last executing test programs:

17m40.467368409s ago: executing program 1 (id=2):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04000418"], 0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x541b, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = dup2(r2, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x4f0, 0x0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x3, 0x7b, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x6b, 0x40, 0xb1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "d5f7e814baff"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0xfffb, 0x5}, {0x6, 0x24, 0x1a, 0x3}, [@dmm={0x7, 0x24, 0x14, 0xb3}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x2, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x39, 0x2}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x6, 0x0, 0x0, 0x9}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x22, &(0x7f00000001c0)=@string={0x22, 0x3, "7fa21504fe2c79658bf911d8e92aea194997a7f0429611d7ca2cc31b4d8abb11"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x437}}, {0xab, &(0x7f0000000280)=@string={0xab, 0x3, "1c0026ec941d0c6637a569d5f5ae7a0d9682bbe9881295b7824fefc951af83c1da91ae7751390f4b19141ddcd2ff6345bb8a5d54cd9d4fa85e75bfc9518b91b0a3a3da0a286eff103d0f850b3ca2fffde7255c12afefc08bc0006472fd05178b525836ddf63a297833f63fb82a15c4fc04244a728f22fd08b5853150eaff57f0edd342a0c05be1d6f68e609d71afafd15d8c7ba69e96bab0ff9ba9309e0f072aab952a16743d1a2f6e"}}, {0xe9, &(0x7f0000000340)=@string={0xe9, 0x3, "457dd5a14919435acac688a77b77352ffccacde94638425fdab0f6b33bbe6a3b37e24625504e5ff50b21c33cf78b4542798925497130a4d1a970ff5002cf1dcdc3bfd2fcddb0751876d247ec7b8fefe3894ab08dcfb702a1ca8f87c862bda8a449c024087b089bf950386b87ca37efb800d88b7344ecfe7bfbc0c350cc1699ac96569d7f232b62b0885242ee97e6a86d2300e32fddd56798810d58b62699dfaded3871cf455ae51512265d42d9f824a7631f0129fab0577b0abb06f3a96e6b9f52c76a683a7f52eadd47e262edea86d089075423937b364a813cadb9549666bff64005a8d281ac"}}]})

17m36.73118047s ago: executing program 1 (id=16):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)

17m35.840232522s ago: executing program 1 (id=19):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b000000000001190780000000200000000000017c1009c907801000000000000000b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b265e5992ef209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a328f865412904b133eebafc6eb170fb00621144ab13a642475fc21552dce5cda9c"], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

17m19.779544684s ago: executing program 32 (id=19):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b000000000001190780000000200000000000017c1009c907801000000000000000b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b265e5992ef209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a328f865412904b133eebafc6eb170fb00621144ab13a642475fc21552dce5cda9c"], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

17m19.721737479s ago: executing program 4 (id=43):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b000000000001190780000000200000000000017c1009c907801000000000000000b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b265e5992ef209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a328f865412904b133eebafc6eb170fb00621144ab13a642475fc21552dce5cda9c"], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

17m15.799905826s ago: executing program 4 (id=48):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xfe79}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)

17m11.917143814s ago: executing program 4 (id=54):
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x0, <r0=>0xffffffffffffffff, 0x80000})
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, <r1=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1})
sched_setscheduler(0x0, 0x6, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x101002, 0x0)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000140)={0x90, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7, @loopback, 0x74}, {0xa, 0x4e21, 0x2, @loopback, 0x5}, 0xffffffffffffffff, 0x2}}, 0x48)
r3 = syz_clone3(&(0x7f0000000440)={0x0, &(0x7f00000002c0)=<r4=>0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340), {0x3f}, &(0x7f0000000380)=""/34, 0x22, &(0x7f00000003c0)=""/54, &(0x7f0000000400)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9, {r0}}, 0x58)
timer_create(0x0, &(0x7f00000004c0)={0x0, 0x26, 0x2, @tid=r3}, &(0x7f0000000500))
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000540)={0x7, 0x0, [{0x639, 0x0, 0x800}, {0xbc9, 0x0, 0x81}, {0x307, 0x0, 0x748b}, {0xdc5, 0x0, 0xc381}, {0x38b, 0x0, 0x7}, {0x371}, {0x8a7, 0x0, 0x2}]})
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000740)={0xc, 0x8, 0xfa00, {&(0x7f00000005c0)}}, 0x10)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000980)={@mcast1, <r5=>0x0}, &(0x7f00000009c0)=0x14)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x1e, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3ac}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @generic={0x1, 0x4, 0x9, 0x1, 0xa99}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='syzkaller\x00', 0xfffffffd, 0xaa, &(0x7f00000008c0)=""/170, 0x40f00, 0x11, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x7, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r0, r0], &(0x7f0000000ac0), 0x10, 0x80000000}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={r0, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000ec0)=[0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0, 0xdb, &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000001040)}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x2, 0x1c, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x44}, @alu={0x4, 0x1, 0x3, 0xa, 0x9, 0x18, 0x10}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x1, 0x5, 0x7, 0x5, 0x8, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x1, 0xeb, &(0x7f0000000d00)=""/235, 0x41100, 0x0, '\x00', r5, @fallback=0x22, r0, 0x8, &(0x7f0000000e00)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000e40)={0x0, 0xb, 0x7fffffff, 0x572}, 0x10, r7, r0, 0x3, &(0x7f00000011c0)=[r0, r0, r0], &(0x7f0000001200)=[{0x5, 0x4, 0xe, 0x8}, {0x3, 0x2, 0x6, 0x8}, {0x1, 0x3, 0x9, 0xb}], 0x10, 0x8}, 0x94)
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000013c0)={0x28, 0x4, r1, 0x0, &(0x7f0000001300)="b3bc3a62b12659190a80e7f80594cf16fdada197b1674c3f61d9f1e19c076a6f23e9b8386145e2498406632dc2de56fb587547e35c719b195ba21d97c04cf1e36005c29167ae7528cbce21e5d4bf8834ad8ca8b6c37442080b8b22d4b2afe93799944d252738089f9c88315d81549d2883e6850aebbc072fed04e6f6db06d6a640f109e0998b154f893a85452a55", 0x8e, 0x7fff})
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001400)=[r2, r6, r2, r4, r6, r8, r6, r4], 0x8)
ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f0000001440))
openat$cgroup_subtree(r0, &(0x7f0000001480), 0x2, 0x0)
ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f00000014c0))
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000001500)=0x2)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000001540)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r9 = msgget(0x0, 0x1a)
msgrcv(r9, &(0x7f0000001580)={0x0, ""/207}, 0xd7, 0x2, 0x1000)
close(0xffffffffffffffff)
ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000001680)={0xc5, 0x0, r0})

17m10.562721611s ago: executing program 4 (id=58):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010000000000000000", @ANYRES32], 0x3}}, 0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0xf)
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000000000", @ANYRES32=r6, @ANYBLOB="000000000000000010001a800c000a80050008004c000000"], 0x30}}, 0x4080)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d099}, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r9, 0x0)
sendfile(r9, r9, 0x0, 0x40008)

17m8.014550518s ago: executing program 4 (id=60):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x0, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r1 = syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000073c2b403b1b5129ee9e01020301090246000100000002090419cd010e0100000624060000a105240405000d"], 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/partitions\x00', 0x0, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r3, 0x3)
accept4(r3, 0x0, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4)
read$FUSE(r2, &(0x7f0000005500)={0x2020}, 0x2020)

17m4.539631701s ago: executing program 4 (id=63):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xfe79}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)

16m46.225872426s ago: executing program 33 (id=63):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xfe79}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)

12m52.724099897s ago: executing program 6 (id=361):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0xfffffffe}, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10)
r2 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x20024c}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x7, 0x9, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0xdb4, 0xd070, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0x1}, 0x6}, 0x1)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x600c000)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000000)=[{0x0}], 0x1)

12m51.385726865s ago: executing program 6 (id=362):
syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201004705010264110102030109021200010000a1bb3b90007200a2cdd200bb7f75557aca5f6de3f0c8c1972a58ec664bad220894a898366d8e785ed6c2c5484cce514b6949ab1068fdaf1a6f0b833aed78b29f2e7c6f8510b9ed544f7283fbc46f09a482c495a49f394ce5d32894345614bd5f19ebe0001edf51c76cd82ddd967059a39383182b14e3d25549a9774d535eb2c427c5ddeed98f071f4428bce37462b5e8b5ae3114c4131eb78ac8b98f0000000000"], 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201004705010264110102030109021200010000a1bb3b90007200a2cdd200bb7f75557aca5f6de3f0c8c1972a58ec664bad220894a898366d8e785ed6c2c5484cce514b6949ab1068fdaf1a6f0b833aed78b29f2e7c6f8510b9ed544f7283fbc46f09a482c495a49f394ce5d32894345614bd5f19ebe0001edf51c76cd82ddd967059a39383182b14e3d25549a9774d535eb2c427c5ddeed98f071f4428bce37462b5e8b5ae3114c4131eb78ac8b98f0000000000"], 0x0) (async)

12m46.57874092s ago: executing program 6 (id=368):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sendmsg(r3, &(0x7f0000000280)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x4, 0x2, 0x1}}, 0x80, 0x0}, 0xc87a614a8e2e74d2)

12m41.96731736s ago: executing program 6 (id=378):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
rt_sigtimedwait(&(0x7f0000000040)={[0x4]}, 0x0, 0x0, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000cb0a00fe1001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

12m40.089627327s ago: executing program 6 (id=382):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d00000000240002800500030000000000080001400000000008000440000000cc0800024000000002"], 0x8c}, 0x1, 0x0, 0x0, 0x41}, 0x20000010) (async)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r1}, &(0x7f0000001cc0)=""/187, 0xbb, 0x0)

12m38.24732814s ago: executing program 6 (id=386):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

12m22.037984932s ago: executing program 34 (id=386):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

11m52.59821845s ago: executing program 5 (id=449):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000000)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e9500000000000000", 0x20, 0x24000801, &(0x7f0000000300)={0x11, 0x7, r2, 0x1, 0x8, 0x6, @random="004f8427741f"}, 0x14) (fail_nth: 4)

11m52.429226366s ago: executing program 5 (id=450):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xfc, 0x0, 0x6, 0xfb, 0x4, 0x5, 0x2, 0x80, 0x1, 0x54, 0xd, 0x2, 0x3}, 0xe)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0xfff, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e9, 0x1c410, 0x2, 0x20002f7})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1}, {&(0x7f00000003c0)="8e252f33", 0x4}], 0x2}}], 0x1, 0x24000054)
r4 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x1000, 0x2, 0x0, 0x8002})
r5 = eventfd2(0x3, 0x1)
io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000140)=r5, 0x1)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@security={'security\x00', 0xe, 0x4, 0x598, 0xffffffff, 0x390, 0x390, 0x0, 0xffffffff, 0xffffffff, 0x4c8, 0x4c8, 0x4c8, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, [0xffffff00, 0x0, 0xffffffff], [], 'syzkaller1\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x67, 0x5, 0x7, 0x32}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x7fff, [0x7aa, 0xa33c], 0x4, 0x2, 0x3, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1d}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @local, @private0, @remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote], 0x10}}, @common=@hbh={{0x48}, {0xe, 0x6, 0x1, [0x7, 0x1, 0x3, 0x401, 0xf, 0x7, 0xa83, 0x3, 0x6, 0x4, 0x1, 0x800, 0x9, 0x9, 0x0, 0x7], 0x3}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x2, 0x3}}}, {{@ipv6={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff, 0x0, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xffffff00], 'ip6tnl0\x00', 'nr0\x00', {0xff}, {}, 0x89, 0x0, 0x2, 0x1a}, 0x0, 0x108, 0x140, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0xffffbeeb, 0x9, 0x0, {0x10001}}}, @common=@hl={{0x28}, {0x2}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6, 0x2}, {0x2, 0x3}, {0x4, 0x5, 0x4}, 0xa, 0x1}}}, {{@uncond, 0x0, 0x108, 0x138, 0x0, {}, [@common=@frag={{0x30}, {[0x401, 0xd9], 0xb264, 0x4, 0x1}}, @common=@srh={{0x30}, {0x67, 0x1, 0x1, 0x0, 0x6, 0x4, 0x308}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x5, 0x3}, {0x1, 0x3, 0x6}, 0x0, 0x8af}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8)
sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000005c0)="c3", 0x1}], 0x1}}], 0x1, 0x20000800)
read(r0, &(0x7f0000000240)=""/138, 0x8a)
r6 = landlock_create_ruleset(&(0x7f0000000080)={0x800, 0x2, 0x3}, 0x18, 0x2)
landlock_restrict_self(r6, 0x4)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2400, 0x1000}]})
syz_emit_ethernet(0xd2, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000180c200410c00c40000000100119078ac1414aaffffffff07122d8a06f2c7a06225d8b559ed9b0d3473860f00000001000798e7d02e6a0102440c8003ac14140d0100010007032400004e1f008090781459d2d60fdad42896cbc0a289f81822119e9697d3295e9a068178c370c133e7bf8f56e1359a810d18c7ce2e31011add0f0429578c5540714122ca230d75bb6ef682be1401b22aae55811fcdc79f3cd123a0f87546dd7ef58610cdbdff8227af0d393034a3236a81a1fc18d85f6ae6ba3a7f7d6e11e607d8"], 0x0)

11m52.173777276s ago: executing program 5 (id=453):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

11m51.586233208s ago: executing program 5 (id=456):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x80, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9, 0x833, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x3, 0x6}}}}}]}}]}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)

11m47.772268234s ago: executing program 5 (id=464):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r1, 0x0, 0x20, 0x2000000, 0x9}, &(0x7f00000012c0)=0x18)

11m47.253640234s ago: executing program 5 (id=465):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

11m31.507035269s ago: executing program 35 (id=465):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

10m49.510433512s ago: executing program 0 (id=536):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0xfef, @bearer=@l2={'eth', 0x3a, 'dummy0\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004040}, 0x8000)
r3 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_mtu(r3, 0x29, 0x1e, &(0x7f0000000040)=0x1, 0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0)
ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000440)={0x3, 0x0, [{0x48a, 0x0, 0xfff}, {0x222, 0x0, 0x5}, {0xb71, 0x0, 0x101}]})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5af}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff9}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x14c6, @loopback, 0x72a6}, @in6={0xa, 0x4e23, 0x2, @mcast1, 0xfffffffb}], 0xc0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x60)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e23, 0xe7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd2b}, {0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x0, {[0x9, 0xfffffffb, 0x4, 0x5, 0x6, 0x5e0, 0x7, 0x5]}}, 0x5c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x49340})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

10m48.157288603s ago: executing program 0 (id=540):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8919, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @loopback}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000040)="c393c5b0f0237b4dc674bb6bc3c22df60eae2576f8e194082d107dd66096da103a892a37a7bb3da9c6afdb270ce643e00e04f3e58901e3698b083b1ff16becbb555b43221fe931a419805d32ed1512e78ca5efea7638c375054b600d986f0f264df8d6c91cab8950172b6bf64bc834e5e8270072b4c5f38048bd45147fe3b4f483827543ffbaebda91652bbd203219df3bb68066efad99738480f5847b96e8b6c016b1232bc8e65a5d2e029000a7", 0xae}, {&(0x7f00000006c0)="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", 0x1000}], 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000010)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000000d060300f4fffeffffffffff00000006b6d4be63b200ef9643a1e11a9cf42c40bb8575d0935fee47bcb442b519663faf02889e523d2b0b8faa50ab96e319d575a810fd902ef9f46db1ca9757772ac71935e7dfb3cbc4e1bdb925334fd31fd508fe889a2ef554590f4541078ecabf9513f20f0068ee7b079945c67acb4f96d6d3dc3b8b037ef3c8b2e64825eb84a99a58c311028e157453142397c65b6ca9e7fdade0e2b212be8a80cd08d017c89f1f815ad08e38386e0f776402e481a3881461c5c0bdac7200c33836491d0bdfa5945a137ce9d2b3f13f755a3a39159718a241"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x1000)
ftruncate(r5, 0xc17a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg2\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', r6, 0x2f, 0x8, 0xf, 0xfff, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x40, 0xeb, 0x7ff}})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x10, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000097ff3e08582005100009048f0000bf575a00"/36], 0x0)

10m42.605466541s ago: executing program 0 (id=547):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sendmsg(r3, &(0x7f0000000280)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x4, 0x2, 0x1}}, 0x80, 0x0}, 0xc87a614a8e2e74d2)

10m41.102584207s ago: executing program 0 (id=550):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04000418"], 0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x541b, 0x0)
syz_usb_connect$cdc_ncm(0x3, 0x7b, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x6b, 0x40, 0xb1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "d5f7e814baff"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0xfffb, 0x5}, {0x6, 0x24, 0x1a, 0x3}, [@dmm={0x7, 0x24, 0x14, 0xb3}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x2, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x39, 0x2}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x6, 0x0, 0x0, 0x9}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x22, &(0x7f00000001c0)=@string={0x22, 0x3, "7fa21504fe2c79658bf911d8e92aea194997a7f0429611d7ca2cc31b4d8abb11"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x437}}, {0xab, &(0x7f0000000280)=@string={0xab, 0x3, "1c0026ec941d0c6637a569d5f5ae7a0d9682bbe9881295b7824fefc951af83c1da91ae7751390f4b19141ddcd2ff6345bb8a5d54cd9d4fa85e75bfc9518b91b0a3a3da0a286eff103d0f850b3ca2fffde7255c12afefc08bc0006472fd05178b525836ddf63a297833f63fb82a15c4fc04244a728f22fd08b5853150eaff57f0edd342a0c05be1d6f68e609d71afafd15d8c7ba69e96bab0ff9ba9309e0f072aab952a16743d1a2f6e"}}, {0xe9, &(0x7f0000000340)=@string={0xe9, 0x3, "457dd5a14919435acac688a77b77352ffccacde94638425fdab0f6b33bbe6a3b37e24625504e5ff50b21c33cf78b4542798925497130a4d1a970ff5002cf1dcdc3bfd2fcddb0751876d247ec7b8fefe3894ab08dcfb702a1ca8f87c862bda8a449c024087b089bf950386b87ca37efb800d88b7344ecfe7bfbc0c350cc1699ac96569d7f232b62b0885242ee97e6a86d2300e32fddd56798810d58b62699dfaded3871cf455ae51512265d42d9f824a7631f0129fab0577b0abb06f3a96e6b9f52c76a683a7f52eadd47e262edea86d089075423937b364a813cadb9549666bff64005a8d281ac"}}]})

10m37.374198583s ago: executing program 0 (id=554):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x85}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000d00)={'batadv0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r3, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0xe651, @local, 0xba}, 0x1c, &(0x7f0000000180)}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)="d08dd54232f03297e17591", 0xb}, {&(0x7f0000000740)="64a9ddae8c2b4101f986a7d00c59ae7b29aedc3e08b7eeccc027504185ee9045", 0x20}], 0x2, &(0x7f00000008c0)}}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000c40)="f990", 0x2}], 0x4, &(0x7f0000000d40)=[@rthdr={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x0, 0x4, 0x0, [@empty, @private1]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x1a, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x8, {0x2, 0x0, 0xc, 0x9}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0xd42}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r1}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x89, 0x8, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xff}}], 0x138}}, {{&(0x7f0000000f80)={0xa, 0x4e20, 0xdaa1, @private0, 0xb000000}, 0x1c, &(0x7f0000002340)=[{&(0x7f0000000fc0)="b1af22980126b6a7649fc1f5614e771586736cde166386cae152f20b9ec272d23522a63bb02d8848754d2fb95ce6fe14fdf6707bc8", 0x35}, {&(0x7f00000010c0)="5459c95e6f52ccbb55480dce42a02d7fe948b5c69ce186fe78186c896fe12232623050a39c9c5ce543dcc3709f56334870d4712710eb4f9124d7", 0x3a}, {&(0x7f0000001140)="588d1dd7c75d8becfa4d7c16c5235fdc5d9546d77c40668d0c321ceaea99147c1d22477196ed81db9c108d9301b93c157e769718719502a2fb5e181d3bd16b0c73e62aa640a5be8b043584e82564d50fbb451e6164d6d4e9265c8b0729110bfac2b7cc73521096e809679347a0801addbdefaea8dfb2383561512c8692735ada643768d020efc35d070816b08992a8a6250b51e90ef23ed33263b35ecba32fd819d912ec3a0513b9cf58", 0xaa}, {&(0x7f0000001240)="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", 0xffe}, {&(0x7f0000006380)="06879f733dcf260fd2f97e81797a57f910702d2899bbbbdd3e78afec4de7012b0e7362145bd0ab267549f391db6636425b6003666b2a766a1dbfaeeb37f1a195fcbb6d8b734bab9fcf903f2d96b220058a398b889bb8b3212c9afe8da0c5a58cb3835e122e83fcd911350076b8159cef92d2c01d7821a2c09beee0b090e73e011b4a997fdaddd8cfb7acea3e40e9a4483fd9226b2b27e0d45ebb4f6b833f8b36a86841019a2633e6bc4e5fa7a1f4c4bfd37cb5d702444adeca8203dd203d8946e923639e453aa2bb22fc96a802cd7c2d134a5f8902", 0xd5}], 0x5, &(0x7f00000023c0)}}, {{&(0x7f00000048c0)={0xa, 0x4e20, 0x3, @mcast1, 0x36}, 0x1c, 0x0, 0x0, &(0x7f0000005d40)=[@dstopts={{0x20, 0x29, 0x37, {0x11, 0x1, '\x00', [@generic={0xfe}, @jumbo={0xc2, 0x4, 0x7}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x83, 0x7, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x18, {0x1, 0x4, 0x9d, 0x3, [0x2, 0x7fffffffffffffff]}}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xe}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x87, 0x6, '\x00', [@generic={0x8}, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0xffff, [0xc, 0x80]}}, @ra={0x5, 0x2, 0x43e}, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x5}]}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x84, 0x6, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x2, 0x6, 0xce, 0x3, [0x3e7, 0x1, 0x1]}}]}}}], 0x160}}, {{&(0x7f0000006080)={0xa, 0x4e23, 0x0, @mcast1, 0x6}, 0x1c, &(0x7f0000006140)=[{&(0x7f00000060c0)="7dd6b96f4007d590441cbddc89d4a3cc4e12f69c84f6d9075fdab86866ba68e90314", 0x22}], 0x1, &(0x7f0000006180)}}], 0x6, 0x43498276faa3c0ee)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000180)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r8, 0x0, r11, 0x0, 0x39000, 0x0)
splice(r10, 0x0, r8, 0x0, 0x408c8, 0xe)
write$binfmt_elf64(r9, &(0x7f0000000100)=ANY=[], 0xfffffe3e)
writev(r6, &(0x7f00000015c0)=[{0x0}, {0x0}, {&(0x7f0000001300)="ab0af7f5f1ed872d9ba97ccea3d5309a4a886aaf86d86f2f047c13a52c028c11d7ba84844fbfe97be0836ccfde9d3057d0ae0e49fb85f55ae175d8bc0627d596041b9a56707e950bc812d6c4ba13b167496816b8adc25f9aeb047f25e65571e09014e59e75cbb6b444a6159c294217ed639c83fc59db5e124af23539e8c4d3e4c73918a10064f1fb290b1fd541922e843af4c653bf04bb5c8e233825dde729c153a0dbbf64ea80965727ea99f805bee6f60203565e2c22e89f529aca707206ea4c7ed184f259dc9818901745359401c44a7c", 0xd2}, {&(0x7f00000001c0)}, {&(0x7f0000001580)="33cc159610c6a9056d01f0a95abfc04087e3e95836ee5acade98e890bbad2b9dada30e6f80debf275ab16da5ffe17fb05096ed498c055e8cb9f6a885", 0x3c}], 0x5)

10m35.953836969s ago: executing program 0 (id=555):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x200009, 0x5d90, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x96)
close(r3)
eventfd(0xc)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00\x00'])
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x60240, 0x0)
ioctl$VT_DISALLOCATE(r5, 0x5608)
mmap(&(0x7f000049e000/0x4000)=nil, 0x4000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x800})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000080)=0xa)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0)

10m20.698707053s ago: executing program 36 (id=555):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x200009, 0x5d90, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x96)
close(r3)
eventfd(0xc)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00\x00'])
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x60240, 0x0)
ioctl$VT_DISALLOCATE(r5, 0x5608)
mmap(&(0x7f000049e000/0x4000)=nil, 0x4000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x800})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000080)=0xa)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0)

9m58.327970648s ago: executing program 3 (id=596):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1)
r3 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010000000000000000", @ANYRES32], 0x3}}, 0x0)
splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000000000", @ANYRES32=r7, @ANYBLOB="000000000000000010001a800c000a80050008004c000000"], 0x30}}, 0x4080)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d099}, 0x0)
r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r10, 0x0)
sendfile(r10, r10, 0x0, 0x40008)

9m57.03416799s ago: executing program 3 (id=597):
syz_io_uring_setup(0x88b, 0x0, 0x0, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
userfaultfd(0x80001)
sigaltstack(&(0x7f0000001080)={0x0, 0x80000003}, 0x0)
sigaltstack(&(0x7f0000001400)={0x0, 0x3}, 0x0)
userfaultfd(0x80001)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000100)={0xc0, 0x0, 0x0, 0x0, 0x3})
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
ioprio_set$pid(0x1, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12)

9m55.325600944s ago: executing program 3 (id=598):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @empty, 0x10007}, 0x1c)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f00000009c0)="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", &(0x7f0000000000), 0x4}, 0x20)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000180)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000200)={0x18, r2, 0x1, 0x0, &(0x7f0000000140)=[{0xfffffffffffffff9, 0xfffffffffffffffb}]})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000940)={0x48, 0x2, r2})

9m55.138708772s ago: executing program 3 (id=600):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000003c0)='./file0\x00', 0x20)

9m54.958268105s ago: executing program 3 (id=603):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x7)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000002c0)=[{&(0x7f00000004c0)="480000001400190d09004beafd0d8c560a84476080ffe00600000300590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

9m54.185434654s ago: executing program 3 (id=605):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x40000000015, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xf7)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r7=>0x0})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002500), r8)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000003c0)=ANY=[@ANYRES16=r9, @ANYBLOB="010027bd7000fcdbdf2507000000080004007f0000011400020000000000000000000000ffff6401010114000300ff010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4040)
ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r7, <r10=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r7, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000080)={0x10, 0x1, r10})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x940003c8)

9m53.741509434s ago: executing program 37 (id=605):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x40000000015, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xf7)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r7=>0x0})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002500), r8)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000003c0)=ANY=[@ANYRES16=r9, @ANYBLOB="010027bd7000fcdbdf2507000000080004007f0000011400020000000000000000000000ffff6401010114000300ff010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4040)
ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r7, <r10=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r7, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000080)={0x10, 0x1, r10})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x940003c8)

2m24.288342754s ago: executing program 2 (id=943):
openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0xa, 0x4e20, 0x9, @remote, 0x3}, 0x1c, &(0x7f0000000440)=[{0x0}, {&(0x7f00000003c0)="0b23c7b069616f21", 0x8}, {&(0x7f0000000400)="55ece249d48a8e9fbcffc7e618067e75d6ad23a9f5aff7b75db9298120e1bf972f72e2d8c26c1a651f", 0x29}], 0x3}, 0xc091)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000003, &(0x7f0000000800)={<r5=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x107fe, @empty, 0x2}, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7}, r5, 0xb}}, 0x7d)

2m22.874251525s ago: executing program 2 (id=944):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x80044100, &(0x7f0000000140)=0xfff)

2m22.641645052s ago: executing program 2 (id=945):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x7a004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x9, &(0x7f0000000000)=<r2=>0x0)
r3 = eventfd(0x0)
io_submit(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r3, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x40, r3, 0x0, 0x17, 0x0, 0x0, 0x2}])

2m22.176611926s ago: executing program 2 (id=946):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x6}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
timer_create(0x0, &(0x7f0000000240)={0x0, 0x41, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
getdents64(r5, &(0x7f0000000140)=""/131, 0x83)
r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000006c0)={0x2, 0x0, 0x5, 0xff81, 0x0, 0x7c, 0x0})
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000340))
keyctl$clear(0x7, 0xfffffffffffffffb)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})

2m20.679738866s ago: executing program 2 (id=947):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="ea9a03"])
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfffffffc, {0x3}, {0x7}, @raw32={[0x2, 0x0, 0x800]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfc}, {}, @control={0x7, 0x8, 0x3}}, {0x6, 0x3, 0x9, 0x3, @tick=0x2, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0xd0, 0x5, 0xb, @time={0x3, 0xd}, {0x3, 0x9}, {0x2, 0x2}, @quote={{0xec, 0x4}, 0xdb6, &(0x7f0000000400)={0x80, 0x8, 0x7, 0xb, @time={0x6, 0x9}, {0xc, 0xfd}, {0x4, 0x7}, @quote={{}, 0x200}}}}], 0x70)
mmap(&(0x7f00003d6000/0x4000)=nil, 0x4000, 0xb635773f05ebbee9, 0x100010, 0xffffffffffffffff, 0x963ac000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r7, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b6308", 0x5}], 0x1)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0)
utime(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000300)={0x5, 0x7f})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0x2, 0x7, 0x2, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x12c7})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000)=0xd, 0x4)

2m18.924771298s ago: executing program 2 (id=948):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r3 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010000000000000000", @ANYRES32], 0x3}}, 0x0)
splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4080)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d099}, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r9, 0x0)
sendfile(r9, r9, 0x0, 0x40008)

0s ago: executing program 38 (id=948):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r3 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010000000000000000", @ANYRES32], 0x3}}, 0x0)
splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4080)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d099}, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r9, 0x0)
sendfile(r9, r9, 0x0, 0x40008)

kernel console output (not intermixed with test programs):

cess accounting resumed
[  757.920635][ T6156] bridge_slave_1: left allmulticast mode
[  757.920672][ T6156] bridge_slave_1: left promiscuous mode
[  757.921027][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  757.997333][ T9416] Process accounting resumed
[  758.026430][ T6156] bridge_slave_0: left allmulticast mode
[  758.026456][ T6156] bridge_slave_0: left promiscuous mode
[  758.026654][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.156441][ T6156] bridge_slave_1: left allmulticast mode
[  758.156480][ T6156] bridge_slave_1: left promiscuous mode
[  758.156787][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.249393][ T6156] bridge_slave_0: left allmulticast mode
[  758.249431][ T6156] bridge_slave_0: left promiscuous mode
[  758.249731][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.314899][ T6156] bridge_slave_1: left allmulticast mode
[  758.314940][ T6156] bridge_slave_1: left promiscuous mode
[  758.315392][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.607510][ T6156] bridge_slave_0: left allmulticast mode
[  758.607548][ T6156] bridge_slave_0: left promiscuous mode
[  758.607879][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.776758][ T9427] capability: warning: `syz.2.732' uses deprecated v2 capabilities in a way that may be insecure
[  759.416796][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  759.497506][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  759.562201][ T6156] bond0 (unregistering): Released all slaves
[  760.155547][ T5912] ov519 3-1:4.191: Can't determine sensor slave IDs
[  760.155568][ T5912] ov519 3-1:4.191: OV519 Config failed
[  760.155680][ T5912] ov519 3-1:4.191: probe with driver ov519 failed with error -22
[  760.161466][ T5912] usb 3-1: USB disconnect, device number 80
[  761.977164][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  762.077761][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  762.160371][ T6156] bond0 (unregistering): Released all slaves
[  762.668149][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  762.674334][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  762.692023][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  762.703015][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  762.718663][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  762.786757][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  762.844547][ T9444] FAULT_INJECTION: forcing a failure.
[  762.844547][ T9444] name failslab, interval 1, probability 0, space 0, times 0
[  762.844583][ T9444] CPU: 0 UID: 0 PID: 9444 Comm: syz.2.736 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  762.844606][ T9444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  762.844619][ T9444] Call Trace:
[  762.844627][ T9444]  <TASK>
[  762.844636][ T9444]  dump_stack_lvl+0x189/0x250
[  762.844671][ T9444]  ? __pfx____ratelimit+0x10/0x10
[  762.844700][ T9444]  ? __pfx_dump_stack_lvl+0x10/0x10
[  762.844730][ T9444]  ? __pfx__printk+0x10/0x10
[  762.844759][ T9444]  ? __pfx___might_resched+0x10/0x10
[  762.844779][ T9444]  ? fs_reclaim_acquire+0x7d/0x100
[  762.844803][ T9444]  should_fail_ex+0x46c/0x600
[  762.844833][ T9444]  ? __alloc_skb+0x112/0x2d0
[  762.844858][ T9444]  should_failslab+0xa8/0x100
[  762.844886][ T9444]  ? __alloc_skb+0x112/0x2d0
[  762.844908][ T9444]  kmem_cache_alloc_node_noprof+0x77/0x330
[  762.844942][ T9444]  __alloc_skb+0x112/0x2d0
[  762.844973][ T9444]  netlink_sendmsg+0x5c6/0xb30
[  762.845010][ T9444]  ? __pfx_netlink_sendmsg+0x10/0x10
[  762.845046][ T9444]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  762.845066][ T9444]  ? __pfx_netlink_sendmsg+0x10/0x10
[  762.845093][ T9444]  __sock_sendmsg+0x219/0x270
[  762.845120][ T9444]  ____sys_sendmsg+0x508/0x820
[  762.845156][ T9444]  ? __pfx_____sys_sendmsg+0x10/0x10
[  762.845205][ T9444]  ? import_iovec+0x74/0xa0
[  762.845237][ T9444]  ___sys_sendmsg+0x21f/0x2a0
[  762.845266][ T9444]  ? __pfx____sys_sendmsg+0x10/0x10
[  762.845331][ T9444]  ? __fget_files+0x2a/0x420
[  762.845358][ T9444]  ? __fget_files+0x3a6/0x420
[  762.845398][ T9444]  __x64_sys_sendmsg+0x1a1/0x260
[  762.845431][ T9444]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  762.845471][ T9444]  ? __pfx_ksys_write+0x10/0x10
[  762.845494][ T9444]  ? rcu_is_watching+0x15/0xb0
[  762.845530][ T9444]  ? do_syscall_64+0xbe/0x3b0
[  762.845562][ T9444]  do_syscall_64+0xfa/0x3b0
[  762.845587][ T9444]  ? lockdep_hardirqs_on+0x9c/0x150
[  762.845614][ T9444]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  762.845634][ T9444]  ? clear_bhb_loop+0x60/0xb0
[  762.845660][ T9444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  762.845680][ T9444] RIP: 0033:0x7f105877ebe9
[  762.845699][ T9444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  762.845717][ T9444] RSP: 002b:00007f10569c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  762.845739][ T9444] RAX: ffffffffffffffda RBX: 00007f10589b6090 RCX: 00007f105877ebe9
[  762.845752][ T9444] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008
[  762.845765][ T9444] RBP: 00007f10569c5090 R08: 0000000000000000 R09: 0000000000000000
[  762.845777][ T9444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  762.845790][ T9444] R13: 00007f10589b6128 R14: 00007f10589b6090 R15: 00007ffde0991d18
[  762.845823][ T9444]  </TASK>
[  762.980447][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  763.049948][ T6156] bond0 (unregistering): Released all slaves
[  763.334390][ T9332] batman_adv: batadv0: Adding interface: batadv_slave_0
[  763.334410][ T9332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  763.334439][ T9332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  763.709580][ T9332] batman_adv: batadv0: Adding interface: batadv_slave_1
[  763.709600][ T9332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  763.709630][ T9332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  764.118371][ T9322] hsr_slave_0: entered promiscuous mode
[  764.119932][ T9322] hsr_slave_1: entered promiscuous mode
[  764.127551][ T9322] debugfs: 'hsr0' already exists in 'hsr'
[  764.127578][ T9322] Cannot create hsr debugfs directory
[  764.756542][ T5849] Bluetooth: hci4: command tx timeout
[  764.966823][ T9332] hsr_slave_0: entered promiscuous mode
[  764.968752][ T9332] hsr_slave_1: entered promiscuous mode
[  764.969960][ T9332] debugfs: 'hsr0' already exists in 'hsr'
[  764.969988][ T9332] Cannot create hsr debugfs directory
[  765.085888][ T6156] hsr_slave_0: left promiscuous mode
[  765.108496][ T6156] hsr_slave_1: left promiscuous mode
[  765.109657][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  765.168325][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  765.305613][ T6156] hsr_slave_0: left promiscuous mode
[  765.325573][ T6156] hsr_slave_1: left promiscuous mode
[  765.329331][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  765.380424][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  765.515460][ T6156] hsr_slave_0: left promiscuous mode
[  765.535779][ T6156] hsr_slave_1: left promiscuous mode
[  765.536977][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  765.576715][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  766.617995][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  766.796392][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  766.835786][ T5849] Bluetooth: hci4: command tx timeout
[  768.286535][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  768.436863][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  768.916218][ T5849] Bluetooth: hci4: command tx timeout
[  770.010209][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  770.169181][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  770.995844][ T5849] Bluetooth: hci4: command tx timeout
[  773.471571][ T9455] bridge: RTM_NEWNEIGH with invalid ether address
[  773.927170][ T9259] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  775.408506][ T9259] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  775.548233][ T5984] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  775.639095][ T9259] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  775.708064][ T5984] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  775.708119][ T5984] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  775.708143][ T5984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.732564][ T9259] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  775.754340][ T5984] usb 3-1: config 0 descriptor??
[  775.767726][ T5984] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  776.317786][ T9440] chnl_net:caif_netlink_parms(): no params data found
[  777.244059][ T9440] bridge0: port 1(bridge_slave_0) entered blocking state
[  777.244323][ T9440] bridge0: port 1(bridge_slave_0) entered disabled state
[  777.244595][ T9440] bridge_slave_0: entered allmulticast mode
[  777.270902][ T9440] bridge_slave_0: entered promiscuous mode
[  777.291788][ T9440] bridge0: port 2(bridge_slave_1) entered blocking state
[  777.291977][ T9440] bridge0: port 2(bridge_slave_1) entered disabled state
[  777.292255][ T9440] bridge_slave_1: entered allmulticast mode
[  777.321117][ T9440] bridge_slave_1: entered promiscuous mode
[  777.824774][ T9440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  777.850214][ T9440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  778.289134][ T9440] team0: Port device team_slave_0 added
[  778.322362][ T5919] usb 3-1: USB disconnect, device number 81
[  778.387894][ T9440] team0: Port device team_slave_1 added
[  781.100456][ T9440] batman_adv: batadv0: Adding interface: batadv_slave_0
[  781.100474][ T9440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  781.100503][ T9440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  781.160894][ T9440] batman_adv: batadv0: Adding interface: batadv_slave_1
[  781.160913][ T9440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  781.160942][ T9440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  781.563493][ T9440] hsr_slave_0: entered promiscuous mode
[  781.572457][ T9440] hsr_slave_1: entered promiscuous mode
[  781.713241][ T9259] 8021q: adding VLAN 0 to HW filter on device bond0
[  782.685662][    T9] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  782.841249][    T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  782.882560][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  782.882582][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.882594][    T9] usb 3-1: Product: з
[  782.882602][    T9] usb 3-1: Manufacturer: Ц
[  782.882610][    T9] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  783.184868][    T9] cdc_ncm 3-1:1.0: bind() failure
[  783.222899][    T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  783.222955][    T9] cdc_ncm 3-1:1.1: bind() failure
[  783.266025][    T9] usb 3-1: USB disconnect, device number 82
[  783.543196][ T9322] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  783.605670][ T9322] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  783.659335][ T9259] 8021q: adding VLAN 0 to HW filter on device team0
[  783.923645][ T9322] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  783.954849][ T9503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.748'.
[  784.889123][ T9322] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  785.285677][  T991] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  785.443267][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state
[  785.443536][ T7332] bridge0: port 1(bridge_slave_0) entered forwarding state
[  785.462609][  T991] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  785.462666][  T991] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  785.462691][  T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.505423][  T991] usb 3-1: config 0 descriptor??
[  785.513398][  T991] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  785.630393][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  785.630645][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  785.703846][ T9332] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  785.763292][ T9332] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  785.882875][ T9332] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  785.930621][ T9332] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  786.480728][ T6156] bridge_slave_1: left allmulticast mode
[  786.480765][ T6156] bridge_slave_1: left promiscuous mode
[  786.481087][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.593881][ T6156] bridge_slave_0: left allmulticast mode
[  786.593926][ T6156] bridge_slave_0: left promiscuous mode
[  786.594277][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  786.685153][ T6156] bridge_slave_1: left allmulticast mode
[  786.685192][ T6156] bridge_slave_1: left promiscuous mode
[  786.690177][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.768836][ T6156] bridge_slave_0: left allmulticast mode
[  786.768872][ T6156] bridge_slave_0: left promiscuous mode
[  786.770511][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  787.126749][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  787.132682][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  787.134181][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  787.165077][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  787.180856][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  787.906585][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  788.001068][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  788.103585][ T6156] bond0 (unregistering): Released all slaves
[  788.104556][ T5166] usb 3-1: USB disconnect, device number 83
[  789.553029][ T5849] Bluetooth: hci0: command tx timeout
[  789.868872][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  790.516600][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  790.586632][ T6156] bond0 (unregistering): Released all slaves
[  791.151307][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'.
[  791.528454][ T6156] hsr_slave_0: left promiscuous mode
[  791.708448][ T5849] Bluetooth: hci0: command tx timeout
[  792.087091][ T6156] hsr_slave_1: left promiscuous mode
[  792.129996][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  792.166727][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  792.335134][ T6156] hsr_slave_0: left promiscuous mode
[  792.358160][ T6156] hsr_slave_1: left promiscuous mode
[  792.359355][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  792.385470][    T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  792.406726][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  792.541707][    T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  792.558738][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  792.558772][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.558793][    T9] usb 3-1: Product: з
[  792.558807][    T9] usb 3-1: Manufacturer: Ц
[  792.558820][    T9] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  792.983727][    T9] cdc_ncm 3-1:1.0: bind() failure
[  793.010061][    T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  793.010116][    T9] cdc_ncm 3-1:1.1: bind() failure
[  793.038030][    T9] usb 3-1: USB disconnect, device number 84
[  793.695388][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  793.992951][ T5849] Bluetooth: hci0: command tx timeout
[  795.074421][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  796.035630][ T5849] Bluetooth: hci0: command tx timeout
[  797.022832][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  797.037218][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  797.043203][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  797.044514][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  797.068190][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  797.136696][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  797.336152][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  797.345748][    T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  797.525181][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  797.525365][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  797.525396][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  797.525418][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  797.525473][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  797.525498][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.532202][    T9] usb 3-1: config 0 descriptor??
[  797.991353][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  797.991498][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  798.027690][    T9] usb 3-1: USB disconnect, device number 85
[  799.235103][ T5849] Bluetooth: hci5: command tx timeout
[  800.753828][ T5154] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  800.768101][ T5154] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  800.769986][ T5154] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  800.771590][ T5154] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  800.773010][ T5154] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  801.159383][ T9573] GUP no longer grows the stack in syz.2.758 (9573): 200000004000-20000000a000 (200000002000)
[  801.159470][ T9573] CPU: 1 UID: 0 PID: 9573 Comm: syz.2.758 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  801.159497][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  801.159510][ T9573] Call Trace:
[  801.159519][ T9573]  <TASK>
[  801.159529][ T9573]  dump_stack_lvl+0x189/0x250
[  801.159572][ T9573]  ? __pfx_dump_stack_lvl+0x10/0x10
[  801.159605][ T9573]  ? __pfx__printk+0x10/0x10
[  801.159646][ T9573]  __get_user_pages+0x237e/0x2b60
[  801.159726][ T9573]  get_user_pages_remote+0x2f1/0xad0
[  801.159757][ T9573]  ? __pfx_mtree_load+0x10/0x10
[  801.159795][ T9573]  ? __pfx_get_user_pages_remote+0x10/0x10
[  801.159828][ T9573]  ? __access_remote_vm+0x367/0x7d0
[  801.159867][ T9573]  __access_remote_vm+0x211/0x7d0
[  801.159910][ T9573]  ? __pfx___access_remote_vm+0x10/0x10
[  801.159939][ T9573]  ? set_page_refcounted+0xa0/0x1e0
[  801.159972][ T9573]  ? alloc_pages_noprof+0xe4/0x1e0
[  801.160008][ T9573]  proc_pid_cmdline_read+0x433/0x810
[  801.160040][ T9573]  ? irqentry_exit+0x74/0x90
[  801.160078][ T9573]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  801.160114][ T9573]  ? vfs_readv+0x4a5/0x850
[  801.160154][ T9573]  vfs_readv+0x5b3/0x850
[  801.160186][ T9573]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  801.160222][ T9573]  ? __pfx_vfs_readv+0x10/0x10
[  801.160273][ T9573]  ? __fget_files+0x2a/0x420
[  801.160310][ T9573]  ? __fget_files+0x3a6/0x420
[  801.160338][ T9573]  ? __fget_files+0x2a/0x420
[  801.160379][ T9573]  __x64_sys_preadv+0x19a/0x2a0
[  801.160412][ T9573]  ? __pfx___x64_sys_preadv+0x10/0x10
[  801.160464][ T9573]  do_syscall_64+0xfa/0x3b0
[  801.160495][ T9573]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  801.160516][ T9573]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  801.160537][ T9573]  ? clear_bhb_loop+0x60/0xb0
[  801.160564][ T9573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  801.160585][ T9573] RIP: 0033:0x7f105877ebe9
[  801.160606][ T9573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  801.160626][ T9573] RSP: 002b:00007f10569a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  801.160650][ T9573] RAX: ffffffffffffffda RBX: 00007f10589b6180 RCX: 00007f105877ebe9
[  801.160667][ T9573] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000009
[  801.160681][ T9573] RBP: 00007f1058801e19 R08: 0000000000000000 R09: 0000000000000000
[  801.160693][ T9573] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  801.160707][ T9573] R13: 00007f10589b6218 R14: 00007f10589b6180 R15: 00007ffde0991d18
[  801.160744][ T9573]  </TASK>
[  801.327621][ T5154] Bluetooth: hci5: command tx timeout
[  802.920322][ T5154] Bluetooth: hci6: command tx timeout
[  803.785337][ T5154] Bluetooth: hci5: command tx timeout
[  805.005381][ T5154] Bluetooth: hci6: command tx timeout
[  805.857503][ T5154] Bluetooth: hci5: command tx timeout
[  806.305749][ T5912] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  806.491948][ T5912] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  806.514335][ T5912] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  806.514378][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.514399][ T5912] usb 3-1: Product: з
[  806.514412][ T5912] usb 3-1: Manufacturer: Ц
[  806.514427][ T5912] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  806.622463][ T9440] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  806.827553][ T9440] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  806.847404][ T5912] cdc_ncm 3-1:1.0: bind() failure
[  806.863266][ T5912] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  806.863323][ T5912] cdc_ncm 3-1:1.1: bind() failure
[  806.934110][ T5912] usb 3-1: USB disconnect, device number 86
[  806.991675][ T9440] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  807.071295][ T9440] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  807.075672][ T5154] Bluetooth: hci6: command tx timeout
[  807.281732][ T9524] chnl_net:caif_netlink_parms(): no params data found
[  807.745499][ T5912] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  807.911751][ T5912] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  807.911784][ T5912] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  807.911809][ T5912] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  807.961538][ T5912] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  807.961573][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.961594][ T5912] usb 3-1: Product: syz
[  807.961608][ T5912] usb 3-1: Manufacturer: syz
[  807.961623][ T5912] usb 3-1: SerialNumber: syz
[  808.014904][ T5912] hub 3-1:1.0: bad descriptor, ignoring hub
[  808.014932][ T5912] hub 3-1:1.0: probe with driver hub failed with error -5
[  808.246624][ T5912] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  808.357678][ T9553] chnl_net:caif_netlink_parms(): no params data found
[  808.371347][ T9524] bridge0: port 1(bridge_slave_0) entered blocking state
[  808.371577][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state
[  808.371808][ T9524] bridge_slave_0: entered allmulticast mode
[  808.374637][ T9524] bridge_slave_0: entered promiscuous mode
[  808.409851][ T9524] bridge0: port 2(bridge_slave_1) entered blocking state
[  808.410038][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state
[  808.410279][ T9524] bridge_slave_1: entered allmulticast mode
[  808.413510][ T9524] bridge_slave_1: entered promiscuous mode
[  808.908303][ T9524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  808.974978][ T9524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  809.077600][ T9599] usb 3-1: reset high-speed USB device number 87 using dummy_hcd
[  809.102581][ T9599] usb 3-1: device reset changed ep0 maxpacket size!
[  809.123330][ T5912] usb 3-1: USB disconnect, device number 87
[  809.133634][ T5912] usblp0: removed
[  809.155768][ T5154] Bluetooth: hci6: command tx timeout
[  809.305740][ T5912] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  809.475809][ T5912] usb 3-1: Using ep0 maxpacket: 8
[  809.478604][ T5912] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  809.478634][ T5912] usb 3-1: config 0 has no interface number 0
[  809.478693][ T5912] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  809.478718][ T5912] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  809.478745][ T5912] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  809.478772][ T5912] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  809.478817][ T5912] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  809.478841][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.538975][ T5912] usb 3-1: config 0 descriptor??
[  809.625841][ T5912] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  809.755016][ T9524] team0: Port device team_slave_0 added
[  809.782991][ T9553] bridge0: port 1(bridge_slave_0) entered blocking state
[  809.783144][ T9553] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.783428][ T9553] bridge_slave_0: entered allmulticast mode
[  809.808665][ T9553] bridge_slave_0: entered promiscuous mode
[  809.832164][ T9570] chnl_net:caif_netlink_parms(): no params data found
[  809.846530][ T9599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  809.847206][ T9599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  809.882306][ T5920] usb 3-1: USB disconnect, device number 88
[  809.897268][ T5920] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  810.029475][ T9524] team0: Port device team_slave_1 added
[  810.035078][ T9553] bridge0: port 2(bridge_slave_1) entered blocking state
[  810.045556][ T9553] bridge0: port 2(bridge_slave_1) entered disabled state
[  810.045824][ T9553] bridge_slave_1: entered allmulticast mode
[  810.048651][ T9553] bridge_slave_1: entered promiscuous mode
[  810.726285][    T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  810.823170][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_0
[  810.823189][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  810.823218][ T9524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  810.829014][ T9553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  810.902693][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  810.902731][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  810.902758][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  810.902782][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  810.902830][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  810.902855][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.982067][    T9] usb 3-1: config 0 descriptor??
[  811.233576][ T9553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  811.245578][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_1
[  811.245598][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  811.245633][ T9524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  811.397264][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  811.400504][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  811.400691][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  811.425361][    T9] usb 3-1: USB disconnect, device number 89
[  811.952217][ T9553] team0: Port device team_slave_0 added
[  813.002026][ T9553] team0: Port device team_slave_1 added
[  813.757285][ T9570] bridge0: port 1(bridge_slave_0) entered blocking state
[  813.757472][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state
[  813.757739][ T9570] bridge_slave_0: entered allmulticast mode
[  813.760987][ T9570] bridge_slave_0: entered promiscuous mode
[  813.971303][ T9570] bridge0: port 2(bridge_slave_1) entered blocking state
[  813.971489][ T9570] bridge0: port 2(bridge_slave_1) entered disabled state
[  813.971727][ T9570] bridge_slave_1: entered allmulticast mode
[  813.979293][ T9570] bridge_slave_1: entered promiscuous mode
[  814.044755][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  814.044840][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  814.122216][ T9524] hsr_slave_0: entered promiscuous mode
[  814.124086][ T9524] hsr_slave_1: entered promiscuous mode
[  814.128901][ T9524] debugfs: 'hsr0' already exists in 'hsr'
[  814.128928][ T9524] Cannot create hsr debugfs directory
[  814.221128][ T9553] batman_adv: batadv0: Adding interface: batadv_slave_0
[  814.221141][ T9553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  814.221157][ T9553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  814.255596][  T991] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  814.333289][ T9553] batman_adv: batadv0: Adding interface: batadv_slave_1
[  814.333307][ T9553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  814.333334][ T9553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  814.380662][ T9570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  814.406081][  T991] usb 3-1: Using ep0 maxpacket: 32
[  814.408874][  T991] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  814.408903][  T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.428914][  T991] usb 3-1: config 0 descriptor??
[  814.653176][  T991] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  814.700509][  T991] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  814.709389][  T991] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  814.709481][  T991] usb 3-1: media controller created
[  814.781074][ T9570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  814.789136][  T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  815.353615][ T9633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.767'.
[  815.536480][  T991] az6027: usb out operation failed. (-71)
[  815.539660][  T991] az6027: usb out operation failed. (-71)
[  815.539681][  T991] stb0899_attach: Driver disabled by Kconfig
[  815.539691][  T991] az6027: no front-end attached
[  815.539691][  T991] 
[  815.540197][  T991] az6027: usb out operation failed. (-71)
[  815.540211][  T991] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  815.558238][  T991] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22
[  815.569884][  T991] dvb-usb: schedule remote query interval to 400 msecs.
[  815.569905][  T991] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  815.585798][  T991] usb 3-1: USB disconnect, device number 90
[  815.808470][ T9570] team0: Port device team_slave_0 added
[  815.824654][  T991] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  816.004566][ T9570] team0: Port device team_slave_1 added
[  816.047196][ T9553] hsr_slave_0: entered promiscuous mode
[  816.048963][ T9553] hsr_slave_1: entered promiscuous mode
[  816.050054][ T9553] debugfs: 'hsr0' already exists in 'hsr'
[  816.050082][ T9553] Cannot create hsr debugfs directory
[  816.430406][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_0
[  816.430426][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  816.430452][ T9570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  816.460669][ T9440] 8021q: adding VLAN 0 to HW filter on device bond0
[  816.575182][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_1
[  816.575197][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  816.576001][ T9570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  816.617321][  T991] usb 3-1: new full-speed USB device number 91 using dummy_hcd
[  816.770460][  T991] usb 3-1: device descriptor read/64, error -71
[  817.013057][  T991] usb 3-1: new full-speed USB device number 92 using dummy_hcd
[  817.145964][  T991] usb 3-1: device descriptor read/64, error -71
[  817.256253][  T991] usb usb3-port1: attempt power cycle
[  817.597380][  T991] usb 3-1: new full-speed USB device number 93 using dummy_hcd
[  817.617394][  T991] usb 3-1: device descriptor read/8, error -71
[  817.858217][  T991] usb 3-1: new full-speed USB device number 94 using dummy_hcd
[  817.877519][  T991] usb 3-1: device descriptor read/8, error -71
[  817.986417][  T991] usb usb3-port1: unable to enumerate USB device
[  818.085795][ T9570] hsr_slave_0: entered promiscuous mode
[  818.088532][ T9570] hsr_slave_1: entered promiscuous mode
[  818.089566][ T9570] debugfs: 'hsr0' already exists in 'hsr'
[  818.089593][ T9570] Cannot create hsr debugfs directory
[  818.869009][ T9440] 8021q: adding VLAN 0 to HW filter on device team0
[  819.696713][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state
[  819.696892][ T7333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  819.745659][ T5912] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  819.935533][ T5912] usb 3-1: Using ep0 maxpacket: 32
[  819.939875][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  819.939903][ T5912] usb 3-1: config 0 has no interfaces?
[  819.941930][ T5912] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  819.941958][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  819.941979][ T5912] usb 3-1: Product: syz
[  819.941994][ T5912] usb 3-1: Manufacturer: syz
[  820.007374][ T5912] usb 3-1: config 0 descriptor??
[  820.179972][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state
[  820.182315][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state
[  821.716009][ T6156] bridge_slave_1: left allmulticast mode
[  821.716071][ T6156] bridge_slave_1: left promiscuous mode
[  821.716391][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.818608][ T6156] bridge_slave_0: left allmulticast mode
[  821.818645][ T6156] bridge_slave_0: left promiscuous mode
[  821.818933][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  822.152790][ T6156] bridge_slave_1: left allmulticast mode
[  822.152826][ T6156] bridge_slave_1: left promiscuous mode
[  822.154382][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  822.281979][ T6156] bridge_slave_0: left allmulticast mode
[  822.282016][ T6156] bridge_slave_0: left promiscuous mode
[  822.284412][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  822.381133][ T6156] bridge_slave_1: left allmulticast mode
[  822.381172][ T6156] bridge_slave_1: left promiscuous mode
[  822.381464][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  822.477748][ T6156] bridge_slave_0: left allmulticast mode
[  822.477786][ T6156] bridge_slave_0: left promiscuous mode
[  822.478112][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  822.617104][  T991] usb 3-1: USB disconnect, device number 95
[  823.745952][ T5912] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  823.869079][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  823.951730][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  823.977422][ T5912] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  823.977635][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  823.981401][ T5912] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  823.981433][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.981454][ T5912] usb 3-1: Product: з
[  823.981468][ T5912] usb 3-1: Manufacturer: Ц
[  823.981482][ T5912] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  824.015699][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  824.018235][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  824.379766][ T5912] cdc_ncm 3-1:1.0: bind() failure
[  824.413255][ T5912] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  824.413311][ T5912] cdc_ncm 3-1:1.1: bind() failure
[  824.486055][ T5912] usb 3-1: USB disconnect, device number 96
[  824.916932][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  825.026904][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  825.553737][ T6156] bond0 (unregistering): Released all slaves
[  826.140714][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  826.195640][ T5154] Bluetooth: hci1: command tx timeout
[  826.226820][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  826.291832][ T6156] bond0 (unregistering): Released all slaves
[  828.017479][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  828.078191][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  828.124176][ T6156] bond0 (unregistering): Released all slaves
[  828.277573][ T5154] Bluetooth: hci1: command tx timeout
[  829.269976][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'.
[  829.321858][ T9738] hsr_slave_0: left promiscuous mode
[  829.375137][ T9738] hsr_slave_1: left promiscuous mode
[  829.376164][ T9742] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  830.356021][ T5154] Bluetooth: hci1: command tx timeout
[  832.165532][ T6156] hsr_slave_0: left promiscuous mode
[  832.481520][ T5154] Bluetooth: hci1: command tx timeout
[  833.535645][ T6156] hsr_slave_1: left promiscuous mode
[  833.536713][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  833.646318][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  833.821502][ T9782] FAULT_INJECTION: forcing a failure.
[  833.821502][ T9782] name failslab, interval 1, probability 0, space 0, times 0
[  833.821539][ T9782] CPU: 1 UID: 0 PID: 9782 Comm: syz.2.776 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  833.821564][ T9782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  833.821577][ T9782] Call Trace:
[  833.821585][ T9782]  <TASK>
[  833.821595][ T9782]  dump_stack_lvl+0x189/0x250
[  833.821630][ T9782]  ? __pfx____ratelimit+0x10/0x10
[  833.821659][ T9782]  ? __pfx_dump_stack_lvl+0x10/0x10
[  833.821689][ T9782]  ? __pfx__printk+0x10/0x10
[  833.821735][ T9782]  should_fail_ex+0x46c/0x600
[  833.821770][ T9782]  ? skb_clone+0x212/0x3a0
[  833.821798][ T9782]  should_failslab+0xa8/0x100
[  833.821829][ T9782]  ? skb_clone+0x212/0x3a0
[  833.821856][ T9782]  kmem_cache_alloc_noprof+0x6e/0x310
[  833.821894][ T9782]  skb_clone+0x212/0x3a0
[  833.821921][ T9782]  ? raw_local_deliver+0x9c3/0xe90
[  833.821955][ T9782]  raw_local_deliver+0x9d6/0xe90
[  833.822008][ T9782]  ? raw_local_deliver+0x30d/0xe90
[  833.822037][ T9782]  ? __pfx_raw_local_deliver+0x10/0x10
[  833.822067][ T9782]  ? ip_local_deliver_finish+0x2ae/0x6f0
[  833.822103][ T9782]  ip_protocol_deliver_rcu+0x46/0x440
[  833.822132][ T9782]  ? ip_local_deliver_finish+0x2ae/0x6f0
[  833.822160][ T9782]  ip_local_deliver_finish+0x3bb/0x6f0
[  833.822197][ T9782]  NF_HOOK+0x30c/0x3a0
[  833.822226][ T9782]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  833.822250][ T9782]  ? NF_HOOK+0x9a/0x3a0
[  833.822274][ T9782]  ? __pfx_NF_HOOK+0x10/0x10
[  833.822303][ T9782]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  833.822331][ T9782]  ? skb_dst+0x71/0xd0
[  833.822365][ T9782]  ? ip_local_deliver+0x12a/0x1b0
[  833.822396][ T9782]  NF_HOOK+0x30c/0x3a0
[  833.822424][ T9782]  ? __pfx_ip_rcv_finish+0x10/0x10
[  833.822448][ T9782]  ? NF_HOOK+0x9a/0x3a0
[  833.822472][ T9782]  ? __pfx_NF_HOOK+0x10/0x10
[  833.822493][ T9782]  ? ip_rcv_core+0x7f7/0xd00
[  833.822521][ T9782]  ? __pfx_ip_rcv_finish+0x10/0x10
[  833.822561][ T9782]  ? __pfx_ip_rcv+0x10/0x10
[  833.822583][ T9782]  __netif_receive_skb+0x143/0x380
[  833.822615][ T9782]  ? netif_receive_skb+0x115/0x790
[  833.822637][ T9782]  netif_receive_skb+0x1cb/0x790
[  833.822664][ T9782]  ? __pfx_netif_receive_skb+0x10/0x10
[  833.822696][ T9782]  ? tun_rx_batched+0x166/0x730
[  833.822727][ T9782]  tun_rx_batched+0x1bf/0x730
[  833.822755][ T9782]  ? __pfx___local_bh_enable+0x10/0x10
[  833.822788][ T9782]  ? __pfx_tun_rx_batched+0x10/0x10
[  833.822816][ T9782]  ? __lock_acquire+0xab9/0xd20
[  833.822860][ T9782]  ? tun_get_user+0x266c/0x3e50
[  833.822908][ T9782]  tun_get_user+0x2ab7/0x3e50
[  833.822947][ T9782]  ? tun_get_user+0x6f6/0x3e50
[  833.822976][ T9782]  ? tun_get_user+0x266c/0x3e50
[  833.823012][ T9782]  ? __might_fault+0xb0/0x130
[  833.823043][ T9782]  ? __pfx_tun_get_user+0x10/0x10
[  833.823087][ T9782]  ? __lock_acquire+0xab9/0xd20
[  833.823121][ T9782]  ? ref_tracker_alloc+0x2fe/0x450
[  833.823146][ T9782]  ? __lock_acquire+0xab9/0xd20
[  833.823176][ T9782]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  833.823214][ T9782]  ? tun_get+0x1c/0x2f0
[  833.823250][ T9782]  ? tun_get+0x1c/0x2f0
[  833.823276][ T9782]  ? tun_get+0x1c/0x2f0
[  833.823312][ T9782]  tun_chr_write_iter+0x119/0x200
[  833.823344][ T9782]  vfs_write+0x5d2/0xb40
[  833.823385][ T9782]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  833.823415][ T9782]  ? __pfx_vfs_write+0x10/0x10
[  833.823455][ T9782]  ? __fget_files+0x2a/0x420
[  833.823498][ T9782]  ksys_write+0x14b/0x260
[  833.823528][ T9782]  ? __pfx_ksys_write+0x10/0x10
[  833.823550][ T9782]  ? rcu_is_watching+0x15/0xb0
[  833.823589][ T9782]  ? do_syscall_64+0xbe/0x3b0
[  833.823624][ T9782]  do_syscall_64+0xfa/0x3b0
[  833.823650][ T9782]  ? lockdep_hardirqs_on+0x9c/0x150
[  833.823677][ T9782]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  833.823698][ T9782]  ? clear_bhb_loop+0x60/0xb0
[  833.823725][ T9782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  833.823745][ T9782] RIP: 0033:0x7f105877d69f
[  833.823764][ T9782] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  833.823782][ T9782] RSP: 002b:00007f10569e6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  833.823806][ T9782] RAX: ffffffffffffffda RBX: 00007f10589b5fa0 RCX: 00007f105877d69f
[  833.823821][ T9782] RDX: 000000000000003e RSI: 0000200000000140 RDI: 00000000000000c8
[  833.823835][ T9782] RBP: 00007f10569e6090 R08: 0000000000000000 R09: 0000000000000000
[  833.823848][ T9782] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001
[  833.823861][ T9782] R13: 00007f10589b6038 R14: 00007f10589b5fa0 R15: 00007ffde0991d18
[  833.823902][ T9782]  </TASK>
[  834.617154][ T6156] hsr_slave_0: left promiscuous mode
[  834.656899][ T6156] hsr_slave_1: left promiscuous mode
[  834.660669][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  834.696608][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  834.975471][ T6156] hsr_slave_0: left promiscuous mode
[  835.020027][ T6156] hsr_slave_1: left promiscuous mode
[  835.021081][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  835.096593][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  836.236187][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  836.409404][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  838.024424][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  838.175996][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  839.773397][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  839.926464][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  842.864125][ T9524] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  844.095677][ T9524] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  844.395516][ T9524] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  844.452179][ T9818] netlink: 80 bytes leftover after parsing attributes in process `syz.2.781'.
[  844.466449][ T9820] netlink: 80 bytes leftover after parsing attributes in process `syz.2.781'.
[  844.466730][ T9524] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  846.202279][ T9712] chnl_net:caif_netlink_parms(): no params data found
[  847.581717][ T9712] bridge0: port 1(bridge_slave_0) entered blocking state
[  847.581847][ T9712] bridge0: port 1(bridge_slave_0) entered disabled state
[  847.582076][ T9712] bridge_slave_0: entered allmulticast mode
[  847.616944][ T9712] bridge_slave_0: entered promiscuous mode
[  848.027042][ T9712] bridge0: port 2(bridge_slave_1) entered blocking state
[  848.027213][ T9712] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.027470][ T9712] bridge_slave_1: entered allmulticast mode
[  848.031114][ T9712] bridge_slave_1: entered promiscuous mode
[  848.915313][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  848.936842][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  848.938522][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  848.953443][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  848.968937][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  849.635051][   T37] audit: type=1326 audit(1756558961.021:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9873 comm="syz.2.786" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f105877ebe9 code=0x0
[  850.994347][  T991] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  851.112670][ T9712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  851.132651][ T9712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  851.154643][  T991] usb 3-1: Using ep0 maxpacket: 32
[  851.157773][  T991] usb 3-1: config 0 has an invalid interface number: 247 but max is 0
[  851.157803][  T991] usb 3-1: config 0 has no interface number 0
[  851.159428][  T991] usb 3-1: config 0 interface 247 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  851.162280][  T991] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  851.162310][  T991] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  851.162330][  T991] usb 3-1: Product: syz
[  851.162345][  T991] usb 3-1: Manufacturer: syz
[  851.218842][ T5849] Bluetooth: hci3: command tx timeout
[  851.241765][  T991] usb 3-1: config 0 descriptor??
[  851.562627][ T9712] team0: Port device team_slave_0 added
[  851.631544][ T9712] team0: Port device team_slave_1 added
[  851.817494][ T9553] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  852.126118][ T9553] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  852.189321][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_0
[  852.189342][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  852.189371][ T9712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  852.199689][ T9553] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  852.396673][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_1
[  852.396692][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  852.396719][ T9712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  852.400109][ T9553] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  853.223631][ T9712] hsr_slave_0: entered promiscuous mode
[  853.225380][ T9712] hsr_slave_1: entered promiscuous mode
[  853.226592][ T9712] debugfs: 'hsr0' already exists in 'hsr'
[  853.226621][ T9712] Cannot create hsr debugfs directory
[  853.432725][ T5849] Bluetooth: hci3: command tx timeout
[  853.564621][ T9570] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  853.677343][ T9570] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  853.832946][ T9570] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  853.938067][  T991] usb 3-1: USB disconnect, device number 97
[  853.977134][ T9570] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  855.234014][ T9871] chnl_net:caif_netlink_parms(): no params data found
[  856.030098][ T5849] Bluetooth: hci3: command tx timeout
[  858.230902][ T5849] Bluetooth: hci3: command tx timeout
[  858.840347][ T5984] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  859.003378][ T5984] usb 3-1: Using ep0 maxpacket: 32
[  859.006049][ T5984] usb 3-1: config 0 has an invalid interface number: 247 but max is 0
[  859.006076][ T5984] usb 3-1: config 0 has no interface number 0
[  859.006127][ T5984] usb 3-1: config 0 interface 247 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  859.045004][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  859.060174][ T5984] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  859.060206][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  859.060228][ T5984] usb 3-1: Product: syz
[  859.060243][ T5984] usb 3-1: Manufacturer: syz
[  859.067358][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  859.070731][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  859.072490][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  859.075488][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  859.124786][ T5984] usb 3-1: config 0 descriptor??
[  859.996848][ T9871] bridge0: port 1(bridge_slave_0) entered blocking state
[  860.002822][ T9871] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.003097][ T9871] bridge_slave_0: entered allmulticast mode
[  860.008917][ T9871] bridge_slave_0: entered promiscuous mode
[  860.041762][ T9871] bridge0: port 2(bridge_slave_1) entered blocking state
[  860.042025][ T9871] bridge0: port 2(bridge_slave_1) entered disabled state
[  860.042286][ T9871] bridge_slave_1: entered allmulticast mode
[  860.055874][ T9871] bridge_slave_1: entered promiscuous mode
[  861.051198][ T9871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  861.124067][ T9871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  861.298768][ T5154] Bluetooth: hci0: command tx timeout
[  861.712954][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  861.742639][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  861.746262][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  861.749719][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  861.769475][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  861.872162][ T5920] usb 3-1: USB disconnect, device number 98
[  862.139798][ T9871] team0: Port device team_slave_0 added
[  862.224574][ T9871] team0: Port device team_slave_1 added
[  862.619819][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  862.619838][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  862.619866][ T9871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  862.765486][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  862.765500][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  862.765516][ T9871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  863.226874][ T6156] bridge_slave_1: left allmulticast mode
[  863.226912][ T6156] bridge_slave_1: left promiscuous mode
[  863.227204][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.333600][ T6156] bridge_slave_0: left allmulticast mode
[  863.333815][ T6156] bridge_slave_0: left promiscuous mode
[  863.336798][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.415282][ T6180] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  863.424430][ T6156] bridge_slave_1: left allmulticast mode
[  863.424455][ T6156] bridge_slave_1: left promiscuous mode
[  863.424638][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.495857][ T6156] bridge_slave_0: left allmulticast mode
[  863.495882][ T6156] bridge_slave_0: left promiscuous mode
[  863.496066][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.523762][ T5154] Bluetooth: hci0: command tx timeout
[  863.628227][ T6180] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  863.768951][ T6180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  863.768974][ T6180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.768985][ T6180] usb 3-1: Product: з
[  863.768993][ T6180] usb 3-1: Manufacturer: Ц
[  863.769001][ T6180] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  863.951847][ T5154] Bluetooth: hci4: command tx timeout
[  864.925679][ T6180] cdc_ncm 3-1:1.0: bind() failure
[  864.962729][ T6180] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  864.962761][ T6180] cdc_ncm 3-1:1.1: bind() failure
[  864.991850][ T6180] usb 3-1: USB disconnect, device number 99
[  865.019162][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  865.130141][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  865.193760][ T6156] bond0 (unregistering): Released all slaves
[  865.747540][ T5154] Bluetooth: hci0: command tx timeout
[  866.184352][ T5154] Bluetooth: hci4: command tx timeout
[  867.050810][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  867.146807][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  867.173738][ T6156] bond0 (unregistering): Released all slaves
[  867.231330][ T5920] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  867.484733][ T9712] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  867.591533][ T5920] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  867.641224][ T5920] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  867.641259][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.641281][ T5920] usb 3-1: Product: з
[  867.641295][ T5920] usb 3-1: Manufacturer: Ц
[  867.641310][ T5920] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  867.969002][ T5154] Bluetooth: hci0: command tx timeout
[  868.284061][ T9712] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  868.396461][ T5154] Bluetooth: hci4: command tx timeout
[  868.605270][ T9871] hsr_slave_0: entered promiscuous mode
[  868.624032][ T9871] hsr_slave_1: entered promiscuous mode
[  868.678856][ T9871] debugfs: 'hsr0' already exists in 'hsr'
[  868.679073][ T9871] Cannot create hsr debugfs directory
[  868.755856][ T9712] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  868.962206][ T9712] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  869.248765][ T5920] cdc_ncm 3-1:1.0: bind() failure
[  869.278518][ T5920] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  869.278574][ T5920] cdc_ncm 3-1:1.1: bind() failure
[  869.317784][ T5920] usb 3-1: USB disconnect, device number 100
[  869.551156][ T6156] hsr_slave_0: left promiscuous mode
[  869.594877][ T6156] hsr_slave_1: left promiscuous mode
[  869.596016][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  869.637692][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  869.898656][ T6156] hsr_slave_0: left promiscuous mode
[  869.947430][ T6156] hsr_slave_1: left promiscuous mode
[  869.948506][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  870.300076][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  871.273373][ T5154] Bluetooth: hci4: command tx timeout
[  871.645907][   T31] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  871.806421][   T31] usb 3-1: Using ep0 maxpacket: 32
[  871.809429][   T31] usb 3-1: config 0 has an invalid interface number: 247 but max is 0
[  871.809458][   T31] usb 3-1: config 0 has no interface number 0
[  871.809511][   T31] usb 3-1: config 0 interface 247 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  871.809535][   T31] usb 3-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  871.812146][   T31] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  871.812176][   T31] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  871.812196][   T31] usb 3-1: Product: syz
[  871.812210][   T31] usb 3-1: Manufacturer: syz
[  871.825552][   T31] usb 3-1: config 0 descriptor??
[  872.835129][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  873.047090][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  875.170551][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  875.358794][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  877.646221][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  877.646311][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  878.261009][ T5919] usb 3-1: USB disconnect, device number 101
[  881.196932][ T9936] chnl_net:caif_netlink_parms(): no params data found
[  884.906010][ T9943] chnl_net:caif_netlink_parms(): no params data found
[  885.083288][ T5984] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  885.243031][ T5984] usb 3-1: Using ep0 maxpacket: 32
[  885.247653][ T5984] usb 3-1: config 0 has an invalid interface number: 247 but max is 0
[  885.247682][ T5984] usb 3-1: config 0 has no interface number 0
[  885.247733][ T5984] usb 3-1: config 0 interface 247 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  885.250400][ T5984] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  885.250426][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  885.250447][ T5984] usb 3-1: Product: syz
[  885.250461][ T5984] usb 3-1: Manufacturer: syz
[  885.272606][ T5984] usb 3-1: config 0 descriptor??
[  885.734657][ T9936] bridge0: port 1(bridge_slave_0) entered blocking state
[  885.734836][ T9936] bridge0: port 1(bridge_slave_0) entered disabled state
[  885.735158][ T9936] bridge_slave_0: entered allmulticast mode
[  885.739436][ T9936] bridge_slave_0: entered promiscuous mode
[  886.034092][ T9936] bridge0: port 2(bridge_slave_1) entered blocking state
[  886.034265][ T9936] bridge0: port 2(bridge_slave_1) entered disabled state
[  886.034602][ T9936] bridge_slave_1: entered allmulticast mode
[  886.037931][ T9936] bridge_slave_1: entered promiscuous mode
[  886.838397][ T9936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  886.999623][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  887.004575][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  887.005986][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  887.029913][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  887.035490][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  887.109811][ T9936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  887.146675][ T9943] bridge0: port 1(bridge_slave_0) entered blocking state
[  887.146963][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state
[  887.147208][ T9943] bridge_slave_0: entered allmulticast mode
[  887.150029][ T9943] bridge_slave_0: entered promiscuous mode
[  887.610582][ T9943] bridge0: port 2(bridge_slave_1) entered blocking state
[  887.610773][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state
[  887.611042][ T9943] bridge_slave_1: entered allmulticast mode
[  887.614310][ T9943] bridge_slave_1: entered promiscuous mode
[  887.962806][ T9936] team0: Port device team_slave_0 added
[  888.079845][ T9949] usb 3-1: USB disconnect, device number 102
[  888.161848][ T9936] team0: Port device team_slave_1 added
[  888.540521][ T9943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  889.262153][ T5154] Bluetooth: hci5: command tx timeout
[  889.640935][ T9943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  889.900824][ T9936] batman_adv: batadv0: Adding interface: batadv_slave_0
[  889.900844][ T9936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  889.900874][ T9936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  890.029442][ T9936] batman_adv: batadv0: Adding interface: batadv_slave_1
[  890.029536][ T9936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  890.029568][ T9936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  890.034543][ T9943] team0: Port device team_slave_0 added
[  890.104976][ T9943] team0: Port device team_slave_1 added
[  890.215398][ T9871] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  890.457240][ T9871] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  890.957238][T10108] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  891.501323][ T5154] Bluetooth: hci5: command tx timeout
[  891.967681][ T9871] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  892.006444][ T9943] batman_adv: batadv0: Adding interface: batadv_slave_0
[  892.006463][ T9943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  892.006492][ T9943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  892.160883][T10110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  892.525074][ T9871] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  892.574030][ T9943] batman_adv: batadv0: Adding interface: batadv_slave_1
[  892.574048][ T9943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  892.574077][ T9943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  892.614881][T10112] random: crng reseeded on system resumption
[  893.065303][ T9936] hsr_slave_0: entered promiscuous mode
[  893.082066][ T9936] hsr_slave_1: entered promiscuous mode
[  893.708540][ T5154] Bluetooth: hci5: command tx timeout
[  895.510747][ T9943] hsr_slave_0: entered promiscuous mode
[  895.511849][ T9943] hsr_slave_1: entered promiscuous mode
[  895.512877][ T9943] debugfs: 'hsr0' already exists in 'hsr'
[  895.512903][ T9943] Cannot create hsr debugfs directory
[  895.932121][ T5154] Bluetooth: hci5: command tx timeout
[  898.675367][T10093] chnl_net:caif_netlink_parms(): no params data found
[  898.679232][ T5919] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  898.867278][ T5919] usb 3-1: Using ep0 maxpacket: 8
[  898.870911][ T5919] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  898.870940][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  898.870960][ T5919] usb 3-1: config 0 has no interface number 0
[  898.871012][ T5919] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  898.871030][ T5919] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  898.871045][ T5919] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  898.871060][ T5919] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  898.871075][ T5919] usb 3-1: config 0 interface 52 has no altsetting 0
[  898.871095][ T5919] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  898.871108][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.877169][ T5919] usb 3-1: config 0 descriptor??
[  899.126087][ T5919] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input23
[  900.685616][T10093] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.685821][T10093] bridge0: port 1(bridge_slave_0) entered disabled state
[  900.686072][T10093] bridge_slave_0: entered allmulticast mode
[  900.688050][T10093] bridge_slave_0: entered promiscuous mode
[  900.722943][T10093] bridge0: port 2(bridge_slave_1) entered blocking state
[  900.723279][T10093] bridge0: port 2(bridge_slave_1) entered disabled state
[  900.723543][T10093] bridge_slave_1: entered allmulticast mode
[  900.728146][T10093] bridge_slave_1: entered promiscuous mode
[  901.190316][T10093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  901.218253][T10093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  901.425336][T10093] team0: Port device team_slave_0 added
[  901.437308][ T9871] 8021q: adding VLAN 0 to HW filter on device bond0
[  901.441667][T10093] team0: Port device team_slave_1 added
[  901.565914][    T9] usb 3-1: USB disconnect, device number 103
[  901.995453][T10093] batman_adv: batadv0: Adding interface: batadv_slave_0
[  901.995474][T10093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  901.995503][T10093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  903.241759][T10093] batman_adv: batadv0: Adding interface: batadv_slave_1
[  903.241778][T10093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  903.241807][T10093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  903.545549][T10157] netlink: 452 bytes leftover after parsing attributes in process `syz.2.818'.
[  903.579530][ T9871] 8021q: adding VLAN 0 to HW filter on device team0
[  903.934794][T10093] hsr_slave_0: entered promiscuous mode
[  903.936528][T10093] hsr_slave_1: entered promiscuous mode
[  903.937654][T10093] debugfs: 'hsr0' already exists in 'hsr'
[  903.937679][T10093] Cannot create hsr debugfs directory
[  903.974579][ T7893] bridge0: port 1(bridge_slave_0) entered blocking state
[  903.974754][ T7893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  904.293212][ T6156] bridge_slave_1: left allmulticast mode
[  904.293253][ T6156] bridge_slave_1: left promiscuous mode
[  904.293622][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.389480][ T6156] bridge_slave_0: left allmulticast mode
[  904.389519][ T6156] bridge_slave_0: left promiscuous mode
[  904.389818][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.482521][ T6156] bridge_slave_1: left allmulticast mode
[  904.482551][ T6156] bridge_slave_1: left promiscuous mode
[  904.482739][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.548633][ T6156] bridge_slave_0: left allmulticast mode
[  904.548659][ T6156] bridge_slave_0: left promiscuous mode
[  904.548848][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.615777][ T6156] bridge_slave_1: left allmulticast mode
[  904.615803][ T6156] bridge_slave_1: left promiscuous mode
[  904.615973][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.702429][ T6156] bridge_slave_0: left allmulticast mode
[  904.702455][ T6156] bridge_slave_0: left promiscuous mode
[  904.702633][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  905.820302][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  905.956183][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  906.485114][ T6156] bond0 (unregistering): Released all slaves
[  907.744158][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  907.829853][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  907.887470][ T6156] bond0 (unregistering): Released all slaves
[  908.517224][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  908.635356][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  908.701979][ T6156] bond0 (unregistering): Released all slaves
[  908.957182][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state
[  908.957530][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state
[  912.313332][ T6156] hsr_slave_0: left promiscuous mode
[  912.329422][ T6156] hsr_slave_1: left promiscuous mode
[  912.330486][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  912.346970][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  912.481313][ T6156] hsr_slave_0: left promiscuous mode
[  912.500447][ T6156] hsr_slave_1: left promiscuous mode
[  912.501542][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  912.524445][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  912.671187][ T6156] hsr_slave_0: left promiscuous mode
[  912.716400][ T6156] hsr_slave_1: left promiscuous mode
[  912.717133][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  912.738144][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  913.591804][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  913.755690][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  913.972086][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  914.042112][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  914.060872][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  914.062254][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  914.063691][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  915.227714][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  915.355079][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  916.284437][ T5849] Bluetooth: hci1: command tx timeout
[  916.706472][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  916.830374][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  918.508466][ T5849] Bluetooth: hci1: command tx timeout
[  919.136653][T10194] 9pnet_fd: Insufficient options for proto=fd
[  919.606153][ T9936] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  919.716639][ T9936] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  919.837712][ T9936] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  919.957629][ T9936] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  920.438296][T10183] chnl_net:caif_netlink_parms(): no params data found
[  920.475698][ T9943] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  920.553174][ T9943] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  920.559981][ T5912] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  920.737663][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  920.749171][ T5849] Bluetooth: hci1: command tx timeout
[  920.762576][ T5912] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19
[  920.762607][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.762627][ T5912] usb 3-1: Product: syz
[  920.762640][ T5912] usb 3-1: Manufacturer: syz
[  920.762654][ T5912] usb 3-1: SerialNumber: syz
[  920.885536][ T5912] usb 3-1: config 0 descriptor??
[  920.925082][ T5912] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -32
[  921.002762][ T9943] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  921.143826][T10205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.827'.
[  921.181902][ T9943] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  921.841203][T10183] bridge0: port 1(bridge_slave_0) entered blocking state
[  921.841459][T10183] bridge0: port 1(bridge_slave_0) entered disabled state
[  921.852714][T10183] bridge_slave_0: entered allmulticast mode
[  921.862601][T10183] bridge_slave_0: entered promiscuous mode
[  921.884874][T10183] bridge0: port 2(bridge_slave_1) entered blocking state
[  921.885042][T10183] bridge0: port 2(bridge_slave_1) entered disabled state
[  921.885803][T10183] bridge_slave_1: entered allmulticast mode
[  921.890131][T10183] bridge_slave_1: entered promiscuous mode
[  922.333803][T10183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  922.384702][T10183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  922.842986][T10183] team0: Port device team_slave_0 added
[  922.910840][T10183] team0: Port device team_slave_1 added
[  922.954350][ T5849] Bluetooth: hci1: command tx timeout
[  923.229251][T10183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  923.229271][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  923.229301][T10183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  923.353413][    T9] usb 3-1: USB disconnect, device number 104
[  923.374587][T10183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  923.374606][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  923.374635][T10183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  923.959345][T10093] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  924.250039][T10183] hsr_slave_0: entered promiscuous mode
[  924.251646][T10183] hsr_slave_1: entered promiscuous mode
[  924.252686][T10183] debugfs: 'hsr0' already exists in 'hsr'
[  924.252713][T10183] Cannot create hsr debugfs directory
[  924.277442][T10093] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  924.543269][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  924.554403][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  924.558895][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  924.582964][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  924.583851][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  924.673658][T10093] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  925.026244][T10093] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  926.556798][  T991] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  926.769552][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  926.793051][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  926.796879][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  926.803293][ T5154] Bluetooth: hci0: command tx timeout
[  926.852891][ T9526] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  926.891140][ T9526] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  926.998251][  T991] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  927.071778][  T991] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  927.071799][  T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  927.071812][  T991] usb 3-1: Product: з
[  927.071820][  T991] usb 3-1: Manufacturer: Ц
[  927.071828][  T991] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  929.028367][ T9526] Bluetooth: hci0: command tx timeout
[  929.111313][ T9526] Bluetooth: hci3: command tx timeout
[  929.123498][ T3567] bridge_slave_1: left allmulticast mode
[  929.123536][ T3567] bridge_slave_1: left promiscuous mode
[  929.123857][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.235114][ T3567] bridge_slave_0: left allmulticast mode
[  929.236466][ T3567] bridge_slave_0: left promiscuous mode
[  929.241052][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state
[  929.426228][  T991] cdc_ncm 3-1:1.0: bind() failure
[  929.461819][  T991] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  929.461874][  T991] cdc_ncm 3-1:1.1: bind() failure
[  929.519778][  T991] usb 3-1: USB disconnect, device number 105
[  931.642272][ T9526] Bluetooth: hci0: command tx timeout
[  931.642310][ T9526] Bluetooth: hci3: command tx timeout
[  931.774806][T10252] 9pnet_fd: Insufficient options for proto=fd
[  934.227430][ T5849] Bluetooth: hci3: command tx timeout
[  934.227470][ T5849] Bluetooth: hci0: command tx timeout
[  936.379977][ T9526] Bluetooth: hci3: command tx timeout
[  936.385179][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  937.578049][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  937.795807][ T3567] bond0 (unregistering): Released all slaves
[  938.758436][ T3567] hsr_slave_0: left promiscuous mode
[  938.780064][ T3567] hsr_slave_1: left promiscuous mode
[  938.780756][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0
[  938.987661][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1
[  941.492430][ T3567] team0 (unregistering): Port device team_slave_1 removed
[  941.689158][ T3567] team0 (unregistering): Port device team_slave_0 removed
[  943.344115][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  943.344203][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  944.746070][T10224] chnl_net:caif_netlink_parms(): no params data found
[  945.707861][T10238] chnl_net:caif_netlink_parms(): no params data found
[  946.267177][T10093] 8021q: adding VLAN 0 to HW filter on device bond0
[  947.005258][T10224] bridge0: port 1(bridge_slave_0) entered blocking state
[  947.005427][T10224] bridge0: port 1(bridge_slave_0) entered disabled state
[  947.005678][T10224] bridge_slave_0: entered allmulticast mode
[  947.048786][T10224] bridge_slave_0: entered promiscuous mode
[  947.205913][T10224] bridge0: port 2(bridge_slave_1) entered blocking state
[  947.206174][T10224] bridge0: port 2(bridge_slave_1) entered disabled state
[  947.206502][T10224] bridge_slave_1: entered allmulticast mode
[  947.223372][T10224] bridge_slave_1: entered promiscuous mode
[  947.490778][T10238] bridge0: port 1(bridge_slave_0) entered blocking state
[  947.491172][T10238] bridge0: port 1(bridge_slave_0) entered disabled state
[  947.491424][T10238] bridge_slave_0: entered allmulticast mode
[  947.495275][T10238] bridge_slave_0: entered promiscuous mode
[  947.623789][T10238] bridge0: port 2(bridge_slave_1) entered blocking state
[  947.623938][T10238] bridge0: port 2(bridge_slave_1) entered disabled state
[  947.624218][T10238] bridge_slave_1: entered allmulticast mode
[  947.650493][T10238] bridge_slave_1: entered promiscuous mode
[  947.656571][T10224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  947.679760][T10093] 8021q: adding VLAN 0 to HW filter on device team0
[  947.889143][T10224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  949.905248][T10183] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  949.933220][T10238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  950.070973][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state
[  950.072972][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state
[  950.105159][T10183] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  950.135422][T10238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  950.148675][T10224] team0: Port device team_slave_0 added
[  951.192623][T10183] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  951.650347][T10224] team0: Port device team_slave_1 added
[  951.697724][T10183] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  953.077702][T10238] team0: Port device team_slave_0 added
[  953.281485][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  953.306501][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  953.308020][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  953.336688][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  953.338850][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  954.589311][T10238] team0: Port device team_slave_1 added
[  954.593043][T10224] batman_adv: batadv0: Adding interface: batadv_slave_0
[  954.593061][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  954.593090][T10224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  954.983911][T10224] batman_adv: batadv0: Adding interface: batadv_slave_1
[  954.983931][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  954.983960][T10224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  955.183203][T10238] batman_adv: batadv0: Adding interface: batadv_slave_0
[  955.183224][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  955.183254][T10238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  955.542435][ T9526] Bluetooth: hci4: command tx timeout
[  955.977419][T10238] batman_adv: batadv0: Adding interface: batadv_slave_1
[  955.977433][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  955.977449][T10238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  956.632273][T10224] hsr_slave_0: entered promiscuous mode
[  956.633796][T10224] hsr_slave_1: entered promiscuous mode
[  956.634843][T10224] debugfs: 'hsr0' already exists in 'hsr'
[  956.634871][T10224] Cannot create hsr debugfs directory
[  957.274034][T10375] FAULT_INJECTION: forcing a failure.
[  957.274034][T10375] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  957.274071][T10375] CPU: 1 UID: 0 PID: 10375 Comm: syz.2.860 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  957.274094][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  957.274106][T10375] Call Trace:
[  957.274114][T10375]  <TASK>
[  957.274123][T10375]  dump_stack_lvl+0x189/0x250
[  957.274158][T10375]  ? __pfx____ratelimit+0x10/0x10
[  957.274186][T10375]  ? __pfx_dump_stack_lvl+0x10/0x10
[  957.274215][T10375]  ? __pfx__printk+0x10/0x10
[  957.274256][T10375]  should_fail_ex+0x46c/0x600
[  957.274290][T10375]  _copy_to_user+0x31/0xb0
[  957.274316][T10375]  simple_read_from_buffer+0xe1/0x170
[  957.274350][T10375]  proc_fail_nth_read+0x1b6/0x220
[  957.274375][T10375]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  957.274405][T10375]  ? rw_verify_area+0x2ac/0x4e0
[  957.274430][T10375]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  957.274454][T10375]  vfs_read+0x203/0xa30
[  957.274489][T10375]  ? __pfx_vfs_read+0x10/0x10
[  957.274529][T10375]  ? try_to_take_rt_mutex+0x7fd/0xac0
[  957.274563][T10375]  ? mutex_lock_nested+0x154/0x1d0
[  957.274583][T10375]  ? fdget_pos+0x253/0x320
[  957.274623][T10375]  ksys_read+0x14b/0x260
[  957.274652][T10375]  ? __pfx_ksys_read+0x10/0x10
[  957.274684][T10375]  ? do_syscall_64+0xbe/0x3b0
[  957.274715][T10375]  do_syscall_64+0xfa/0x3b0
[  957.274741][T10375]  ? lockdep_hardirqs_on+0x9c/0x150
[  957.274766][T10375]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.274787][T10375]  ? clear_bhb_loop+0x60/0xb0
[  957.274814][T10375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.274833][T10375] RIP: 0033:0x7f105877d5fc
[  957.274852][T10375] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  957.274870][T10375] RSP: 002b:00007f10569c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  957.274894][T10375] RAX: ffffffffffffffda RBX: 00007f10589b6090 RCX: 00007f105877d5fc
[  957.274910][T10375] RDX: 000000000000000f RSI: 00007f10569c50a0 RDI: 0000000000000005
[  957.274924][T10375] RBP: 00007f10569c5090 R08: 0000000000000000 R09: 0000000000000000
[  957.274937][T10375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  957.274950][T10375] R13: 00007f10589b6128 R14: 00007f10589b6090 R15: 00007ffde0991d18
[  957.274994][T10375]  </TASK>
[  957.815897][ T9526] Bluetooth: hci4: command tx timeout
[  958.874551][T10238] hsr_slave_0: entered promiscuous mode
[  958.888774][T10238] hsr_slave_1: entered promiscuous mode
[  958.889880][T10238] debugfs: 'hsr0' already exists in 'hsr'
[  958.889905][T10238] Cannot create hsr debugfs directory
[  960.004785][ T9526] Bluetooth: hci4: command tx timeout
[  962.205305][ T9526] Bluetooth: hci4: command tx timeout
[  965.759048][   T49] IPVS: starting estimator thread 0...
[  966.053404][T10422] IPVS: using max 6 ests per chain, 14400 per kthread
[  966.477734][T10428] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  967.761375][T10348] chnl_net:caif_netlink_parms(): no params data found
[  968.171588][T10183] 8021q: adding VLAN 0 to HW filter on device bond0
[  968.600026][T10348] bridge0: port 1(bridge_slave_0) entered blocking state
[  968.600238][T10348] bridge0: port 1(bridge_slave_0) entered disabled state
[  968.600519][T10348] bridge_slave_0: entered allmulticast mode
[  968.632333][T10348] bridge_slave_0: entered promiscuous mode
[  968.652588][T10348] bridge0: port 2(bridge_slave_1) entered blocking state
[  968.652765][T10348] bridge0: port 2(bridge_slave_1) entered disabled state
[  968.653051][T10348] bridge_slave_1: entered allmulticast mode
[  968.662787][T10348] bridge_slave_1: entered promiscuous mode
[  969.171776][ T3567] bridge_slave_1: left allmulticast mode
[  969.171814][ T3567] bridge_slave_1: left promiscuous mode
[  969.172133][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state
[  969.907248][ T3567] bridge_slave_0: left allmulticast mode
[  969.907294][ T3567] bridge_slave_0: left promiscuous mode
[  969.907602][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state
[  970.312853][ T3567] bridge_slave_1: left allmulticast mode
[  970.312891][ T3567] bridge_slave_1: left promiscuous mode
[  970.313189][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state
[  970.956641][ T3567] bridge_slave_0: left allmulticast mode
[  970.956678][ T3567] bridge_slave_0: left promiscuous mode
[  970.956963][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state
[  974.552622][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  974.683070][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  974.784155][ T3567] bond0 (unregistering): Released all slaves
[  976.754268][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  976.871818][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  976.978021][ T3567] bond0 (unregistering): Released all slaves
[  977.306454][T10348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  977.326227][T10183] 8021q: adding VLAN 0 to HW filter on device team0
[  978.401299][T10348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  978.897355][T10348] team0: Port device team_slave_0 added
[  979.083458][ T3567] hsr_slave_0: left promiscuous mode
[  979.151121][ T3567] hsr_slave_1: left promiscuous mode
[  979.158503][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0
[  979.202052][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1
[  979.436262][ T3567] hsr_slave_0: left promiscuous mode
[  979.490023][ T3567] hsr_slave_1: left promiscuous mode
[  979.491073][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0
[  979.607549][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1
[  979.732152][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  979.767933][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  979.771304][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  979.789880][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  979.793761][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  980.328543][T10497] netlink: 'syz.2.892': attribute type 8 has an invalid length.
[  980.903401][ T3567] team0 (unregistering): Port device team_slave_1 removed
[  981.099542][ T3567] team0 (unregistering): Port device team_slave_0 removed
[  981.964408][ T9526] Bluetooth: hci1: command tx timeout
[  982.425912][T10505] befs: (nbd2): No write support. Marking filesystem read-only
[  982.602285][T10505] block nbd2: Attempted send on invalid socket
[  982.602561][T10505] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  982.677125][T10505] befs: (nbd2): unable to read superblock
[  984.529571][ T9526] Bluetooth: hci1: command tx timeout
[  985.305716][ T3567] team0 (unregistering): Port device team_slave_1 removed
[  985.490754][ T3567] team0 (unregistering): Port device team_slave_0 removed
[  986.391296][T10348] team0: Port device team_slave_1 added
[  986.748265][ T9526] Bluetooth: hci1: command tx timeout
[  987.015872][T10348] batman_adv: batadv0: Adding interface: batadv_slave_0
[  987.015891][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  987.015920][T10348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  987.194307][T10348] batman_adv: batadv0: Adding interface: batadv_slave_1
[  987.194327][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  987.194357][T10348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  987.608914][T10348] hsr_slave_0: entered promiscuous mode
[  987.610598][T10348] hsr_slave_1: entered promiscuous mode
[  988.981932][ T9526] Bluetooth: hci1: command tx timeout
[  989.738939][T10489] chnl_net:caif_netlink_parms(): no params data found
[  990.477719][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  990.720676][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  990.811652][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  990.816556][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  990.839288][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  993.078230][ T9526] Bluetooth: hci5: command tx timeout
[  993.126352][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  993.148398][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  993.179145][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  993.210411][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  993.222243][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  993.650499][T10489] bridge0: port 1(bridge_slave_0) entered blocking state
[  993.650644][T10489] bridge0: port 1(bridge_slave_0) entered disabled state
[  993.650882][T10489] bridge_slave_0: entered allmulticast mode
[  993.653113][T10489] bridge_slave_0: entered promiscuous mode
[  993.690943][T10489] bridge0: port 2(bridge_slave_1) entered blocking state
[  993.691116][T10489] bridge0: port 2(bridge_slave_1) entered disabled state
[  993.691390][T10489] bridge_slave_1: entered allmulticast mode
[  993.694753][T10489] bridge_slave_1: entered promiscuous mode
[  994.095603][    C0] vkms_vblank_simulate: vblank timer overrun
[  995.123803][    C0] vkms_vblank_simulate: vblank timer overrun
[  995.299943][ T9526] Bluetooth: hci5: command tx timeout
[  995.444520][    C0] vkms_vblank_simulate: vblank timer overrun
[  995.455908][ T5912] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  995.480923][ T9526] Bluetooth: hci0: command tx timeout
[  995.622801][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  995.622837][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  995.622863][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  995.622885][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  995.622929][ T5912] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  995.622951][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.636781][ T5912] usb 3-1: config 0 descriptor??
[  996.030728][    C0] vkms_vblank_simulate: vblank timer overrun
[  996.107426][ T5912] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max
[  996.108374][ T5912] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  996.108399][ T5912] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  996.108414][ T5912] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  996.108428][ T5912] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  996.108442][ T5912] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  996.170270][ T5912] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  996.427176][ T5912] usb 3-1: USB disconnect, device number 106
[  996.549517][T10489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  996.639133][T10489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  997.100790][T10579] overlayfs: upper fs does not support file handles, falling back to index=off.
[  997.129180][T10579] FAULT_INJECTION: forcing a failure.
[  997.129180][T10579] name failslab, interval 1, probability 0, space 0, times 0
[  997.129218][T10579] CPU: 0 UID: 0 PID: 10579 Comm: syz.2.904 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  997.129242][T10579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  997.129264][T10579] Call Trace:
[  997.129272][T10579]  <TASK>
[  997.129281][T10579]  dump_stack_lvl+0x189/0x250
[  997.129316][T10579]  ? __pfx____ratelimit+0x10/0x10
[  997.129344][T10579]  ? __pfx_dump_stack_lvl+0x10/0x10
[  997.129374][T10579]  ? __pfx__printk+0x10/0x10
[  997.129403][T10579]  ? __pfx___might_resched+0x10/0x10
[  997.129426][T10579]  ? fs_reclaim_acquire+0x7d/0x100
[  997.129450][T10579]  should_fail_ex+0x46c/0x600
[  997.129484][T10579]  should_failslab+0xa8/0x100
[  997.129513][T10579]  __kmalloc_noprof+0xcb/0x430
[  997.129538][T10579]  ? ovl_lookup+0x5f7/0x1bc0
[  997.129571][T10579]  ovl_lookup+0x5f7/0x1bc0
[  997.129606][T10579]  ? d_alloc_parallel+0x2f0/0x1600
[  997.129634][T10579]  ? d_alloc_parallel+0x14c5/0x1600
[  997.129676][T10579]  ? __pfx_ovl_lookup+0x10/0x10
[  997.129703][T10579]  ? __pfx_smack_inode_permission+0x10/0x10
[  997.129725][T10579]  ? __pfx_d_alloc_parallel+0x10/0x10
[  997.129755][T10579]  ? __rt_spin_lock_init+0x3e/0x50
[  997.129785][T10579]  ? __init_waitqueue_head+0xae/0x160
[  997.129817][T10579]  __lookup_slow+0x29a/0x3d0
[  997.129843][T10579]  ? __pfx___lookup_slow+0x10/0x10
[  997.129882][T10579]  ? down_read+0x181/0x1f0
[  997.129910][T10579]  ? __pfx_down_read+0x10/0x10
[  997.129945][T10579]  ? lookup_fast+0x192/0x5b0
[  997.129969][T10579]  lookup_slow+0x53/0x70
[  997.129992][T10579]  walk_component+0x2d2/0x400
[  997.130020][T10579]  ? path_lookupat+0x156/0x430
[  997.130044][T10579]  path_lookupat+0x163/0x430
[  997.130074][T10579]  filename_lookup+0x212/0x570
[  997.130102][T10579]  ? __pfx_filename_lookup+0x10/0x10
[  997.130152][T10579]  ? strncpy_from_user+0x150/0x290
[  997.130182][T10579]  ? getname_flags+0x1e5/0x540
[  997.130211][T10579]  ? rt_mutex_slowunlock+0x1be/0x2e0
[  997.130236][T10579]  user_path_at+0x3a/0x60
[  997.130267][T10579]  __se_sys_name_to_handle_at+0x180/0x8a0
[  997.130306][T10579]  ? __pfx___se_sys_name_to_handle_at+0x10/0x10
[  997.130334][T10579]  ? ksys_write+0x230/0x260
[  997.130373][T10579]  ? do_syscall_64+0xbe/0x3b0
[  997.130399][T10579]  ? __x64_sys_name_to_handle_at+0x20/0xc0
[  997.130432][T10579]  do_syscall_64+0xfa/0x3b0
[  997.130458][T10579]  ? lockdep_hardirqs_on+0x9c/0x150
[  997.130484][T10579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.130504][T10579]  ? clear_bhb_loop+0x60/0xb0
[  997.130529][T10579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.130548][T10579] RIP: 0033:0x7f105877ebe9
[  997.130568][T10579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  997.130585][T10579] RSP: 002b:00007f10569e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f
[  997.130608][T10579] RAX: ffffffffffffffda RBX: 00007f10589b5fa0 RCX: 00007f105877ebe9
[  997.130623][T10579] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  997.130637][T10579] RBP: 00007f10569e6090 R08: 0000000000001200 R09: 0000000000000000
[  997.130650][T10579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  997.130663][T10579] R13: 00007f10589b6038 R14: 00007f10589b5fa0 R15: 00007ffde0991d18
[  997.130698][T10579]  </TASK>
[  997.522934][ T9526] Bluetooth: hci5: command tx timeout
[  997.649094][T10586] FAULT_INJECTION: forcing a failure.
[  997.649094][T10586] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  997.649119][T10586] CPU: 1 UID: 0 PID: 10586 Comm: syz.2.906 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  997.649134][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  997.649141][T10586] Call Trace:
[  997.649146][T10586]  <TASK>
[  997.649151][T10586]  dump_stack_lvl+0x189/0x250
[  997.649174][T10586]  ? __pfx____ratelimit+0x10/0x10
[  997.649197][T10586]  ? __pfx_dump_stack_lvl+0x10/0x10
[  997.649213][T10586]  ? __pfx__printk+0x10/0x10
[  997.649234][T10586]  should_fail_ex+0x46c/0x600
[  997.649253][T10586]  _copy_to_user+0x31/0xb0
[  997.649274][T10586]  simple_read_from_buffer+0xe1/0x170
[  997.649292][T10586]  proc_fail_nth_read+0x1b6/0x220
[  997.649306][T10586]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  997.649319][T10586]  ? rw_verify_area+0x2ac/0x4e0
[  997.649333][T10586]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  997.649345][T10586]  vfs_read+0x203/0xa30
[  997.649363][T10586]  ? __pfx_vfs_read+0x10/0x10
[  997.649375][T10586]  ? try_to_take_rt_mutex+0x7fd/0xac0
[  997.649393][T10586]  ? mutex_lock_nested+0x154/0x1d0
[  997.649403][T10586]  ? fdget_pos+0x253/0x320
[  997.649425][T10586]  ksys_read+0x14b/0x260
[  997.649442][T10586]  ? __pfx_ksys_read+0x10/0x10
[  997.649460][T10586]  ? fput+0xa0/0xd0
[  997.649483][T10586]  ? do_syscall_64+0xbe/0x3b0
[  997.649513][T10586]  do_syscall_64+0xfa/0x3b0
[  997.649536][T10586]  ? lockdep_hardirqs_on+0x9c/0x150
[  997.649560][T10586]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.649581][T10586]  ? clear_bhb_loop+0x60/0xb0
[  997.649605][T10586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.649618][T10586] RIP: 0033:0x7f105877d5fc
[  997.649630][T10586] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  997.649640][T10586] RSP: 002b:00007f10569e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  997.649654][T10586] RAX: ffffffffffffffda RBX: 00007f10589b5fa0 RCX: 00007f105877d5fc
[  997.649663][T10586] RDX: 000000000000000f RSI: 00007f10569e60a0 RDI: 0000000000000004
[  997.649670][T10586] RBP: 00007f10569e6090 R08: 0000000000000000 R09: 0000000000000000
[  997.649677][T10586] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  997.649684][T10586] R13: 00007f10589b6038 R14: 00007f10589b5fa0 R15: 00007ffde0991d18
[  997.649703][T10586]  </TASK>
[  997.706092][ T9526] Bluetooth: hci0: command tx timeout
[  998.030057][T10489] team0: Port device team_slave_0 added
[  998.133951][T10489] team0: Port device team_slave_1 added
[  998.770852][T10489] batman_adv: batadv0: Adding interface: batadv_slave_0
[  998.770873][T10489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  998.770903][T10489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  998.881794][T10489] batman_adv: batadv0: Adding interface: batadv_slave_1
[  998.881815][T10489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  998.881845][T10489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  999.560319][T10489] hsr_slave_0: entered promiscuous mode
[  999.584682][T10489] hsr_slave_1: entered promiscuous mode
[  999.585980][T10489] debugfs: 'hsr0' already exists in 'hsr'
[  999.586008][T10489] Cannot create hsr debugfs directory
[  999.746711][ T9526] Bluetooth: hci5: command tx timeout
[ 1000.095375][ T9526] Bluetooth: hci0: command tx timeout
[ 1002.004875][T10348] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1002.228981][T10348] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1002.284060][T10534] chnl_net:caif_netlink_parms(): no params data found
[ 1002.320675][ T9526] Bluetooth: hci0: command tx timeout
[ 1002.396871][T10348] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1002.600319][T10348] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1002.786634][T10565] chnl_net:caif_netlink_parms(): no params data found
[ 1003.019170][ T3567] bridge_slave_1: left allmulticast mode
[ 1003.019209][ T3567] bridge_slave_1: left promiscuous mode
[ 1003.019511][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1003.125849][ T3567] bridge_slave_0: left allmulticast mode
[ 1003.125875][ T3567] bridge_slave_0: left promiscuous mode
[ 1003.126085][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1003.206108][ T3567] bridge_slave_1: left allmulticast mode
[ 1003.206149][ T3567] bridge_slave_1: left promiscuous mode
[ 1003.206463][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1003.297121][ T3567] bridge_slave_0: left allmulticast mode
[ 1003.297159][ T3567] bridge_slave_0: left promiscuous mode
[ 1003.297465][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1008.989392][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1008.989517][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1009.218190][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1009.474518][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1009.584726][ T3567] bond0 (unregistering): Released all slaves
[ 1010.967962][T10655] FAULT_INJECTION: forcing a failure.
[ 1010.967962][T10655] name failslab, interval 1, probability 0, space 0, times 0
[ 1010.968000][T10655] CPU: 1 UID: 0 PID: 10655 Comm: syz.2.921 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1010.968037][T10655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1010.968050][T10655] Call Trace:
[ 1010.968058][T10655]  <TASK>
[ 1010.968067][T10655]  dump_stack_lvl+0x189/0x250
[ 1010.968102][T10655]  ? __pfx____ratelimit+0x10/0x10
[ 1010.968130][T10655]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1010.968157][T10655]  ? __pfx__printk+0x10/0x10
[ 1010.968195][T10655]  should_fail_ex+0x46c/0x600
[ 1010.968227][T10655]  ? __nf_conntrack_alloc+0x98/0x420
[ 1010.968256][T10655]  should_failslab+0xa8/0x100
[ 1010.968283][T10655]  ? __nf_conntrack_alloc+0x98/0x420
[ 1010.968310][T10655]  kmem_cache_alloc_noprof+0x6e/0x310
[ 1010.968345][T10655]  __nf_conntrack_alloc+0x98/0x420
[ 1010.968385][T10655]  init_conntrack+0x15b/0xf20
[ 1010.968421][T10655]  ? __pfx_init_conntrack+0x10/0x10
[ 1010.968443][T10655]  ? __pfx___nf_conntrack_find_get+0x10/0x10
[ 1010.968476][T10655]  ? __siphash_unaligned+0x232/0x3b0
[ 1010.968509][T10655]  nf_conntrack_in+0xbc3/0x15d0
[ 1010.968563][T10655]  ? __pfx_nf_conntrack_in+0x10/0x10
[ 1010.968591][T10655]  ? ip6_cork_release+0x138/0x150
[ 1010.968622][T10655]  ? __lock_acquire+0xab9/0xd20
[ 1010.968663][T10655]  ? ipv6_defrag+0x2dc/0x3b0
[ 1010.968684][T10655]  ? __pfx_ipv6_conntrack_local+0x10/0x10
[ 1010.968715][T10655]  nf_hook_slow+0xc5/0x220
[ 1010.968747][T10655]  __ip6_local_out+0x763/0x870
[ 1010.968777][T10655]  ? __ip6_local_out+0x609/0x870
[ 1010.968801][T10655]  ? __pfx___ip6_local_out+0x10/0x10
[ 1010.968827][T10655]  ? __pfx_dst_output+0x10/0x10
[ 1010.968849][T10655]  ? ip6_send_skb+0x10f/0x390
[ 1010.968882][T10655]  ip6_local_out+0x26/0x70
[ 1010.968904][T10655]  ? ip6_send_skb+0x10f/0x390
[ 1010.968925][T10655]  ip6_send_skb+0x1d5/0x390
[ 1010.968951][T10655]  udp_v6_send_skb+0xc17/0x1830
[ 1010.968994][T10655]  udpv6_sendmsg+0x1baf/0x24b0
[ 1010.969037][T10655]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 1010.969074][T10655]  ? __pfx_udpv6_sendmsg+0x10/0x10
[ 1010.969105][T10655]  ? smack_socket_sendmsg+0x1a7/0x520
[ 1010.969167][T10655]  ? inet_send_prepare+0x5c/0x270
[ 1010.969191][T10655]  ? inet6_sendmsg+0xe4/0x120
[ 1010.969220][T10655]  __sock_sendmsg+0xe5/0x270
[ 1010.969246][T10655]  ____sys_sendmsg+0x534/0x820
[ 1010.969280][T10655]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1010.969319][T10655]  ? import_iovec+0x74/0xa0
[ 1010.969344][T10655]  ___sys_sendmsg+0x21f/0x2a0
[ 1010.969372][T10655]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1010.969439][T10655]  ? __fget_files+0x2a/0x420
[ 1010.969462][T10655]  ? __fget_files+0x3a6/0x420
[ 1010.969498][T10655]  __sys_sendmmsg+0x22d/0x430
[ 1010.969530][T10655]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1010.969566][T10655]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1010.969602][T10655]  ? ksys_write+0x230/0x260
[ 1010.969627][T10655]  ? __pfx_ksys_write+0x10/0x10
[ 1010.969646][T10655]  ? rcu_is_watching+0x15/0xb0
[ 1010.969679][T10655]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1010.969708][T10655]  do_syscall_64+0xfa/0x3b0
[ 1010.969730][T10655]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1010.969752][T10655]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1010.969779][T10655]  ? clear_bhb_loop+0x60/0xb0
[ 1010.969802][T10655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1010.969819][T10655] RIP: 0033:0x7f105877ebe9
[ 1010.969837][T10655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1010.969853][T10655] RSP: 002b:00007f10569e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1010.969873][T10655] RAX: ffffffffffffffda RBX: 00007f10589b5fa0 RCX: 00007f105877ebe9
[ 1010.969888][T10655] RDX: 0000000000000002 RSI: 0000200000000cc0 RDI: 0000000000000003
[ 1010.969899][T10655] RBP: 00007f10569e6090 R08: 0000000000000000 R09: 0000000000000000
[ 1010.969911][T10655] R10: 0000000004004844 R11: 0000000000000246 R12: 0000000000000001
[ 1010.969922][T10655] R13: 00007f10589b6038 R14: 00007f10589b5fa0 R15: 00007ffde0991d18
[ 1010.969956][T10655]  </TASK>
[ 1013.877563][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1014.016219][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1014.104452][ T3567] bond0 (unregistering): Released all slaves
[ 1015.273933][T10534] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1015.274112][T10534] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1015.274423][T10534] bridge_slave_0: entered allmulticast mode
[ 1015.299096][T10534] bridge_slave_0: entered promiscuous mode
[ 1015.433418][T10534] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1015.433558][T10534] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1015.433819][T10534] bridge_slave_1: entered allmulticast mode
[ 1015.465589][T10534] bridge_slave_1: entered promiscuous mode
[ 1015.865514][ T3567] hsr_slave_0: left promiscuous mode
[ 1015.908324][ T3567] hsr_slave_1: left promiscuous mode
[ 1015.911397][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1015.957126][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1016.175380][ T3567] hsr_slave_0: left promiscuous mode
[ 1016.218010][ T3567] hsr_slave_1: left promiscuous mode
[ 1016.220301][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1016.287640][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1017.385488][ T3567] team0 (unregistering): Port device team_slave_1 removed
[ 1017.544546][ T3567] team0 (unregistering): Port device team_slave_0 removed
[ 1018.567081][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1018.590106][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1018.592929][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1018.594864][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1018.623593][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1021.466822][T10693] Bluetooth: hci3: command tx timeout
[ 1023.064562][T10711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.938'.
[ 1023.714539][T10693] Bluetooth: hci3: command tx timeout
[ 1024.108160][ T3567] team0 (unregistering): Port device team_slave_1 removed
[ 1024.281871][ T3567] team0 (unregistering): Port device team_slave_0 removed
[ 1025.918984][T10693] Bluetooth: hci3: command tx timeout
[ 1026.811466][T10565] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1026.811642][T10565] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1026.811930][T10565] bridge_slave_0: entered allmulticast mode
[ 1026.825585][T10565] bridge_slave_0: entered promiscuous mode
[ 1026.867767][T10534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1026.872346][T10565] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1026.872593][T10565] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1026.872808][T10565] bridge_slave_1: entered allmulticast mode
[ 1026.888582][T10565] bridge_slave_1: entered promiscuous mode
[ 1026.910637][T10534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1027.341325][T10716] netlink: 52 bytes leftover after parsing attributes in process `syz.2.939'.
[ 1027.992941][T10565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1028.024250][T10534] team0: Port device team_slave_0 added
[ 1028.137085][T10693] Bluetooth: hci3: command tx timeout
[ 1028.144049][T10565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1028.156673][T10534] team0: Port device team_slave_1 added
[ 1029.768558][T10565] team0: Port device team_slave_0 added
[ 1029.770175][T10534] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1029.770191][T10534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1029.770222][T10534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1029.842751][T10565] team0: Port device team_slave_1 added
[ 1029.844337][T10534] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1029.844355][T10534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1029.844386][T10534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1030.301568][T10565] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1030.301588][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1030.301618][T10565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1030.307146][T10565] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1030.307177][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1030.307201][T10565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1031.939052][T10534] hsr_slave_0: entered promiscuous mode
[ 1031.941010][T10534] hsr_slave_1: entered promiscuous mode
[ 1031.948343][T10534] debugfs: 'hsr0' already exists in 'hsr'
[ 1031.948373][T10534] Cannot create hsr debugfs directory
[ 1032.027866][T10489] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1032.338168][T10489] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1032.865649][T10489] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1033.984958][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1034.134842][T10565] hsr_slave_0: entered promiscuous mode
[ 1034.136451][T10565] hsr_slave_1: entered promiscuous mode
[ 1034.137526][T10565] debugfs: 'hsr0' already exists in 'hsr'
[ 1034.137553][T10565] Cannot create hsr debugfs directory
[ 1034.186597][T10489] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1034.543200][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1035.412560][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1035.785981][T10770] netlink: 48 bytes leftover after parsing attributes in process `syz.2.948'.
[ 1035.827299][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1035.865961][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1035.903582][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1035.941414][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1035.974958][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.042575][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.067002][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.122498][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.168518][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.205945][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.241249][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.315955][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.353325][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.401178][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.437380][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.472742][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.511277][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.545716][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.595733][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.658461][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.710724][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.760063][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.841851][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.922022][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.975999][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.029625][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.085855][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.127882][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.181272][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.223481][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.265634][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.308158][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.329729][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.372836][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.417146][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.459926][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.503258][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.549678][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.595294][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.637406][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.678932][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.721972][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.764683][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.818806][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.861823][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.904467][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.947148][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.988975][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.030426][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.072608][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.114658][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.156993][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.203052][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.245091][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.288741][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.330719][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.373590][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.416241][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.458596][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.504114][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.546776][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.589692][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.637614][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.684246][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.732097][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.774413][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.817709][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.859707][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.901090][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.949412][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1038.991006][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1039.033611][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1039.080860][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1039.123346][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1039.166585][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1116.351078][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.372878][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.772535][ T5154] Bluetooth: hci1: command 0x0406 tx timeout
[ 1135.713497][T10693] Bluetooth: hci0: command tx timeout
[ 1136.110720][T10782] Bluetooth: hci5: command tx timeout
[ 1156.653256][T10785] Bluetooth: hci3: command 0x0406 tx timeout
[ 1160.788742][T10489] kthread_run failed with err -4
[ 1180.833230][T10782] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[ 1180.864587][T10782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1184.149913][T10793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1185.139317][T10793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1185.142309][T10793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1185.144159][T10793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1188.068239][T10785] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1188.548590][T10785] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1188.550304][T10785] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1192.354807][T10785] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1192.355718][T10785] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1192.357311][T10693] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1192.357812][T10693] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1192.358249][T10693] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1192.359443][T10693] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1192.360219][T10693] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1201.957410][   T38] INFO: task kworker/u8:10:3567 blocked for more than 143 seconds.
[ 1201.957435][   T38]       Not tainted syzkaller #0
[ 1201.957445][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1201.957453][   T38] task:kworker/u8:10   state:D stack:19384 pid:3567  tgid:3567  ppid:2      task_flags:0x4208160 flags:0x00004000
[ 1201.957500][   T38] Workqueue: netns cleanup_net
[ 1201.957526][   T38] Call Trace:
[ 1201.957533][   T38]  <TASK>
[ 1201.957546][   T38]  __schedule+0x16f3/0x4c20
[ 1201.957598][   T38]  ? __pfx___schedule+0x10/0x10
[ 1201.957637][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1201.957674][   T38]  rt_mutex_schedule+0x77/0xf0
[ 1201.957693][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[ 1201.957712][   T38]  ? task_blocks_on_rt_mutex+0x78c/0x1380
[ 1201.957750][   T38]  rt_mutex_slowlock+0x2b1/0x6e0
[ 1201.957772][   T38]  ? rt_mutex_slowlock+0x1c9/0x6e0
[ 1201.957791][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1201.957819][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1201.957843][   T38]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1201.957864][   T38]  ? __pfx___might_resched+0x10/0x10
[ 1201.957896][   T38]  ? fib6_rules_net_exit_batch+0x20/0xc0
[ 1201.957913][   T38]  mutex_lock_nested+0x16a/0x1d0
[ 1201.957930][   T38]  ? fib6_rules_net_exit_batch+0x20/0xc0
[ 1201.957950][   T38]  fib6_rules_net_exit_batch+0x20/0xc0
[ 1201.957966][   T38]  ? __pfx_fib6_rules_net_exit_batch+0x10/0x10
[ 1201.957981][   T38]  ops_undo_list+0x522/0x990
[ 1201.958009][   T38]  ? __pfx_ops_undo_list+0x10/0x10
[ 1201.958040][   T38]  cleanup_net+0x4cb/0x800
[ 1201.958066][   T38]  ? __pfx_cleanup_net+0x10/0x10
[ 1201.958090][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1201.958111][   T38]  ? process_scheduled_works+0x9ef/0x17b0
[ 1201.958130][   T38]  ? process_scheduled_works+0x9ef/0x17b0
[ 1201.958152][   T38]  process_scheduled_works+0xade/0x17b0
[ 1201.958201][   T38]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1201.958238][   T38]  worker_thread+0x8a0/0xda0
[ 1201.958287][   T38]  kthread+0x711/0x8a0
[ 1201.958315][   T38]  ? __pfx_worker_thread+0x10/0x10
[ 1201.958336][   T38]  ? __pfx_kthread+0x10/0x10
[ 1201.958366][   T38]  ? __pfx_kthread+0x10/0x10
[ 1201.958392][   T38]  ret_from_fork+0x3fc/0x770
[ 1201.958417][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1201.958444][   T38]  ? __switch_to_asm+0x39/0x70
[ 1201.958459][   T38]  ? __switch_to_asm+0x33/0x70
[ 1201.958472][   T38]  ? __pfx_kthread+0x10/0x10
[ 1201.958496][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1201.958528][   T38]  </TASK>
[ 1201.958562][   T38] INFO: task kworker/u8:22:7893 blocked for more than 143 seconds.
[ 1201.958573][   T38]       Not tainted syzkaller #0
[ 1201.958583][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1201.958591][   T38] task:kworker/u8:22   state:D stack:17448 pid:7893  tgid:7893  ppid:2      task_flags:0x4208060 flags:0x00004000
[ 1201.958631][   T38] Workqueue: ipv6_addrconf addrconf_dad_work
[ 1201.958655][   T38] Call Trace:
[ 1201.958660][   T38]  <TASK>
[ 1201.958671][   T38]  __schedule+0x16f3/0x4c20
[ 1201.958718][   T38]  ? __pfx___schedule+0x10/0x10
[ 1201.958758][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1201.958783][   T38]  rt_mutex_schedule+0x77/0xf0
[ 1201.958800][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[ 1201.958817][   T38]  ? task_blocks_on_rt_mutex+0xf04/0x1380
[ 1201.958852][   T38]  rt_mutex_slowlock+0x2b1/0x6e0
[ 1201.958872][   T38]  ? rt_mutex_slowlock+0x1c9/0x6e0
[ 1201.958900][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1201.958915][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1201.958948][   T38]  ? addrconf_dad_work+0x119/0x15a0
[ 1201.961631][   T38]  ? do_raw_spin_lock+0x121/0x290
[ 1201.961669][   T38]  ? addrconf_dad_work+0x119/0x15a0
[ 1201.961698][   T38]  mutex_lock_nested+0x16a/0x1d0
[ 1201.961727][   T38]  addrconf_dad_work+0x119/0x15a0
[ 1201.961762][   T38]  ? __lock_acquire+0xab9/0xd20
[ 1201.961798][   T38]  ? __pfx_addrconf_dad_work+0x10/0x10
[ 1201.961830][   T38]  ? process_scheduled_works+0x9ef/0x17b0
[ 1201.961864][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1201.961898][   T38]  ? process_scheduled_works+0x9ef/0x17b0
[ 1201.961923][   T38]  ? process_scheduled_works+0x9ef/0x17b0
[ 1201.961951][   T38]  process_scheduled_works+0xade/0x17b0
[ 1201.962012][   T38]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1201.962061][   T38]  worker_thread+0x8a0/0xda0
[ 1201.962091][   T38]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1201.962130][   T38]  ? __kthread_parkme+0x7b/0x200
[ 1201.962169][   T38]  kthread+0x711/0x8a0
[ 1201.962205][   T38]  ? __pfx_worker_thread+0x10/0x10
[ 1201.962231][   T38]  ? __pfx_kthread+0x10/0x10
[ 1201.962269][   T38]  ? __pfx_kthread+0x10/0x10
[ 1201.962301][   T38]  ret_from_fork+0x3fc/0x770
[ 1201.962333][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1201.962369][   T38]  ? __switch_to_asm+0x39/0x70
[ 1201.962389][   T38]  ? __switch_to_asm+0x33/0x70
[ 1201.962408][   T38]  ? __pfx_kthread+0x10/0x10
[ 1201.962441][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1201.962481][   T38]  </TASK>
[ 1201.962532][   T38] 
[ 1201.962532][   T38] Showing all locks held in the system:
[ 1201.962543][   T38] 4 locks held by kworker/u8:0/12:
[ 1201.962555][   T38]  #0: ffff888040cd9938 ((wq_completion)bond3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1201.962612][   T38]  #1: ffffc90000117bc0 ((work_completion)(&(&bond->ad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1201.962665][   T38]  #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1201.962717][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1201.962770][   T38] 2 locks held by ksoftirqd/0/15:
[ 1201.962781][   T38]  #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1201.962833][   T38]  #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1201.962892][   T38] 2 locks held by rcuc/0/20:
[ 1201.962904][   T38]  #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1201.962956][   T38]  #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1201.963009][   T38] 2 locks held by rcuc/1/28:
[ 1201.963020][   T38]  #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1201.963071][   T38]  #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1201.963124][   T38] 2 locks held by ktimers/1/29:
[ 1201.963134][   T38]  #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1201.963187][   T38]  #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1201.963239][   T38] 2 locks held by ksoftirqd/1/30:
[ 1201.963250][   T38]  #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1201.963302][   T38]  #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1201.963355][   T38] 1 lock held by khungtaskd/38:
[ 1201.963366][   T38]  #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1201.963414][   T38] 7 locks held by kworker/u8:2/43:
[ 1201.963426][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1201.963479][   T38]  #1: ffffc90000b47bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1201.963533][   T38]  #2: ffff88803b6ff300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[ 1201.963594][   T38]  #3: ffff88805e44c120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[ 1201.963646][   T38]  #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[ 1201.963689][   T38]  #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1201.963740][   T38]  #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1201.963793][   T38] 4 locks held by kworker/1:1/49:
[ 1201.963804][   T38]  #0: ffff88805cba3938 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1201.963862][   T38]  #1: ffffc90000bb7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1201.963938][   T38]  #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1201.963989][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1201.964042][   T38] 7 locks held by kworker/u8:3/57:
[ 1201.964054][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1201.964107][   T38]  #1: ffffc9000123fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1201.964160][   T38]  #2: ffff88802322d300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[ 1201.964219][   T38]  #3: ffff88805fb2e120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[ 1201.964275][   T38]  #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[ 1201.964322][   T38]  #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1201.964373][   T38]  #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1201.964426][   T38] 5 locks held by kworker/u8:4/67:
[ 1201.964438][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1201.964490][   T38]  #1: ffffc9000152fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1201.964543][   T38]  #2: ffff88805f990898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470
[ 1201.964594][   T38]  #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1201.964645][   T38]  #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1201.964704][   T38] 3 locks held by kworker/1:2/991:
[ 1201.964715][   T38]  #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1201.964767][   T38]  #1: ffffc900049b7bc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1201.964818][   T38]  #2: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 1201.964868][   T38] 7 locks held by kworker/u8:5/1018:
[ 1201.964889][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1201.964942][   T38]  #1: ffffc90004b5fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1201.965013][   T38]  #2: ffff88805e098300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[ 1201.965067][   T38]  #3: ffff88805eee0520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[ 1201.965122][   T38]  #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[ 1201.965167][   T38]  #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1201.965219][   T38]  #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1201.965274][   T38] 4 locks held by kworker/u8:6/1124:
[ 1201.965285][   T38]  #0: ffff888031054138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1201.965346][   T38]  #1: ffffc90004cffbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1201.965399][   T38]  #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1201.965450][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1201.965503][   T38] 4 locks held by kworker/u8:7/1179:
[ 1201.965514][   T38]  #0: ffff888027c30138 ((wq_completion)bond4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1201.965565][   T38]  #1: ffffc90004f4fbc0 ((work_completion)(&(&bond->ad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1201.965618][   T38]  #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.030268][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.030346][   T38] 5 locks held by irq/33-virtio1-/1186:
[ 1202.030362][   T38] 2 locks held by aoe_tx0/1321:
[ 1202.030373][   T38]  #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.030427][   T38]  #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.030480][   T38] 7 locks held by kworker/u8:8/1336:
[ 1202.030492][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.030551][   T38]  #1: ffffc900054afbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.030606][   T38]  #2: ffff888027c80300 (&devlink->lock_key#32){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[ 1202.030669][   T38]  #3: ffff88805eef8120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[ 1202.030724][   T38]  #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[ 1202.030774][   T38]  #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.030826][   T38]  #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.030891][   T38] 4 locks held by kworker/u8:10/3567:
[ 1202.030903][   T38]  #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.030995][   T38]  #1: ffffc9000db67bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.031048][   T38]  #2: ffffffff8ecc53c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[ 1202.031101][   T38]  #3: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: fib6_rules_net_exit_batch+0x20/0xc0
[ 1202.031151][   T38] 4 locks held by kworker/u8:11/3841:
[ 1202.031163][   T38]  #0: ffff888040ec3138 ((wq_completion)bond2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.031212][   T38]  #1: ffffc9000e687bc0 ((work_completion)(&(&bond->ad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.031266][   T38]  #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.031317][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.031369][   T38] 6 locks held by kworker/u8:12/4021:
[ 1202.031380][   T38]  #0: ffff88805c49f938 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.031438][   T38]  #1: ffffc9000ea87bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.031491][   T38]  #2: ffff88805c8ad5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0
[ 1202.031540][   T38]  #3: ffff88805e3938f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0
[ 1202.031589][   T38]  #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.031640][   T38]  #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.031693][   T38] 6 locks held by kworker/u9:1/5154:
[ 1202.031704][   T38]  #0: ffff888028324938 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.031774][   T38]  #1: ffffc9001032fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.031828][   T38]  #2: ffff888056a28e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[ 1202.031887][   T38]  #3: ffff888056a280a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[ 1202.031947][   T38]  #4: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[ 1202.032001][   T38]  #5: ffff888027280358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[ 1202.032061][   T38] 3 locks held by udevd/5206:
[ 1202.032073][   T38]  #0: ffff888031f38350 (sk_lock-AF_NETLINK){+.+.}-{0:0}, at: netlink_insert+0xd3/0x1370
[ 1202.032123][   T38]  #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.032174][   T38]  #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.032225][   T38] 1 lock held by dhcpcd/5501:
[ 1202.032236][   T38]  #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[ 1202.032295][   T38] 2 locks held by getty/5597:
[ 1202.032306][   T38]  #0: ffff88823bf620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1202.032362][   T38]  #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410
[ 1202.032414][   T38] 3 locks held by syz-executor/5823:
[ 1202.032426][   T38]  #0: ffff888027bfa1d0 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_recvmsg+0xd3/0x560
[ 1202.032476][   T38]  #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.032527][   T38]  #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.032580][   T38] 5 locks held by kworker/u9:6/5849:
[ 1202.032592][   T38]  #0: ffff888033acd138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.032643][   T38]  #1: ffffc90004ccfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.032696][   T38]  #2: ffff88804b840e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[ 1202.032753][   T38]  #3: ffff88804b8400a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[ 1202.032806][   T38]  #4: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[ 1202.032861][   T38] 5 locks held by kworker/0:5/5912:
[ 1202.032872][   T38]  #0: ffff88805c55bd38 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.032929][   T38]  #1: ffffc9000503fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.033006][   T38]  #2: ffff88805c8ad5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900
[ 1202.033055][   T38]  #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.033105][   T38]  #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.033158][   T38] 4 locks held by kworker/1:6/5984:
[ 1202.033169][   T38]  #0: ffff88805c55bd38 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.033225][   T38]  #1: ffffc900052bfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.033294][   T38]  #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.033345][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.033397][   T38] 7 locks held by kworker/u8:13/6095:
[ 1202.033409][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.033461][   T38]  #1: ffffc90005f57bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.033516][   T38]  #2: ffff888030a76300 (&devlink->lock_key#31){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[ 1202.033576][   T38]  #3: ffff88805116b920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[ 1202.033631][   T38]  #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[ 1202.033679][   T38]  #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.033730][   T38]  #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.033782][   T38] 4 locks held by kworker/u8:14/6097:
[ 1202.033794][   T38]  #0: ffff888056148938 ((wq_completion)bond1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.033851][   T38]  #1: ffffc90005f67bc0 ((work_completion)(&(&bond->ad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.033904][   T38]  #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.033963][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.034016][   T38] 4 locks held by kworker/u8:15/6100:
[ 1202.034028][   T38]  #0: ffff88805cc15138 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.034084][   T38]  #1: ffffc90005ef7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.034138][   T38]  #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.034189][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.034241][   T38] 3 locks held by kworker/u8:16/6156:
[ 1202.034253][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.034305][   T38]  #1: ffffc9000618fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.034357][   T38]  #2: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1202.034414][   T38] 3 locks held by kworker/0:6/6180:
[ 1202.034425][   T38]  #0: ffff88805cb5c938 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.034481][   T38]  #1: ffffc90006337bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.034550][   T38]  #2: ffff88805e394e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0
[ 1202.034600][   T38] 4 locks held by kworker/0:7/6922:
[ 1202.034612][   T38]  #0: ffff88805cba3938 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.034669][   T38]  #1: ffffc9000543fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.034738][   T38]  #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.034789][   T38]  #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.034841][   T38] 5 locks held by kworker/u8:17/7332:
[ 1202.034853][   T38] 3 locks held by kworker/u8:18/7333:
[ 1202.034865][   T38] 6 locks held by kworker/u8:20/7706:
[ 1202.034877][   T38]  #0: ffff88805c936938 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.034934][   T38]  #1: ffffc900050cfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.034998][   T38]  #2: ffff88805c9955f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0
[ 1202.035046][   T38]  #3: ffff88805e394e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0
[ 1202.035095][   T38]  #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.035146][   T38]  #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.035196][   T38] 6 locks held by kworker/u8:21/7892:
[ 1202.035209][   T38] 3 locks held by kworker/u8:22/7893:
[ 1202.035220][   T38]  #0: ffff8880304d2138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.035272][   T38]  #1: ffffc90003f97bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.035325][   T38]  #2: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0
[ 1202.035385][   T38] 4 locks held by kworker/u9:0/9526:
[ 1202.035397][   T38]  #0: ffff8880279f3138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.035449][   T38]  #1: ffffc90004d0fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.035501][   T38]  #2: ffff88804efbce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[ 1202.035559][   T38]  #3: ffff88804efbc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[ 1202.035613][   T38] 2 locks held by kworker/1:5/9967:
[ 1202.035626][   T38] 4 locks held by kworker/0:4/10072:
[ 1202.035637][   T38]  #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.035690][   T38]  #1: ffffc90003b17bc0 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.035742][   T38]  #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.035793][   T38]  #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.035849][   T38] 5 locks held by syz-executor/10534:
[ 1202.035860][   T38]  #0: ffffffff8f1f2430 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1202.035918][   T38]  #1: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[ 1202.035977][   T38]  #2: ffff88803d228628 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50
[ 1202.036035][   T38]  #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.036086][   T38]  #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.036138][   T38] 2 locks held by syz-executor/10565:
[ 1202.036150][   T38]  #0: ffffffff8e50b900 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1202.036205][   T38]  #1: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[ 1202.036260][   T38] 1 lock held by syz-executor/10689:
[ 1202.036272][   T38]  #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[ 1202.036325][   T38] 4 locks held by kworker/u9:2/10693:
[ 1202.036338][   T38]  #0: ffff888030f8c138 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.036391][   T38]  #1: ffffc90004357bc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.036445][   T38]  #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.036498][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.036553][   T38] 7 locks held by kworker/u8:19/10777:
[ 1202.036566][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.036621][   T38]  #1: ffffc90004f9fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.036675][   T38]  #2: ffff888060233300 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[ 1202.036735][   T38]  #3: ffff888051e0f520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[ 1202.036789][   T38]  #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[ 1202.036838][   T38]  #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.036890][   T38]  #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.036950][   T38] 7 locks held by kworker/u8:23/10778:
[ 1202.036963][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.037016][   T38]  #1: ffffc9000507fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.037072][   T38]  #2: ffff88803691b300 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[ 1202.037131][   T38]  #3: ffff888029447520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[ 1202.037186][   T38]  #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[ 1202.037230][   T38]  #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.037282][   T38]  #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.037336][   T38] 5 locks held by kworker/u9:3/10781:
[ 1202.037349][   T38]  #0: ffff88805f8f6138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.037402][   T38]  #1: ffffc90004ddfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.037455][   T38]  #2: ffff888054e64e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[ 1202.037512][   T38]  #3: ffff888054e640a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[ 1202.037566][   T38]  #4: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[ 1202.037619][   T38] 3 locks held by kworker/u9:5/10785:
[ 1202.037631][   T38]  #0: ffff88803b6d4138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1202.037684][   T38]  #1: ffffc90003b67bc0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1202.037737][   T38]  #2: ffff888056fe8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1ac/0x680
[ 1202.037786][   T38] 2 locks held by kworker/1:8/10786:
[ 1202.037799][   T38] 1 lock held by syz-executor/10788:
[ 1202.037812][   T38] 3 locks held by syz-executor/10789:
[ 1202.037824][   T38]  #0: ffff88803bace350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910
[ 1202.037880][   T38]  #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[ 1202.037932][   T38]  #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[ 1202.037994][   T38] 9 locks held by syz-executor/10795:
[ 1202.038008][   T38] 3 locks held by syz-executor/10797:
[ 1202.038024][   T38] 
[ 1202.038030][   T38] =============================================
[ 1202.038030][   T38] 
[ 1202.038040][   T38] NMI backtrace for cpu 0
[ 1202.038057][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1202.038081][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1202.038095][   T38] Call Trace:
[ 1202.038104][   T38]  <TASK>
[ 1202.038115][   T38]  dump_stack_lvl+0x189/0x250
[ 1202.038151][   T38]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1202.038182][   T38]  ? __pfx__printk+0x10/0x10
[ 1202.038217][   T38]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1202.038245][   T38]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1202.038272][   T38]  ? __pfx__printk+0x10/0x10
[ 1202.038300][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1202.038329][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1202.038356][   T38]  watchdog+0xf93/0xfe0
[ 1202.038389][   T38]  ? watchdog+0x1de/0xfe0
[ 1202.038422][   T38]  kthread+0x711/0x8a0
[ 1202.038457][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1202.038483][   T38]  ? __pfx_kthread+0x10/0x10
[ 1202.038519][   T38]  ? __pfx_kthread+0x10/0x10
[ 1202.038551][   T38]  ret_from_fork+0x3fc/0x770
[ 1202.038582][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1202.038617][   T38]  ? __switch_to_asm+0x39/0x70
[ 1202.038636][   T38]  ? __switch_to_asm+0x33/0x70
[ 1202.038655][   T38]  ? __pfx_kthread+0x10/0x10
[ 1202.038687][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1202.038726][   T38]  </TASK>
[ 1202.038735][   T38] Sending NMI from CPU 0 to CPUs 1:
[ 1202.038765][    C1] NMI backtrace for cpu 1
[ 1202.038783][    C1] CPU: 1 UID: 0 PID: 1186 Comm: irq/33-virtio1- Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1202.038804][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1202.038814][    C1] RIP: 0010:unwind_next_frame+0x182d/0x2390
[ 1202.038840][    C1] Code: 48 8b 44 24 58 80 3c 28 00 74 05 e8 5d ca aa 00 4d 8b 66 38 49 8d 7e 08 48 89 f8 48 c1 e8 03 80 3c 28 00 74 05 e8 43 ca aa 00 <4d> 8b 6e 08 4d 8d 7e 10 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c
[ 1202.038856][    C1] RSP: 0018:ffffc90004e5e618 EFLAGS: 00000246
[ 1202.038873][    C1] RAX: 1ffff920009cbcde RBX: ffffffff90299d01 RCX: 0000000000000001
[ 1202.038885][    C1] RDX: ffffc90004e5e728 RSI: dffffc0000000000 RDI: ffffc90004e5e6f0
[ 1202.038898][    C1] RBP: dffffc0000000000 R08: ffffc90004e5f430 R09: 0000000000000000
[ 1202.038910][    C1] R10: ffffc90004e5e738 R11: fffff520009cbce9 R12: ffffc90004e5f440
[ 1202.038922][    C1] R13: ffffc90004e5e738 R14: ffffc90004e5e6e8 R15: ffffffff8172b165
[ 1202.038935][    C1] FS:  0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000
[ 1202.038949][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1202.038961][    C1] CR2: 00007ffd34425148 CR3: 00000000393a2000 CR4: 00000000003526f0
[ 1202.038979][    C1] Call Trace:
[ 1202.038985][    C1]  <TASK>
[ 1202.038996][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1202.039018][    C1]  ? nf_hook_slow+0xc5/0x220
[ 1202.039040][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1202.039059][    C1]  arch_stack_walk+0x11c/0x150
[ 1202.039084][    C1]  ? NF_HOOK+0x206/0x3a0
[ 1202.039105][    C1]  stack_trace_save+0x9c/0xe0
[ 1202.039122][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1202.039138][    C1]  ? do_raw_spin_lock+0x121/0x290
[ 1202.039161][    C1]  kasan_save_track+0x3e/0x80
[ 1202.039179][    C1]  ? kasan_save_track+0x3e/0x80
[ 1202.039202][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[ 1202.039219][    C1]  ? kmem_cache_alloc_noprof+0x143/0x310
[ 1202.039240][    C1]  ? fill_pool+0x100/0x570
[ 1202.039258][    C1]  ? debug_objects_fill_pool+0x107/0x120
[ 1202.039275][    C1]  ? debug_object_activate+0x6c/0x3a0
[ 1202.039292][    C1]  ? call_rcu+0xaa/0x9c0
[ 1202.039306][    C1]  ? skb_release_head_state+0x71/0x250
[ 1202.039326][    C1]  ? consume_skb+0x60/0xf0
[ 1202.039345][    C1]  ? nft_synproxy_eval_v4+0x376/0x560
[ 1202.039367][    C1]  ? nft_synproxy_do_eval+0x345/0x570
[ 1202.039389][    C1]  ? nft_do_chain+0x409/0x1920
[ 1202.039410][    C1]  ? nft_do_chain_inet+0x25d/0x340
[ 1202.039431][    C1]  ? nf_hook_slow+0xc5/0x220
[ 1202.039466][    C1]  ? fill_pool+0x100/0x570
[ 1202.039485][    C1]  __kasan_slab_alloc+0x6c/0x80
[ 1202.039504][    C1]  ? fill_pool+0x100/0x570
[ 1202.039521][    C1]  kmem_cache_alloc_noprof+0x143/0x310
[ 1202.039544][    C1]  fill_pool+0x100/0x570
[ 1202.039563][    C1]  ? debug_objects_fill_pool+0xdf/0x120
[ 1202.039581][    C1]  ? __pfx_fill_pool+0x10/0x10
[ 1202.039601][    C1]  ? debug_objects_fill_pool+0xdf/0x120
[ 1202.039619][    C1]  ? debug_objects_fill_pool+0xdf/0x120
[ 1202.039638][    C1]  debug_objects_fill_pool+0x107/0x120
[ 1202.039656][    C1]  ? __pfx_debug_objects_fill_pool+0x10/0x10
[ 1202.039680][    C1]  debug_object_activate+0x6c/0x3a0
[ 1202.039701][    C1]  ? __pfx_dst_destroy_rcu+0x10/0x10
[ 1202.039717][    C1]  call_rcu+0xaa/0x9c0
[ 1202.039736][    C1]  ? rcuref_put+0x1b7/0x210
[ 1202.039750][    C1]  ? __pfx_call_rcu+0x10/0x10
[ 1202.039765][    C1]  ? percpu_counter_add_batch+0xea/0x1e0
[ 1202.039787][    C1]  ? dst_release+0x126/0x1b0
[ 1202.039811][    C1]  skb_release_head_state+0x71/0x250
[ 1202.039838][    C1]  consume_skb+0x60/0xf0
[ 1202.039858][    C1]  nft_synproxy_eval_v4+0x376/0x560
[ 1202.039884][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[ 1202.039908][    C1]  ? nf_ip_checksum+0x13c/0x510
[ 1202.039932][    C1]  nft_synproxy_do_eval+0x345/0x570
[ 1202.039958][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[ 1202.039981][    C1]  ? __pfx___ip_vs_conn_in_get+0x10/0x10
[ 1202.040003][    C1]  nft_do_chain+0x409/0x1920
[ 1202.040031][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[ 1202.040056][    C1]  ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10
[ 1202.040082][    C1]  ? ip_vs_out_hook+0x9b5/0xef0
[ 1202.040099][    C1]  ? __pfx_ip_vs_in_hook+0x10/0x10
[ 1202.040119][    C1]  nft_do_chain_inet+0x25d/0x340
[ 1202.040141][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1202.040169][    C1]  ? NF_HOOK+0x9a/0x3a0
[ 1202.040187][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1202.040219][    C1]  nf_hook_slow+0xc5/0x220
[ 1202.040240][    C1]  NF_HOOK+0x206/0x3a0
[ 1202.040259][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1202.040278][    C1]  ? NF_HOOK+0x9a/0x3a0
[ 1202.040295][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[ 1202.040312][    C1]  ? ip_rcv_finish_core+0xda3/0x1c00
[ 1202.040332][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1202.040352][    C1]  ? skb_dst+0x4f/0xd0
[ 1202.040370][    C1]  ? ip_local_deliver+0x12a/0x1b0
[ 1202.040390][    C1]  NF_HOOK+0x30c/0x3a0
[ 1202.040410][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1202.040427][    C1]  ? NF_HOOK+0x9a/0x3a0
[ 1202.040445][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[ 1202.040464][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1202.040488][    C1]  ? __pfx_ip_rcv+0x10/0x10
[ 1202.040505][    C1]  __netif_receive_skb+0x143/0x380
[ 1202.040524][    C1]  ? rt_spin_unlock+0x65/0x80
[ 1202.040542][    C1]  ? process_backlog+0x27b/0x900
[ 1202.040562][    C1]  process_backlog+0x31e/0x900
[ 1202.040586][    C1]  __napi_poll+0xb6/0x540
[ 1202.040605][    C1]  net_rx_action+0x707/0xe00
[ 1202.040632][    C1]  ? __pfx_net_rx_action+0x10/0x10
[ 1202.040652][    C1]  ? kvm_sched_clock_read+0x11/0x20
[ 1202.040676][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[ 1202.040708][    C1]  handle_softirqs+0x22c/0x710
[ 1202.040732][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1202.040756][    C1]  __local_bh_enable_ip+0x179/0x270
[ 1202.040775][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1202.040796][    C1]  ? virtqueue_disable_cb+0xd9/0x370
[ 1202.040818][    C1]  ? irq_finalize_oneshot+0x54/0x3d0
[ 1202.040840][    C1]  ? __pfx_skb_recv_done+0x10/0x10
[ 1202.040860][    C1]  ? vring_interrupt+0x221/0x380
[ 1202.040879][    C1]  ? __pfx_vring_interrupt+0x10/0x10
[ 1202.040900][    C1]  irq_forced_thread_fn+0xe9/0x120
[ 1202.040921][    C1]  ? irq_forced_thread_fn+0x2b/0x120
[ 1202.040943][    C1]  irq_thread+0x427/0x690
[ 1202.040963][    C1]  ? irq_thread+0x17b/0x690
[ 1202.040987][    C1]  ? __pfx_irq_forced_thread_fn+0x10/0x10
[ 1202.041008][    C1]  ? __pfx_irq_thread+0x10/0x10
[ 1202.041029][    C1]  ? __kthread_parkme+0x7b/0x200
[ 1202.041048][    C1]  ? __pfx_irq_thread_dtor+0x10/0x10
[ 1202.041068][    C1]  ? __kthread_parkme+0x1a1/0x200
[ 1202.041091][    C1]  kthread+0x711/0x8a0
[ 1202.041115][    C1]  ? __pfx_irq_thread+0x10/0x10
[ 1202.041135][    C1]  ? __pfx_kthread+0x10/0x10
[ 1202.041159][    C1]  ? __pfx_kthread+0x10/0x10
[ 1202.041181][    C1]  ret_from_fork+0x3fc/0x770
[ 1202.041209][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1202.041231][    C1]  ? __switch_to_asm+0x39/0x70
[ 1202.041246][    C1]  ? __switch_to_asm+0x33/0x70
[ 1202.041260][    C1]  ? __pfx_kthread+0x10/0x10
[ 1202.041283][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1202.041306][    C1]  </TASK>
[ 1202.062983][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 1202.063007][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1202.063034][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1202.063048][   T38] Call Trace:
[ 1202.063057][   T38]  <TASK>
[ 1202.063070][   T38]  dump_stack_lvl+0x99/0x250
[ 1202.063106][   T38]  ? __asan_memcpy+0x40/0x70
[ 1202.063131][   T38]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1202.063162][   T38]  ? __pfx__printk+0x10/0x10
[ 1202.063198][   T38]  vpanic+0x281/0x750
[ 1202.063232][   T38]  ? __pfx_vpanic+0x10/0x10
[ 1202.063261][   T38]  ? preempt_schedule+0xae/0xc0
[ 1202.063291][   T38]  ? preempt_schedule_common+0x83/0xd0
[ 1202.063325][   T38]  panic+0xb9/0xc0
[ 1202.063354][   T38]  ? __pfx_panic+0x10/0x10
[ 1202.063386][   T38]  ? preempt_schedule_thunk+0x16/0x30
[ 1202.063418][   T38]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1202.063446][   T38]  watchdog+0xfd2/0xfe0
[ 1202.063479][   T38]  ? watchdog+0x1de/0xfe0
[ 1202.063513][   T38]  kthread+0x711/0x8a0
[ 1202.063548][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1202.063574][   T38]  ? __pfx_kthread+0x10/0x10
[ 1202.063610][   T38]  ? __pfx_kthread+0x10/0x10
[ 1202.063643][   T38]  ret_from_fork+0x3fc/0x770
[ 1202.063674][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1202.063709][   T38]  ? __switch_to_asm+0x39/0x70
[ 1202.063729][   T38]  ? __switch_to_asm+0x33/0x70
[ 1202.063748][   T38]  ? __pfx_kthread+0x10/0x10
[ 1202.063780][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1202.063818][   T38]  </TASK>
[ 1202.064289][   T38] Kernel Offset: disabled