID_DESTROY(r4, &(0x7f00000001c0), 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="93fc85ff30d2", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000440)=0x1)

7m20.834613042s ago: executing program 2 (id=37):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setns(0xc9, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b29, &(0x7f0000000000)={'wlan0\x00'})
connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p  \x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100080000000c0001800800010005000000100002800c00"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

7m18.155254868s ago: executing program 2 (id=43):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r2, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
read(r2, &(0x7f0000000b00), 0x100)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(r2, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x177)

7m12.228693344s ago: executing program 2 (id=59):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x1, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x180001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000140)=ANY=[])
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000080)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x200, @local, 0x1}, @in6={0xa, 0x4e23, 0x1000, @local, 0x4}], 0x38)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2c3}, 0x1c)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @private2, 0xffffffff}, 0x1c)
listen(r3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

6m56.947194275s ago: executing program 32 (id=59):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x1, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x180001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000140)=ANY=[])
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000080)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x200, @local, 0x1}, @in6={0xa, 0x4e23, 0x1000, @local, 0x4}], 0x38)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2c3}, 0x1c)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @private2, 0xffffffff}, 0x1c)
listen(r3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

5m37.44204487s ago: executing program 0 (id=244):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
close(r2)
listen(0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
r3 = socket(0x10, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xffffffff}}, 0x2e)

5m30.886111263s ago: executing program 0 (id=255):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setns(0xc9, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b29, &(0x7f0000000000)={'wlan0\x00'})
connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p ', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100080000000c0001800800010005000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

5m28.77055622s ago: executing program 0 (id=258):
openat$kvm(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000002c0)=@ethtool_cmd={0x35, 0xc5, 0x531, 0x8d, 0xf, 0x1, 0x6, 0x25, 0x5, 0xd, 0xad, 0x7, 0x80, 0x80, 0xfd, 0xf, [0x3, 0x10007c88]}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="1a040500bbff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14)

5m28.249872818s ago: executing program 0 (id=261):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x18, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8fd00000000bfa120000000000007010000f8ffffffb702000008000000b703000002800000850000000600000095"], &(0x7f00000002c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r2, 0x78)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
listen(r3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x4, @local, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2afa0c1bc6fc54b71f03985ac33e31d612d97ea6efcda8853b824430503621f06679995d916cb4361795dd7dbae51d07384b7c2e694900"}, 0xd8)
syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f704000000000000009ae5d322348df7"}]}}}}}}}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20)
sendto(r2, &(0x7f00000006c0)="01", 0x1, 0x4004000, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000100)={0x6, r5, 0x8, {0x3ff}, 0x40}, 0x1)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$sock_attach_bpf(r0, 0x29, 0x49, 0x0, 0x3d)
r7 = socket$netlink(0x10, 0x3, 0xc)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x10040, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)

5m25.845211695s ago: executing program 0 (id=265):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20048851}, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3, 0x4}, 0x20)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000a000110000000000000000000500000a44000000010a010400000000000000000a000004090001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0x50}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x80000000, @vifc_lcl_addr=@remote, @loopback}, 0x10)
modify_ldt$write(0x1, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000120001030000000000000000000000004e22ff0f00000000000000000000e000"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000fffffff00000000004000300"], 0x50}}, 0x44000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000240)={0x2710, 0x3, 0xffff1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x4, 0x0, 0xfec00000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x200000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
r7 = io_uring_setup(0x709f, &(0x7f0000000280)={0x0, 0xd611, 0x2000, 0x800001, 0x40000084})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
r8 = socket(0x11, 0x3, 0x8)
ioctl$sock_ifreq(r8, 0x8931, &(0x7f0000000580)={'team0\x00', @ifru_map={0x0, 0x6, 0x84, 0x3, 0x1}})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x0, 0x1}, 0x20)

5m19.046946175s ago: executing program 0 (id=271):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200591214120600002fb96dbcf706e105000000655865001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

5m18.316119321s ago: executing program 33 (id=271):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200591214120600002fb96dbcf706e105000000655865001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

35.0402031s ago: executing program 1 (id=834):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x30}}, 0x0)
r2 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x34000)

33.714182051s ago: executing program 1 (id=835):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {<r7=>0x80000000, <r8=>0x0}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000240)={r7, &(0x7f0000000200)=[{<r9=>0x80000000}], &(0x7f00000003c0)=[{{}, {<r10=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000500)={r10, 0x0, &(0x7f0000000540)=[{{<r11=>0x80000000, <r12=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f000000a300)={{r9, r12, 0x2, [0x80000001, 0x8]}, {r11, r8, 0x6, [0x2, 0x3]}, 0x0, [0x7d, 0x8]})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x44}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, 0x0, 0x40)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x94}}, 0x0)

31.924526734s ago: executing program 1 (id=838):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000700), 0x0)
close(0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='0', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0)
write(r3, &(0x7f0000000d00)='0', 0x1)
close(r3)
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd)

28.766651653s ago: executing program 1 (id=842):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
syz_usb_connect(0x0, 0x52, 0x0, 0x0)
read(r1, &(0x7f0000000b00), 0x100)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(r1, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x177)

24.651150774s ago: executing program 1 (id=848):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) (async)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 64)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8)
close(r0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010000112233445566778899aabb08004500e4140000000001170000010203040506070800000c00020006000600080000000e00030008000c00040007"], 0x68}}, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4)
sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0xa4, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x92}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x38eec0}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x40008d0)

19.941172707s ago: executing program 1 (id=857):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/ocfs2/node/node1/ipv4_port\x00', 0x2, 0x0) (fail_nth: 4)

18.551145932s ago: executing program 34 (id=857):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/ocfs2/node/node1/ipv4_port\x00', 0x2, 0x0) (fail_nth: 4)

15.481462498s ago: executing program 3 (id=860):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffec5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
fanotify_mark(0xffffffffffffffff, 0x102, 0x40001043, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000007c0)="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", 0x265}], 0x1}, 0x80c0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000ffdbdf250400000005000a00010000000800010048ac837ac53d", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004084)
socket$nl_generic(0x10, 0x3, 0x10)

14.863635782s ago: executing program 3 (id=862):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x80000, 0x1)
ioctl$MEMWRITEOOB64(0xffffffffffffffff, 0xc0184d15, &(0x7f0000000140)={0xfffffffffffffffb, 0x0, 0x2f, &(0x7f0000000100)="505313ec7b5c9752bff3c3ecebd9d15872121da5bb1e7610b3674c1e0ca3a9e55c9e3184c87ef193213424078037b9"})
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4)
write(r1, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4)
recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0x6}], 0x1, 0x2000, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020601080000000000000000050000000500050001000000881cc4e5f9bc7bd8dab9895d692af6c8050001000600000005000100070000000500010007000000d44e320000000005000400010000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)

14.648453132s ago: executing program 3 (id=863):
writev(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]})
close_range(r2, 0xffffffffffffffff, 0x0)

13.394544188s ago: executing program 3 (id=864):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mq_unlink(0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$MEMREADOOB64(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x1})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x605, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xec23fecebe36efc5}, @TCA_TBF_BURST={0xffffffffffffff5d, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x2, 0x6a0, 0x7, 0x35c, 0x7fff}, {0x6, 0x2, 0x1ff, 0x4, 0x8, 0x6d166e06}, 0x119, 0x8, 0x1a00}}]}}]}, 0x6c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280080005000400000004001200080004"], 0x48}}, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@x25, {&(0x7f0000000180)=""/87, 0x57}, &(0x7f0000000200), 0x90}, 0xa0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc000000480007", 0x7)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0x20, &(0x7f0000001080)={0x0, 0x0, <r3=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xf, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f82420"], 0x7)
r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7)
linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000080)='./file0\x00', 0x0)

12.054237967s ago: executing program 3 (id=868):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
syz_usb_connect(0x0, 0x52, 0x0, 0x0)
read(r1, &(0x7f0000000b00), 0x100)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(r1, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x177)

9.019176535s ago: executing program 3 (id=870):
r0 = syz_io_uring_setup(0x2b06, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0x100000}, &(0x7f0000ffd000), 0x0, &(0x7f0000000000))
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90)
io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f00000003c0), 0x2)

3.51691571s ago: executing program 4 (id=874):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000700), 0x0)
close(0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='0', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0)
write(r3, &(0x7f0000000d00)='0', 0x1)
close(r3)
close(0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd)

3.185621112s ago: executing program 4 (id=875):
r0 = syz_open_dev$mtd(0x0, 0x46, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mq_unlink(0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x605, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xec23fecebe36efc5}, @TCA_TBF_BURST={0xffffffffffffff5d, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x2, 0x6a0, 0x7, 0x35c, 0x7fff}, {0x6, 0x2, 0x1ff, 0x4, 0x8, 0x6d166e06}, 0x119, 0x8, 0x1a00}}]}}]}, 0x6c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280080005000400000004001200080004"], 0x48}}, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@x25, {&(0x7f0000000180)=""/87, 0x57}, &(0x7f0000000200), 0x90}, 0xa0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc000000480007", 0x7)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0x20, &(0x7f0000001080)={0x0, 0x0, <r4=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xf, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f82420"], 0x7)
r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7)
linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000080)='./file0\x00', 0x0)

2.778820087s ago: executing program 4 (id=876):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x8c)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = semget$private(0x0, 0x7, 0x191)
semtimedop(r0, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0)
semop(r0, &(0x7f0000000180)=[{0x2, 0x8}], 0x1)
semctl$GETZCNT(r0, 0x0, 0xf, 0x0)

1.817381816s ago: executing program 4 (id=877):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="114353012008ba00000037510800", 0x5b, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r1, 0x1, 0x7, 0x6, @local}, 0x14)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'})
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0)
write(r3, &(0x7f0000000240)="94", 0x1)
vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r2, r6, 0x8f5, 0x0)
write$P9_RLOPEN(r6, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x10, 0x2, 0x4}, 0x3}}, 0x18)
write(r4, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1bc, 0x0, r7}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0, &(0x7f0000000000)=<r11=>0x0)
syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x10000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xb0d, 0x0, 0x0, 0x1000, 0x80000001, 0x0, 0x0, 0x103}}}, &(0x7f0000000300)=<r12=>0x0)
syz_ublk_setup_queues(r7, r12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x4, 0x8000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x0, 0xfffffffd, 0x69, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fde, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x20000000, 0x0, 0xffffffff, 0x8000, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0xd}, 0x50)
syz_open_dev$vcsa(&(0x7f0000000580), 0x80000001, 0x40000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
r13 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0xda, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x0, 0x5, "0404a6"}, {0x0, 0x12, "960605390006fff5800000b61af93a93"}]}, @rr={0x7, 0x1b, 0x57, [@rand_addr=0x64010101, @private=0xa010100, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @cipso={0x86, 0x50, 0x0, [{0x0, 0x12, "08051a5f89f58e0820f284210200b7c8"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x7, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x8, "02a20948fd74"}]}]}}, "a815a23d"}}}}}, 0x0)

409.986876ms ago: executing program 4 (id=878):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = dup2(r0, r0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="7b48ced66043b9f59ff26e6900cab4", @ANYRES16=r3, @ANYBLOB="000428bd7000ffdbdf25010000000000000008410000004c0018fffffff875647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x20008801}, 0x4000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x69e4}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000580)="7c78df0439ad7bb5229cbf916c63d8245b4d9f09f36f7075bc9f56920f90f42dabfe7bac6f29756ff447681980907e230045449182a551110ae208d6e170f8a87d995af63b226ab0f0a1270c76074292aa0590c901bd8f40d21f223b65bb2f1d8dc82c8d7b25ea9005f6f8baf696c688a4fa1c33efa11181272ac586da7bc4f7fc8719de7dd357f198342535eb58")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0)
write(r4, &(0x7f0000000240)='8086 100e ', 0xa)
tkill(0x0, 0x2a)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x208600, 0x0)
epoll_create(0x2)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)

0s ago: executing program 4 (id=879):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000200)=0x100, 0x4)
socket$unix(0x1, 0x1, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f700000001090212000180000000090400"], 0x0)
syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x23d2, 0x10, 0x3, 0x210004}, 0x0, 0x0, &(0x7f0000000000))
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000061401002bbd7000fedbdf2527611fb0cf55ffdaec448b82c08b2d0972eb6fecc4793b9715a639bbb69c76260574ca333f2a7c2aa1983a33cabd1cd5abc8f06712f6c031ad055c51a0ced736217a335cecf0bcc6553e9bbad5f5dd67998bec35230bbda81b0c378218dec6dedfa6f7eff3a3d5fb3c79b6a298fe4f88af4c867155850027398013dd32f1bfbea1a893"], 0x28}}, 0x20040080)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
r3 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x4d, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r4, &(0x7f0000000040)="9880378312a63e112602d9670ab688dbd0d40a0f4d8b9cb3af17658e2e4f8be7a2f40caf8cadd95b1c97eda546798277b267dc15abe1a12eaf2f0ce524588df014e8d7e56e49bf5e852f0b98aa", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) (fail_nth: 4)

kernel console output (not intermixed with test programs):

17.070124][ T8154]  do_seccomp+0x770/0xd30
[  417.070164][ T8154]  ? __se_sys_futex+0x3a8/0x450
[  417.070192][ T8154]  ? __pfx_do_seccomp+0x10/0x10
[  417.070227][ T8154]  ? rcu_is_watching+0x16/0xb0
[  417.070264][ T8154]  do_syscall_64+0x166/0x520
[  417.070282][ T8154]  ? trace_irq_disable+0x3b/0x140
[  417.070301][ T8154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.070319][ T8154]  ? clear_bhb_loop+0x70/0xc0
[  417.070341][ T8154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.070359][ T8154] RIP: 0033:0x7ff290ede159
[  417.070418][ T8154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  417.070460][ T8154] RSP: 002b:00007ff28f136028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  417.070486][ T8154] RAX: ffffffffffffffda RBX: 00007ff291165fa0 RCX: 00007ff290ede159
[  417.070501][ T8154] RDX: 0000200000000000 RSI: 000000000000001f RDI: 0000000000000001
[  417.070513][ T8154] RBP: 00007ff290f75024 R08: 0000000000000000 R09: 0000000000000000
[  417.070525][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  417.070536][ T8154] R13: 00007ff291166038 R14: 00007ff291165fa0 R15: 00007ffcc715e738
[  417.070571][ T8154]  </TASK>
[  417.071014][ T8154] syz.4.563: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  417.071473][ T8154] CPU: 0 UID: 0 PID: 8154 Comm: syz.4.563 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  417.071495][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  417.071506][ T8154] Call Trace:
[  417.071513][ T8154]  <TASK>
[  417.071521][ T8154]  dump_stack_lvl+0xe8/0x150
[  417.071552][ T8154]  warn_alloc+0x24d/0x270
[  417.071575][ T8154]  ? lockdep_hardirqs_on+0x7b/0x110
[  417.071598][ T8154]  ? __pfx_warn_alloc+0x10/0x10
[  417.071619][ T8154]  ? kfree+0x1c5/0x6d0
[  417.071645][ T8154]  ? __get_vm_area_node+0x219/0x2f0
[  417.071672][ T8154]  __vmalloc_node_range_noprof+0x36b/0x1540
[  417.071693][ T8154]  ? __kasan_kmalloc+0x93/0xb0
[  417.071717][ T8154]  ? __kmalloc_cache_noprof+0x3d5/0x680
[  417.071736][ T8154]  ? do_seccomp+0x72e/0xd30
[  417.071760][ T8154]  ? do_syscall_64+0x166/0x520
[  417.071777][ T8154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.071817][ T8154]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  417.071846][ T8154]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  417.071868][ T8154]  __vmalloc_noprof+0xd2/0x120
[  417.071888][ T8154]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  417.071925][ T8154]  bpf_prog_alloc_no_stats+0x47/0x560
[  417.071949][ T8154]  ? bpf_prog_alloc+0x2a/0x1a0
[  417.071982][ T8154]  bpf_prog_alloc+0x3c/0x1a0
[  417.072009][ T8154]  bpf_prog_create_from_user+0xa7/0x440
[  417.072028][ T8154]  ? __pfx_seccomp_check_filter+0x10/0x10
[  417.072056][ T8154]  do_seccomp+0x770/0xd30
[  417.072120][ T8154]  ? __se_sys_futex+0x3a8/0x450
[  417.072164][ T8154]  ? __pfx_do_seccomp+0x10/0x10
[  417.072193][ T8154]  ? rcu_is_watching+0x16/0xb0
[  417.072231][ T8154]  do_syscall_64+0x166/0x520
[  417.072250][ T8154]  ? trace_irq_disable+0x3b/0x140
[  417.072270][ T8154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.072288][ T8154]  ? clear_bhb_loop+0x70/0xc0
[  417.072310][ T8154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.072328][ T8154] RIP: 0033:0x7ff290ede159
[  417.072345][ T8154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  417.072360][ T8154] RSP: 002b:00007ff28f136028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  417.072379][ T8154] RAX: ffffffffffffffda RBX: 00007ff291165fa0 RCX: 00007ff290ede159
[  417.072393][ T8154] RDX: 0000200000000000 RSI: 000000000000001f RDI: 0000000000000001
[  417.072406][ T8154] RBP: 00007ff290f75024 R08: 0000000000000000 R09: 0000000000000000
[  417.072417][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  417.072428][ T8154] R13: 00007ff291166038 R14: 00007ff291165fa0 R15: 00007ffcc715e738
[  417.072456][ T8154]  </TASK>
[  417.072496][ T8154] Mem-Info:
[  417.072512][ T8154] active_anon:194 inactive_anon:6580 isolated_anon:0
[  417.072512][ T8154]  active_file:25668 inactive_file:35975 isolated_file:0
[  417.072512][ T8154]  unevictable:18 dirty:141 writeback:0
[  417.072512][ T8154]  slab_reclaimable:15592 slab_unreclaimable:96153
[  417.072512][ T8154]  mapped:30137 shmem:536 pagetables:1388
[  417.072512][ T8154]  sec_pagetables:0 bounce:0
[  417.072512][ T8154]  kernel_misc_reclaimable:0
[  417.072512][ T8154]  free:1304860 free_pcp:5433 free_cma:0
[  417.072588][ T8154] Node 0 active_anon:776kB inactive_anon:26320kB active_file:102476kB inactive_file:143900kB unevictable:72kB isolated(anon):0kB isolated(file):0kB mapped:120548kB dirty:560kB writeback:0kB shmem:2144kB kernel_stack:13352kB pagetables:5396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  417.072637][ T8154] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  417.072679][ T8154] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  417.072745][ T8154] lowmem_reserve[]: 0 2498 2500 2500 2500
[  417.072837][ T8154] Node 0 DMA32 free:1274024kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:776kB inactive_anon:26320kB active_file:102476kB inactive_file:143900kB unevictable:72kB writepending:560kB zspages:0kB present:3129332kB managed:2558876kB mlocked:72kB bounce:0kB free_pcp:21712kB local_pcp:5116kB free_cma:0kB
[  417.072909][ T8154] lowmem_reserve[]: 0 0 1 1 1
[  417.072964][ T8154] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1816kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB
[  417.073038][ T8154] lowmem_reserve[]: 0 0 0 0 0
[  417.073077][ T8154] Node 1 Normal free:3930056kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  417.073154][ T8154] lowmem_reserve[]: 0 0 0 0 0
[  417.073186][ T8154] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  417.073304][ T8154] Node 0 DMA32: 663*4kB (UME) 1101*8kB (UME) 963*16kB (UME) 928*32kB (UME) 555*64kB (UME) 298*128kB (UME) 158*256kB (UME) 69*512kB (UM) 45*1024kB (UME) 13*2048kB (M) 243*4096kB (UM) = 1274036kB
[  417.079267][ T8154] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  417.079413][ T8154] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 5*16kB (UM) 7*32kB (UM) 4*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 958*4096kB (M) = 3930056kB
[  417.079564][ T8154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  417.079580][ T8154] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  417.079594][ T8154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  417.079609][ T8154] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  417.079624][ T8154] 62175 total pagecache pages
[  417.079664][ T8154] 0 pages in swap cache
[  417.079673][ T8154] Free swap  = 124996kB
[  417.079680][ T8154] Total swap = 124996kB
[  417.079688][ T8154] 2097051 pages RAM
[  417.079694][ T8154] 0 pages HighMem/MovableOnly
[  417.079707][ T8154] 425262 pages reserved
[  417.079714][ T8154] 0 pages cma reserved
[  417.723490][ T4973] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  417.877162][ T4973] usb 2-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00
[  417.879623][ T4973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.879654][ T4973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.879674][ T4973] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  417.879713][ T4973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.911980][ T4973] usb 2-1: config 0 descriptor??
[  418.063668][ T2867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  418.322426][ T2867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  418.354183][ T4973] hid (null): unknown global tag 0xd
[  418.402489][ T4973] wacom 0003:056A:002A.000F: unknown global tag 0xd
[  418.402840][ T4973] wacom 0003:056A:002A.000F: item 0 2 1 13 parsing failed
[  418.407523][ T4973] wacom 0003:056A:002A.000F: parse failed
[  418.407651][ T4973] wacom 0003:056A:002A.000F: probe with driver wacom failed with error -22
[  418.447897][ T2867] bond0 (unregistering): Released all slaves
[  418.594727][ T4973] usb 2-1: USB disconnect, device number 10
[  420.933579][   T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  421.986196][ T2867] hsr_slave_0: left promiscuous mode
[  422.478574][ T2867] hsr_slave_1: left promiscuous mode
[  422.486897][ T2867] batman_adv: batadv0: Removing interface: batadv_slave_0
[  422.541280][ T2867] batman_adv: batadv0: Removing interface: batadv_slave_1
[  422.594208][   T31] usb 4-1: Using ep0 maxpacket: 32
[  422.604931][   T31] usb 4-1: unable to get BOS descriptor or descriptor too short
[  422.605034][   T31] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=c6.bd
[  422.624051][   T31] usb 4-1: config 10 has an invalid interface number: 196 but max is 0
[  422.632377][   T31] usb 4-1: config 10 has no interface number 0
[  422.632415][   T31] usb 4-1: config 10 interface 196 has no altsetting 0
[  422.650956][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.661473][   T31] usb 4-1: Product: syz
[  422.661495][   T31] usb 4-1: Manufacturer: syz
[  422.661510][   T31] usb 4-1: SerialNumber: syz
[  422.870659][   T31] net1080 4-1:10.196: probe with driver net1080 failed with error -22
[  422.965884][   T31] usb 4-1: USB disconnect, device number 7
[  423.774391][ T2867] team0 (unregistering): Port device team_slave_1 removed
[  423.861829][ T2867] team0 (unregistering): Port device team_slave_0 removed
[  425.424766][ T7976] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.424983][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.439865][ T7976] bridge_slave_0: entered allmulticast mode
[  425.451223][ T7976] bridge_slave_0: entered promiscuous mode
[  425.467953][ T7976] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.469694][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.471499][ T7976] bridge_slave_1: entered allmulticast mode
[  425.544562][ T7976] bridge_slave_1: entered promiscuous mode
[  425.804054][ T4973] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  425.998654][ T4973] usb 5-1: device descriptor read/64, error -71
[  426.109492][ T7976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.113497][ T5728] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  426.126563][ T7976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.363521][ T5728] usb 4-1: Using ep0 maxpacket: 8
[  426.472111][ T5728] usb 4-1: unable to get BOS descriptor or descriptor too short
[  426.472228][ T5728] usb 4-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a
[  426.476002][ T7976] team0: Port device team_slave_0 added
[  426.480490][ T5728] usb 4-1: config 153 has too many interfaces: 130, using maximum allowed: 32
[  426.480519][ T5728] usb 4-1: config 153 has an invalid descriptor of length 250, skipping remainder of the config
[  426.480541][ T5728] usb 4-1: config 153 has 0 interfaces, different from the descriptor's value: 130
[  426.491338][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.491367][ T5728] usb 4-1: Product: syz
[  426.491381][ T5728] usb 4-1: Manufacturer: syz
[  426.491395][ T5728] usb 4-1: SerialNumber: syz
[  426.543655][ T4973] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  426.562756][ T7976] team0: Port device team_slave_1 added
[  426.694215][ T4973] usb 5-1: device descriptor read/64, error -71
[  426.804016][ T4973] usb usb5-port1: attempt power cycle
[  426.872355][ T7976] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.877245][ T7976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.877272][ T7976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.939472][ T5728] usb 4-1: USB disconnect, device number 8
[  427.120044][ T7976] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.120120][ T7976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.120144][ T7976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.323626][ T4973] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  427.346583][ T4973] usb 5-1: device descriptor read/8, error -71
[  427.587171][ T7976] hsr_slave_0: entered promiscuous mode
[  427.590421][ T7976] hsr_slave_1: entered promiscuous mode
[  427.623569][ T4973] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  427.644761][ T4973] usb 5-1: device descriptor read/8, error -71
[  427.754170][ T4973] usb usb5-port1: unable to enumerate USB device
[  428.040058][ T5728] logitech-hidpp-device 0005:046D:B012.0010: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  428.584759][ T7777] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  428.745678][ T7777] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  428.784588][ T7777] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  428.882219][ T7777] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  428.933686][ T7777] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  428.971226][ T7777] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  429.035106][ T7777] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  429.093948][ T7777] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  429.259437][ T5694] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  429.430216][ T5694] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  429.448539][ T5694] usb 5-1: config 2 has an invalid interface number: 255 but max is 0
[  429.456880][ T5694] usb 5-1: config 2 has no interface number 0
[  429.456923][ T5694] usb 5-1: too many endpoints for config 2 interface 255 altsetting 255: 255, using maximum allowed: 30
[  429.456983][ T5694] usb 5-1: config 2 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  429.457012][ T5694] usb 5-1: config 2 interface 255 has no altsetting 0
[  429.457048][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.522106][ T5694] ums-realtek 5-1:2.255: USB Mass Storage device detected
[  429.911081][ T5694] usb 5-1: USB disconnect, device number 15
[  430.851515][ T7777] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.125013][ T7976] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  431.216943][ T7976] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  431.230332][ T7976] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  431.302590][ T7976] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  431.446328][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  431.455200][ T7976] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  431.508532][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  431.515790][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  431.528558][ T5607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  431.542301][ T5607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  431.869825][ T7976] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  431.915101][ T7976] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  432.113485][ T5694] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  432.185911][ T7976] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  432.323477][ T5694] usb 2-1: device descriptor read/64, error -71
[  433.715635][ T5694] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  433.922781][ T5607] Bluetooth: hci4: command tx timeout
[  434.043523][ T5694] usb 2-1: device descriptor read/64, error -71
[  434.156992][ T5694] usb usb2-port1: attempt power cycle
[  434.629663][ T8340] FAULT_INJECTION: forcing a failure.
[  434.629663][ T8340] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  434.672026][ T8340] CPU: 1 UID: 0 PID: 8340 Comm: syz.3.610 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  434.672060][ T8340] Tainted: [L]=SOFTLOCKUP
[  434.672067][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  434.672077][ T8340] Call Trace:
[  434.672085][ T8340]  <TASK>
[  434.672093][ T8340]  dump_stack_lvl+0xe8/0x150
[  434.672125][ T8340]  should_fail_ex+0x46b/0x600
[  434.672152][ T8340]  prepare_alloc_pages+0x223/0x650
[  434.672181][ T8340]  __alloc_frozen_pages_noprof+0x1a1/0x5c0
[  434.672207][ T8340]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  434.672231][ T8340]  ? __pfx_policy_nodemask+0x10/0x10
[  434.672256][ T8340]  ? register_lock_class+0x31/0x2e0
[  434.672287][ T8340]  alloc_pages_mpol+0xd4/0x280
[  434.672316][ T8340]  alloc_pages_noprof+0xd2/0x2f0
[  434.672358][ T8340]  __pmd_alloc+0x3a/0x5e0
[  434.672386][ T8340]  handle_mm_fault+0x2198/0x28c0
[  434.672409][ T8340]  ? handle_mm_fault+0xeb/0x28c0
[  434.672438][ T8340]  ? __pfx_handle_mm_fault+0x10/0x10
[  434.672475][ T8340]  ? lock_mm_and_find_vma+0xa7/0x340
[  434.672499][ T8340]  do_user_addr_fault+0x746/0x1340
[  434.672545][ T8340]  exc_page_fault+0x6a/0xc0
[  434.672567][ T8340]  asm_exc_page_fault+0x26/0x30
[  434.672585][ T8340] RIP: 0010:rep_movs_alternative+0x11/0xa0
[  434.672610][ T8340] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f
[  434.672624][ T8340] RSP: 0018:ffffc90005d878c8 EFLAGS: 00050202
[  434.672641][ T8340] RAX: ffffffff84cca3f3 RBX: 0000000000000001 RCX: 0000000000000001
[  434.672653][ T8340] RDX: 0000000000000000 RSI: ffffffffa040a718 RDI: 0000000000000000
[  434.672665][ T8340] RBP: ffffc90005d87c30 R08: ffffffffa040a718 R09: 1ffffffff40814e3
[  434.672678][ T8340] R10: dffffc0000000000 R11: fffffbfff40814e4 R12: 0000000000000001
[  434.672690][ T8340] R13: 00007ffffffff000 R14: ffffffffa040a718 R15: 0000000000000000
[  434.672704][ T8340]  ? 0xffffffffa040a718
[  434.672725][ T8340]  ? 0xffffffffa040a718
[  434.672742][ T8340]  ? check_zeroed_user+0x63/0x170
[  434.672766][ T8340]  ? 0xffffffffa040a718
[  434.672786][ T8340]  _copy_to_user+0x8a/0xb0
[  434.672806][ T8340]  ? 0xffffffffa040a718
[  434.672822][ T8340]  bpf_obj_get_info_by_fd+0x2112/0x3560
[  434.672848][ T8340]  ? is_bpf_text_address+0x292/0x2b0
[  434.672887][ T8340]  ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10
[  434.672916][ T8340]  ? __lock_acquire+0x6df/0x2e40
[  434.672952][ T8340]  ? kstrtoull+0x137/0x1d0
[  434.673010][ T8340]  ? bpf_lsm_bpf+0x9/0x20
[  434.673031][ T8340]  ? security_bpf+0x7e/0x2d0
[  434.673055][ T8340]  __sys_bpf+0xa50/0xd90
[  434.673087][ T8340]  ? __pfx___sys_bpf+0x10/0x10
[  434.673112][ T8340]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  434.673137][ T8340]  ? rt_mutex_slowunlock+0x219/0x460
[  434.673178][ T8340]  ? ksys_write+0x248/0x270
[  434.673201][ T8340]  ? __pfx_ksys_write+0x10/0x10
[  434.673226][ T8340]  __x64_sys_bpf+0xba/0xd0
[  434.673250][ T8340]  do_syscall_64+0x166/0x520
[  434.673269][ T8340]  ? trace_irq_disable+0x3b/0x140
[  434.673290][ T8340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.673366][ T8340]  ? clear_bhb_loop+0x70/0xc0
[  434.673387][ T8340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.673403][ T8340] RIP: 0033:0x7f673c88e159
[  434.673419][ T8340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.673433][ T8340] RSP: 002b:00007f673aae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  434.673452][ T8340] RAX: ffffffffffffffda RBX: 00007f673cb15fa0 RCX: 00007f673c88e159
[  434.673465][ T8340] RDX: 0000000000000010 RSI: 00002000000007c0 RDI: 000000000000000f
[  434.673476][ T8340] RBP: 00007f673aae6090 R08: 0000000000000000 R09: 0000000000000000
[  434.673487][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  434.673497][ T8340] R13: 00007f673cb16038 R14: 00007f673cb15fa0 R15: 00007ffeacf96bf8
[  434.673528][ T8340]  </TASK>
[  435.370240][ T5607] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  435.429861][ T5607] Bluetooth: hci0: unexpected subevent 0x19 length: 25 < 28
[  435.536805][ T8353] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  435.552604][ T7976] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.879283][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'.
[  435.892843][ T8364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.618'.
[  435.973455][ T5607] Bluetooth: hci4: command tx timeout
[  436.355100][ T8370] binder: 8358:8370 ioctl c00c620f ffffffff81000000 returned -14
[  436.360442][ T8370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.616'.
[  437.619547][ T7976] 8021q: adding VLAN 0 to HW filter on device team0
[  437.700510][ T8400] FAULT_INJECTION: forcing a failure.
[  437.700510][ T8400] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  437.700601][ T8400] CPU: 0 UID: 0 PID: 8400 Comm: syz.4.627 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  437.700635][ T8400] Tainted: [L]=SOFTLOCKUP
[  437.700642][ T8400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  437.700665][ T8400] Call Trace:
[  437.700671][ T8400]  <TASK>
[  437.700679][ T8400]  dump_stack_lvl+0xe8/0x150
[  437.700708][ T8400]  should_fail_ex+0x46b/0x600
[  437.700736][ T8400]  _copy_from_iter+0x1d3/0x1660
[  437.700760][ T8400]  ? trace_kmem_cache_alloc+0x29/0xe0
[  437.700786][ T8400]  ? __pfx__copy_from_iter+0x10/0x10
[  437.700802][ T8400]  ? __alloc_skb+0x27a/0x7a0
[  437.700821][ T8400]  ? __alloc_skb+0x27a/0x7a0
[  437.700845][ T8400]  ? netlink_sendmsg+0x650/0xb40
[  437.700871][ T8400]  ? skb_put+0x112/0x210
[  437.700893][ T8400]  netlink_sendmsg+0x6c0/0xb40
[  437.700925][ T8400]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.700951][ T8400]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  437.700976][ T8400]  ? __kernel_text_address+0xd/0x30
[  437.700997][ T8400]  ? unwind_get_return_address+0x4d/0x90
[  437.701020][ T8400]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.701041][ T8400]  sock_sendmsg_nosec+0x13a/0x180
[  437.701063][ T8400]  ____sys_sendmsg+0x565/0x870
[  437.701092][ T8400]  ? __pfx_____sys_sendmsg+0x10/0x10
[  437.701121][ T8400]  ? import_iovec+0x73/0xa0
[  437.701143][ T8400]  ___sys_sendmsg+0x2a5/0x360
[  437.701163][ T8400]  ? __lock_acquire+0x6df/0x2e40
[  437.701189][ T8400]  ? __pfx____sys_sendmsg+0x10/0x10
[  437.701243][ T8400]  ? __fget_files+0x2a/0x420
[  437.701262][ T8400]  ? __fget_files+0x3a8/0x420
[  437.701288][ T8400]  __x64_sys_sendmsg+0x1b7/0x290
[  437.701313][ T8400]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  437.701355][ T8400]  do_syscall_64+0x166/0x520
[  437.701374][ T8400]  ? trace_irq_disable+0x3b/0x140
[  437.701395][ T8400]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.701412][ T8400]  ? clear_bhb_loop+0x70/0xc0
[  437.701433][ T8400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.701450][ T8400] RIP: 0033:0x7ff290ede159
[  437.701467][ T8400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  437.701489][ T8400] RSP: 002b:00007ff28f136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  437.701508][ T8400] RAX: ffffffffffffffda RBX: 00007ff291165fa0 RCX: 00007ff290ede159
[  437.701521][ T8400] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  437.701533][ T8400] RBP: 00007ff28f136090 R08: 0000000000000000 R09: 0000000000000000
[  437.701544][ T8400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  437.701621][ T8400] R13: 00007ff291166038 R14: 00007ff291165fa0 R15: 00007ffcc715e738
[  437.701658][ T8400]  </TASK>
[  438.053541][ T5607] Bluetooth: hci4: command tx timeout
[  439.580586][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.580751][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.133638][ T5607] Bluetooth: hci4: command tx timeout
[  440.781264][ T8404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  440.800442][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.800725][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  442.625791][ T4973] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  442.789494][ T4973] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[  442.828936][ T4973] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  442.860766][ T4973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.866815][ T4973] usb 2-1: Product: syz
[  442.866838][ T4973] usb 2-1: Manufacturer: syz
[  442.866851][ T4973] usb 2-1: SerialNumber: syz
[  442.914317][ T4973] usb 2-1: config 0 descriptor??
[  443.128970][ T4973] cdc_subset 2-1:0.0: probe with driver cdc_subset failed with error -22
[  443.173582][ T8454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.641'.
[  443.205151][ T2869] bridge_slave_1: left allmulticast mode
[  443.207012][ T2869] bridge_slave_1: left promiscuous mode
[  443.207296][ T2869] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.345786][ T5728] usb 2-1: USB disconnect, device number 14
[  443.366985][ T2869] bridge_slave_0: left allmulticast mode
[  443.371739][ T2869] bridge_slave_0: left promiscuous mode
[  443.372042][ T2869] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.963684][ T5898] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  445.133463][ T5898] usb 5-1: Using ep0 maxpacket: 16
[  445.139676][ T5898] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  445.157299][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.163391][ T5898] usb 5-1: Product: syz
[  445.163412][ T5898] usb 5-1: Manufacturer: syz
[  445.163424][ T5898] usb 5-1: SerialNumber: syz
[  445.520687][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[  445.532931][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[  445.994171][ T2869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  446.118201][ T2869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  446.202867][ T2869] bond0 (unregistering): Released all slaves
[  446.237413][ T5898] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  446.257714][ T5898] usb 5-1: USB disconnect, device number 16
[  446.271301][ T8297] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.272474][ T8297] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.272705][ T8297] bridge_slave_0: entered allmulticast mode
[  446.316932][ T8297] bridge_slave_0: entered promiscuous mode
[  446.530562][ T8297] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.530736][ T8297] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.531014][ T8297] bridge_slave_1: entered allmulticast mode
[  446.538662][ T8297] bridge_slave_1: entered promiscuous mode
[  446.762672][ T8297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.823606][ T8297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.963454][ T4973] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  447.037338][ T8485] FAULT_INJECTION: forcing a failure.
[  447.037338][ T8485] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.085629][ T8485] CPU: 1 UID: 0 PID: 8485 Comm: syz.4.650 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  447.085651][ T8485] Tainted: [L]=SOFTLOCKUP
[  447.085656][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  447.085662][ T8485] Call Trace:
[  447.085668][ T8485]  <TASK>
[  447.085672][ T8485]  dump_stack_lvl+0xe8/0x150
[  447.085694][ T8485]  should_fail_ex+0x46b/0x600
[  447.085710][ T8485]  _copy_from_iter+0x1d3/0x1660
[  447.085725][ T8485]  ? trace_kmem_cache_alloc+0x29/0xe0
[  447.085740][ T8485]  ? __pfx__copy_from_iter+0x10/0x10
[  447.085750][ T8485]  ? __alloc_skb+0x27a/0x7a0
[  447.085762][ T8485]  ? __alloc_skb+0x27a/0x7a0
[  447.085775][ T8485]  ? netlink_sendmsg+0x650/0xb40
[  447.085851][ T8485]  ? skb_put+0x112/0x210
[  447.085865][ T8485]  netlink_sendmsg+0x6c0/0xb40
[  447.085890][ T8485]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.085909][ T8485]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  447.085924][ T8485]  ? __kernel_text_address+0xd/0x30
[  447.085936][ T8485]  ? unwind_get_return_address+0x4d/0x90
[  447.085950][ T8485]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.085963][ T8485]  sock_sendmsg_nosec+0x13a/0x180
[  447.085980][ T8485]  ____sys_sendmsg+0x565/0x870
[  447.085998][ T8485]  ? __pfx_____sys_sendmsg+0x10/0x10
[  447.086015][ T8485]  ? import_iovec+0x73/0xa0
[  447.086029][ T8485]  ___sys_sendmsg+0x2a5/0x360
[  447.086041][ T8485]  ? __lock_acquire+0x6df/0x2e40
[  447.086055][ T8485]  ? __pfx____sys_sendmsg+0x10/0x10
[  447.086090][ T8485]  ? __fget_files+0x2a/0x420
[  447.086100][ T8485]  ? __fget_files+0x3a8/0x420
[  447.086114][ T8485]  __x64_sys_sendmsg+0x1b7/0x290
[  447.086128][ T8485]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  447.086151][ T8485]  do_syscall_64+0x166/0x520
[  447.086164][ T8485]  ? trace_irq_disable+0x3b/0x140
[  447.086176][ T8485]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.086186][ T8485]  ? clear_bhb_loop+0x70/0xc0
[  447.086198][ T8485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.086213][ T8485] RIP: 0033:0x7ff290ede159
[  447.086225][ T8485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.086233][ T8485] RSP: 002b:00007ff28f136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  447.086245][ T8485] RAX: ffffffffffffffda RBX: 00007ff291165fa0 RCX: 00007ff290ede159
[  447.086252][ T8485] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003
[  447.086258][ T8485] RBP: 00007ff28f136090 R08: 0000000000000000 R09: 0000000000000000
[  447.086264][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.086270][ T8485] R13: 00007ff291166038 R14: 00007ff291165fa0 R15: 00007ffcc715e738
[  447.086285][ T8485]  </TASK>
[  447.122708][ T2869] hsr_slave_0: left promiscuous mode
[  447.134344][ T4973] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  447.136065][ T4973] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  447.136119][ T4973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  447.136140][ T4973] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  447.136163][ T4973] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  447.136201][ T4973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.413772][ T2869] hsr_slave_1: left promiscuous mode
[  447.415228][ T2869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  447.498186][ T2869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  447.641916][ T8494] FAULT_INJECTION: forcing a failure.
[  447.641916][ T8494] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.693594][ T8494] CPU: 1 UID: 0 PID: 8494 Comm: syz.4.653 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  447.693622][ T8494] Tainted: [L]=SOFTLOCKUP
[  447.693627][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  447.693636][ T8494] Call Trace:
[  447.693642][ T8494]  <TASK>
[  447.693649][ T8494]  dump_stack_lvl+0xe8/0x150
[  447.693676][ T8494]  should_fail_ex+0x46b/0x600
[  447.693697][ T8494]  _copy_to_user+0x31/0xb0
[  447.693716][ T8494]  simple_read_from_buffer+0xe1/0x170
[  447.693736][ T8494]  proc_fail_nth_read+0x1be/0x230
[  447.693758][ T8494]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  447.693776][ T8494]  ? rw_verify_area+0x250/0x4d0
[  447.693794][ T8494]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  447.693810][ T8494]  vfs_read+0x219/0xa90
[  447.693833][ T8494]  ? __pfx_vfs_read+0x10/0x10
[  447.693852][ T8494]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  447.693870][ T8494]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  447.693884][ T8494]  ? mutex_lock_nested+0x152/0x1d0
[  447.693901][ T8494]  ? fdget_pos+0x252/0x320
[  447.693920][ T8494]  ksys_read+0x156/0x270
[  447.693937][ T8494]  ? __pfx_ksys_read+0x10/0x10
[  447.693960][ T8494]  do_syscall_64+0x166/0x520
[  447.693976][ T8494]  ? trace_irq_disable+0x3b/0x140
[  447.694005][ T8494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.694020][ T8494]  ? clear_bhb_loop+0x70/0xc0
[  447.694037][ T8494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.694052][ T8494] RIP: 0033:0x7ff290e9e98e
[  447.694077][ T8494] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  447.694130][ T8494] RSP: 002b:00007ff28f135fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  447.694148][ T8494] RAX: ffffffffffffffda RBX: 00007ff28f1366c0 RCX: 00007ff290e9e98e
[  447.694159][ T8494] RDX: 000000000000000f RSI: 00007ff28f1360a0 RDI: 0000000000000005
[  447.694169][ T8494] RBP: 00007ff28f136090 R08: 0000000000000000 R09: 0000000000000000
[  447.694178][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.694193][ T8494] R13: 00007ff291166038 R14: 00007ff291165fa0 R15: 00007ffcc715e738
[  447.694220][ T8494]  </TASK>
[  448.109286][ T8499] netlink: set zone limit has 4 unknown bytes
[  448.152275][ T4973] gud 4-1:1.0: Failed to add properties (error=-5)
[  448.158975][ T4973] gud 4-1:1.0: probe with driver gud failed with error -5
[  450.184570][ T2869] team0 (unregistering): Port device team_slave_1 removed
[  450.336591][ T2869] team0 (unregistering): Port device team_slave_0 removed
[  450.780928][ T8297] team0: Port device team_slave_0 added
[  450.952175][ T8297] team0: Port device team_slave_1 added
[  451.008194][ T7976] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.047094][ T4973] usb 4-1: USB disconnect, device number 9
[  451.328522][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.331528][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.331558][ T8297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.481106][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.481133][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.481159][ T8297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.605731][ T8527] netlink: 144 bytes leftover after parsing attributes in process `syz.3.663'.
[  452.123626][ T5898] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  452.147839][ T8542] netlink: set zone limit has 4 unknown bytes
[  452.191653][ T8297] hsr_slave_0: entered promiscuous mode
[  452.198621][ T8297] hsr_slave_1: entered promiscuous mode
[  452.199422][ T8297] debugfs: 'hsr0' already exists in 'hsr'
[  452.199445][ T8297] Cannot create hsr debugfs directory
[  452.323473][ T5898] usb 5-1: Invalid ep0 maxpacket: 64
[  452.358912][ T8545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.666'.
[  452.359017][ T8545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.666'.
[  452.725372][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'.
[  452.747062][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'.
[  453.436129][ T5898] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  453.754647][ T5898] usb 5-1: Invalid ep0 maxpacket: 64
[  453.755305][ T5898] usb usb5-port1: attempt power cycle
[  453.978472][ T7976] veth0_vlan: entered promiscuous mode
[  454.011633][ T7976] veth1_vlan: entered promiscuous mode
[  454.033989][  T998] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  454.123469][ T5898] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[  454.144512][ T5898] usb 5-1: Invalid ep0 maxpacket: 64
[  454.187589][  T998] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  454.193217][  T998] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  454.193244][  T998] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  454.196305][  T998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  454.196348][  T998] usb 2-1: SerialNumber: syz
[  454.275227][ T5898] usb 5-1: new low-speed USB device number 20 using dummy_hcd
[  454.300206][ T5898] usb 5-1: Invalid ep0 maxpacket: 64
[  454.300822][ T5898] usb usb5-port1: unable to enumerate USB device
[  454.800656][  T998] usb 2-1: 0:2 : does not exist
[  455.122480][  T998] usb 2-1: USB disconnect, device number 15
[  455.152634][ T8558] netlink: 60 bytes leftover after parsing attributes in process `syz.4.671'.
[  455.302527][ T8560] netlink: 60 bytes leftover after parsing attributes in process `syz.4.671'.
[  455.779549][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  455.865431][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'.
[  455.883455][ T8575] FAULT_INJECTION: forcing a failure.
[  455.883455][ T8575] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  455.883515][ T8575] CPU: 1 UID: 0 PID: 8575 Comm: syz.1.674 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  455.883540][ T8575] Tainted: [L]=SOFTLOCKUP
[  455.883547][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  455.883557][ T8575] Call Trace:
[  455.883578][ T8575]  <TASK>
[  455.883586][ T8575]  dump_stack_lvl+0xe8/0x150
[  455.883618][ T8575]  should_fail_ex+0x46b/0x600
[  455.883645][ T8575]  _copy_from_iter+0x1d3/0x1660
[  455.883664][ T8575]  ? irqentry_exit+0x218/0x910
[  455.883696][ T8575]  ? __pfx__copy_from_iter+0x10/0x10
[  455.883719][ T8575]  ? kcov_common_handle+0xc/0x40
[  455.883742][ T8575]  ? netlink_sendmsg+0x650/0xb40
[  455.883767][ T8575]  ? skb_put+0x112/0x210
[  455.883791][ T8575]  netlink_sendmsg+0x6c0/0xb40
[  455.883824][ T8575]  ? __pfx_netlink_sendmsg+0x10/0x10
[  455.883850][ T8575]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  455.883883][ T8575]  ? __pfx_netlink_sendmsg+0x10/0x10
[  455.883906][ T8575]  sock_sendmsg_nosec+0x13a/0x180
[  455.883928][ T8575]  ____sys_sendmsg+0x565/0x870
[  455.883960][ T8575]  ? __pfx_____sys_sendmsg+0x10/0x10
[  455.883991][ T8575]  ? import_iovec+0x73/0xa0
[  455.884015][ T8575]  ___sys_sendmsg+0x2a5/0x360
[  455.884037][ T8575]  ? __lock_acquire+0x6df/0x2e40
[  455.884063][ T8575]  ? __pfx____sys_sendmsg+0x10/0x10
[  455.884119][ T8575]  ? __fget_files+0x2a/0x420
[  455.884137][ T8575]  ? __fget_files+0x3a8/0x420
[  455.884163][ T8575]  __x64_sys_sendmsg+0x1b7/0x290
[  455.884189][ T8575]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  455.884237][ T8575]  do_syscall_64+0x166/0x520
[  455.884257][ T8575]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.884275][ T8575]  ? clear_bhb_loop+0x70/0xc0
[  455.884297][ T8575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.884314][ T8575] RIP: 0033:0x7f8bc464e159
[  455.884332][ T8575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.884347][ T8575] RSP: 002b:00007f8bc2864028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  455.884372][ T8575] RAX: ffffffffffffffda RBX: 00007f8bc48d6180 RCX: 00007f8bc464e159
[  455.884385][ T8575] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[  455.884396][ T8575] RBP: 00007f8bc2864090 R08: 0000000000000000 R09: 0000000000000000
[  455.884408][ T8575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  455.884419][ T8575] R13: 00007f8bc48d6218 R14: 00007f8bc48d6180 R15: 00007ffdefbcdae8
[  455.884449][ T8575]  </TASK>
[  456.690982][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  456.693309][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  456.748070][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  456.766897][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  457.108359][ T5607] Bluetooth: hci3: unexpected event for opcode 0x042d
[  457.357967][   T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  457.417263][ T8585] FAULT_INJECTION: forcing a failure.
[  457.417263][ T8585] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  457.430485][ T8585] CPU: 1 UID: 0 PID: 8585 Comm: syz.3.677 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  457.430516][ T8585] Tainted: [L]=SOFTLOCKUP
[  457.430523][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  457.430533][ T8585] Call Trace:
[  457.430542][ T8585]  <TASK>
[  457.430549][ T8585]  dump_stack_lvl+0xe8/0x150
[  457.430590][ T8585]  should_fail_ex+0x46b/0x600
[  457.430618][ T8585]  _copy_to_user+0x31/0xb0
[  457.430643][ T8585]  simple_read_from_buffer+0xe1/0x170
[  457.430667][ T8585]  proc_fail_nth_read+0x1be/0x230
[  457.430692][ T8585]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  457.430717][ T8585]  ? rw_verify_area+0x250/0x4d0
[  457.430737][ T8585]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  457.430756][ T8585]  vfs_read+0x219/0xa90
[  457.430784][ T8585]  ? __pfx_vfs_read+0x10/0x10
[  457.430805][ T8585]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  457.430897][ T8585]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  457.430915][ T8585]  ? mutex_lock_nested+0x152/0x1d0
[  457.430938][ T8585]  ? fdget_pos+0x252/0x320
[  457.430964][ T8585]  ksys_read+0x156/0x270
[  457.430985][ T8585]  ? __pfx_ksys_read+0x10/0x10
[  457.431015][ T8585]  do_syscall_64+0x166/0x520
[  457.431034][ T8585]  ? trace_irq_disable+0x3b/0x140
[  457.431055][ T8585]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.431073][ T8585]  ? clear_bhb_loop+0x70/0xc0
[  457.431093][ T8585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.431111][ T8585] RIP: 0033:0x7f673c84e98e
[  457.431128][ T8585] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  457.431144][ T8585] RSP: 002b:00007f673aac4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  457.431164][ T8585] RAX: ffffffffffffffda RBX: 00007f673aac56c0 RCX: 00007f673c84e98e
[  457.431177][ T8585] RDX: 000000000000000f RSI: 00007f673aac50a0 RDI: 0000000000000005
[  457.431188][ T8585] RBP: 00007f673aac5090 R08: 0000000000000000 R09: 0000000000000000
[  457.431199][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  457.431210][ T8585] R13: 00007f673cb16128 R14: 00007f673cb16090 R15: 00007ffeacf96bf8
[  457.431250][ T8585]  </TASK>
[  457.523739][   T10] usb 5-1: Using ep0 maxpacket: 8
[  457.524667][   T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  457.534710][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.534737][   T10] usb 5-1: Product: syz
[  457.534751][   T10] usb 5-1: Manufacturer: syz
[  457.534764][   T10] usb 5-1: SerialNumber: syz
[  457.545330][   T10] usb 5-1: config 0 descriptor??
[  457.552790][   T10] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  457.552897][   T10] pctv452e: pctv452e_power_ctrl: 1
[  457.552897][   T10] 
[  457.552978][   T10] usb 5-1: selecting invalid altsetting 3
[  457.552992][   T10] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  457.552992][   T10] 
[  457.573599][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  457.690955][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  457.694607][   T10] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  457.694701][   T10] usb 5-1: media controller created
[  457.714079][   T10] dvb-usb: bulk message failed: -22 (8/0)
[  457.714102][   T10] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  457.714197][   T10] dvb-usb: MAC address reading failed.
[  457.761670][ T8578] dvb-usb: bulk message failed: -22 (7/0)
[  457.761693][ T8578] pctv452e: I2C error -22; AA 02  FC 00 00 -> aa 02 31 03 fc 00 00
[  457.907917][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  458.295897][   T10] DVB: Unable to find symbol stb0899_attach()
[  458.295966][   T10] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  458.483575][   T10] rc_core: IR keymap rc-tt-1500 not found
[  458.483658][   T10] Registered IR keymap rc-empty
[  458.496728][   T10] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  458.500633][   T10] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input8
[  458.570642][   T10] dvb-usb: schedule remote query interval to 100 msecs.
[  458.570733][   T10] pctv452e: pctv452e_power_ctrl: 0
[  458.570733][   T10] 
[  458.570746][   T10] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  458.719824][   T10] dvb-usb: bulk message failed: -22 (4/0)
[  458.728481][   T10] dvb-usb: error -22 while querying for an remote control event.
[  458.812120][   T10] usb 5-1: USB disconnect, device number 21
[  459.024075][ T5607] Bluetooth: hci5: command tx timeout
[  459.101565][ T8598] FAULT_INJECTION: forcing a failure.
[  459.101565][ T8598] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  459.101678][ T8598] CPU: 0 UID: 0 PID: 8598 Comm: syz.4.679 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  459.101712][ T8598] Tainted: [L]=SOFTLOCKUP
[  459.101718][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  459.101727][ T8598] Call Trace:
[  459.101734][ T8598]  <TASK>
[  459.101742][ T8598]  dump_stack_lvl+0xe8/0x150
[  459.101774][ T8598]  should_fail_ex+0x46b/0x600
[  459.101802][ T8598]  _copy_to_user+0x31/0xb0
[  459.101826][ T8598]  simple_read_from_buffer+0xe1/0x170
[  459.101849][ T8598]  proc_fail_nth_read+0x1be/0x230
[  459.101963][ T8598]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  459.101987][ T8598]  ? rw_verify_area+0x250/0x4d0
[  459.102009][ T8598]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  459.102026][ T8598]  vfs_read+0x219/0xa90
[  459.102053][ T8598]  ? __pfx_vfs_read+0x10/0x10
[  459.102074][ T8598]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  459.102097][ T8598]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  459.102115][ T8598]  ? mutex_lock_nested+0x152/0x1d0
[  459.102136][ T8598]  ? fdget_pos+0x252/0x320
[  459.102161][ T8598]  ksys_read+0x156/0x270
[  459.102181][ T8598]  ? __pfx_ksys_read+0x10/0x10
[  459.102210][ T8598]  do_syscall_64+0x166/0x520
[  459.102229][ T8598]  ? trace_irq_disable+0x3b/0x140
[  459.102249][ T8598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.102266][ T8598]  ? clear_bhb_loop+0x70/0xc0
[  459.102287][ T8598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.102304][ T8598] RIP: 0033:0x7ff290e9e98e
[  459.102321][ T8598] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  459.102336][ T8598] RSP: 002b:00007ff28f114fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  459.102355][ T8598] RAX: ffffffffffffffda RBX: 00007ff28f1156c0 RCX: 00007ff290e9e98e
[  459.102366][ T8598] RDX: 000000000000000f RSI: 00007ff28f1150a0 RDI: 0000000000000003
[  459.102377][ T8598] RBP: 00007ff28f115090 R08: 0000000000000000 R09: 0000000000000000
[  459.102387][ T8598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  459.102398][ T8598] R13: 00007ff291166128 R14: 00007ff291166090 R15: 00007ffcc715e738
[  459.102427][ T8598]  </TASK>
[  459.726261][ T8606] 9p: Bad value for 'wfdno'
[  461.106746][ T5607] Bluetooth: hci5: command tx timeout
[  461.161862][   T10] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  462.523607][ T5728] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  462.675341][ T5728] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  462.713807][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.762463][ T5728] usb 5-1: config 0 descriptor??
[  462.801128][ T5728] cp210x 5-1:0.0: cp210x converter detected
[  463.089123][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.099327][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.173947][ T5607] Bluetooth: hci5: command tx timeout
[  463.462415][ T5728] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71
[  463.467319][ T5728] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[  463.467377][ T5728] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  463.693294][ T5728] usb 5-1: cp210x converter now attached to ttyUSB0
[  463.702664][ T5728] usb 5-1: USB disconnect, device number 22
[  463.880645][ T5728] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  463.892686][ T5728] cp210x 5-1:0.0: device disconnected
[  464.515993][ T8297] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  464.600188][ T8297] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  464.673490][ T8297] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  464.723782][ T8297] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  464.793433][ T8297] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  464.849036][ T8297] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  465.159464][ T8297] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  465.213494][ T8297] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  465.254132][ T5607] Bluetooth: hci5: command tx timeout
[  466.932411][ T8683] netlink: zone id is out of range
[  467.777923][ T1421] bridge_slave_1: left allmulticast mode
[  467.779504][ T1421] bridge_slave_1: left promiscuous mode
[  467.779763][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.805001][ T1421] bridge_slave_0: left allmulticast mode
[  468.805274][ T1421] bridge_slave_0: left promiscuous mode
[  468.805565][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.132469][ T8699] FAULT_INJECTION: forcing a failure.
[  469.132469][ T8699] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.147625][ T8699] CPU: 0 UID: 0 PID: 8699 Comm: syz.4.705 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  469.147659][ T8699] Tainted: [L]=SOFTLOCKUP
[  469.147666][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  469.147676][ T8699] Call Trace:
[  469.147743][ T8699]  <TASK>
[  469.147751][ T8699]  dump_stack_lvl+0xe8/0x150
[  469.147786][ T8699]  should_fail_ex+0x46b/0x600
[  469.147812][ T8699]  _copy_to_user+0x31/0xb0
[  469.147836][ T8699]  simple_read_from_buffer+0xe1/0x170
[  469.147861][ T8699]  proc_fail_nth_read+0x1be/0x230
[  469.147885][ T8699]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  469.147909][ T8699]  ? rw_verify_area+0x250/0x4d0
[  469.147931][ T8699]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  469.147958][ T8699]  vfs_read+0x219/0xa90
[  469.147985][ T8699]  ? __pfx_vfs_read+0x10/0x10
[  469.148006][ T8699]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  469.148030][ T8699]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  469.148050][ T8699]  ? mutex_lock_nested+0x152/0x1d0
[  469.148071][ T8699]  ? fdget_pos+0x252/0x320
[  469.148097][ T8699]  ksys_read+0x156/0x270
[  469.148118][ T8699]  ? __pfx_ksys_read+0x10/0x10
[  469.148147][ T8699]  do_syscall_64+0x166/0x520
[  469.148164][ T8699]  ? trace_irq_disable+0x3b/0x140
[  469.148186][ T8699]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.148208][ T8699]  ? clear_bhb_loop+0x70/0xc0
[  469.148229][ T8699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.148247][ T8699] RIP: 0033:0x7ff290e9e98e
[  469.148267][ T8699] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  469.148282][ T8699] RSP: 002b:00007ff28f135fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  469.148304][ T8699] RAX: ffffffffffffffda RBX: 00007ff28f1366c0 RCX: 00007ff290e9e98e
[  469.148316][ T8699] RDX: 000000000000000f RSI: 00007ff28f1360a0 RDI: 0000000000000004
[  469.148327][ T8699] RBP: 00007ff28f136090 R08: 0000000000000000 R09: 0000000000000000
[  469.148339][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.148359][ T8699] R13: 00007ff291166038 R14: 00007ff291165fa0 R15: 00007ffcc715e738
[  469.148389][ T8699]  </TASK>
[  469.797164][ T8701] FAULT_INJECTION: forcing a failure.
[  469.797164][ T8701] name failslab, interval 1, probability 0, space 0, times 0
[  469.842968][ T8701] CPU: 0 UID: 0 PID: 8701 Comm: syz.4.706 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  469.843001][ T8701] Tainted: [L]=SOFTLOCKUP
[  469.843007][ T8701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  469.843017][ T8701] Call Trace:
[  469.843024][ T8701]  <TASK>
[  469.843032][ T8701]  dump_stack_lvl+0xe8/0x150
[  469.843061][ T8701]  should_fail_ex+0x46b/0x600
[  469.843086][ T8701]  should_failslab+0xa8/0x100
[  469.843113][ T8701]  __kmalloc_noprof+0xfb/0x790
[  469.843135][ T8701]  ? snd_pcm_hw_refine+0xa18/0x17d0
[  469.843213][ T8701]  ? snd_pcm_hw_refine+0xa18/0x17d0
[  469.843241][ T8701]  snd_pcm_hw_refine+0xa18/0x17d0
[  469.843278][ T8701]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  469.843327][ T8701]  ? __asan_memset+0x22/0x50
[  469.843345][ T8701]  ? snd_pcm_oss_change_params_locked+0x700/0x3c80
[  469.843369][ T8701]  ? snd_pcm_oss_change_params_locked+0x75d/0x3c80
[  469.843389][ T8701]  snd_pcm_oss_change_params_locked+0x885/0x3c80
[  469.843431][ T8701]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  469.843446][ T8701]  ? do_raw_spin_lock+0x12b/0x2f0
[  469.843475][ T8701]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  469.843500][ T8701]  ? mutex_lock_interruptible_nested+0x152/0x1d0
[  469.843522][ T8701]  ? snd_pcm_oss_write+0x207/0xb40
[  469.843550][ T8701]  snd_pcm_oss_write+0x274/0xb40
[  469.843586][ T8701]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  469.843609][ T8701]  vfs_write+0x29f/0xbb0
[  469.843636][ T8701]  ? __pfx_vfs_write+0x10/0x10
[  469.843654][ T8701]  ? __fget_files+0x2a/0x420
[  469.843672][ T8701]  ? __fget_files+0x2a/0x420
[  469.843688][ T8701]  ? __fget_files+0x3a8/0x420
[  469.843702][ T8701]  ? __fget_files+0x2a/0x420
[  469.843723][ T8701]  ksys_write+0x156/0x270
[  469.843743][ T8701]  ? __pfx_ksys_write+0x10/0x10
[  469.843772][ T8701]  do_syscall_64+0x166/0x520
[  469.843790][ T8701]  ? trace_irq_disable+0x3b/0x140
[  469.843811][ T8701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.843827][ T8701]  ? clear_bhb_loop+0x70/0xc0
[  469.843848][ T8701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.843874][ T8701] RIP: 0033:0x7ff290ede159
[  469.843892][ T8701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.843907][ T8701] RSP: 002b:00007ff28f136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  469.843925][ T8701] RAX: ffffffffffffffda RBX: 00007ff291165fa0 RCX: 00007ff290ede159
[  469.843937][ T8701] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000003
[  469.843993][ T8701] RBP: 00007ff28f136090 R08: 0000000000000000 R09: 0000000000000000
[  469.844004][ T8701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.844022][ T8701] R13: 00007ff291166038 R14: 00007ff291165fa0 R15: 00007ffcc715e738
[  469.844051][ T8701]  </TASK>
[  470.839416][ T8723] FAULT_INJECTION: forcing a failure.
[  470.839416][ T8723] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  470.880096][ T8723] CPU: 0 UID: 0 PID: 8723 Comm: syz.3.715 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  470.880129][ T8723] Tainted: [L]=SOFTLOCKUP
[  470.880136][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  470.880146][ T8723] Call Trace:
[  470.880155][ T8723]  <TASK>
[  470.880163][ T8723]  dump_stack_lvl+0xe8/0x150
[  470.880196][ T8723]  should_fail_ex+0x46b/0x600
[  470.880223][ T8723]  _copy_from_iter+0x1d3/0x1660
[  470.880249][ T8723]  ? trace_kmem_cache_alloc+0x29/0xe0
[  470.880274][ T8723]  ? __pfx__copy_from_iter+0x10/0x10
[  470.880292][ T8723]  ? __alloc_skb+0x27a/0x7a0
[  470.880311][ T8723]  ? __alloc_skb+0x27a/0x7a0
[  470.880337][ T8723]  ? netlink_sendmsg+0x650/0xb40
[  470.880361][ T8723]  ? skb_put+0x112/0x210
[  470.880385][ T8723]  netlink_sendmsg+0x6c0/0xb40
[  470.880418][ T8723]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.880444][ T8723]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  470.880470][ T8723]  ? __kernel_text_address+0xd/0x30
[  470.880490][ T8723]  ? unwind_get_return_address+0x4d/0x90
[  470.880514][ T8723]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.880537][ T8723]  sock_sendmsg_nosec+0x13a/0x180
[  470.880559][ T8723]  ____sys_sendmsg+0x565/0x870
[  470.880591][ T8723]  ? __pfx_____sys_sendmsg+0x10/0x10
[  470.880622][ T8723]  ? import_iovec+0x73/0xa0
[  470.880646][ T8723]  ___sys_sendmsg+0x2a5/0x360
[  470.880667][ T8723]  ? __lock_acquire+0x6df/0x2e40
[  470.880693][ T8723]  ? __pfx____sys_sendmsg+0x10/0x10
[  470.880749][ T8723]  ? __fget_files+0x2a/0x420
[  470.880772][ T8723]  ? __fget_files+0x3a8/0x420
[  470.880799][ T8723]  __x64_sys_sendmsg+0x1b7/0x290
[  470.880825][ T8723]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  470.880866][ T8723]  do_syscall_64+0x166/0x520
[  470.880885][ T8723]  ? trace_irq_disable+0x3b/0x140
[  470.880904][ T8723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.880932][ T8723]  ? clear_bhb_loop+0x70/0xc0
[  470.880951][ T8723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.880969][ T8723] RIP: 0033:0x7f673c88e159
[  470.880987][ T8723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.881002][ T8723] RSP: 002b:00007f673aae6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  470.881021][ T8723] RAX: ffffffffffffffda RBX: 00007f673cb15fa0 RCX: 00007f673c88e159
[  470.881032][ T8723] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004
[  470.881042][ T8723] RBP: 00007f673aae6090 R08: 0000000000000000 R09: 0000000000000000
[  470.881052][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.881068][ T8723] R13: 00007f673cb16038 R14: 00007f673cb15fa0 R15: 00007ffeacf96bf8
[  470.881093][ T8723]  </TASK>
[  470.911118][ T8725] tmpfs: Unknown parameter '¤*}Ô`"Pmpol'
[  473.233736][ T1421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  474.234710][ T1421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  474.499899][ T1421] bond0 (unregistering): Released all slaves
[  476.045654][ T8569] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.046771][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.046989][ T8569] bridge_slave_0: entered allmulticast mode
[  476.052538][ T8569] bridge_slave_0: entered promiscuous mode
[  476.235622][ T8569] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.243195][ T8569] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.252712][ T8569] bridge_slave_1: entered allmulticast mode
[  476.269264][ T8569] bridge_slave_1: entered promiscuous mode
[  476.531615][ T8569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  476.563863][ T8569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  476.791263][ T8569] team0: Port device team_slave_0 added
[  476.829316][ T8569] team0: Port device team_slave_1 added
[  477.070055][ T8569] batman_adv: batadv0: Adding interface: batadv_slave_0
[  477.077792][ T8569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  477.079932][ T8569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  477.841376][ T8569] batman_adv: batadv0: Adding interface: batadv_slave_1
[  477.848481][ T8569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  477.848514][ T8569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.149547][ T1421] hsr_slave_0: left promiscuous mode
[  478.201168][ T1421] hsr_slave_1: left promiscuous mode
[  478.202572][ T1421] batman_adv: batadv0: Removing interface: batadv_slave_0
[  478.247945][ T1421] batman_adv: batadv0: Removing interface: batadv_slave_1
[  478.549153][ T1421] veth1_vlan: left promiscuous mode
[  478.566823][ T1421] veth0_vlan: left promiscuous mode
[  481.938030][ T8842] 0x000000000000-0x000000020000 : ""
[  481.949338][ T8842] ftl_cs: FTL header not found.
[  482.080166][ T5607] Bluetooth: hci0: unexpected event for opcode 0x2024
[  482.614958][ T1421] team0 (unregistering): Port device team_slave_1 removed
[  482.704327][ T1421] team0 (unregistering): Port device team_slave_0 removed
[  482.909494][ T8857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.755'.
[  483.158425][ T8844] netlink: 48 bytes leftover after parsing attributes in process `syz.3.752'.
[  484.459466][ T8569] hsr_slave_0: entered promiscuous mode
[  484.464814][ T8569] hsr_slave_1: entered promiscuous mode
[  484.755331][ T8878] FAULT_INJECTION: forcing a failure.
[  484.755331][ T8878] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  484.759234][ T8878] CPU: 0 UID: 0 PID: 8878 Comm: syz.3.760 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  484.759266][ T8878] Tainted: [L]=SOFTLOCKUP
[  484.759273][ T8878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  484.759282][ T8878] Call Trace:
[  484.759290][ T8878]  <TASK>
[  484.759298][ T8878]  dump_stack_lvl+0xe8/0x150
[  484.759331][ T8878]  should_fail_ex+0x46b/0x600
[  484.759369][ T8878]  _copy_from_iter+0x1d3/0x1660
[  484.759393][ T8878]  ? trace_kmem_cache_alloc+0x29/0xe0
[  484.759416][ T8878]  ? __pfx__copy_from_iter+0x10/0x10
[  484.759434][ T8878]  ? __alloc_skb+0x27a/0x7a0
[  484.759453][ T8878]  ? __alloc_skb+0x27a/0x7a0
[  484.759477][ T8878]  ? netlink_sendmsg+0x650/0xb40
[  484.759501][ T8878]  ? skb_put+0x112/0x210
[  484.759531][ T8878]  netlink_sendmsg+0x6c0/0xb40
[  484.759564][ T8878]  ? __pfx_netlink_sendmsg+0x10/0x10
[  484.759589][ T8878]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  484.759614][ T8878]  ? __kernel_text_address+0xd/0x30
[  484.759634][ T8878]  ? unwind_get_return_address+0x4d/0x90
[  484.759658][ T8878]  ? __pfx_netlink_sendmsg+0x10/0x10
[  484.759680][ T8878]  sock_sendmsg_nosec+0x13a/0x180
[  484.759701][ T8878]  ____sys_sendmsg+0x565/0x870
[  484.759732][ T8878]  ? __pfx_____sys_sendmsg+0x10/0x10
[  484.759763][ T8878]  ? import_iovec+0x73/0xa0
[  484.759787][ T8878]  ___sys_sendmsg+0x2a5/0x360
[  484.759808][ T8878]  ? __lock_acquire+0x6df/0x2e40
[  484.759835][ T8878]  ? __pfx____sys_sendmsg+0x10/0x10
[  484.759890][ T8878]  ? __fget_files+0x2a/0x420
[  484.759906][ T8878]  ? __fget_files+0x3a8/0x420
[  484.759933][ T8878]  __x64_sys_sendmsg+0x1b7/0x290
[  484.759958][ T8878]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  484.759999][ T8878]  do_syscall_64+0x166/0x520
[  484.760019][ T8878]  ? trace_irq_disable+0x3b/0x140
[  484.760039][ T8878]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.760058][ T8878]  ? clear_bhb_loop+0x70/0xc0
[  484.760079][ T8878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.760125][ T8878] RIP: 0033:0x7f673c88e159
[  484.760145][ T8878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  484.760160][ T8878] RSP: 002b:00007f673aaa4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  484.760180][ T8878] RAX: ffffffffffffffda RBX: 00007f673cb16180 RCX: 00007f673c88e159
[  484.760193][ T8878] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000005
[  484.760205][ T8878] RBP: 00007f673aaa4090 R08: 0000000000000000 R09: 0000000000000000
[  484.760267][ T8878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  484.760278][ T8878] R13: 00007f673cb16218 R14: 00007f673cb16180 R15: 00007ffeacf96bf8
[  484.760307][ T8878]  </TASK>
[  484.854104][ T8297] 8021q: adding VLAN 0 to HW filter on device bond0
[  485.412506][ T8297] 8021q: adding VLAN 0 to HW filter on device team0
[  485.532704][ T8882] FAULT_INJECTION: forcing a failure.
[  485.532704][ T8882] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  485.535945][ T8882] CPU: 1 UID: 0 PID: 8882 Comm: syz.3.763 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  485.535976][ T8882] Tainted: [L]=SOFTLOCKUP
[  485.535982][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  485.535992][ T8882] Call Trace:
[  485.535999][ T8882]  <TASK>
[  485.536020][ T8882]  dump_stack_lvl+0xe8/0x150
[  485.536053][ T8882]  should_fail_ex+0x46b/0x600
[  485.536078][ T8882]  prepare_alloc_pages+0x223/0x650
[  485.536107][ T8882]  __alloc_frozen_pages_noprof+0x1a1/0x5c0
[  485.536133][ T8882]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  485.536160][ T8882]  ? __pfx_policy_nodemask+0x10/0x10
[  485.536189][ T8882]  ? rt_mutex_slowunlock+0x4ee/0xa30
[  485.536217][ T8882]  alloc_pages_mpol+0xd4/0x280
[  485.536245][ T8882]  alloc_pages_noprof+0xd2/0x2f0
[  485.536271][ T8882]  get_free_pages_noprof+0xf/0x80
[  485.536294][ T8882]  __kasan_populate_vmalloc+0x38/0x1c0
[  485.536315][ T8882]  ? rt_spin_unlock+0x165/0x200
[  485.536340][ T8882]  alloc_vmap_area+0xd1a/0x1420
[  485.536371][ T8882]  ? __pfx_alloc_vmap_area+0x10/0x10
[  485.536392][ T8882]  ? __get_vm_area_node+0x155/0x2f0
[  485.536415][ T8882]  __get_vm_area_node+0x200/0x2f0
[  485.536440][ T8882]  __vmalloc_node_range_noprof+0x343/0x1540
[  485.536460][ T8882]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  485.536509][ T8882]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  485.536530][ T8882]  ? kernel_text_address+0xa5/0xe0
[  485.536556][ T8882]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  485.536576][ T8882]  __vmalloc_noprof+0xd2/0x120
[  485.536596][ T8882]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  485.536620][ T8882]  bpf_prog_alloc_no_stats+0x47/0x560
[  485.536644][ T8882]  ? bpf_prog_alloc+0x2a/0x1a0
[  485.536668][ T8882]  bpf_prog_alloc+0x3c/0x1a0
[  485.536692][ T8882]  bpf_prog_load+0x7f8/0x1c20
[  485.536726][ T8882]  ? __pfx_bpf_prog_load+0x10/0x10
[  485.536771][ T8882]  __sys_bpf+0xd0d/0xd90
[  485.536800][ T8882]  ? __pfx___sys_bpf+0x10/0x10
[  485.536824][ T8882]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  485.536853][ T8882]  ? rt_mutex_slowunlock+0x219/0x460
[  485.536893][ T8882]  ? ksys_write+0x248/0x270
[  485.536914][ T8882]  ? __pfx_ksys_write+0x10/0x10
[  485.536936][ T8882]  __x64_sys_bpf+0xba/0xd0
[  485.536959][ T8882]  do_syscall_64+0x166/0x520
[  485.536978][ T8882]  ? trace_irq_disable+0x3b/0x140
[  485.536998][ T8882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.537016][ T8882]  ? clear_bhb_loop+0x70/0xc0
[  485.537036][ T8882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.537053][ T8882] RIP: 0033:0x7f673c88e159
[  485.537070][ T8882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  485.537086][ T8882] RSP: 002b:00007f673aae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  485.537105][ T8882] RAX: ffffffffffffffda RBX: 00007f673cb15fa0 RCX: 00007f673c88e159
[  485.537118][ T8882] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[  485.537129][ T8882] RBP: 00007f673aae6090 R08: 0000000000000000 R09: 0000000000000000
[  485.537140][ T8882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  485.537155][ T8882] R13: 00007f673cb16038 R14: 00007f673cb15fa0 R15: 00007ffeacf96bf8
[  485.537183][ T8882]  </TASK>
[  485.538190][ T8882] syz.3.763: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  485.538256][ T8882] CPU: 1 UID: 0 PID: 8882 Comm: syz.3.763 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  485.538280][ T8882] Tainted: [L]=SOFTLOCKUP
[  485.538286][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  485.538295][ T8882] Call Trace:
[  485.538302][ T8882]  <TASK>
[  485.538309][ T8882]  dump_stack_lvl+0xe8/0x150
[  485.538336][ T8882]  warn_alloc+0x24d/0x270
[  485.538358][ T8882]  ? lockdep_hardirqs_on+0x7b/0x110
[  485.538378][ T8882]  ? __pfx_warn_alloc+0x10/0x10
[  485.538398][ T8882]  ? kfree+0x1c5/0x6d0
[  485.538422][ T8882]  ? __get_vm_area_node+0x219/0x2f0
[  485.538509][ T8882]  __vmalloc_node_range_noprof+0x36b/0x1540
[  485.538555][ T8882]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  485.538576][ T8882]  ? kernel_text_address+0xa5/0xe0
[  485.538601][ T8882]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  485.538623][ T8882]  __vmalloc_noprof+0xd2/0x120
[  485.538641][ T8882]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  485.538666][ T8882]  bpf_prog_alloc_no_stats+0x47/0x560
[  485.538687][ T8882]  ? bpf_prog_alloc+0x2a/0x1a0
[  485.538711][ T8882]  bpf_prog_alloc+0x3c/0x1a0
[  485.538735][ T8882]  bpf_prog_load+0x7f8/0x1c20
[  485.538768][ T8882]  ? __pfx_bpf_prog_load+0x10/0x10
[  485.538813][ T8882]  __sys_bpf+0xd0d/0xd90
[  485.538843][ T8882]  ? __pfx___sys_bpf+0x10/0x10
[  485.538873][ T8882]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  485.538896][ T8882]  ? rt_mutex_slowunlock+0x219/0x460
[  485.538936][ T8882]  ? ksys_write+0x248/0x270
[  485.538956][ T8882]  ? __pfx_ksys_write+0x10/0x10
[  485.538982][ T8882]  __x64_sys_bpf+0xba/0xd0
[  485.539005][ T8882]  do_syscall_64+0x166/0x520
[  485.539023][ T8882]  ? trace_irq_disable+0x3b/0x140
[  485.539042][ T8882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.539060][ T8882]  ? clear_bhb_loop+0x70/0xc0
[  485.539079][ T8882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.539096][ T8882] RIP: 0033:0x7f673c88e159
[  485.539112][ T8882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  485.539132][ T8882] RSP: 002b:00007f673aae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  485.539150][ T8882] RAX: ffffffffffffffda RBX: 00007f673cb15fa0 RCX: 00007f673c88e159
[  485.539163][ T8882] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[  485.539174][ T8882] RBP: 00007f673aae6090 R08: 0000000000000000 R09: 0000000000000000
[  485.539185][ T8882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  485.539195][ T8882] R13: 00007f673cb16038 R14: 00007f673cb15fa0 R15: 00007ffeacf96bf8
[  485.539223][ T8882]  </TASK>
[  485.539230][ T8882] Mem-Info:
[  485.539271][ T8882] active_anon:3048 inactive_anon:20318 isolated_anon:0
[  485.539271][ T8882]  active_file:25713 inactive_file:35958 isolated_file:0
[  485.539271][ T8882]  unevictable:0 dirty:77 writeback:0
[  485.539271][ T8882]  slab_reclaimable:17057 slab_unreclaimable:95695
[  485.539271][ T8882]  mapped:30183 shmem:17155 pagetables:1411
[  485.539271][ T8882]  sec_pagetables:0 bounce:0
[  485.539271][ T8882]  kernel_misc_reclaimable:0
[  485.539271][ T8882]  free:1278066 free_pcp:14159 free_cma:0
[  485.539318][ T8882] Node 0 active_anon:12192kB inactive_anon:81272kB active_file:102656kB inactive_file:143832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120732kB dirty:308kB writeback:0kB shmem:68620kB kernel_stack:13532kB pagetables:5488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  485.539362][ T8882] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  485.539403][ T8882] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  485.539455][ T8882] lowmem_reserve[]: 0 2498 2500 2500 2500
[  485.539487][ T8882] Node 0 DMA32 free:1166848kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12192kB inactive_anon:81272kB active_file:102656kB inactive_file:143832kB unevictable:0kB writepending:308kB zspages:0kB present:3129332kB managed:2558876kB mlocked:0kB bounce:0kB free_pcp:56628kB local_pcp:6132kB free_cma:0kB
[  485.539541][ T8882] lowmem_reserve[]: 0 0 1 1 1
[  485.539571][ T8882] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1816kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  485.539620][ T8882] lowmem_reserve[]: 0 0 0 0 0
[  485.539650][ T8882] Node 1 Normal free:3930056kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  485.541333][ T8882] lowmem_reserve[]: 0 0 0 0 0
[  485.541368][ T8882] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  485.541475][ T8882] Node 0 DMA32: 514*4kB (UME) 61*8kB (UM) 194*16kB (UME) 887*32kB (UME) 336*64kB (UME) 56*128kB (UME) 39*256kB (UME) 67*512kB (UME) 43*1024kB (UM) 12*2048kB (M) 242*4096kB (UM) = 1166832kB
[  485.541618][ T8882] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  485.541707][ T8882] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 5*16kB (UM) 7*32kB (UM) 4*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 958*4096kB (M) = 3930056kB
[  485.541860][ T8882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  485.541876][ T8882] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  485.541890][ T8882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  485.541904][ T8882] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  485.541919][ T8882] 78822 total pagecache pages
[  485.541926][ T8882] 0 pages in swap cache
[  485.541932][ T8882] Free swap  = 124996kB
[  485.541939][ T8882] Total swap = 124996kB
[  485.541945][ T8882] 2097051 pages RAM
[  485.541951][ T8882] 0 pages HighMem/MovableOnly
[  485.541958][ T8882] 425262 pages reserved
[  485.541964][ T8882] 0 pages cma reserved
[  485.702237][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.703700][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  485.816722][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.816873][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  485.927400][ T8888] 0x000000000000-0x000000020000 : ""
[  485.942078][ T8888] ftl_cs: FTL header not found.
[  486.145896][ T8892] netlink: 48 bytes leftover after parsing attributes in process `syz.1.765'.
[  486.263976][ T5607] Bluetooth: hci3: unexpected event for opcode 0x2024
[  486.827666][ T8898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.766'.
[  487.178753][ T8901] FAULT_INJECTION: forcing a failure.
[  487.178753][ T8901] name failslab, interval 1, probability 0, space 0, times 0
[  487.178833][ T8901] CPU: 1 UID: 0 PID: 8901 Comm: syz.1.767 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  487.178859][ T8901] Tainted: [L]=SOFTLOCKUP
[  487.178864][ T8901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  487.178872][ T8901] Call Trace:
[  487.178878][ T8901]  <TASK>
[  487.178886][ T8901]  dump_stack_lvl+0xe8/0x150
[  487.178917][ T8901]  should_fail_ex+0x46b/0x600
[  487.178942][ T8901]  should_failslab+0xa8/0x100
[  487.178967][ T8901]  ? skb_clone+0x212/0x3a0
[  487.179005][ T8901]  kmem_cache_alloc_noprof+0x9e/0x690
[  487.179027][ T8901]  ? skb_clone+0x212/0x3a0
[  487.179051][ T8901]  skb_clone+0x212/0x3a0
[  487.179077][ T8901]  __netlink_deliver_tap+0x413/0x860
[  487.179113][ T8901]  ? netlink_deliver_tap+0x2e/0x1b0
[  487.179137][ T8901]  netlink_deliver_tap+0x19c/0x1b0
[  487.179161][ T8901]  netlink_unicast+0x7b8/0x990
[  487.179193][ T8901]  netlink_sendmsg+0x813/0xb40
[  487.179224][ T8901]  ? __pfx_netlink_sendmsg+0x10/0x10
[  487.179250][ T8901]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  487.179274][ T8901]  ? __kernel_text_address+0xd/0x30
[  487.179294][ T8901]  ? unwind_get_return_address+0x4d/0x90
[  487.179317][ T8901]  ? __pfx_netlink_sendmsg+0x10/0x10
[  487.179340][ T8901]  sock_sendmsg_nosec+0x13a/0x180
[  487.179361][ T8901]  ____sys_sendmsg+0x565/0x870
[  487.179392][ T8901]  ? __pfx_____sys_sendmsg+0x10/0x10
[  487.179423][ T8901]  ? import_iovec+0x73/0xa0
[  487.179446][ T8901]  ___sys_sendmsg+0x2a5/0x360
[  487.179467][ T8901]  ? __lock_acquire+0x6df/0x2e40
[  487.179491][ T8901]  ? __pfx____sys_sendmsg+0x10/0x10
[  487.179547][ T8901]  ? __fget_files+0x2a/0x420
[  487.179563][ T8901]  ? __fget_files+0x3a8/0x420
[  487.179588][ T8901]  __x64_sys_sendmsg+0x1b7/0x290
[  487.179612][ T8901]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  487.179651][ T8901]  do_syscall_64+0x166/0x520
[  487.179671][ T8901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.179689][ T8901]  ? clear_bhb_loop+0x70/0xc0
[  487.179710][ T8901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.179738][ T8901] RIP: 0033:0x7f8bc464e159
[  487.179811][ T8901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  487.179826][ T8901] RSP: 002b:00007f8bc28a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  487.179846][ T8901] RAX: ffffffffffffffda RBX: 00007f8bc48d5fa0 RCX: 00007f8bc464e159
[  487.179859][ T8901] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003
[  487.179870][ T8901] RBP: 00007f8bc28a6090 R08: 0000000000000000 R09: 0000000000000000
[  487.179881][ T8901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  487.179891][ T8901] R13: 00007f8bc48d6038 R14: 00007f8bc48d5fa0 R15: 00007ffdefbcdae8
[  487.179921][ T8901]  </TASK>
[  490.386667][ T8915] FAULT_INJECTION: forcing a failure.
[  490.386667][ T8915] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  490.403662][ T8915] CPU: 0 UID: 0 PID: 8915 Comm: syz.4.771 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  490.403690][ T8915] Tainted: [L]=SOFTLOCKUP
[  490.403696][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  490.403704][ T8915] Call Trace:
[  490.403712][ T8915]  <TASK>
[  490.403723][ T8915]  dump_stack_lvl+0xe8/0x150
[  490.403753][ T8915]  should_fail_ex+0x46b/0x600
[  490.403776][ T8915]  _copy_from_iter+0x4ff/0x1660
[  490.403799][ T8915]  ? txopt_get+0x79/0x3f0
[  490.403838][ T8915]  ? __pfx__copy_from_iter+0x10/0x10
[  490.403851][ T8915]  ? txopt_get+0x343/0x3f0
[  490.403872][ T8915]  ? __pfx_txopt_get+0x10/0x10
[  490.403899][ T8915]  rawv6_sendmsg+0xb88/0x18c0
[  490.403925][ T8915]  ? smack_ipv6host_label+0x824/0x8e0
[  490.403948][ T8915]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  490.403972][ T8915]  ? smack_socket_sendmsg+0x4b8/0x5a0
[  490.403990][ T8915]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[  490.404012][ T8915]  ? lock_acquire+0x115/0x350
[  490.404036][ T8915]  ? sock_rps_record_flow+0x19/0x350
[  490.404057][ T8915]  ? inet_sendmsg+0x298/0x320
[  490.404077][ T8915]  ? __pfx_inet_sendmsg+0x10/0x10
[  490.404096][ T8915]  sock_sendmsg_nosec+0x10e/0x180
[  490.404116][ T8915]  ____sys_sendmsg+0x565/0x870
[  490.404145][ T8915]  ? __pfx_____sys_sendmsg+0x10/0x10
[  490.404168][ T8915]  ? import_iovec+0x73/0xa0
[  490.404186][ T8915]  ___sys_sendmsg+0x2a5/0x360
[  490.404202][ T8915]  ? __lock_acquire+0x6df/0x2e40
[  490.404221][ T8915]  ? __pfx____sys_sendmsg+0x10/0x10
[  490.404264][ T8915]  ? __fget_files+0x2a/0x420
[  490.404277][ T8915]  ? __fget_files+0x3a8/0x420
[  490.404299][ T8915]  __x64_sys_sendmsg+0x1b7/0x290
[  490.404320][ T8915]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  490.404355][ T8915]  do_syscall_64+0x166/0x520
[  490.404372][ T8915]  ? trace_irq_disable+0x3b/0x140
[  490.404390][ T8915]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.404405][ T8915]  ? clear_bhb_loop+0x70/0xc0
[  490.404425][ T8915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.404453][ T8915] RIP: 0033:0x7ff290ede159
[  490.404470][ T8915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  490.404484][ T8915] RSP: 002b:00007ff28f136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  490.404503][ T8915] RAX: ffffffffffffffda RBX: 00007ff291165fa0 RCX: 00007ff290ede159
[  490.404515][ T8915] RDX: 0000000000008080 RSI: 00002000000031c0 RDI: 0000000000000003
[  490.404526][ T8915] RBP: 00007ff28f136090 R08: 0000000000000000 R09: 0000000000000000
[  490.404536][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  490.404546][ T8915] R13: 00007ff291166038 R14: 00007ff291165fa0 R15: 00007ffcc715e738
[  490.404573][ T8915]  </TASK>
[  491.176245][ T8923] FAULT_INJECTION: forcing a failure.
[  491.176245][ T8923] name failslab, interval 1, probability 0, space 0, times 0
[  491.232745][ T8923] CPU: 0 UID: 0 PID: 8923 Comm: syz.4.773 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  491.232780][ T8923] Tainted: [L]=SOFTLOCKUP
[  491.232787][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  491.232798][ T8923] Call Trace:
[  491.232807][ T8923]  <TASK>
[  491.232815][ T8923]  dump_stack_lvl+0xe8/0x150
[  491.232851][ T8923]  should_fail_ex+0x46b/0x600
[  491.232880][ T8923]  should_failslab+0xa8/0x100
[  491.232928][ T8923]  __kmalloc_node_track_caller_noprof+0xfb/0x7b0
[  491.232956][ T8923]  ? __kernfs_new_node+0xac/0xa70
[  491.232977][ T8923]  ? __kernfs_new_node+0xac/0xa70
[  491.233012][ T8923]  kstrdup+0x42/0x100
[  491.233093][ T8923]  __kernfs_new_node+0xac/0xa70
[  491.233153][ T8923]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  491.233184][ T8923]  ? __pfx___kernfs_new_node+0x10/0x10
[  491.233204][ T8923]  ? kernfs_root+0x1c/0x230
[  491.233232][ T8923]  ? kernfs_root+0x1c/0x230
[  491.233253][ T8923]  ? kernfs_root+0x1c/0x230
[  491.233279][ T8923]  kernfs_new_node+0xea/0x140
[  491.233307][ T8923]  __kernfs_create_file+0x4b/0x2e0
[  491.233334][ T8923]  cgroup_addrm_files+0x837/0xd70
[  491.233365][ T8923]  ? __pfx_cgroup_addrm_files+0x10/0x10
[  491.233385][ T8923]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  491.233407][ T8923]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  491.233425][ T8923]  ? rt_mutex_slowunlock+0x4ee/0xa30
[  491.233465][ T8923]  ? css_next_descendant_pre+0x17d/0x260
[  491.233502][ T8923]  css_populate_dir+0x2ba/0x3d0
[  491.233532][ T8923]  cgroup_mkdir+0xcfb/0xf70
[  491.233565][ T8923]  ? __pfx_cgroup_mkdir+0x10/0x10
[  491.233591][ T8923]  kernfs_iop_mkdir+0x213/0x360
[  491.233619][ T8923]  vfs_mkdir+0x408/0x620
[  491.233650][ T8923]  filename_mkdirat+0x289/0x520
[  491.233681][ T8923]  ? __pfx_filename_mkdirat+0x10/0x10
[  491.233709][ T8923]  ? do_getname+0x151/0x250
[  491.233738][ T8923]  __se_sys_mkdirat+0x35/0x150
[  491.233764][ T8923]  do_syscall_64+0x166/0x520
[  491.233784][ T8923]  ? trace_irq_disable+0x3b/0x140
[  491.233805][ T8923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.233824][ T8923]  ? clear_bhb_loop+0x70/0xc0
[  491.233847][ T8923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.233865][ T8923] RIP: 0033:0x7ff290ede159
[  491.233884][ T8923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  491.233900][ T8923] RSP: 002b:00007ff28f115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  491.233921][ T8923] RAX: ffffffffffffffda RBX: 00007ff291166090 RCX: 00007ff290ede159
[  491.233935][ T8923] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  491.233957][ T8923] RBP: 00007ff290f75024 R08: 0000000000000000 R09: 0000000000000000
[  491.233969][ T8923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  491.233980][ T8923] R13: 00007ff291166128 R14: 00007ff291166090 R15: 00007ffcc715e738
[  491.234020][ T8923]  </TASK>
[  491.541054][ T8923] cgroup: cgroup_addrm_files: failed to add cgroup.stat, err=-12
[  492.835714][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  492.914819][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  492.920690][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  492.943745][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  492.947391][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  496.059054][ T5610] Bluetooth: hci1: command tx timeout
[  496.241646][ T8953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.779'.
[  496.926639][ T8959] FAULT_INJECTION: forcing a failure.
[  496.926639][ T8959] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  496.926745][ T8959] CPU: 0 UID: 0 PID: 8959 Comm: syz.3.783 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  496.926765][ T8959] Tainted: [L]=SOFTLOCKUP
[  496.926770][ T8959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  496.926779][ T8959] Call Trace:
[  496.926785][ T8959]  <TASK>
[  496.926793][ T8959]  dump_stack_lvl+0xe8/0x150
[  496.926824][ T8959]  should_fail_ex+0x46b/0x600
[  496.926849][ T8959]  _copy_from_iter+0x1d3/0x1660
[  496.926876][ T8959]  ? trace_kmem_cache_alloc+0x29/0xe0
[  496.926899][ T8959]  ? __pfx__copy_from_iter+0x10/0x10
[  496.926917][ T8959]  ? __alloc_skb+0x27a/0x7a0
[  496.926934][ T8959]  ? __alloc_skb+0x27a/0x7a0
[  496.926954][ T8959]  ? netlink_sendmsg+0x650/0xb40
[  496.926976][ T8959]  ? skb_put+0x112/0x210
[  496.926998][ T8959]  netlink_sendmsg+0x6c0/0xb40
[  496.927029][ T8959]  ? __pfx_netlink_sendmsg+0x10/0x10
[  496.927054][ T8959]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  496.927079][ T8959]  ? __kernel_text_address+0xd/0x30
[  496.927099][ T8959]  ? unwind_get_return_address+0x4d/0x90
[  496.927123][ T8959]  ? __pfx_netlink_sendmsg+0x10/0x10
[  496.927144][ T8959]  sock_sendmsg_nosec+0x13a/0x180
[  496.927164][ T8959]  ____sys_sendmsg+0x565/0x870
[  496.927195][ T8959]  ? __pfx_____sys_sendmsg+0x10/0x10
[  496.927225][ T8959]  ? import_iovec+0x73/0xa0
[  496.927248][ T8959]  ___sys_sendmsg+0x2a5/0x360
[  496.927269][ T8959]  ? __lock_acquire+0x6df/0x2e40
[  496.927295][ T8959]  ? __pfx____sys_sendmsg+0x10/0x10
[  496.927355][ T8959]  ? __fget_files+0x2a/0x420
[  496.927372][ T8959]  ? __fget_files+0x3a8/0x420
[  496.927398][ T8959]  __x64_sys_sendmsg+0x1b7/0x290
[  496.927499][ T8959]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  496.927542][ T8959]  do_syscall_64+0x166/0x520
[  496.927561][ T8959]  ? trace_irq_disable+0x3b/0x140
[  496.927582][ T8959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.927600][ T8959]  ? clear_bhb_loop+0x70/0xc0
[  496.927621][ T8959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.927638][ T8959] RIP: 0033:0x7f673c88e159
[  496.927654][ T8959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  496.927672][ T8959] RSP: 002b:00007f673aae6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  496.927692][ T8959] RAX: ffffffffffffffda RBX: 00007f673cb15fa0 RCX: 00007f673c88e159
[  496.927704][ T8959] RDX: 0000000000040040 RSI: 0000200000000880 RDI: 0000000000000003
[  496.927716][ T8959] RBP: 00007f673aae6090 R08: 0000000000000000 R09: 0000000000000000
[  496.927727][ T8959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  496.927745][ T8959] R13: 00007f673cb16038 R14: 00007f673cb15fa0 R15: 00007ffeacf96bf8
[  496.927773][ T8959]  </TASK>
[  497.478285][ T8966] FAULT_INJECTION: forcing a failure.
[  497.478285][ T8966] name failslab, interval 1, probability 0, space 0, times 0
[  497.504060][ T8966] CPU: 1 UID: 0 PID: 8966 Comm: syz.3.785 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  497.504090][ T8966] Tainted: [L]=SOFTLOCKUP
[  497.504097][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  497.504106][ T8966] Call Trace:
[  497.504113][ T8966]  <TASK>
[  497.504120][ T8966]  dump_stack_lvl+0xe8/0x150
[  497.504153][ T8966]  should_fail_ex+0x46b/0x600
[  497.504178][ T8966]  should_failslab+0xa8/0x100
[  497.504204][ T8966]  __kmalloc_cache_noprof+0xa1/0x680
[  497.504226][ T8966]  ? ceph_auth_init+0x5d/0x350
[  497.504306][ T8966]  ? ceph_auth_init+0x5d/0x350
[  497.504335][ T8966]  ceph_auth_init+0x5d/0x350
[  497.504363][ T8966]  ceph_monc_init+0x52f/0xb10
[  497.504398][ T8966]  ceph_create_client+0x225/0x310
[  497.504419][ T8966]  ceph_get_tree+0x1ca/0x1a40
[  497.504480][ T8966]  ? cap_capable+0x123/0x460
[  497.504499][ T8966]  ? safesetid_security_capable+0xa9/0x1a0
[  497.504523][ T8966]  vfs_get_tree+0x92/0x2a0
[  497.504543][ T8966]  vfs_cmd_create+0xa2/0x200
[  497.504568][ T8966]  __se_sys_fsconfig+0x6bf/0x810
[  497.504596][ T8966]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  497.504614][ T8966]  ? ksys_write+0x248/0x270
[  497.504633][ T8966]  ? __pfx_ksys_write+0x10/0x10
[  497.504655][ T8966]  ? __x64_sys_fsconfig+0x20/0xc0
[  497.504679][ T8966]  do_syscall_64+0x166/0x520
[  497.504719][ T8966]  ? trace_irq_disable+0x3b/0x140
[  497.504741][ T8966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.504763][ T8966]  ? clear_bhb_loop+0x70/0xc0
[  497.504785][ T8966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.504803][ T8966] RIP: 0033:0x7f673c88e159
[  497.504820][ T8966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  497.504835][ T8966] RSP: 002b:00007f673aae6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  497.504854][ T8966] RAX: ffffffffffffffda RBX: 00007f673cb15fa0 RCX: 00007f673c88e159
[  497.504868][ T8966] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  497.504879][ T8966] RBP: 00007f673aae6090 R08: 0000000000000000 R09: 0000000000000000
[  497.504890][ T8966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  497.504901][ T8966] R13: 00007f673cb16038 R14: 00007f673cb15fa0 R15: 00007ffeacf96bf8
[  497.504931][ T8966]  </TASK>
[  498.134540][ T5610] Bluetooth: hci1: command tx timeout
[  498.319902][ T8981] gadgetfs: bound to dummy_udc driver
[  500.227822][ T5610] Bluetooth: hci1: command tx timeout
[  501.851260][ T8997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.792'.
[  501.883558][ T8990] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  502.373547][ T5610] Bluetooth: hci1: command tx timeout
[  502.499752][ T9000] xt_l2tp: wrong L2TP version: 94
[  504.264457][ T9009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'.
[  504.523871][   T36] logitech-hidpp-device 0005:046D:B012.0011: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  505.603185][ T8569] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  505.649718][ T9021] gadgetfs: bound to dummy_udc driver
[  505.792199][ T8569] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  509.737104][ T9026] gadgetfs: suspended from state 2
[  509.754187][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[  509.754309][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[  509.915826][ T5898] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  509.928849][ T8569] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  510.081898][ T8569] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  510.111777][ T8569] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  510.170582][ T8569] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  510.187979][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.802'.
[  510.201685][   T36] logitech-hidpp-device 0005:046D:B012.0012: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  510.664081][ T8569] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  510.862783][ T8569] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  512.375123][   T36] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  512.533534][   T36] usb 4-1: Using ep0 maxpacket: 16
[  512.545522][   T36] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  512.557482][   T36] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  512.557513][   T36] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  512.557533][   T36] usb 4-1: config 0 interface 0 has no altsetting 0
[  512.590321][   T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.590349][   T36] usb 4-1: Product: syz
[  512.590363][   T36] usb 4-1: Manufacturer: syz
[  512.590376][   T36] usb 4-1: SerialNumber: syz
[  512.632617][   T36] usb 4-1: config 0 descriptor??
[  514.504721][   T37] audit: type=1326 audit(1788523863.043:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9058 comm="syz.1.809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc464e159 code=0x7ffc0000
[  514.508732][   T37] audit: type=1326 audit(1788523863.073:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9058 comm="syz.1.809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc464e159 code=0x7ffc0000
[  514.509139][   T37] audit: type=1326 audit(1788523863.073:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9058 comm="syz.1.809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc464e159 code=0x7ffc0000
[  514.509409][   T37] audit: type=1326 audit(1788523863.073:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9058 comm="syz.1.809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8bc464e159 code=0x7ffc0000
[  514.509648][   T37] audit: type=1326 audit(1788523863.083:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9058 comm="syz.1.809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc464e159 code=0x7ffc0000
[  514.509688][   T37] audit: type=1326 audit(1788523863.083:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9058 comm="syz.1.809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc464e159 code=0x7ffc0000
[  514.509725][   T37] audit: type=1326 audit(1788523863.093:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9058 comm="syz.1.809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc464e159 code=0x7ffc0000
[  514.509763][   T37] audit: type=1326 audit(1788523863.093:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9058 comm="syz.1.809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc464e159 code=0x7ffc0000
[  514.509801][   T37] audit: type=1326 audit(1788523863.093:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9058 comm="syz.1.809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8bc464e159 code=0x7ffc0000
[  514.509838][   T37] audit: type=1326 audit(1788523863.093:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9058 comm="syz.1.809" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc464e159 code=0x7ffc0000
[  516.004953][ T1419] bridge_slave_1: left allmulticast mode
[  516.005036][ T1419] bridge_slave_1: left promiscuous mode
[  516.005301][ T1419] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.178083][ T1419] bridge_slave_0: left allmulticast mode
[  516.183961][ T1419] bridge_slave_0: left promiscuous mode
[  516.184249][ T1419] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.515261][ T5728] usb 4-1: USB disconnect, device number 10
[  516.560505][ T9071] netlink: 128 bytes leftover after parsing attributes in process `syz.1.810'.
[  516.560591][ T9071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.810'.
[  516.807727][ T9070] could not allocate digest TFM handle sha1-ni
[  517.206047][ T9083] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  517.535913][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  517.594639][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  517.603794][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  517.619772][ T5607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  517.628301][ T5607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  517.923895][ T9089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.813'.
[  518.024243][ T1419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  518.074269][ T1419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  518.096787][ T1419] bond0 (unregistering): Released all slaves
[  519.813669][ T5610] Bluetooth: hci4: command tx timeout
[  521.893529][ T5610] Bluetooth: hci4: command tx timeout
[  522.067785][ T1419] hsr_slave_0: left promiscuous mode
[  522.127375][ T1419] hsr_slave_1: left promiscuous mode
[  522.128606][ T1419] batman_adv: batadv0: Removing interface: batadv_slave_0
[  522.164921][ T1419] batman_adv: batadv0: Removing interface: batadv_slave_1
[  523.099136][ T9109] comedi comedi1: Minor 4 specified more than once!
[  523.834299][ T1419] team0 (unregistering): Port device team_slave_1 removed
[  523.899044][ T1419] team0 (unregistering): Port device team_slave_0 removed
[  523.973517][ T5610] Bluetooth: hci4: command tx timeout
[  524.235284][ T8933] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.235611][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.235817][ T8933] bridge_slave_0: entered allmulticast mode
[  524.238552][ T8933] bridge_slave_0: entered promiscuous mode
[  524.312320][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.312443][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.312624][ T8933] bridge_slave_1: entered allmulticast mode
[  524.336428][ T8933] bridge_slave_1: entered promiscuous mode
[  524.499150][ T8933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  524.515314][ T8933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  524.718656][ T8933] team0: Port device team_slave_0 added
[  524.757004][ T8933] team0: Port device team_slave_1 added
[  524.920241][ T8933] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.928268][ T8933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.928297][ T8933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  524.956876][ T9127] FAULT_INJECTION: forcing a failure.
[  524.956876][ T9127] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  524.956913][ T9127] CPU: 1 UID: 0 PID: 9127 Comm: syz.3.823 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  524.956939][ T9127] Tainted: [L]=SOFTLOCKUP
[  524.956945][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  524.956956][ T9127] Call Trace:
[  524.956964][ T9127]  <TASK>
[  524.956972][ T9127]  dump_stack_lvl+0xe8/0x150
[  524.957006][ T9127]  should_fail_ex+0x46b/0x600
[  524.957032][ T9127]  _copy_to_user+0x31/0xb0
[  524.957118][ T9127]  bpf_test_finish+0x1cf/0x690
[  524.957153][ T9127]  ? __pfx_bpf_test_finish+0x10/0x10
[  524.957182][ T9127]  ? _copy_from_user+0x94/0xb0
[  524.957202][ T9127]  ? bpf_test_init+0x113/0x150
[  524.957234][ T9127]  bpf_prog_test_run_xdp+0x8bc/0x11d0
[  524.957316][ T9127]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  524.957345][ T9127]  ? __fget_files+0x2a/0x420
[  524.957368][ T9127]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  524.957393][ T9127]  bpf_prog_test_run+0x2cb/0x340
[  524.957422][ T9127]  __sys_bpf+0xa22/0xd90
[  524.957451][ T9127]  ? __pfx___sys_bpf+0x10/0x10
[  524.957475][ T9127]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  524.957501][ T9127]  ? rt_mutex_slowunlock+0x219/0x460
[  524.957541][ T9127]  ? ksys_write+0x248/0x270
[  524.957563][ T9127]  ? __pfx_ksys_write+0x10/0x10
[  524.957586][ T9127]  __x64_sys_bpf+0xba/0xd0
[  524.957611][ T9127]  do_syscall_64+0x166/0x520
[  524.957630][ T9127]  ? trace_irq_disable+0x3b/0x140
[  524.957651][ T9127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.957669][ T9127]  ? clear_bhb_loop+0x70/0xc0
[  524.957689][ T9127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.957706][ T9127] RIP: 0033:0x7f673c88e159
[  524.957723][ T9127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  524.957738][ T9127] RSP: 002b:00007f673aae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  524.957758][ T9127] RAX: ffffffffffffffda RBX: 00007f673cb15fa0 RCX: 00007f673c88e159
[  524.957771][ T9127] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000000a
[  524.957783][ T9127] RBP: 00007f673aae6090 R08: 0000000000000000 R09: 0000000000000000
[  524.957793][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  524.957804][ T9127] R13: 00007f673cb16038 R14: 00007f673cb15fa0 R15: 00007ffeacf96bf8
[  524.957833][ T9127]  </TASK>
[  524.994503][ T8933] batman_adv: batadv0: Adding interface: batadv_slave_1
[  524.994521][ T8933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.994547][ T8933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  525.102136][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.822'.
[  526.062833][ T5610] Bluetooth: hci4: command tx timeout
[  526.714976][ T8933] hsr_slave_0: entered promiscuous mode
[  526.716600][ T8933] hsr_slave_1: entered promiscuous mode
[  526.717609][ T8933] debugfs: 'hsr0' already exists in 'hsr'
[  526.717658][ T8933] Cannot create hsr debugfs directory
[  526.953262][ T9131] ceph: No mds server is up or the cluster is laggy
[  527.041778][ T9142] gadgetfs: bound to dummy_udc driver
[  527.285556][ T4973] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  527.287660][    C0] gadgetfs: connected
[  527.287844][ T4973] gadgetfs: disconnected
[  527.453704][    C0] gadgetfs: connected
[  527.455244][ T4973] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  527.455675][ T4973] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  527.455710][ T4973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.544153][    C0] gadgetfs: configuration #1
[  528.050957][ T9150] FAULT_INJECTION: forcing a failure.
[  528.050957][ T9150] name failslab, interval 1, probability 0, space 0, times 0
[  528.050993][ T9150] CPU: 0 UID: 0 PID: 9150 Comm: syz.4.830 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  528.051007][ T9150] Tainted: [L]=SOFTLOCKUP
[  528.051011][ T9150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  528.051017][ T9150] Call Trace:
[  528.051022][ T9150]  <TASK>
[  528.051027][ T9150]  dump_stack_lvl+0xe8/0x150
[  528.051048][ T9150]  should_fail_ex+0x46b/0x600
[  528.051064][ T9150]  should_failslab+0xa8/0x100
[  528.051080][ T9150]  ? dst_alloc+0x105/0x170
[  528.051107][ T9150]  kmem_cache_alloc_noprof+0x9e/0x690
[  528.051120][ T9150]  ? dst_alloc+0x105/0x170
[  528.051137][ T9150]  dst_alloc+0x105/0x170
[  528.051154][ T9150]  ip_route_input_rcu+0x146e/0x3190
[  528.051170][ T9150]  ? __lock_acquire+0x6df/0x2e40
[  528.051187][ T9150]  ? __pfx_ip_route_input_rcu+0x10/0x10
[  528.051210][ T9150]  ? lock_acquire+0x115/0x350
[  528.051228][ T9150]  ? ip_route_input_noref+0xad/0x270
[  528.051243][ T9150]  ip_route_input_noref+0x17c/0x270
[  528.051258][ T9150]  ? __pfx_ip_route_input_noref+0x10/0x10
[  528.051276][ T9150]  ? __netif_receive_skb_core+0x2a10/0x30c0
[  528.051286][ T9150]  ? __pfx___skb_flow_dissect+0x10/0x10
[  528.051303][ T9150]  ip_rcv_finish_core+0x593/0x1c00
[  528.051377][ T9150]  ip_rcv_finish+0x14c/0x2a0
[  528.051391][ T9150]  NF_HOOK+0x336/0x3c0
[  528.051403][ T9150]  ? __pfx_ip_rcv_finish+0x10/0x10
[  528.051414][ T9150]  ? NF_HOOK+0x9e/0x3c0
[  528.051423][ T9150]  ? __pfx_NF_HOOK+0x10/0x10
[  528.051435][ T9150]  ? __pfx_ip_rcv_finish+0x10/0x10
[  528.051450][ T9150]  ? netif_receive_skb+0x102/0xbf0
[  528.051459][ T9150]  ? __pfx_ip_rcv+0x10/0x10
[  528.051469][ T9150]  netif_receive_skb+0x45b/0xbf0
[  528.051483][ T9150]  ? __pfx_netif_receive_skb+0x10/0x10
[  528.051492][ T9150]  ? rcu_is_watching+0x16/0xb0
[  528.051506][ T9150]  ? __local_bh_disable_ip+0x3d/0x420
[  528.051521][ T9150]  ? tun_rx_batched+0x194/0x760
[  528.051588][ T9150]  ? tun_rx_batched+0x194/0x760
[  528.051600][ T9150]  tun_rx_batched+0x1f1/0x760
[  528.051612][ T9150]  ? rcu_is_watching+0x16/0xb0
[  528.051627][ T9150]  ? __pfx_tun_rx_batched+0x10/0x10
[  528.051643][ T9150]  ? lock_acquire+0x115/0x350
[  528.051659][ T9150]  ? __local_bh_enable_ip+0x1ad/0x2b0
[  528.051671][ T9150]  ? lockdep_hardirqs_on+0x7b/0x110
[  528.051686][ T9150]  tun_get_user+0x2be6/0x44e0
[  528.051702][ T9150]  ? is_bpf_text_address+0x292/0x2b0
[  528.051717][ T9150]  ? tun_get_user+0x27a0/0x44e0
[  528.051738][ T9150]  ? __lock_acquire+0x6df/0x2e40
[  528.051750][ T9150]  ? __pfx_tun_get_user+0x10/0x10
[  528.051763][ T9150]  ? __lock_acquire+0x6df/0x2e40
[  528.051782][ T9150]  ? ref_tracker_alloc+0x353/0x4c0
[  528.051796][ T9150]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  528.051809][ T9150]  ? lock_acquire+0x115/0x350
[  528.051820][ T9150]  ? tun_get+0x1c/0x2f0
[  528.051834][ T9150]  ? tun_get+0x1c/0x2f0
[  528.051844][ T9150]  ? tun_get+0x1c/0x2f0
[  528.051864][ T9150]  tun_chr_write_iter+0x119/0x200
[  528.051877][ T9150]  vfs_write+0x61e/0xbb0
[  528.051893][ T9150]  ? __pfx_vfs_write+0x10/0x10
[  528.051912][ T9150]  ? __fget_files+0x2a/0x420
[  528.051927][ T9150]  ksys_write+0x156/0x270
[  528.051939][ T9150]  ? __pfx_ksys_write+0x10/0x10
[  528.051957][ T9150]  do_syscall_64+0x166/0x520
[  528.051968][ T9150]  ? trace_irq_disable+0x3b/0x140
[  528.051981][ T9150]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.051991][ T9150]  ? clear_bhb_loop+0x70/0xc0
[  528.052003][ T9150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.052013][ T9150] RIP: 0033:0x7ff290e9e98e
[  528.052024][ T9150] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  528.052032][ T9150] RSP: 002b:00007ff28f135fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  528.052044][ T9150] RAX: ffffffffffffffda RBX: 00007ff28f1366c0 RCX: 00007ff290e9e98e
[  528.052051][ T9150] RDX: 0000000000000036 RSI: 0000200000001800 RDI: 00000000000000c8
[  528.052057][ T9150] RBP: 00007ff28f136090 R08: 0000000000000000 R09: 0000000000000000
[  528.052063][ T9150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  528.052069][ T9150] R13: 00007ff291166038 R14: 00007ff291165fa0 R15: 00007ffcc715e738
[  528.052086][ T9150]  </TASK>
[  531.183604][ T5728] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  531.333599][ T5728] usb 4-1: Using ep0 maxpacket: 32
[  531.339811][ T5728] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  531.341509][ T5728] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  531.344335][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.344358][ T5728] usb 4-1: Product: syz
[  531.344371][ T5728] usb 4-1: Manufacturer: syz
[  531.344384][ T5728] usb 4-1: SerialNumber: syz
[  531.391319][ T5728] usb 4-1: config 0 descriptor??
[  531.411787][ T5728] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  532.000341][ T9142] gadgetfs: suspended from state 3
[  532.000655][ T9142] gadgetfs: disconnected
[  532.008679][ T4973] usb 1-1: can't set config #1, error -71
[  532.018812][ T4973] usb 1-1: USB disconnect, device number 5
[  533.573142][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'.
[  534.700467][ T5728] usb 4-1: qt2_attach - failed to power on unit: -71
[  534.707536][ T5728] quatech2 4-1:0.0: probe with driver quatech2 failed with error -71
[  534.729286][ T5728] usb 4-1: USB disconnect, device number 11
[  536.292088][ T9176] FAULT_INJECTION: forcing a failure.
[  536.292088][ T9176] name fail_futex, interval 1, probability 0, space 0, times 1
[  536.292143][ T9176] CPU: 1 UID: 0 PID: 9176 Comm: syz.4.836 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  536.292174][ T9176] Tainted: [L]=SOFTLOCKUP
[  536.292182][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  536.292193][ T9176] Call Trace:
[  536.292284][ T9176]  <TASK>
[  536.292295][ T9176]  dump_stack_lvl+0xe8/0x150
[  536.292337][ T9176]  should_fail_ex+0x46b/0x600
[  536.292367][ T9176]  get_futex_key+0x1b4/0x1580
[  536.292405][ T9176]  ? __lock_acquire+0x6df/0x2e40
[  536.292438][ T9176]  ? __pfx_get_futex_key+0x10/0x10
[  536.292476][ T9176]  futex_wait_setup+0x4a/0x590
[  536.292505][ T9176]  ? __futex_wait+0xe1/0x410
[  536.292545][ T9176]  __futex_wait+0x161/0x410
[  536.292575][ T9176]  ? __pfx___futex_wait+0x10/0x10
[  536.292603][ T9176]  ? __pfx_futex_wake_mark+0x10/0x10
[  536.292627][ T9176]  ? try_to_wake_up+0x84b/0x1430
[  536.292659][ T9176]  futex_wait+0x121/0x390
[  536.292683][ T9176]  ? __pfx_futex_wait+0x10/0x10
[  536.292720][ T9176]  do_futex+0x3e7/0x4e0
[  536.292757][ T9176]  ? __pfx_do_futex+0x10/0x10
[  536.292794][ T9176]  __se_sys_futex+0x3a8/0x450
[  536.292831][ T9176]  ? __pfx___se_sys_futex+0x10/0x10
[  536.292860][ T9176]  ? rcu_is_watching+0x16/0xb0
[  536.292896][ T9176]  ? __x64_sys_futex+0x21/0xf0
[  536.292930][ T9176]  do_syscall_64+0x166/0x520
[  536.292957][ T9176]  ? trace_irq_disable+0x3b/0x140
[  536.292998][ T9176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.293021][ T9176]  ? clear_bhb_loop+0x70/0xc0
[  536.293043][ T9176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.293063][ T9176] RIP: 0033:0x7ff290ede159
[  536.293084][ T9176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  536.293103][ T9176] RSP: 002b:00007ff28f1360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  536.293126][ T9176] RAX: ffffffffffffffda RBX: 00007ff291165fa8 RCX: 00007ff290ede159
[  536.293143][ T9176] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff291165fa8
[  536.293157][ T9176] RBP: 00007ff291165fa0 R08: 0000000000000000 R09: 0000000000000000
[  536.293172][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  536.293185][ T9176] R13: 00007ff291166038 R14: 00007ffcc715e650 R15: 00007ffcc715e738
[  536.293216][ T9176]  </TASK>
[  539.571460][ T9202] gadgetfs: bound to dummy_udc driver
[  539.756750][ T4973] logitech-hidpp-device 0005:046D:B012.0013: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  539.844973][   T36] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  539.845297][    C1] gadgetfs: connected
[  539.845503][   T36] gadgetfs: disconnected
[  539.993715][    C1] gadgetfs: connected
[  540.000543][   T36] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  540.014774][   T36] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  540.014817][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.057743][    C1] gadgetfs: configuration #1
[  540.459958][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state
[  540.461228][ T9084] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.461663][ T9084] bridge_slave_0: entered allmulticast mode
[  540.473831][ T9084] bridge_slave_0: entered promiscuous mode
[  540.495589][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.496036][ T9084] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.496234][ T9084] bridge_slave_1: entered allmulticast mode
[  540.508243][ T9084] bridge_slave_1: entered promiscuous mode
[  540.700156][ T9084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  540.716527][ T9084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  541.037901][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'.
[  541.088079][ T9084] team0: Port device team_slave_0 added
[  541.324247][ T9084] team0: Port device team_slave_1 added
[  541.365811][ T9213] syz.4.844 uses obsolete (PF_INET,SOCK_PACKET)
[  541.787485][   T10] usb 5-1: new low-speed USB device number 23 using dummy_hcd
[  542.037479][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  542.037606][   T10] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  542.054129][   T10] usb 5-1: config 100 has an invalid interface number: 173 but max is 0
[  542.054164][   T10] usb 5-1: config 100 has no interface number 0
[  542.054211][   T10] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  542.054233][   T10] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  542.054257][   T10] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0
[  542.054344][   T10] usb 5-1: config 100 interface 173 has no altsetting 0
[  542.060729][   T10] usb 5-1: string descriptor 0 read error: -22
[  542.060898][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.069053][ T9213] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  542.154648][   T10] metro_usb 5-1:100.173: Metrologic USB to Serial converter detected
[  542.235383][   T10] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  542.507694][ T9212] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90
[  542.531565][   T10] usb 5-1: USB disconnect, device number 23
[  542.621490][   T10] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  542.672880][   T10] metro_usb 5-1:100.173: device disconnected
[  543.223734][ T9221] netlink: 48 bytes leftover after parsing attributes in process `syz.3.846'.
[  543.262796][ T9084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  543.262873][ T9084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  543.262899][ T9084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  543.295575][ T5610] Bluetooth: hci0: unexpected event for opcode 0x2024
[  543.325265][ T9084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  543.325283][ T9084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  543.325309][ T9084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  543.957678][ T9215] gadgetfs: suspended from state 3
[  543.957916][ T9215] gadgetfs: disconnected
[  543.969979][   T36] usb 1-1: can't set config #1, error -71
[  543.988090][   T36] usb 1-1: USB disconnect, device number 6
[  544.286512][ T9084] hsr_slave_0: entered promiscuous mode
[  544.290743][ T9084] hsr_slave_1: entered promiscuous mode
[  544.292276][ T9084] debugfs: 'hsr0' already exists in 'hsr'
[  544.292302][ T9084] Cannot create hsr debugfs directory
[  546.205984][ T9237] comedi comedi1: Minor 4 specified more than once!
[  546.860981][ T9247] netlink: 48 bytes leftover after parsing attributes in process `syz.3.855'.
[  546.898646][ T5610] Bluetooth: hci0: unexpected event for opcode 0x2024
[  547.200075][ T9250] gadgetfs: bound to dummy_udc driver
[  547.393713][ T1419] bridge_slave_1: left allmulticast mode
[  547.399493][ T1419] bridge_slave_1: left promiscuous mode
[  547.399740][ T1419] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.473468][   T36] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  547.482054][    C1] gadgetfs: connected
[  547.482209][   T36] gadgetfs: disconnected
[  547.497445][ T1419] bridge_slave_0: left allmulticast mode
[  547.499054][ T1419] bridge_slave_0: left promiscuous mode
[  547.499335][ T1419] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.633804][    C1] gadgetfs: connected
[  547.646941][   T36] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  547.659772][   T36] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  547.659813][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.738341][    C1] gadgetfs: configuration #1
[  551.220630][ T5607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  551.291955][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  551.303987][ T5607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  551.319207][ T5607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  551.327222][ T5607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  551.802009][ T1419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  551.830244][ T9250] gadgetfs: suspended from state 3
[  551.839395][   T36] usb 1-1: can't set config #1, error -71
[  551.849253][   T36] gadgetfs: suspended from state 3
[  551.851610][   T36] usb 1-1: USB disconnect, device number 7
[  551.863324][ T9250] gadgetfs: disconnected
[  551.970943][ T1419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  552.072014][ T1419] bond0 (unregistering): Released all slaves
[  553.476345][ T9278] netlink: 44 bytes leftover after parsing attributes in process `syz.3.862'.
[  553.654306][ T5610] Bluetooth: hci3: command tx timeout
[  553.719733][ T9280] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  554.802278][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  554.883092][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  554.893111][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  554.906903][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  554.909842][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  555.166564][ T1419] hsr_slave_0: left promiscuous mode
[  555.193992][ T1419] hsr_slave_1: left promiscuous mode
[  555.195178][ T1419] batman_adv: batadv0: Removing interface: batadv_slave_0
[  555.195510][ T5610] Bluetooth: hci0: unexpected event for opcode 0x2024
[  555.236694][ T1419] batman_adv: batadv0: Removing interface: batadv_slave_1
[  555.738561][ T5610] Bluetooth: hci3: command tx timeout
[  555.774262][ T1419] team0 (unregistering): Port device team_slave_1 removed
[  555.844324][ T1419] team0 (unregistering): Port device team_slave_0 removed
[  556.073964][ T9288] netlink: 48 bytes leftover after parsing attributes in process `syz.3.864'.
[  556.277234][ T9303] gadgetfs: bound to dummy_udc driver
[  556.533543][ T5694] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  556.545504][    C1] gadgetfs: connected
[  556.545714][ T5694] gadgetfs: disconnected
[  556.710051][    C1] gadgetfs: connected
[  556.720125][ T5694] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  556.731058][ T5694] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  556.731092][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.768586][    C1] gadgetfs: configuration #1
[  557.093613][ T5610] Bluetooth: hci5: command tx timeout
[  557.813617][ T5610] Bluetooth: hci3: command tx timeout
[  559.183214][ T5610] Bluetooth: hci5: command tx timeout
[  559.893956][ T5610] Bluetooth: hci3: command tx timeout
[  561.004014][   T36] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  561.167140][   T36] usb 5-1: Using ep0 maxpacket: 16
[  561.173124][   T36] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  561.192621][   T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  561.205825][   T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  561.205854][   T36] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  561.205901][   T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.253621][ T5610] Bluetooth: hci5: command tx timeout
[  561.392023][   T36] usb 5-1: config 0 descriptor??
[  561.871393][ T5694] usb 1-1: can't set config #1, error -110
[  562.412804][   T36] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0014/input/input10
[  562.841033][   T36] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  562.888282][   T36] usb 5-1: USB disconnect, device number 24
[  563.333638][ T5610] Bluetooth: hci5: command tx timeout
[  565.179665][ T9341] netlink: 48 bytes leftover after parsing attributes in process `syz.4.875'.
[  565.219201][ T5610] Bluetooth: hci2: unexpected event for opcode 0x2024
[  565.337195][ T9260] bridge0: port 1(bridge_slave_0) entered blocking state
[  565.354451][ T9260] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.354687][ T9260] bridge_slave_0: entered allmulticast mode
[  565.378271][ T9260] bridge_slave_0: entered promiscuous mode
[  565.582519][ T9260] bridge0: port 2(bridge_slave_1) entered blocking state
[  565.589957][ T9260] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.590164][ T9260] bridge_slave_1: entered allmulticast mode
[  565.612567][ T9260] bridge_slave_1: entered promiscuous mode
[  566.128710][ T9260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  566.195447][ T9260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  567.044304][ T9084] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  567.186205][ T9084] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  567.564177][ T9260] team0: Port device team_slave_0 added
[  567.610956][ T9084] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  567.669221][ T9084] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  567.681707][ T9260] team0: Port device team_slave_1 added
[  567.691489][ T9084] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  567.790719][ T9084] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  567.889964][ T9084] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  567.907142][ T9316] gadgetfs: suspended from state 3
[  568.072031][ T9084] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  568.190603][ T9316] gadgetfs: disconnected
[  568.210808][ T1236] usb 1-1: USB disconnect, device number 8
[  568.239973][ T5592] ==================================================================
[  568.239999][ T5592] BUG: KASAN: slab-use-after-free in mutex_lock_interruptible_nested+0x5a/0x1d0
[  568.240046][ T5592] Read of size 1 at addr ffff88805e5aec58 by task syz-executor/5592
[  568.240061][ T5592] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  568.240074][ T5592] CPU: 1 UID: 0 PID: 5592 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  568.240098][ T5592] Tainted: [L]=SOFTLOCKUP
[  568.240104][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  568.240113][ T5592] Call Trace:
[  568.240121][ T5592]  <TASK>
[  568.240128][ T5592]  dump_stack_lvl+0xe8/0x150
[  568.240154][ T5592]  print_address_description+0x55/0x1e0
[  568.240179][ T5592]  ? mutex_lock_interruptible_nested+0x5a/0x1d0
[  568.240201][ T5592]  print_report+0x58/0x70
[  568.240221][ T5592]  kasan_report+0x117/0x150
[  568.240247][ T5592]  ? mutex_lock_interruptible_nested+0x5a/0x1d0
[  568.240272][ T5592]  ? ep_open+0x4e/0x270
[  568.240293][ T5592]  __kasan_check_byte+0x2a/0x40
[  568.240316][ T5592]  lock_acquire+0x7d/0x350
[  568.240337][ T5592]  ? ep_open+0x4e/0x270
[  568.240358][ T5592]  ? ep_open+0x4e/0x270
[  568.240375][ T5592]  mutex_lock_interruptible_nested+0x5a/0x1d0
[  568.240397][ T5592]  ? ep_open+0x4e/0x270
[  568.240418][ T5592]  ep_open+0x4e/0x270
[  568.240436][ T5592]  ? do_dentry_open+0x83a/0x1420
[  568.240458][ T5592]  ? __pfx_ep_open+0x10/0x10
[  568.240475][ T5592]  do_dentry_open+0x849/0x1420
[  568.240500][ T5592]  vfs_open+0x3b/0x350
[  568.240520][ T5592]  ? path_openat+0x142d/0x1d60
[  568.240541][ T5592]  path_openat+0x1448/0x1d60
[  568.240568][ 
** replaying previous printk message **
[  568.240568][ T5592]  do_file_open+0x23e/0x4a0
[  568.240589][ T5592]  ? __pfx_do_file_open+0x10/0x10
[  568.240616][ T5592]  ? alloc_fd+0x654/0x6d0
[  568.240644][ T5592]  do_sys_openat2+0x115/0x200
[  568.240721][ T5592]  ? __pfx_do_sys_openat2+0x10/0x10
[  568.240746][ T5592]  ? __se_sys_unlink+0xc2/0x140
[  568.240766][ T5592]  ? kmem_cache_free+0x187/0x6d0
[  568.240789][ T5592]  __x64_sys_openat+0x138/0x170
[  568.240813][ T5592]  do_syscall_64+0x166/0x520
[  568.240834][ T5592]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.240852][ T5592]  ? clear_bhb_loop+0x70/0xc0
[  568.240871][ T5592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.240888][ T5592] RIP: 0033:0x7f673c84e98e
[  568.240905][ T5592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  568.240920][ T5592] RSP: 002b:00007ffeacf94cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  568.240940][ T5592] RAX: ffffffffffffffda RBX: 00005555729c8500 RCX: 00007f673c84e98e
[  568.240953][ T5592] RDX: 0000000000000000 RSI: 00007ffeacf94e30 RDI: ffffffffffffff9c
[  568.240965][ T5592] RBP: 00007ffeacf94e30 R08: 0000000000000000 R09: 0000000000000000
[  568.240977][ T5592] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeacf95f20
[  568.240996][ T5592] R13: 00007f673c924474 R14: 00005555729c84e8 R15: 0000000000000006
[  568.241016][ T5592]  </TASK>
[  568.241022][ T5592] 
[  568.241036][ T5592] Allocated by task 9303:
[  568.241070][ T5592]  kasan_save_track+0x3e/0x80
[  568.241090][ T5592]  __kasan_kmalloc+0x93/0xb0
[  568.241108][ T5592]  __kmalloc_cache_noprof+0x3d5/0x680
[  568.241124][ T5592]  gadgetfs_bind+0x27a/0xae0
[  568.241138][ T5592]  gadget_bind_driver+0x2ca/0x9e0
[  568.241154][ T5592]  really_probe+0x254/0xae0
[  568.241175][ T5592]  __driver_probe_device+0x1e8/0x360
[  568.241194][ T5592]  driver_probe_device+0x4f/0x240
[  568.241212][ T5592]  __driver_attach+0x339/0x600
[  568.241229][ T5592]  bus_for_each_dev+0x23e/0x2c0
[  568.241240][ T5592]  bus_add_driver+0x348/0x670
[  568.241251][ T5592]  driver_register+0x23a/0x320
[  568.241270][ T5592]  usb_gadget_register_driver_owner+0xf9/0x270
[  568.241284][ T5592]  dev_config+0xe4e/0x12c0
[  568.241336][ T5592]  vfs_write+0x29f/0xbb0
[  568.241349][ T5592]  ksys_write+0x156/0x270
[  568.241362][ T5592]  do_syscall_64+0x166/0x520
[  568.241378][ T5592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.241393][ T5592] 
[  568.241397][ T5592] Freed by task 9316:
[  568.241405][ T5592]  kasan_save_track+0x3e/0x80
[  568.241423][ T5592]  kasan_save_free_info+0x40/0x50
[  568.241439][ T5592]  __kasan_slab_free+0x5c/0x80
[  568.241457][ T5592]  kfree+0x1c5/0x6d0
[  568.241471][ T5592]  destroy_ep_files+0x29f/0x330
[  568.241487][ T5592]  gadgetfs_unbind+0x112/0x2c0
[  568.241503][ T5592]  gadget_unbind_driver+0x1cb/0x410
[  568.241518][ T5592]  device_release_driver_internal+0x48b/0x880
[  568.241543][ T5592]  driver_detach+0x1f3/0x2d0
[  568.241560][ T5592]  bus_remove_driver+0x229/0x320
[  568.241575][ T5592]  usb_gadget_unregister_driver+0x4e/0x70
[  568.241589][ T5592]  dev_release+0x86/0x210
[  568.241605][ T5592]  __fput+0x42a/0xa80
[  568.241624][ T5592]  task_work_run+0x1d9/0x270
[  568.241642][ T5592]  do_exit+0x73a/0x2360
[  568.241655][ T5592]  do_group_exit+0x22d/0x2f0
[  568.241669][ T5592]  get_signal+0x121b/0x12c0
[  568.241688][ T5592]  arch_do_signal_or_restart+0xbb/0x860
[  568.241710][ T5592]  irqentry_exit+0x2ba/0x910
[  568.241726][ T5592]  asm_exc_page_fault+0x26/0x30
[  568.241739][ T5592] 
[  568.241743][ T5592] The buggy address belongs to the object at ffff88805e5aec00
[  568.241743][ T5592]  which belongs to the cache kmalloc-512 of size 512
[  568.241758][ T5592] The buggy address is located 88 bytes inside of
[  568.241758][ T5592]  freed 512-byte region [ffff88805e5aec00, ffff88805e5aee00)
[  568.241774][ T5592] 
[  568.241778][ T5592] The buggy address belongs to the physical page:
[  568.241787][ T5592] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e5ac
[  568.241808][ T5592] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  568.241821][ T5592] flags: 0x80000000000040(head|node=0|zone=1)
[  568.241834][ T5592] page_type: f5(slab)
[  568.241848][ T5592] raw: 0080000000000040 ffff88813ffbbc80 dead000000000100 dead000000000122
[  568.241862][ T5592] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  568.241876][ T5592] head: 0080000000000040 ffff88813ffbbc80 dead000000000100 dead000000000122
[  568.241889][ T5592] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  568.241903][ T5592] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  568.241914][ T5592] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004
[  568.241922][ T5592] page dumped because: kasan: bad access detected
[  568.241962][ T5592] page_owner tracks the page as allocated
[  568.241974][ T5592] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5596, tgid 5596 (syz-executor), ts 98542539025
[  568.242009][ T5592]  post_alloc_hook+0x1f9/0x250
[  568.242026][ T5592]  get_page_from_freelist+0x2591/0x2600
[  568.242046][ T5592]  __alloc_frozen_pages_noprof+0x230/0x5c0
[  568.242064][ T5592]  allocate_slab+0x7d/0x620
[  568.242078][ T5592]  refill_objects+0x2d8/0x350
[  568.242092][ T5592]  __pcs_replace_empty_main+0x339/0x690
[  568.242113][ T5592]  __kmalloc_cache_noprof+0x46f/0x680
[  568.242131][ T5592]  police_init_net+0x65/0x1a0
[  568.242170][ T5592]  ops_init+0x35d/0x5d0
[  568.242187][ T5592]  setup_net+0x118/0x350
[  568.242198][ T5592]  copy_net_ns+0x53b/0x780
[  568.242210][ T5592]  create_new_namespaces+0x3f0/0x6b0
[  568.242225][ T5592]  unshare_nsproxy_namespaces+0x149/0x190
[  568.242240][ T5592]  ksys_unshare+0x5a7/0x950
[  568.242258][ T5592]  __x64_sys_unshare+0x38/0x50
[  568.242276][ T5592]  do_syscall_64+0x166/0x520
[  568.242297][ T5592] page_owner free stack trace missing
[  568.242304][ T5592] 
[  568.242308][ T5592] Memory state around the buggy address:
[  568.242315][ T5592]  ffff88805e5aeb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  568.242325][ T5592]  ffff88805e5aeb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  568.242339][ T5592] >ffff88805e5aec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  568.242347][ T5592]                                                     ^
[  568.242357][ T5592]  ffff88805e5aec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  568.242367][ T5592]  ffff88805e5aed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  568.242375][ T5592] ==================================================================
[  568.451489][ T5592] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  569.090339][ T5592] CPU: 0 UID: 0 PID: 5592 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  569.101859][ T5592] Tainted: [L]=SOFTLOCKUP
[  569.106229][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  569.116458][ T5592] Call Trace:
[  569.119721][ T5592]  <TASK>
[  569.122632][ T5592]  vpanic+0x56d/0xa60
[  569.126612][ T5592]  ? __pfx_vpanic+0x10/0x10
[  569.131097][ T5592]  ? __pfx___schedule+0x10/0x10
[  569.136030][ T5592]  panic+0xc5/0xd0
[  569.139757][ T5592]  ? __pfx_panic+0x10/0x10
[  569.144256][ T5592]  ? preempt_schedule_common+0x7f/0xd0
[  569.149725][ T5592]  ? mutex_lock_interruptible_nested+0x5a/0x1d0
[  569.155964][ T5592]  check_panic_on_warn+0x89/0xb0
[  569.160891][ T5592]  ? mutex_lock_interruptible_nested+0x5a/0x1d0
[  569.167130][ T5592]  end_report+0x73/0x170
[  569.171355][ T5592]  ? mutex_lock_interruptible_nested+0x5a/0x1d0
[  569.177585][ T5592]  kasan_report+0x128/0x150
[  569.182073][ T5592]  ? mutex_lock_interruptible_nested+0x5a/0x1d0
[  569.188296][ T5592]  ? ep_open+0x4e/0x270
[  569.192427][ T5592]  __kasan_check_byte+0x2a/0x40
[  569.197258][ T5592]  lock_acquire+0x7d/0x350
[  569.201665][ T5592]  ? ep_open+0x4e/0x270
[  569.205799][ T5592]  ? ep_open+0x4e/0x270
[  569.209944][ T5592]  mutex_lock_interruptible_nested+0x5a/0x1d0
[  569.216011][ T5592]  ? ep_open+0x4e/0x270
[  569.220153][ T5592]  ep_open+0x4e/0x270
[  569.224138][ T5592]  ? do_dentry_open+0x83a/0x1420
[  569.229063][ T5592]  ? __pfx_ep_open+0x10/0x10
[  569.233637][ T5592]  do_dentry_open+0x849/0x1420
[  569.238582][ T5592]  vfs_open+0x3b/0x350
[  569.242633][ T5592]  ? path_openat+0x142d/0x1d60
[  569.247390][ T5592]  path_openat+0x1448/0x1d60
[  569.252052][ T5592]  do_file_open+0x23e/0x4a0
[  569.256539][ T5592]  ? __pfx_do_file_open+0x10/0x10
[  569.261557][ T5592]  ? alloc_fd+0x654/0x6d0
[  569.265871][ T5592]  do_sys_openat2+0x115/0x200
[  569.270556][ T5592]  ? __pfx_do_sys_openat2+0x10/0x10
[  569.275734][ T5592]  ? __se_sys_unlink+0xc2/0x140
[  569.280652][ T5592]  ? kmem_cache_free+0x187/0x6d0
[  569.285572][ T5592]  __x64_sys_openat+0x138/0x170
[  569.290420][ T5592]  do_syscall_64+0x166/0x520
[  569.294989][ T5592]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.301044][ T5592]  ? clear_bhb_loop+0x70/0xc0
[  569.305700][ T5592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.311574][ T5592] RIP: 0033:0x7f673c84e98e
[  569.315974][ T5592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  569.335562][ T5592] RSP: 002b:00007ffeacf94cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  569.343966][ T5592] RAX: ffffffffffffffda RBX: 00005555729c8500 RCX: 00007f673c84e98e
[  569.351915][ T5592] RDX: 0000000000000000 RSI: 00007ffeacf94e30 RDI: ffffffffffffff9c
[  569.359871][ T5592] RBP: 00007ffeacf94e30 R08: 0000000000000000 R09: 0000000000000000
[  569.367826][ T5592] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeacf95f20
[  569.375783][ T5592] R13: 00007f673c924474 R14: 00005555729c84e8 R15: 0000000000000006
[  569.383745][ T5592]  </TASK>
[  569.387230][ T5592] Kernel Offset: disabled
[  569.391588][ T5592] Rebooting in 86400 seconds..