last executing test programs:

20m4.018894244s ago: executing program 2 (id=72):
r0 = syz_open_dev$swradio(&(0x7f0000001c80), 0x0, 0x2)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000001cc0)={0xf00001, 0xb6a})

20m3.532182591s ago: executing program 2 (id=76):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000000105050000000000000000010000003c0002802c00018014000300ff10000000000000000000000000000114000400000000000000000000000000000000010c0002800500010000000000240001800c00028005000100000000001400018008000100acf813aa08000200ac1414aa080007400100000104000680"], 0x80}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002a80)=""/102392, 0x18ff8)
openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x8000, 0x8, 0x1}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
close(0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f018, 0x6})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, 0x0, 0x0)
migrate_pages(0x0, 0x4, 0x0, 0x0)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)

19m59.299536233s ago: executing program 2 (id=87):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000f80)=[@in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e23, @private=0xa010101}], 0x20)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x1, 0xffffffff, 0x4000420}]})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000001780)=@vmx={0x0, 0x0, 0x2080, {0x80a0000, 0x54000, {0x300}, 0x486afba40d6829fb, 0xd5}, {"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", "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"}})
io_setup(0x9, &(0x7f0000000080))
openat$smackfs_load(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000001080000", @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
eventfd(0x6)

19m56.505218917s ago: executing program 2 (id=96):
mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x0, 0x0)
write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa)
close(r0)
r1 = openat(r0, &(0x7f00000000c0)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0xf0140, 0x140)
write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8084030e000000001c0012800b00010067656e65766500770c00028005000d000d0000000a00fed59152548bdd907309b1ea94f9830104000000cc26d900000079892ddb6d18bbfb6f5b4fc6325797e956f22e06038a215c2ed7f3508c3d1cc12f33453bec1e"], 0x48}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340), 0x0)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r4, &(0x7f0000000540)="30783031303200a1b2dbfcf35189968f417d6811efa3a7c122a3e78a2a7c7efb9e6e18234488dd8c38850ed7bc211264f0c03a5b32a53684a0a860efebee623800ca8598c996aa3f75d3fc85c8d5ecf6a5efa4269be18203f88d9d10df70552b7d2477c4512cd0d56ab49d07779f1e097acd2dd9dca8b791c0ed93133f75ed3ea39127c89cf4e92b74e220aa55b47837b6847a320d90146daa82ee9db0021629d2fe972f31a8104ab8", 0xa9)
close(r4)
r5 = socket(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000000)="7800000018002507b9409b14ffff0b7a0204be1486d8fe056406040c5c0009003f0006200a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160040030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x20000800, 0x0, 0xa0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
recvmsg$unix(0xffffffffffffffff, &(0x7f0000003cc0)={&(0x7f0000000200), 0x6e, &(0x7f0000003c00)=[{&(0x7f0000000340)=""/163, 0xa3}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000000480)=""/113, 0x71}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/37, 0x25}, {&(0x7f0000002a80)=""/193, 0xc1}, {&(0x7f0000002b80)=""/89, 0x59}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x8, &(0x7f0000003c80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x20000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed)
mkdirat(r0, &(0x7f0000000140)='./sys\x00', 0xa8)
symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', r0, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')

19m55.082308875s ago: executing program 2 (id=100):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]})
close(r4)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90)

19m52.588233706s ago: executing program 2 (id=103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
mknod$loop(0x0, 0xfff, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r8 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r8, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21)
sendto$inet6(r8, 0x0, 0x0, 0x40000, 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000001180))
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0)

19m35.455010688s ago: executing program 32 (id=103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
mknod$loop(0x0, 0xfff, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r8 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r8, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21)
sendto$inet6(r8, 0x0, 0x0, 0x40000, 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000001180))
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0)

17m24.92380722s ago: executing program 4 (id=394):
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r0=>0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000b80)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = eventfd2(0x0, 0x0)
readv(r2, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/211, 0xd3}], 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getgid()
statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000002ec0))
r5 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r6)
pipe2$9p(&(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, <r9=>0x0}, &(0x7f0000000080)=0xc)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_uid={'access', 0x3d, r9}}], [], 0x6b}})
getgid()
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000060a010400000000000000000a00000a0900010073797a31000000000900020073797a320000000020000000000a01080000000000000000050000010900de0073797a310000000034000000080a030000000000000000000a00000608000940000000010900020073797a32000000000900010073797a31"], 0xa8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002fc0)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff}}, './file0\x00'})
syz_open_dev$tty20(0xc, 0x4, 0x1)
gettid()
getpid()
read$FUSE(r3, &(0x7f00000043c0)={0x2020}, 0x2020)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

17m24.66424221s ago: executing program 4 (id=395):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_pts(0xffffffffffffffff, 0x200)
ioctl$TIOCGICOUNT(r1, 0x545d, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000))
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYRES16=0x0], 0xb0}}, 0x800)

17m22.957218397s ago: executing program 4 (id=397):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r9, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000000c0), &(0x7f0000000700)=r7}, 0x20)
sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]})
close(r5)
listns(&(0x7f0000000000)={0x20, 0x0, 0x7, 0x40000000, 0x0, 0x3}, 0x0, 0xf4240, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90)

17m22.015915118s ago: executing program 4 (id=402):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setpriority(0x0, 0x0, 0xffffffffffffffb7)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x44, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x4000000}}, {0xc}}}]}]}, 0x44}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00')
pivot_root(&(0x7f0000000640)='./file0/../file0\x00', 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c00309040000030202000001000000004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff0905820200000001000905", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESDEC=0x0], 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
setpriority(0x0, 0x0, 0xffffffffffffffb7) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x44, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x4000000}}, {0xc}}}]}]}, 0x44}}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) (async)
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00') (async)
pivot_root(&(0x7f0000000640)='./file0/../file0\x00', 0x0) (async)
syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c00309040000030202000001000000004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff0905820200000001000905", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESDEC=0x0], 0x0) (async)

17m19.783797218s ago: executing program 4 (id=408):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0xfefdff81, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x60441, 0x0)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000040)='HI', 0x2}], 0x1, 0x5d2, 0x8004, 0xa)

17m14.742417283s ago: executing program 4 (id=416):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="881400004100070127bd7000fefdffff017c000008004280040008000c00018006000600800a000060140280050006"], 0x1488}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)
recvmmsg(r5, &(0x7f0000003c40)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000280)=""/105, 0x69}, {&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000005c0)=""/108, 0xa8}], 0x3, &(0x7f00000006c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000016c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002800)=[{&(0x7f0000001740)=""/4092, 0xffc}, {&(0x7f0000002740)=""/106, 0x6a}, {&(0x7f00000027c0)=""/32, 0x20}], 0x3, &(0x7f0000002840)=""/99, 0x63}, 0x9}, {{&(0x7f00000028c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/3, 0x3}, {&(0x7f0000003980)=""/7, 0x7}, {&(0x7f00000039c0)}, {&(0x7f0000003a00)=""/60, 0x3c}, {&(0x7f0000003a40)=""/198, 0xc6}], 0x6, &(0x7f0000003bc0)=""/94, 0x5e}, 0x3ff}], 0x3, 0x40000182, 0x0)
close(r4)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd2b, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x3ba56793248e83ab}, 0x0)

17m14.356403028s ago: executing program 33 (id=416):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="881400004100070127bd7000fefdffff017c000008004280040008000c00018006000600800a000060140280050006"], 0x1488}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)
recvmmsg(r5, &(0x7f0000003c40)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000280)=""/105, 0x69}, {&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000005c0)=""/108, 0xa8}], 0x3, &(0x7f00000006c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000016c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002800)=[{&(0x7f0000001740)=""/4092, 0xffc}, {&(0x7f0000002740)=""/106, 0x6a}, {&(0x7f00000027c0)=""/32, 0x20}], 0x3, &(0x7f0000002840)=""/99, 0x63}, 0x9}, {{&(0x7f00000028c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/3, 0x3}, {&(0x7f0000003980)=""/7, 0x7}, {&(0x7f00000039c0)}, {&(0x7f0000003a00)=""/60, 0x3c}, {&(0x7f0000003a40)=""/198, 0xc6}], 0x6, &(0x7f0000003bc0)=""/94, 0x5e}, 0x3ff}], 0x3, 0x40000182, 0x0)
close(r4)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd2b, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x3ba56793248e83ab}, 0x0)

16m0.630892161s ago: executing program 3 (id=568):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="08001efbb009006e", 0x8}], 0x1}, 0x804)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0xc084)

16m0.474415867s ago: executing program 3 (id=569):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x60441, 0x0)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)='HI', 0x2}], 0x1, 0x5d2, 0x8004, 0xa)

16m0.259693563s ago: executing program 3 (id=571):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d3, 0x190, 0x1, 0x2, 0xd59f80, 0x4, 0x6, 0x9, 0x8, 0x4, 0x71e, 0x13, 0x1be, 0x7f, 0x3f, 0x37, {0x0, 0x1}, 0x3, 0xed}}) (async)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000013c0)=@newsa={0x10c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in=@rand_addr=0x64010100, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xe1, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0x4}]}, 0x10c}}, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$sierra_net(r1, &(0x7f00000004c0)={0x14, &(0x7f0000000180)={0x40, 0x21, 0x102, {0x102, 0x23, "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"}}, 0x0}, 0x0)

15m59.24105593s ago: executing program 3 (id=572):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4983d0000000000000061143400fdffffffa6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xf, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1df)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
sendmmsg$sock(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x604180, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000000000000000000006001d000000000006001c0000000000080019"], 0x44}}, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r3, 0x3ba0, &(0x7f0000001340)={0x48, 0x4, 0x0, 0x0, 0xc7, &(0x7f0000001240)="93476816e2654fdf6030f76e903b6ed59cab50b3d3ce283d4ea8983b4267b4e76d1156a8e966d568cd35a6c44042eed1026d48d392879c330f5c4a6324b7e4cb1994450423e9e28be35e22d9a33984fb5f848f814bb42fa01074cd9d6084594f3a2b7a93e89a8b6086e7a837e98ed76c8fd5272d993462252f91273610e93e38148d74bd7fcada328f42e9a35b055e9fa50c5c88136875e884f9defaad58bb6d6d4e7369f44a08a5bd346180502633ab06d51e42d33876bfb83be5693b8c1ef24a4025d7a28861", 0xc})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x1000})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{<r7=>0x0, 0x11, 0x0, 0x8d, 0x9, 0x90000000, 0x100000001, 0x4, 0x81, 0x5, 0x0, 0x6, 0x8, 0x2, 0x9}})
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000002140)={r7, 0x4})
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
mount_setattr(r8, &(0x7f0000000000)='./file0/../file0/../file0\x00', 0x800, &(0x7f00000000c0)={0x1, 0x70, 0x100000}, 0x20)
readv(0xffffffffffffffff, &(0x7f0000002100)=[{&(0x7f0000000140)=""/1, 0x1}], 0x1)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r9, 0xc05c5340, &(0x7f0000000080)={0x80, 0x7fff, 0x4bc, {0x79, 0x1}, 0xc20, 0x7f})

15m57.371081306s ago: executing program 3 (id=575):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})

15m51.801876761s ago: executing program 3 (id=585):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000000c0), &(0x7f0000000700)=r6}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]})
close(r5)
listns(&(0x7f0000000000)={0x20, 0x0, 0x7, 0x40000000, 0x0, 0x3}, 0x0, 0xf4240, 0x0)
write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90)

15m50.347310713s ago: executing program 34 (id=585):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000000c0), &(0x7f0000000700)=r6}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]})
close(r5)
listns(&(0x7f0000000000)={0x20, 0x0, 0x7, 0x40000000, 0x0, 0x3}, 0x0, 0xf4240, 0x0)
write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90)

1m48.285165902s ago: executing program 0 (id=1821):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
umount2(0x0, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x152)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000080)=0x2, 0x12)
pipe2$9p(&(0x7f0000000140)={<r3=>0xffffffffffffffff}, 0x800)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x8201, 0x0)
ioctl$RTC_ALM_SET(r4, 0x40247007, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',msize=0x0000000000000000,mmap,fscache,version=9p2000.u,privport,cache=fscache,cache=none,measure,dont_measure,async,fsname=,lazytime,fsmagic=0x0000000000000008,\x00'])

1m47.735765044s ago: executing program 0 (id=1823):
syz_open_dev$sndctrl(0x0, 0x0, 0x402)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0xfe}, 0x800, 0x0, 0x1, 0x1, 0x0, 0xffff}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x3ff, 0x0, 0x3, 0xb, 0x0, 0x5}, &(0x7f00000000c0)=0x20)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="18200000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00'], &(0x7f0000000040)='GPL\x00', 0x40, 0xe8, &(0x7f0000000080)=""/232, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x1], &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0xc}, {0x5, 0x2, 0x9, 0x6}, {0x3, 0x2, 0x5, 0xc}, {0x2, 0x2, 0x2, 0xb}, {0x1, 0x4, 0x7, 0x9}], 0x10, 0x1}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185042, 0x1ef)
fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xfffffffb)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c5a00, 0x0)
sendfile(r4, r5, 0x0, 0x20fffe82)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x70bd2b, 0x25dfdbdb, {0x2, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x1, 0x10008}}, 0x1c}}, 0x8810)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x46, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900010000"], 0x1c}}, 0x18040)
r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000000)=0x1000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))

1m42.958379121s ago: executing program 0 (id=1829):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$sndmidi(0x0, 0x2, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
flock(r0, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300080c1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000000a0a050000000100000000000a0000090900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r2)
socket$kcm(0x2, 0x200000000000001, 0x106)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2)

1m42.681857467s ago: executing program 1 (id=1830):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x10}, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
gettid()
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x8)
timer_settime(0x0, 0x1, 0x0, 0x0)

1m41.787617645s ago: executing program 0 (id=1831):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080))
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x5, 0x0)

1m40.602390094s ago: executing program 1 (id=1832):
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
write$char_usb(r0, &(0x7f0000000600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb910d523aa5d7208286755075ee8be937304cca20e234303df72ad4e2bdc71219456229460a7c6a2df61e8b21b4a4941dcba5c257b90bbf0a976a73973319258ad7f738c04dfbdee4ea0e1b77a909a154fd934f791ebea03db6f06c8f14bc40924e46cbb9b343f25d63f332f9b3f176601f842a4e40401cbc62ee7803c3a2d71f3878f61d8fb8cb5ee90a696b22fb97bbdfd36af05c2e34dfb3d36cf7333ea9dc98af537780ae7bc701053b9009d654d84f04c851b311341efcec16ef3d5c8a7e8af494068dbad55bfa7b7bf4475ceb03a6f4ef11ce14652dc36f279671b7184586c7aab57d50ca23deaeeeaebc2ed024d91f399c84834e7802ad28b6ffec", 0x18f)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x18)
write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
write$UHID_INPUT(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x80000000, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0xfffffffb, 0x9, 0x100003, 0x7fffffff, 0x489, 0x7, 0xfffffffd, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]})
pread64(r1, 0x0, 0x0, 0x2f6)

1m40.434994062s ago: executing program 0 (id=1833):
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m40.263428873s ago: executing program 1 (id=1834):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
r2 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0)
setuid(0x0)
sendmmsg$unix(r1, &(0x7f0000006000)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000180)="11e9198bc24d0040d0aaebdfc1b9ee78408d7d5952ec199ed989886f0af75d4938b203297ddc3c2791899299c11e99818f04e7175c4ff15752320e70b61a4aa31865b016aa3a233a4c8c698e67b93ac98a6ca755deef3ca5a6c3e397cfea0b2327cc2686cb897d7b0cb9d7ecc0bf77cd6acad3b71ebde2a7e1783f6a5038e5d34918", 0x82}, {&(0x7f0000000240)="67491ae89bd97e49db20adc9613f9e6e14bca098d2466fa2822f0031d2a6b2fe0d516c7af845457ba60ad48c47594d2b0375d55c3e18f702e97b", 0x3a}], 0x2, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x8010}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000440)="c9a3095b307486aaa122dae16a05b258dab7ff28d5ab9b4466fddf025dcc14b9ff8df25348f331cf9d8de5866331fff00cf2061c342d6246e2f598a29c77552d676a", 0x42}], 0x1, &(0x7f0000002740)=[@rights={{0x1c, 0x1, 0x1, [r0, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r2, r0, r1, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}], 0xd0, 0xc1}}, {{&(0x7f0000002840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003c00)=[{&(0x7f00000028c0)="53a567a6abeb628110ed114e42dabb0e75734ec69a0ed66115079d11469e64c6bb86c97b8e7e010a4ec0ca90579585d9f5ae169a8eec7ce8f05ca88bafdf2e146ff5679ad00e4540d35c00234757c5c1fbd7754a1bf0f44c0610489502ffabf3fbb05bcd2997a160fb98715e50e23e161e5ead2d790aabcf90d08aa9bdd74b4e365c7a5f720349d1c25a0d4d49090452b7a89641fe7329e3389c43f8ef905a468e2f9b5530685a80a6", 0xa9}, {&(0x7f0000002980)="aaf9ca1c08180e3bd40390be8214885dd3fc9dd9935af096a1121697680b6dc18fd84b12dba80f7622c25f77eab259743c8aeffafb3c2ee237c5566ba60a7bb3f5ad4959acdbb66043a0faee5fe9ae6560c407d3241ec963f77b4e21c30d8a04693815a3a98bfbc5088652180aba03578e3ff86f36d41ea2d1ea4fa478c364adadf12ce3a8f45a70d19921075925a7ee94a4be324069e5b1789ae2ee07e9e871d01c95dc39e200e8101d1a7cc88cc9935f14b7e7b6a19fa581188a4bd202e8cf645270d2d38ffcbc6934692d6537e9f1f762780549ddd93fff88", 0xda}, {&(0x7f0000002a80)="9774715b9917f2ddc0902e6169b8650febdcb1861e91f8f31faf62d0056944bb1fcdd0be3b0bfc44f7cbbd", 0x2b}, {&(0x7f0000002ac0)="7b04b4d50a665daeac1b84345a285d1660d50c81a5be5ea29c3c52547d8d013712a1520db8029f1d0089ebea7d9323e124ce9ee73dc82c4bf56ab2be2d9ff75a5f1c45f00ef646e8e45402a80d7b494b2c555377868285a0b16e0dab5ff87708a8d4ee1dcd834d1d95", 0x69}, {&(0x7f0000002b40)="0a3cd03b3546757b6e02db92896de69b341ba8e6aebe9626038f2441d2cce9bebe47ab60c52d19bc2afd7e50ddf3792596d57c48891eba565c8685c6e882a189abd4739f2b69dadb0c6e1a222c5a05683ab358799f526f142f6ec9182c599c0b8b3b6a3eb8ee30c740877c3c6db46078682c7b71cb9bd32324508aad87e7455b613da6a98bc20f0e24084ce08ccf6969cb52c5526f5504b5cfd06a2f07aca0c5f55525166413751325", 0xa9}, {&(0x7f0000002c00)="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", 0x1000}], 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="003fb4f23ee9123ff50acfe605af5f0a0800"/31, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x850}}], 0x3, 0x8004)

1m40.217724737s ago: executing program 1 (id=1835):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x8}}, 0x0, 0x0, 0x0, 0x4, 0x94}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x402, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x1, 0x4002004c4, 0xf, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010c3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4)

1m39.555820615s ago: executing program 0 (id=1836):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
lseek(0xffffffffffffffff, 0x186a0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003d80)={0x184, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @uid}, @nested={0x3d, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72", @nested={0xc, 0x34, 0x0, 0x1, [@generic="d9f94469955f15e7"]}]}]}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0x110, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x61, 0x0, 0x1, [@nested={0x10c, 0x9d, 0x0, 0x1, [@nested={0x108, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x8, 0xa5, 0x0, 0x0, @str='GPL\x00'}, @nested={0xf4, 0x90, 0x0, 0x1, [@nested={0xed, 0x44, 0x0, 0x1, [@generic="a4f2bdc07e8cc0404f617143e4f7b263ba6fc1453ff8932426cb0b2024dd0f1b7350887762644cd52aa60500cdf7e959a84b3dad1bc88841ef786cbde7d6215a38138e3e97b00517bbc1841901c1583a335075ea5754b2eaa78293f03551b0562fb5a47f1f7cbb3d6e117248069b9fb39c95d130e184c9b4c03c06137216485441b97dd59aa0e33633390ce64b", @typed={0x8, 0xb0, 0x0, 0x0, @str='GPL\x00'}, @nested={0x4, 0xa}, @nested={0x4d, 0xbb, 0x0, 0x1, [@typed={0x8, 0xaf, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x14, 0x0, 0x0, @ipv6=@empty}, @generic="1a6e3fd90a8cf0798b3a667c4cef414e3d780fd1347ccbd5c19bc8e32748de311a9a82083792ada228ab4e3e18"]}]}]}]}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
socket$unix(0x1, 0x1, 0x0)
clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25})
syz_usb_connect(0x3, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc0000000904", @ANYRES64], 0x0)

1m39.45222172s ago: executing program 1 (id=1837):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) (fail_nth: 5)
r1 = dup2(r0, r0)
read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0xffffffd7)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r2, 0xa, 0x13)
fcntl$setlease(r2, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000140)='./file0\x00', 0x0)

1m38.75916853s ago: executing program 1 (id=1838):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = mq_open(&(0x7f0000000380)='#\x00', 0x40, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001e000100000000ce13cd5e7e34683500", @ANYRES32=0x0, @ANYBLOB="0000000008000a00ff7f0000"], 0x24}}, 0x0)
mq_getsetattr(r0, 0x0, 0x0)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x8}}, 0x0, 0x0, 0x0, 0x4, 0x94}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x402, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x1, 0x4002004c4, 0xf, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010c3})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="f3270000000000000000070000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x6}, 0x4020)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r9, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x10}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="02", 0x1}], 0x1}}], 0x1, 0xc010)
shutdown(r9, 0x1)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x7}, 0x8)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r8, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x24000001)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
file_getattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x18, 0x1a00)

72.43453ms ago: executing program 35 (id=1836):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
lseek(0xffffffffffffffff, 0x186a0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003d80)={0x184, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @uid}, @nested={0x3d, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72", @nested={0xc, 0x34, 0x0, 0x1, [@generic="d9f94469955f15e7"]}]}]}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0x110, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x61, 0x0, 0x1, [@nested={0x10c, 0x9d, 0x0, 0x1, [@nested={0x108, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x8, 0xa5, 0x0, 0x0, @str='GPL\x00'}, @nested={0xf4, 0x90, 0x0, 0x1, [@nested={0xed, 0x44, 0x0, 0x1, [@generic="a4f2bdc07e8cc0404f617143e4f7b263ba6fc1453ff8932426cb0b2024dd0f1b7350887762644cd52aa60500cdf7e959a84b3dad1bc88841ef786cbde7d6215a38138e3e97b00517bbc1841901c1583a335075ea5754b2eaa78293f03551b0562fb5a47f1f7cbb3d6e117248069b9fb39c95d130e184c9b4c03c06137216485441b97dd59aa0e33633390ce64b", @typed={0x8, 0xb0, 0x0, 0x0, @str='GPL\x00'}, @nested={0x4, 0xa}, @nested={0x4d, 0xbb, 0x0, 0x1, [@typed={0x8, 0xaf, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x14, 0x0, 0x0, @ipv6=@empty}, @generic="1a6e3fd90a8cf0798b3a667c4cef414e3d780fd1347ccbd5c19bc8e32748de311a9a82083792ada228ab4e3e18"]}]}]}]}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
socket$unix(0x1, 0x1, 0x0)
clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25})
syz_usb_connect(0x3, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc0000000904", @ANYRES64], 0x0)

0s ago: executing program 36 (id=1838):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = mq_open(&(0x7f0000000380)='#\x00', 0x40, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001e000100000000ce13cd5e7e34683500", @ANYRES32=0x0, @ANYBLOB="0000000008000a00ff7f0000"], 0x24}}, 0x0)
mq_getsetattr(r0, 0x0, 0x0)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x8}}, 0x0, 0x0, 0x0, 0x4, 0x94}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x402, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x1, 0x4002004c4, 0xf, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010c3})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="f3270000000000000000070000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x6}, 0x4020)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r9, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x10}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="02", 0x1}], 0x1}}], 0x1, 0xc010)
shutdown(r9, 0x1)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x7}, 0x8)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r8, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x24000001)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
file_getattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x18, 0x1a00)

kernel console output (not intermixed with test programs):

 Enslaving as an active interface with an up link
[  990.106440][T12577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  990.557180][T12717] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  993.117421][T10997] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  993.129537][T10997] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  993.147157][T10997] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  993.159834][T10997] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  993.171989][T10997] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  993.718874][T12577] team0: Port device team_slave_0 added
[  993.738429][T12577] team0: Port device team_slave_1 added
[  993.830132][T12577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  993.830150][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  993.830179][T12577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  993.869655][T12577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  993.869707][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  993.869789][T12577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  994.014453][T12740] FAULT_INJECTION: forcing a failure.
[  994.014453][T12740] name failslab, interval 1, probability 0, space 0, times 0
[  994.014488][T12740] CPU: 1 UID: 0 PID: 12740 Comm: syz.0.1446 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  994.014513][T12740] Tainted: [L]=SOFTLOCKUP
[  994.014520][T12740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  994.014531][T12740] Call Trace:
[  994.014539][T12740]  <TASK>
[  994.014546][T12740]  dump_stack_lvl+0xe8/0x150
[  994.014578][T12740]  should_fail_ex+0x46b/0x600
[  994.014610][T12740]  should_failslab+0xa8/0x100
[  994.014637][T12740]  kmem_cache_alloc_lru_noprof+0xa7/0x650
[  994.014667][T12740]  ? __d_alloc+0x37/0x6f0
[  994.014688][T12740]  ? __d_alloc+0x37/0x6f0
[  994.014713][T12740]  __d_alloc+0x37/0x6f0
[  994.014739][T12740]  d_alloc_pseudo+0x21/0xc0
[  994.014762][T12740]  alloc_path_pseudo+0x107/0x220
[  994.014794][T12740]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  994.014832][T12740]  alloc_file_pseudo+0xa8/0x1e0
[  994.014864][T12740]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  994.014894][T12740]  ? security_inode_alloc+0xd5/0x310
[  994.014916][T12740]  ? inode_init_always_gfp+0x999/0xd40
[  994.014938][T12740]  sock_alloc_file+0xb8/0x2f0
[  994.014972][T12740]  do_accept+0x3ab/0x760
[  994.015001][T12740]  ? __pfx_do_accept+0x10/0x10
[  994.015039][T12740]  __sys_accept4+0x139/0x230
[  994.015066][T12740]  ? __pfx___sys_accept4+0x10/0x10
[  994.015094][T12740]  ? __pfx_ksys_write+0x10/0x10
[  994.015120][T12740]  __x64_sys_accept4+0x9a/0xb0
[  994.015144][T12740]  do_syscall_64+0x166/0x520
[  994.015163][T12740]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  994.015183][T12740]  ? clear_bhb_loop+0x70/0xc0
[  994.015204][T12740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  994.015222][T12740] RIP: 0033:0x7fa9e364e0d9
[  994.015239][T12740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  994.015255][T12740] RSP: 002b:00007fa9e18a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[  994.015275][T12740] RAX: ffffffffffffffda RBX: 00007fa9e38d5fa0 RCX: 00007fa9e364e0d9
[  994.015289][T12740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  994.015300][T12740] RBP: 00007fa9e18a6090 R08: 0000000000000000 R09: 0000000000000000
[  994.015311][T12740] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001
[  994.015323][T12740] R13: 00007fa9e38d6038 R14: 00007fa9e38d5fa0 R15: 00007fffa8f32718
[  994.015351][T12740]  </TASK>
[  994.424338][T12577] hsr_slave_0: entered promiscuous mode
[  994.425701][T12577] hsr_slave_1: entered promiscuous mode
[  994.426658][T12577] debugfs: 'hsr0' already exists in 'hsr'
[  994.426685][T12577] Cannot create hsr debugfs directory
[  995.452055][ T5586] Bluetooth: hci3: command tx timeout
[  997.746988][ T5586] Bluetooth: hci3: command tx timeout
[  998.185381][T12779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1452'.
[  998.547896][ T1332] ieee802154 phy0 wpan0: encryption failed: -22
[  998.547970][ T1332] ieee802154 phy1 wpan1: encryption failed: -22
[  999.076292][T12785] bond4: option tlb_dynamic_lb: invalid value (2)
[  999.127522][T12785] bond4 (unregistering): Released all slaves
[  999.821314][T10997] Bluetooth: hci3: command tx timeout
[ 1000.117938][T12822] binder: 12815:12822 ioctl 541b 0 returned -22
[ 1000.118505][T12822] binder: 12815:12822 ioctl 80207509 200000000580 returned -22
[ 1000.492937][T12815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1001.901402][T10997] Bluetooth: hci3: command tx timeout
[ 1002.266329][T12415] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1002.307803][T12415] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1002.438814][T12415] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1002.555330][T12415] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1002.954578][T12415] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1002.995706][T12415] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1003.024246][T12415] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1003.064809][T12415] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1009.684752][T12725] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1009.684991][T12725] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1009.685126][T12725] bridge_slave_0: entered allmulticast mode
[ 1009.704849][T12725] bridge_slave_0: entered promiscuous mode
[ 1009.730383][T12725] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1009.730470][T12725] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1009.733929][T12725] bridge_slave_1: entered allmulticast mode
[ 1009.754829][T12725] bridge_slave_1: entered promiscuous mode
[ 1009.883837][T12725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1009.969313][T12725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1010.165978][T12725] team0: Port device team_slave_0 added
[ 1010.182712][T12725] team0: Port device team_slave_1 added
[ 1010.436002][T12725] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1010.436021][T12725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1010.436051][T12725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1010.489508][T12725] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1010.489524][T12725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1010.489548][T12725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1010.960804][ T1237] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1011.124336][ T1237] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1011.127405][ T1237] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1011.127550][ T1237] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1011.127577][ T1237] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1011.127604][ T1237] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1011.127653][ T1237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1011.309833][T12415] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1011.329506][T12725] hsr_slave_0: entered promiscuous mode
[ 1011.333644][T12725] hsr_slave_1: entered promiscuous mode
[ 1011.335400][T12725] debugfs: 'hsr0' already exists in 'hsr'
[ 1011.335482][T12725] Cannot create hsr debugfs directory
[ 1011.853476][   T67] bridge_slave_1: left allmulticast mode
[ 1011.853516][   T67] bridge_slave_1: left promiscuous mode
[ 1011.853790][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1011.884651][ T1237] usb 2-1: USB disconnect, device number 83
[ 1012.012601][   T67] bridge_slave_0: left allmulticast mode
[ 1012.012630][   T67] bridge_slave_0: left promiscuous mode
[ 1012.012857][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1012.231378][   T67] bridge_slave_1: left allmulticast mode
[ 1012.231406][   T67] bridge_slave_1: left promiscuous mode
[ 1012.231590][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1012.352949][   T67] bridge_slave_0: left allmulticast mode
[ 1012.352976][   T67] bridge_slave_0: left promiscuous mode
[ 1012.353157][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1012.782091][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1012.902089][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1012.904275][ T5586] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1012.931610][ T5586] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1012.941993][ T5586] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1012.959859][ T5586] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1012.969373][ T5586] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1013.042200][   T67] bond0 (unregistering): Released all slaves
[ 1013.472988][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1013.782138][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1013.865367][   T67] bond0 (unregistering): Released all slaves
[ 1014.912045][ T5244] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1015.197131][T10997] Bluetooth: hci5: command tx timeout
[ 1016.110783][ T5845] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1016.270717][ T5845] usb 2-1: Using ep0 maxpacket: 32
[ 1016.282061][ T5845] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1016.286274][ T5845] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1016.286355][ T5845] usb 2-1: config 0 has no interface number 0
[ 1016.320794][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1016.320823][ T5845] usb 2-1: Product: syz
[ 1016.320841][ T5845] usb 2-1: Manufacturer: syz
[ 1016.320858][ T5845] usb 2-1: SerialNumber: syz
[ 1016.469612][ T5845] usb 2-1: config 0 descriptor??
[ 1016.913468][ T5845] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1016.913504][ T5845] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1017.271067][T10997] Bluetooth: hci5: command tx timeout
[ 1017.685579][T12957] netlink: Conntrack attr has 4 unknown bytes
[ 1017.685636][T12957] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1017.921513][T12964] veth3: entered allmulticast mode
[ 1018.361693][   T67] hsr_slave_0: left promiscuous mode
[ 1018.401510][   T67] hsr_slave_1: left promiscuous mode
[ 1018.404297][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1018.427406][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1018.700908][   T67] hsr_slave_0: left promiscuous mode
[ 1018.911573][   T67] hsr_slave_1: left promiscuous mode
[ 1018.912482][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1018.932611][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1019.373500][T10997] Bluetooth: hci5: command tx timeout
[ 1019.403719][   T67] team0 (unregistering): Port device team_slave_1 removed
[ 1019.452953][   T67] team0 (unregistering): Port device team_slave_0 removed
[ 1020.032637][   T67] team0 (unregistering): Port device team_slave_1 removed
[ 1020.075767][   T67] team0 (unregistering): Port device team_slave_0 removed
[ 1020.525069][ T5845] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[ 1020.525473][ T5845] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[ 1020.588542][ T5845] usb 2-1: USB disconnect, device number 84
[ 1020.907490][T12982] netlink: 'syz.1.1498': attribute type 4 has an invalid length.
[ 1021.136873][T12577] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1021.223735][T12577] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1021.246724][T12577] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1021.349945][T12577] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1021.396092][T12577] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1021.421503][T10997] Bluetooth: hci5: command tx timeout
[ 1021.457694][T12577] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1022.164871][T12577] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1022.239519][T12577] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1022.918572][ T5244] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1025.583986][T12936] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1025.584625][T12936] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1025.584847][T12936] bridge_slave_0: entered allmulticast mode
[ 1025.603444][T12936] bridge_slave_0: entered promiscuous mode
[ 1025.774043][T12936] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1025.774289][T12936] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1025.774614][T12936] bridge_slave_1: entered allmulticast mode
[ 1025.807076][T12936] bridge_slave_1: entered promiscuous mode
[ 1026.599935][T12577] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1026.648947][T12936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1026.685606][T12936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1026.724658][ T5788] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1026.880704][ T5788] usb 2-1: Using ep0 maxpacket: 32
[ 1026.881627][ T5788] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[ 1026.883243][ T5788] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[ 1026.883272][ T5788] usb 2-1: config 2 has no interface number 0
[ 1026.883318][ T5788] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[ 1026.883349][ T5788] usb 2-1: config 2 interface 88 has no altsetting 0
[ 1026.887361][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[ 1026.887388][ T5788] usb 2-1: Product: syz
[ 1026.887405][ T5788] usb 2-1: Manufacturer: syz
[ 1026.887421][ T5788] usb 2-1: SerialNumber: syz
[ 1026.986442][T13048] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1027.043588][T12936] team0: Port device team_slave_0 added
[ 1027.070076][T12577] 8021q: adding VLAN 0 to HW filter on device team0
[ 1027.097061][T12936] team0: Port device team_slave_1 added
[ 1027.510036][T12936] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1027.510054][T12936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1027.510085][T12936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1027.564969][T12936] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1027.565016][T12936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1027.565068][T12936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1027.719001][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1027.722113][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1027.910902][T13044] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1027.985256][ T1522] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1027.985446][ T1522] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1032.119269][T12936] hsr_slave_0: entered promiscuous mode
[ 1032.126136][T12936] hsr_slave_1: entered promiscuous mode
[ 1032.127207][T12936] debugfs: 'hsr0' already exists in 'hsr'
[ 1032.127233][T12936] Cannot create hsr debugfs directory
[ 1032.585188][ T5788] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1032.585501][ T5788] asix 2-1:2.88: probe with driver asix failed with error -71
[ 1032.680307][ T5788] usb 2-1: USB disconnect, device number 85
[ 1035.648834][T13096] usb usb8: usbfs: process 13096 (syz.1.1510) did not claim interface 0 before use
[ 1036.069410][ T5586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1036.106552][ T5586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1036.149228][ T5586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1036.214646][ T5586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1036.215978][ T5586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1037.259184][T12725] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1037.332845][T12725] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1037.379753][T12725] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1037.513830][T12725] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1037.578316][T12725] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1037.676962][T12725] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1038.019170][T13125] comedi comedi1: comedi_config --init_data is deprecated
[ 1038.128854][T12725] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1038.187198][T12725] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1038.541447][ T5586] Bluetooth: hci1: command tx timeout
[ 1039.466668][   T67] bridge_slave_1: left allmulticast mode
[ 1039.466707][   T67] bridge_slave_1: left promiscuous mode
[ 1039.466989][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1039.644729][   T67] bridge_slave_0: left allmulticast mode
[ 1039.644759][   T67] bridge_slave_0: left promiscuous mode
[ 1039.645095][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1040.632731][ T5586] Bluetooth: hci1: command tx timeout
[ 1040.982430][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1041.112186][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1041.206337][   T67] bond0 (unregistering): Released all slaves
[ 1041.281600][T13164] FAULT_INJECTION: forcing a failure.
[ 1041.281600][T13164] name failslab, interval 1, probability 0, space 0, times 0
[ 1041.281642][T13164] CPU: 0 UID: 0 PID: 13164 Comm: syz.1.1530 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1041.281672][T13164] Tainted: [L]=SOFTLOCKUP
[ 1041.281679][T13164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1041.281692][T13164] Call Trace:
[ 1041.281701][T13164]  <TASK>
[ 1041.281710][T13164]  dump_stack_lvl+0xe8/0x150
[ 1041.281750][T13164]  should_fail_ex+0x46b/0x600
[ 1041.281790][T13164]  should_failslab+0xa8/0x100
[ 1041.281817][T13164]  kmem_cache_alloc_noprof+0xa4/0x660
[ 1041.281851][T13164]  ? radix_tree_node_alloc+0xd0/0x400
[ 1041.281873][T13164]  ? radix_tree_node_alloc+0xd0/0x400
[ 1041.281905][T13164]  radix_tree_node_alloc+0xd0/0x400
[ 1041.281937][T13164]  idr_get_free+0x295/0xa20
[ 1041.281976][T13164]  idr_alloc_u32+0x190/0x340
[ 1041.282013][T13164]  ? __pfx_idr_alloc_u32+0x10/0x10
[ 1041.282044][T13164]  ? rt_spin_lock+0x210/0x400
[ 1041.282086][T13164]  idr_alloc_cyclic+0xa2/0x1c0
[ 1041.282118][T13164]  ? bpf_link_prime+0x50/0x500
[ 1041.282142][T13164]  bpf_link_prime+0x88/0x500
[ 1041.282171][T13164]  ? bpf_link_init+0x8d/0x1e0
[ 1041.282196][T13164]  bpf_xdp_link_attach+0x26d/0x990
[ 1041.282230][T13164]  ? _parse_integer_limit+0x192/0x1e0
[ 1041.282289][T13164]  ? __pfx_bpf_xdp_link_attach+0x10/0x10
[ 1041.282348][T13164]  ? __fget_files+0x3a8/0x420
[ 1041.282379][T13164]  ? attach_type_to_prog_type+0x52/0x4d0
[ 1041.282411][T13164]  ? bpf_prog_attach_check_attach_type+0x3b3/0x570
[ 1041.282449][T13164]  link_create+0x4d4/0x850
[ 1041.282485][T13164]  __sys_bpf+0x760/0xd90
[ 1041.282525][T13164]  ? __pfx___sys_bpf+0x10/0x10
[ 1041.282557][T13164]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1041.282590][T13164]  ? rt_mutex_slowunlock+0x219/0x460
[ 1041.282647][T13164]  ? ksys_write+0x248/0x270
[ 1041.282680][T13164]  ? __pfx_ksys_write+0x10/0x10
[ 1041.282716][T13164]  __x64_sys_bpf+0xba/0xd0
[ 1041.282745][T13164]  do_syscall_64+0x166/0x520
[ 1041.282768][T13164]  ? trace_irq_disable+0x3b/0x140
[ 1041.282792][T13164]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1041.282816][T13164]  ? clear_bhb_loop+0x70/0xc0
[ 1041.282846][T13164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1041.282869][T13164] RIP: 0033:0x7fb74cd4e0d9
[ 1041.282891][T13164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1041.282913][T13164] RSP: 002b:00007fb74afa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1041.282937][T13164] RAX: ffffffffffffffda RBX: 00007fb74cfd5fa0 RCX: 00007fb74cd4e0d9
[ 1041.282955][T13164] RDX: 000000000000003a RSI: 0000200000000240 RDI: 000000000000001c
[ 1041.282970][T13164] RBP: 00007fb74afa6090 R08: 0000000000000000 R09: 0000000000000000
[ 1041.282985][T13164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1041.283000][T13164] R13: 00007fb74cfd6038 R14: 00007fb74cfd5fa0 R15: 00007ffc420bf058
[ 1041.283039][T13164]  </TASK>
[ 1042.401311][   T67] hsr_slave_0: left promiscuous mode
[ 1042.421330][   T67] hsr_slave_1: left promiscuous mode
[ 1042.422875][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1042.465210][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1042.706890][ T5586] Bluetooth: hci1: command tx timeout
[ 1043.071607][T13179] 9p: Unknown Cache mode or invalid value f
[ 1043.231886][   T67] team0 (unregistering): Port device team_slave_1 removed
[ 1043.283996][   T37] audit: type=1326 audit(1787843349.878:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13180 comm="syz.0.1535" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1043.284179][   T37] audit: type=1326 audit(1787843349.878:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13180 comm="syz.0.1535" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1043.284485][   T37] audit: type=1326 audit(1787843349.878:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13180 comm="syz.0.1535" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1043.284660][   T37] audit: type=1326 audit(1787843349.878:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13180 comm="syz.0.1535" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1043.284820][   T37] audit: type=1326 audit(1787843349.878:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13180 comm="syz.0.1535" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1043.285958][   T37] audit: type=1326 audit(1787843349.878:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13180 comm="syz.0.1535" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1043.286122][   T37] audit: type=1326 audit(1787843349.878:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13180 comm="syz.0.1535" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1043.287146][   T37] audit: type=1326 audit(1787843349.878:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13180 comm="syz.0.1535" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1043.287300][   T37] audit: type=1326 audit(1787843349.878:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13180 comm="syz.0.1535" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1043.287482][   T37] audit: type=1326 audit(1787843349.878:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13180 comm="syz.0.1535" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1043.344637][   T67] team0 (unregistering): Port device team_slave_0 removed
[ 1043.687801][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'.
[ 1044.785753][ T5586] Bluetooth: hci1: command tx timeout
[ 1045.144706][T12725] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1045.397301][T13103] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1045.397397][T13103] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1045.397549][T13103] bridge_slave_0: entered allmulticast mode
[ 1045.399964][T13103] bridge_slave_0: entered promiscuous mode
[ 1045.454773][T13103] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1045.454905][T13103] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1045.455092][T13103] bridge_slave_1: entered allmulticast mode
[ 1045.458609][T13103] bridge_slave_1: entered promiscuous mode
[ 1045.575194][T12725] 8021q: adding VLAN 0 to HW filter on device team0
[ 1045.774983][T13203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1543'.
[ 1045.912081][T13103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1045.986868][ T1522] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1045.987084][ T1522] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1046.018943][T13103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1046.157411][ T1522] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1046.157551][ T1522] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1046.179723][T13103] team0: Port device team_slave_0 added
[ 1046.209652][T13103] team0: Port device team_slave_1 added
[ 1046.818991][T13103] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1046.819010][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1046.819042][T13103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1046.904213][T13103] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1046.904233][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1046.904263][T13103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1047.047890][T13226] netlink: 'syz.1.1547': attribute type 8 has an invalid length.
[ 1047.207087][T13103] hsr_slave_0: entered promiscuous mode
[ 1047.208493][T13103] hsr_slave_1: entered promiscuous mode
[ 1047.209533][T13103] debugfs: 'hsr0' already exists in 'hsr'
[ 1047.209559][T13103] Cannot create hsr debugfs directory
[ 1047.648707][T13237] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1548'.
[ 1049.779845][T13252] 9p: Bad value for 'rfdno'
[ 1055.384865][T12936] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1055.438559][T12936] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1055.497419][T12936] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1055.627120][T12936] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1055.985259][T10997] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1056.013508][T10997] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1056.019498][T10997] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1056.041857][T10997] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1056.042800][T10997] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1056.185115][T12936] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1056.956542][T12936] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1057.404524][T12936] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1057.445888][T12936] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1057.960034][T12936] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1058.088004][T13289] openvswitch: netlink: IPv4 frag type 32 is out of range max 2
[ 1058.144890][T12936] 8021q: adding VLAN 0 to HW filter on device team0
[ 1058.288709][ T2369] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1058.288810][ T2369] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1058.363896][ T5788] usb 2-1: new full-speed USB device number 86 using dummy_hcd
[ 1058.465346][ T2369] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1058.465455][ T2369] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1058.514335][ T5788] usb 2-1: not running at top speed; connect to a high speed hub
[ 1058.514378][ T5788] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[ 1058.515908][ T5788] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[ 1058.515978][ T5788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.608537][ T5788] uvcvideo 2-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[ 1058.608612][ T5788] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770.
[ 1058.814407][T13289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1558'.
[ 1058.818003][T10957] usb 2-1: USB disconnect, device number 86
[ 1058.940762][ T5586] Bluetooth: hci2: command tx timeout
[ 1058.971254][   T67] bridge_slave_1: left allmulticast mode
[ 1058.971292][   T67] bridge_slave_1: left promiscuous mode
[ 1058.971592][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1059.155599][   T67] bridge_slave_0: left allmulticast mode
[ 1059.155636][   T67] bridge_slave_0: left promiscuous mode
[ 1059.155895][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1059.983340][ T1332] ieee802154 phy0 wpan0: encryption failed: -22
[ 1059.983418][ T1332] ieee802154 phy1 wpan1: encryption failed: -22
[ 1061.035520][ T5586] Bluetooth: hci2: command tx timeout
[ 1061.202075][T13316] FAULT_INJECTION: forcing a failure.
[ 1061.202075][T13316] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1061.202117][T13316] CPU: 1 UID: 0 PID: 13316 Comm: syz.0.1563 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1061.202149][T13316] Tainted: [L]=SOFTLOCKUP
[ 1061.202158][T13316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1061.202173][T13316] Call Trace:
[ 1061.202187][T13316]  <TASK>
[ 1061.202197][T13316]  dump_stack_lvl+0xe8/0x150
[ 1061.202237][T13316]  should_fail_ex+0x46b/0x600
[ 1061.202279][T13316]  _copy_to_user+0x31/0xb0
[ 1061.202306][T13316]  simple_read_from_buffer+0xe1/0x170
[ 1061.202338][T13316]  proc_fail_nth_read+0x1be/0x230
[ 1061.202373][T13316]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1061.202406][T13316]  ? rw_verify_area+0x250/0x4d0
[ 1061.202435][T13316]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1061.202463][T13316]  vfs_read+0x219/0xa90
[ 1061.202499][T13316]  ? __pfx_vfs_read+0x10/0x10
[ 1061.202536][T13316]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1061.202565][T13316]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1061.202590][T13316]  ? mutex_lock_nested+0x152/0x1d0
[ 1061.202622][T13316]  ? fdget_pos+0x252/0x320
[ 1061.202656][T13316]  ksys_read+0x156/0x270
[ 1061.202686][T13316]  ? __pfx_ksys_read+0x10/0x10
[ 1061.202727][T13316]  do_syscall_64+0x166/0x520
[ 1061.202750][T13316]  ? trace_irq_disable+0x3b/0x140
[ 1061.202774][T13316]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1061.202799][T13316]  ? clear_bhb_loop+0x70/0xc0
[ 1061.202828][T13316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1061.202853][T13316] RIP: 0033:0x7fa9e360e90e
[ 1061.202874][T13316] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1061.202894][T13316] RSP: 002b:00007fa9e18a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1061.202918][T13316] RAX: ffffffffffffffda RBX: 00007fa9e18a66c0 RCX: 00007fa9e360e90e
[ 1061.202935][T13316] RDX: 000000000000000f RSI: 00007fa9e18a60a0 RDI: 0000000000000006
[ 1061.202950][T13316] RBP: 00007fa9e18a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1061.202965][T13316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1061.202978][T13316] R13: 00007fa9e38d6038 R14: 00007fa9e38d5fa0 R15: 00007fffa8f32718
[ 1061.203015][T13316]  </TASK>
[ 1061.540487][T13318] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1061.941390][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1062.002713][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1062.063020][   T67] bond0 (unregistering): Released all slaves
[ 1062.307172][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1565'.
[ 1063.110234][ T5586] Bluetooth: hci2: command tx timeout
[ 1065.180654][ T5586] Bluetooth: hci2: command tx timeout
[ 1065.362144][   T67] hsr_slave_0: left promiscuous mode
[ 1065.775478][   T67] hsr_slave_1: left promiscuous mode
[ 1065.777976][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1065.936294][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1069.311570][   T67] team0 (unregistering): Port device team_slave_1 removed
[ 1069.362858][   T67] team0 (unregistering): Port device team_slave_0 removed
[ 1069.799073][T13353] FAULT_INJECTION: forcing a failure.
[ 1069.799073][T13353] name failslab, interval 1, probability 0, space 0, times 0
[ 1069.799112][T13353] CPU: 0 UID: 0 PID: 13353 Comm: syz.1.1573 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1069.799144][T13353] Tainted: [L]=SOFTLOCKUP
[ 1069.799154][T13353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1069.799166][T13353] Call Trace:
[ 1069.799173][T13353]  <TASK>
[ 1069.799183][T13353]  dump_stack_lvl+0xe8/0x150
[ 1069.799215][T13353]  should_fail_ex+0x46b/0x600
[ 1069.799251][T13353]  should_failslab+0xa8/0x100
[ 1069.799275][T13353]  __kmalloc_noprof+0xfe/0x780
[ 1069.799291][T13353]  ? rcu_is_watching+0x16/0xb0
[ 1069.799318][T13353]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1069.799349][T13353]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1069.799389][T13353]  tomoyo_realpath_from_path+0xef/0x640
[ 1069.799441][T13353]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1069.799468][T13353]  tomoyo_path_number_perm+0x246/0x5f0
[ 1069.799496][T13353]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1069.799522][T13353]  ? __lock_acquire+0x683/0x2ce0
[ 1069.799560][T13353]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1069.799581][T13353]  ? hook_file_ioctl+0x1f3/0x600
[ 1069.799616][T13353]  ? __fget_files+0x2a/0x420
[ 1069.799637][T13353]  ? __fget_files+0x2a/0x420
[ 1069.799655][T13353]  ? __fget_files+0x3a8/0x420
[ 1069.799673][T13353]  ? __fget_files+0x2a/0x420
[ 1069.799695][T13353]  security_file_ioctl+0xc3/0x2a0
[ 1069.799722][T13353]  __se_sys_ioctl+0x47/0x170
[ 1069.799749][T13353]  do_syscall_64+0x166/0x520
[ 1069.799774][T13353]  ? trace_irq_disable+0x3b/0x140
[ 1069.799793][T13353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1069.799813][T13353]  ? clear_bhb_loop+0x70/0xc0
[ 1069.799837][T13353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1069.799856][T13353] RIP: 0033:0x7fb74cd4e0d9
[ 1069.799876][T13353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1069.799894][T13353] RSP: 002b:00007fb74afa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1069.799916][T13353] RAX: ffffffffffffffda RBX: 00007fb74cfd5fa0 RCX: 00007fb74cd4e0d9
[ 1069.799932][T13353] RDX: 0000200000000240 RSI: 00000000c1105517 RDI: 0000000000000003
[ 1069.799943][T13353] RBP: 00007fb74afa6090 R08: 0000000000000000 R09: 0000000000000000
[ 1069.799954][T13353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1069.799965][T13353] R13: 00007fb74cfd6038 R14: 00007fb74cfd5fa0 R15: 00007ffc420bf058
[ 1069.799993][T13353]  </TASK>
[ 1069.800069][T13353] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1070.155032][T13355] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1574'.
[ 1074.771854][T12937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1074.825761][T12937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1074.827830][T12937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1074.874234][T12937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1074.886723][T12937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1075.373743][T13398] jffs2: notice: (13398) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1075.723273][T13265] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1075.723395][T13265] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1075.723609][T13265] bridge_slave_0: entered allmulticast mode
[ 1075.727795][T13265] bridge_slave_0: entered promiscuous mode
[ 1075.801484][T13265] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1075.801632][T13265] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1075.802001][T13265] bridge_slave_1: entered allmulticast mode
[ 1075.816220][T13265] bridge_slave_1: entered promiscuous mode
[ 1076.287811][T13265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1076.462890][T13399] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1076.562399][T13399] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1076.574115][T13399] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1076.677374][T13265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1077.095860][T13399] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1077.100770][T12937] Bluetooth: hci3: command tx timeout
[ 1077.155179][T13399] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1077.155302][T13399] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1077.262062][T13399] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1077.502916][T13399] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1077.503005][T13399] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1077.665825][T13399] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1078.062719][T13265] team0: Port device team_slave_0 added
[ 1078.113124][T13265] team0: Port device team_slave_1 added
[ 1078.384644][T13424] FAULT_INJECTION: forcing a failure.
[ 1078.384644][T13424] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1078.384683][T13424] CPU: 1 UID: 0 PID: 13424 Comm: syz.0.1583 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1078.384715][T13424] Tainted: [L]=SOFTLOCKUP
[ 1078.384724][T13424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1078.384738][T13424] Call Trace:
[ 1078.384757][T13424]  <TASK>
[ 1078.384767][T13424]  dump_stack_lvl+0xe8/0x150
[ 1078.384806][T13424]  should_fail_ex+0x46b/0x600
[ 1078.384847][T13424]  _copy_from_iter+0x1d3/0x1660
[ 1078.384883][T13424]  ? rcu_is_watching+0x16/0xb0
[ 1078.384914][T13424]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1078.384951][T13424]  ? __pfx__copy_from_iter+0x10/0x10
[ 1078.384985][T13424]  ? __alloc_skb+0x27a/0x7a0
[ 1078.385013][T13424]  ? __alloc_skb+0x27a/0x7a0
[ 1078.385048][T13424]  ? netlink_sendmsg+0x650/0xb40
[ 1078.385081][T13424]  ? skb_put+0x112/0x210
[ 1078.385113][T13424]  netlink_sendmsg+0x6c0/0xb40
[ 1078.385159][T13424]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1078.385195][T13424]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1078.385235][T13424]  ? __kernel_text_address+0xd/0x30
[ 1078.385259][T13424]  ? unwind_get_return_address+0x4d/0x90
[ 1078.385287][T13424]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1078.385320][T13424]  sock_sendmsg_nosec+0x13a/0x180
[ 1078.385348][T13424]  ____sys_sendmsg+0x565/0x870
[ 1078.385381][T13424]  ? __might_fault+0xaf/0x130
[ 1078.385410][T13424]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1078.385453][T13424]  ? import_iovec+0x73/0xa0
[ 1078.385480][T13424]  ___sys_sendmsg+0x2a5/0x360
[ 1078.385511][T13424]  ? __lock_acquire+0x683/0x2ce0
[ 1078.385541][T13424]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1078.385612][T13424]  ? __fget_files+0x2a/0x420
[ 1078.385635][T13424]  ? __fget_files+0x3a8/0x420
[ 1078.385671][T13424]  __x64_sys_sendmsg+0x1b7/0x290
[ 1078.385707][T13424]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1078.385768][T13424]  do_syscall_64+0x166/0x520
[ 1078.385793][T13424]  ? trace_irq_disable+0x3b/0x140
[ 1078.385817][T13424]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1078.385840][T13424]  ? clear_bhb_loop+0x70/0xc0
[ 1078.385868][T13424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1078.385891][T13424] RIP: 0033:0x7fa9e364e0d9
[ 1078.385912][T13424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1078.385931][T13424] RSP: 002b:00007fa9e18a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1078.385955][T13424] RAX: ffffffffffffffda RBX: 00007fa9e38d5fa0 RCX: 00007fa9e364e0d9
[ 1078.385972][T13424] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004
[ 1078.385986][T13424] RBP: 00007fa9e18a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1078.386001][T13424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1078.386015][T13424] R13: 00007fa9e38d6038 R14: 00007fa9e38d5fa0 R15: 00007fffa8f32718
[ 1078.386050][T13424]  </TASK>
[ 1078.460808][T12937] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1078.620653][T12937] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1078.998882][T13103] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1079.069167][T13103] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1079.089724][T13265] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1079.089743][T13265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1079.089773][T13265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1079.137922][T13103] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1079.248953][T12937] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1079.274863][T13103] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1079.580768][T12937] Bluetooth: hci3: command 0x040f tx timeout
[ 1079.599981][T13265] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1079.600000][T13265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1079.600031][T13265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1079.843136][T13103] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1079.865728][T13103] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1079.889596][T13103] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1079.925654][T13103] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1080.272444][T13265] hsr_slave_0: entered promiscuous mode
[ 1080.273644][T13265] hsr_slave_1: entered promiscuous mode
[ 1080.274422][T13265] debugfs: 'hsr0' already exists in 'hsr'
[ 1080.274452][T13265] Cannot create hsr debugfs directory
[ 1080.707976][T12937] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1081.220724][ T5845] usb 2-1: new full-speed USB device number 87 using dummy_hcd
[ 1081.260678][T12937] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1081.354343][ T5845] usb 2-1: device descriptor read/64, error -71
[ 1081.601073][ T5845] usb 2-1: new full-speed USB device number 88 using dummy_hcd
[ 1081.662186][T12937] Bluetooth: hci3: command 0x040f tx timeout
[ 1081.731088][ T5845] usb 2-1: device descriptor read/64, error -71
[ 1081.841736][ T5845] usb usb2-port1: attempt power cycle
[ 1081.953448][T12937] Bluetooth: hci4: unexpected event for opcode 0x0406
[ 1082.254760][ T5845] usb 2-1: new full-speed USB device number 89 using dummy_hcd
[ 1082.272885][ T5845] usb 2-1: device descriptor read/8, error -71
[ 1082.318030][T13472] FAULT_INJECTION: forcing a failure.
[ 1082.318030][T13472] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1082.318061][T13472] CPU: 1 UID: 0 PID: 13472 Comm: syz.0.1592 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1082.318085][T13472] Tainted: [L]=SOFTLOCKUP
[ 1082.318091][T13472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1082.318102][T13472] Call Trace:
[ 1082.318109][T13472]  <TASK>
[ 1082.318115][T13472]  dump_stack_lvl+0xe8/0x150
[ 1082.318145][T13472]  should_fail_ex+0x46b/0x600
[ 1082.318175][T13472]  _copy_from_iter+0x1d3/0x1660
[ 1082.318202][T13472]  ? rcu_is_watching+0x16/0xb0
[ 1082.318225][T13472]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1082.318254][T13472]  ? __pfx__copy_from_iter+0x10/0x10
[ 1082.318278][T13472]  ? __alloc_skb+0x27a/0x7a0
[ 1082.318298][T13472]  ? __alloc_skb+0x27a/0x7a0
[ 1082.318323][T13472]  ? netlink_sendmsg+0x650/0xb40
[ 1082.318349][T13472]  ? skb_put+0x112/0x210
[ 1082.318372][T13472]  netlink_sendmsg+0x6c0/0xb40
[ 1082.318405][T13472]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1082.318432][T13472]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1082.318461][T13472]  ? __kernel_text_address+0xd/0x30
[ 1082.318478][T13472]  ? unwind_get_return_address+0x4d/0x90
[ 1082.318498][T13472]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1082.318528][T13472]  sock_sendmsg_nosec+0x13a/0x180
[ 1082.318556][T13472]  ____sys_sendmsg+0x565/0x870
[ 1082.318580][T13472]  ? __might_fault+0xaf/0x130
[ 1082.318601][T13472]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1082.318634][T13472]  ? import_iovec+0x73/0xa0
[ 1082.318653][T13472]  ___sys_sendmsg+0x2a5/0x360
[ 1082.318676][T13472]  ? __lock_acquire+0x683/0x2ce0
[ 1082.318698][T13472]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1082.318748][T13472]  ? __fget_files+0x2a/0x420
[ 1082.318765][T13472]  ? __fget_files+0x3a8/0x420
[ 1082.318790][T13472]  __x64_sys_sendmsg+0x1b7/0x290
[ 1082.318817][T13472]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1082.318857][T13472]  do_syscall_64+0x166/0x520
[ 1082.318874][T13472]  ? trace_irq_disable+0x3b/0x140
[ 1082.318892][T13472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1082.318909][T13472]  ? clear_bhb_loop+0x70/0xc0
[ 1082.318930][T13472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1082.318946][T13472] RIP: 0033:0x7fa9e364e0d9
[ 1082.318961][T13472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1082.318975][T13472] RSP: 002b:00007fa9e18a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1082.318993][T13472] RAX: ffffffffffffffda RBX: 00007fa9e38d5fa0 RCX: 00007fa9e364e0d9
[ 1082.319006][T13472] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 1082.319017][T13472] RBP: 00007fa9e18a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1082.319028][T13472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1082.319038][T13472] R13: 00007fa9e38d6038 R14: 00007fa9e38d5fa0 R15: 00007fffa8f32718
[ 1082.319064][T13472]  </TASK>
[ 1082.525173][ T5845] usb 2-1: new full-speed USB device number 90 using dummy_hcd
[ 1082.545655][ T5845] usb 2-1: device descriptor read/8, error -71
[ 1082.689229][ T5845] usb usb2-port1: unable to enumerate USB device
[ 1082.798083][T12937] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1083.060076][T13392] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1083.060267][T13392] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.060421][T13392] bridge_slave_0: entered allmulticast mode
[ 1083.086038][T13392] bridge_slave_0: entered promiscuous mode
[ 1083.376320][T12937] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1083.740893][T12937] Bluetooth: hci3: command 0x040f tx timeout
[ 1083.874646][T13392] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1083.874759][T13392] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1083.874926][T13392] bridge_slave_1: entered allmulticast mode
[ 1083.877149][T13392] bridge_slave_1: entered promiscuous mode
[ 1084.025699][T13392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1084.046908][T13392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1084.386372][T13103] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1084.390271][T13392] team0: Port device team_slave_0 added
[ 1084.424222][T13392] team0: Port device team_slave_1 added
[ 1084.519384][T13392] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1084.519403][T13392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1084.519442][T13392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1084.606629][T13392] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1084.606650][T13392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1084.606682][T13392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1085.081746][   T67] bridge_slave_1: left allmulticast mode
[ 1085.081785][   T67] bridge_slave_1: left promiscuous mode
[ 1085.082062][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1085.232761][   T67] bridge_slave_0: left allmulticast mode
[ 1085.232799][   T67] bridge_slave_0: left promiscuous mode
[ 1085.233232][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1085.520927][   T67] bridge_slave_1: left allmulticast mode
[ 1085.520971][   T67] bridge_slave_1: left promiscuous mode
[ 1085.521190][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1085.642174][   T67] bridge_slave_0: left allmulticast mode
[ 1085.642202][   T67] bridge_slave_0: left promiscuous mode
[ 1085.642392][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1085.820847][T12937] Bluetooth: hci3: command 0x040f tx timeout
[ 1086.615790][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1086.691359][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1086.713440][   T67] bond0 (unregistering): Released all slaves
[ 1087.291295][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1087.351580][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1087.394324][   T67] bond0 (unregistering): Released all slaves
[ 1087.424987][T13103] 8021q: adding VLAN 0 to HW filter on device team0
[ 1087.425890][T13493] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1596'.
[ 1087.451055][ T5244] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1087.596151][ T1522] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1087.596280][ T1522] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1087.908475][T12937] Bluetooth: hci3: command 0x040f tx timeout
[ 1088.107458][T13392] hsr_slave_0: entered promiscuous mode
[ 1088.109398][T13392] hsr_slave_1: entered promiscuous mode
[ 1088.110432][T13392] debugfs: 'hsr0' already exists in 'hsr'
[ 1088.110459][T13392] Cannot create hsr debugfs directory
[ 1088.298070][ T1522] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1088.299652][ T1522] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1088.801721][   T67] hsr_slave_0: left promiscuous mode
[ 1088.822473][   T67] hsr_slave_1: left promiscuous mode
[ 1088.823998][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1088.861877][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1089.066056][   T67] hsr_slave_0: left promiscuous mode
[ 1089.080725][   T67] hsr_slave_1: left promiscuous mode
[ 1089.081737][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1089.121607][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1089.951967][   T67] team0 (unregistering): Port device team_slave_1 removed
[ 1090.002384][   T67] team0 (unregistering): Port device team_slave_0 removed
[ 1090.541726][   T67] team0 (unregistering): Port device team_slave_1 removed
[ 1090.591314][   T67] team0 (unregistering): Port device team_slave_0 removed
[ 1090.964741][T13265] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1091.015366][T13265] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1091.161464][T13265] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1091.359647][T13265] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1091.415046][T13265] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1091.456046][T13265] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1091.519427][T13265] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1091.531492][T13293] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1091.565390][T13265] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1091.690785][T13293] usb 2-1: Using ep0 maxpacket: 32
[ 1091.691804][T13293] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[ 1091.695724][T13293] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1091.695751][T13293] usb 2-1: config 0 has no interfaces?
[ 1091.695796][T13293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1091.756218][T13293] usb 2-1: config 0 descriptor??
[ 1091.969596][T13527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1091.972221][T13527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1092.136922][T13293] usb 2-1: USB disconnect, device number 91
[ 1092.415621][ T5244] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1092.690413][T13265] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1092.845358][T13265] 8021q: adding VLAN 0 to HW filter on device team0
[ 1092.945049][ T1522] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1092.945203][ T1522] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1093.441099][T13561] 9p: Bad value for 'version'
[ 1093.470316][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1093.470466][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1093.902138][T13569] wireguard0: entered promiscuous mode
[ 1098.898911][T13613] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1099.339199][ T5586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1099.458838][ T5586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1099.468135][ T5586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1099.481225][ T5586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1099.483213][ T5586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1101.767867][T12937] Bluetooth: hci1: command tx timeout
[ 1102.748703][T13265] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1103.867366][T12937] Bluetooth: hci1: command tx timeout
[ 1105.901098][T12937] Bluetooth: hci1: command tx timeout
[ 1107.214212][T13655] syz.1.1616 (13655): drop_caches: 2
[ 1107.371027][T13690] netlink: 'syz.1.1620': attribute type 1 has an invalid length.
[ 1107.371053][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'.
[ 1107.481818][T13392] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1107.511029][T13392] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1107.984659][T12937] Bluetooth: hci1: command tx timeout
[ 1108.223571][T13392] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1108.270976][T13392] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1108.533726][T13392] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1108.705916][T13392] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1108.789066][T13392] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1108.855531][T13392] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1111.559235][T13265] veth0_vlan: entered promiscuous mode
[ 1111.851076][T13265] veth1_vlan: entered promiscuous mode
[ 1112.061255][   T67] bridge_slave_1: left allmulticast mode
[ 1112.061293][   T67] bridge_slave_1: left promiscuous mode
[ 1112.061563][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1112.232614][   T67] bridge_slave_0: left allmulticast mode
[ 1112.232653][   T67] bridge_slave_0: left promiscuous mode
[ 1112.232921][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1112.980699][ T5884] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1113.131713][ T5884] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[ 1113.133634][ T5884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1113.133666][ T5884] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1113.136234][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1113.136261][ T5884] usb 2-1: Product: syz
[ 1113.136279][ T5884] usb 2-1: Manufacturer: syz
[ 1113.136296][ T5884] usb 2-1: SerialNumber: syz
[ 1113.241714][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1113.312199][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1113.354737][   T67] bond0 (unregistering): Released all slaves
[ 1113.427397][ T5884] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 92 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[ 1113.917579][ T5884] usb 2-1: USB disconnect, device number 92
[ 1114.062022][ T5884] usblp0: removed
[ 1114.222259][   T67] hsr_slave_0: left promiscuous mode
[ 1114.260796][   T67] hsr_slave_1: left promiscuous mode
[ 1114.263268][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1114.301811][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1114.994365][   T67] team0 (unregistering): Port device team_slave_1 removed
[ 1115.071561][   T67] team0 (unregistering): Port device team_slave_0 removed
[ 1116.436786][ T5244] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1116.501867][T13622] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1116.526871][T13622] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1116.527411][T13622] bridge_slave_0: entered allmulticast mode
[ 1116.603475][T13622] bridge_slave_0: entered promiscuous mode
[ 1117.525135][T13622] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1117.525446][T13622] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1117.526097][T13622] bridge_slave_1: entered allmulticast mode
[ 1117.712500][T13622] bridge_slave_1: entered promiscuous mode
[ 1118.379714][T13622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1118.414734][T13392] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1118.445880][T13622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1118.587049][T13622] team0: Port device team_slave_0 added
[ 1118.613705][T13622] team0: Port device team_slave_1 added
[ 1118.945458][ T5586] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1118.986082][ T5586] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1119.000157][ T5586] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1119.035111][ T5586] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1119.036731][ T5586] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1119.114212][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1640'.
[ 1119.437651][T13392] 8021q: adding VLAN 0 to HW filter on device team0
[ 1119.751112][   T37] kauditd_printk_skb: 101 callbacks suppressed
[ 1119.751133][   T37] audit: type=1107 audit(1787843426.298:287): pid=13815 uid=0 auid=0 ses=1 subj=_ msg='.'
[ 1120.004555][T13622] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1120.004569][T13622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1120.004590][T13622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1120.009579][T13622] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1120.009596][T13622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1120.009623][T13622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1120.149162][   T95] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1120.149405][   T95] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1121.783495][ T5586] Bluetooth: hci5: command tx timeout
[ 1121.803237][ T1332] ieee802154 phy0 wpan0: encryption failed: -22
[ 1121.803313][ T1332] ieee802154 phy1 wpan1: encryption failed: -22
[ 1121.854438][ T1059] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1121.855515][ T1059] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1121.917046][T13622] hsr_slave_0: entered promiscuous mode
[ 1121.935003][T13622] hsr_slave_1: entered promiscuous mode
[ 1121.936049][T13622] debugfs: 'hsr0' already exists in 'hsr'
[ 1121.936076][T13622] Cannot create hsr debugfs directory
[ 1122.985517][ T5586] Bluetooth: hci4: unexpected event for opcode 0x0406
[ 1123.820717][ T5586] Bluetooth: hci5: command tx timeout
[ 1123.947141][ T5244] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1125.900917][ T5586] Bluetooth: hci5: command tx timeout
[ 1127.633017][T13860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1648'.
[ 1127.980693][ T5586] Bluetooth: hci5: command tx timeout
[ 1128.190793][ T5788] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1128.325524][ T5788] usb 2-1: device descriptor read/64, error -71
[ 1128.376171][T13873] binder: 13859:13873 ioctl c0306201 0 returned -14
[ 1128.571681][ T5788] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1128.700768][ T5788] usb 2-1: device descriptor read/64, error -71
[ 1128.814383][ T5788] usb usb2-port1: attempt power cycle
[ 1129.194041][T13862] comedi comedi1: reset error (fatal)
[ 1129.211046][ T5788] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1129.232357][ T5788] usb 2-1: device descriptor read/8, error -71
[ 1129.470767][ T5788] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1129.491440][ T5788] usb 2-1: device descriptor read/8, error -71
[ 1129.601007][ T5788] usb usb2-port1: unable to enumerate USB device
[ 1130.833524][ T5586] Bluetooth: hci4: unexpected event for opcode 0x0406
[ 1133.840138][T13392] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1133.841881][   T37] audit: type=1800 audit(1787843440.388:288): pid=13939 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1659" name="idVendor" dev="configfs" ino=52070 res=0 errno=0
[ 1133.873225][   T37] audit: type=1800 audit(1787843440.468:289): pid=13939 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1659" name="configuration" dev="configfs" ino=52079 res=0 errno=0
[ 1134.178025][T13803] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1134.179687][T13803] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1134.179901][T13803] bridge_slave_0: entered allmulticast mode
[ 1134.209117][T13803] bridge_slave_0: entered promiscuous mode
[ 1134.322152][T13803] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1134.322288][T13803] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1134.322496][T13803] bridge_slave_1: entered allmulticast mode
[ 1134.327962][T13803] bridge_slave_1: entered promiscuous mode
[ 1135.211962][T13803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1135.321073][ T1303] bridge_slave_1: left allmulticast mode
[ 1135.321110][ T1303] bridge_slave_1: left promiscuous mode
[ 1135.321383][ T1303] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1135.474126][ T1303] bridge_slave_0: left allmulticast mode
[ 1135.474165][ T1303] bridge_slave_0: left promiscuous mode
[ 1135.474460][ T1303] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1135.627681][T13974] FAULT_INJECTION: forcing a failure.
[ 1135.627681][T13974] name failslab, interval 1, probability 0, space 0, times 0
[ 1135.627725][T13974] CPU: 1 UID: 0 PID: 13974 Comm: syz.0.1662 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1135.627757][T13974] Tainted: [L]=SOFTLOCKUP
[ 1135.627766][T13974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1135.627780][T13974] Call Trace:
[ 1135.627790][T13974]  <TASK>
[ 1135.627800][T13974]  dump_stack_lvl+0xe8/0x150
[ 1135.627841][T13974]  should_fail_ex+0x46b/0x600
[ 1135.627882][T13974]  should_failslab+0xa8/0x100
[ 1135.627911][T13974]  __kmalloc_noprof+0xfe/0x780
[ 1135.627936][T13974]  ? sock_kmalloc+0xd6/0x160
[ 1135.627969][T13974]  ? sock_kmalloc+0xd6/0x160
[ 1135.628009][T13974]  sock_kmalloc+0xd6/0x160
[ 1135.628046][T13974]  skcipher_recvmsg+0x564/0xe10
[ 1135.628091][T13974]  ? __pfx_skcipher_recvmsg+0x10/0x10
[ 1135.628116][T13974]  ? kstrtouint+0x6e/0xe0
[ 1135.628148][T13974]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[ 1135.628177][T13974]  ? security_socket_recvmsg+0x7e/0x2c0
[ 1135.628206][T13974]  ? __pfx_skcipher_recvmsg+0x10/0x10
[ 1135.628233][T13974]  sock_recvmsg+0x196/0x1e0
[ 1135.628263][T13974]  sock_read_iter+0x233/0x300
[ 1135.628290][T13974]  ? __pfx_sock_read_iter+0x10/0x10
[ 1135.628321][T13974]  ? bpf_lsm_file_permission+0x9/0x20
[ 1135.628354][T13974]  ? security_file_permission+0x75/0x260
[ 1135.628395][T13974]  vfs_read+0x59e/0xa90
[ 1135.628433][T13974]  ? __pfx_vfs_read+0x10/0x10
[ 1135.628472][T13974]  ? __fget_files+0x2a/0x420
[ 1135.628507][T13974]  ksys_read+0x156/0x270
[ 1135.628536][T13974]  ? __pfx_ksys_read+0x10/0x10
[ 1135.628586][T13974]  do_syscall_64+0x166/0x520
[ 1135.628611][T13974]  ? trace_irq_disable+0x3b/0x140
[ 1135.628635][T13974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1135.628660][T13974]  ? clear_bhb_loop+0x70/0xc0
[ 1135.628688][T13974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1135.628712][T13974] RIP: 0033:0x7fa9e364e0d9
[ 1135.628735][T13974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1135.628755][T13974] RSP: 002b:00007fa9e18a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1135.628780][T13974] RAX: ffffffffffffffda RBX: 00007fa9e38d5fa0 RCX: 00007fa9e364e0d9
[ 1135.628798][T13974] RDX: 000000000000100d RSI: 00002000000012c0 RDI: 0000000000000004
[ 1135.628813][T13974] RBP: 00007fa9e18a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1135.628827][T13974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1135.628841][T13974] R13: 00007fa9e38d6038 R14: 00007fa9e38d5fa0 R15: 00007fffa8f32718
[ 1135.628878][T13974]  </TASK>
[ 1136.232576][T12937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1136.273789][T12937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1136.319631][T12937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1136.328279][T12937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1136.348966][T12937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1138.273342][ T1303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1138.374762][ T1303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1138.417205][ T1303] bond0 (unregistering): Released all slaves
[ 1138.485213][T13803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1138.702095][T12937] Bluetooth: hci2: command tx timeout
[ 1138.885238][T12937] Bluetooth: hci4: unexpected event for opcode 0x0406
[ 1139.063520][T13803] team0: Port device team_slave_0 added
[ 1140.467655][ T1303] hsr_slave_0: left promiscuous mode
[ 1140.502058][ T1303] hsr_slave_1: left promiscuous mode
[ 1140.505686][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1140.539310][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1140.622026][ T1303] veth1_vlan: left promiscuous mode
[ 1140.622362][ T1303] veth0_vlan: left promiscuous mode
[ 1141.887082][T12937] Bluetooth: hci2: command tx timeout
[ 1142.305432][ T1303] team0 (unregistering): Port device team_slave_1 removed
[ 1142.401697][ T1303] team0 (unregistering): Port device team_slave_0 removed
[ 1142.815942][T13803] team0: Port device team_slave_1 added
[ 1142.994601][T13622] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1143.038767][T13622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1143.258163][T13622] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1143.330794][T13622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1143.333319][T13803] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1143.333336][T13803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1143.333366][T13803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1143.336255][T13803] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1143.336267][T13803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1143.336291][T13803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1143.576661][T13622] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1143.643019][T13622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1143.763168][T13622] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1143.851479][T13622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1143.902293][T12937] Bluetooth: hci2: command tx timeout
[ 1144.118463][T13803] hsr_slave_0: entered promiscuous mode
[ 1144.120257][T13803] hsr_slave_1: entered promiscuous mode
[ 1144.125795][T13803] debugfs: 'hsr0' already exists in 'hsr'
[ 1144.125875][T13803] Cannot create hsr debugfs directory
[ 1144.906146][T14071] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1678'.
[ 1145.990953][T12937] Bluetooth: hci2: command tx timeout
[ 1146.527881][ T5244] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1146.544226][ T1237] usb 2-1: new full-speed USB device number 97 using dummy_hcd
[ 1146.761916][ T1237] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1146.763530][ T1237] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1146.763560][ T1237] usb 2-1: config 179 has no interface number 0
[ 1146.763615][ T1237] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[ 1146.763646][ T1237] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[ 1146.763676][ T1237] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1146.763706][ T1237] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1146.763731][ T1237] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1146.763777][ T1237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1146.770348][T14092] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1147.076816][ T1237] xpad 2-1:179.65: probe with driver xpad failed with error -5
[ 1149.179500][T13622] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1149.406282][T13986] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1149.406477][T13986] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1149.406647][T13986] bridge_slave_0: entered allmulticast mode
[ 1149.410238][T13986] bridge_slave_0: entered promiscuous mode
[ 1149.447358][T13986] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1149.447533][T13986] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1149.447715][T13986] bridge_slave_1: entered allmulticast mode
[ 1149.485550][T13986] bridge_slave_1: entered promiscuous mode
[ 1149.993402][T13986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1150.404839][T13986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1150.494748][T13622] 8021q: adding VLAN 0 to HW filter on device team0
[ 1150.678670][T13986] team0: Port device team_slave_0 added
[ 1150.703838][T11454] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1150.704039][T11454] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1150.734340][T13986] team0: Port device team_slave_1 added
[ 1150.947606][ T2369] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1150.947721][ T2369] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1150.979274][T13986] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1150.979293][T13986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1150.979324][T13986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1151.031811][T13986] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1151.031830][T13986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1151.031861][T13986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1151.186776][T13759] usb 2-1: USB disconnect, device number 97
[ 1151.593369][T13986] hsr_slave_0: entered promiscuous mode
[ 1151.597260][T13986] hsr_slave_1: entered promiscuous mode
[ 1151.600048][T13986] debugfs: 'hsr0' already exists in 'hsr'
[ 1151.600068][T13986] Cannot create hsr debugfs directory
[ 1153.701240][ T1303] bridge_slave_1: left allmulticast mode
[ 1153.701286][ T1303] bridge_slave_1: left promiscuous mode
[ 1153.701572][ T1303] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1153.878468][ T1303] bridge_slave_0: left allmulticast mode
[ 1153.878505][ T1303] bridge_slave_0: left promiscuous mode
[ 1153.878902][ T1303] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1154.390651][T14135] syz.0.1691 (14135): drop_caches: 2
[ 1155.422557][ T1303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1155.504727][ T1303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1155.548620][ T1303] bond0 (unregistering): Released all slaves
[ 1156.066238][T14189] Bluetooth: hci0: invalid length 0, exp 2 for type 27
[ 1156.212390][T13803] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1156.255757][T13803] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1156.551004][ T1303] hsr_slave_0: left promiscuous mode
[ 1156.621083][ T1303] hsr_slave_1: left promiscuous mode
[ 1156.622516][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1156.717011][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1156.811223][ T5845] usb 2-1: new low-speed USB device number 98 using dummy_hcd
[ 1156.967705][ T5845] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1156.967766][ T5845] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[ 1156.969926][ T5845] usb 2-1: config 100 has an invalid interface number: 173 but max is 0
[ 1156.969955][ T5845] usb 2-1: config 100 has no interface number 0
[ 1156.970003][ T5845] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[ 1156.970037][ T5845] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1156.970068][ T5845] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1156.970100][ T5845] usb 2-1: config 100 interface 173 has no altsetting 0
[ 1157.055169][ T5845] usb 2-1: string descriptor 0 read error: -22
[ 1157.055319][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1157.090035][T14195] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1157.108253][ T5845] metro_usb 2-1:100.173: Metrologic USB to Serial converter detected
[ 1157.207156][ T5845] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0
[ 1157.401409][T14195] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90
[ 1157.423086][ T5884] usb 2-1: USB disconnect, device number 98
[ 1157.440076][ T5884] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[ 1157.453229][ T5884] metro_usb 2-1:100.173: device disconnected
[ 1157.911228][ T1303] team0 (unregistering): Port device team_slave_1 removed
[ 1157.955408][ T1303] team0 (unregistering): Port device team_slave_0 removed
[ 1158.252096][T13803] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1158.369588][T13803] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1158.399902][T13803] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1158.446041][T13803] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1158.489437][T13803] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1158.533485][T13803] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1161.365692][ T5586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1161.464453][ T5586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1161.487495][ T5586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1161.529435][ T5586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1161.573330][ T5586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1161.909973][T13803] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1162.227462][T14282] FAULT_INJECTION: forcing a failure.
[ 1162.227462][T14282] name failslab, interval 1, probability 0, space 0, times 0
[ 1162.227542][T14282] CPU: 1 UID: 0 PID: 14282 Comm: syz.0.1719 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1162.227577][T14282] Tainted: [L]=SOFTLOCKUP
[ 1162.227586][T14282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1162.227601][T14282] Call Trace:
[ 1162.227612][T14282]  <TASK>
[ 1162.227622][T14282]  dump_stack_lvl+0xe8/0x150
[ 1162.227662][T14282]  should_fail_ex+0x46b/0x600
[ 1162.227706][T14282]  should_failslab+0xa8/0x100
[ 1162.227736][T14282]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1162.227776][T14282]  ? __alloc_skb+0x1db/0x7a0
[ 1162.227813][T14282]  ? __alloc_skb+0x1db/0x7a0
[ 1162.227853][T14282]  __alloc_skb+0x1db/0x7a0
[ 1162.227891][T14282]  __pskb_copy_fclone+0xab/0x1200
[ 1162.227947][T14282]  hwsim_hw_xmit+0x413/0x1620
[ 1162.227975][T14282]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1162.228006][T14282]  ? hwsim_hw_xmit+0xe9/0x1620
[ 1162.228042][T14282]  ? __pfx_hwsim_hw_xmit+0x10/0x10
[ 1162.228073][T14282]  ? rt_spin_unlock+0x159/0x200
[ 1162.228114][T14282]  ? rt_spin_unlock+0x165/0x200
[ 1162.228151][T14282]  ieee802154_tx+0x26d/0x510
[ 1162.228183][T14282]  ieee802154_subif_start_xmit+0x110/0x190
[ 1162.228214][T14282]  dev_hard_start_xmit+0x2df/0x870
[ 1162.228275][T14282]  sch_direct_xmit+0x257/0x4c0
[ 1162.228315][T14282]  ? __pfx_sch_direct_xmit+0x10/0x10
[ 1162.228348][T14282]  ? rcu_irq_exit_check_preempt+0x210/0x210
[ 1162.228384][T14282]  ? rt_spin_trylock+0x13a/0x2b0
[ 1162.228424][T14282]  __dev_queue_xmit+0x16ce/0x3880
[ 1162.228467][T14282]  ? __might_fault+0xaf/0x130
[ 1162.228496][T14282]  ? __dev_queue_xmit+0x294/0x3880
[ 1162.228546][T14282]  ? __might_fault+0xaf/0x130
[ 1162.228571][T14282]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1162.228613][T14282]  ? _copy_from_iter+0x2d3/0x1660
[ 1162.228652][T14282]  ? __pfx_ieee802154_header_create+0x10/0x10
[ 1162.228706][T14282]  ? __pfx_ieee802154_header_create+0x10/0x10
[ 1162.228749][T14282]  dgram_sendmsg+0x709/0xe30
[ 1162.228777][T14282]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1162.228818][T14282]  ? __pfx_dgram_sendmsg+0x10/0x10
[ 1162.228848][T14282]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[ 1162.228885][T14282]  ? __pfx_dgram_sendmsg+0x10/0x10
[ 1162.228925][T14282]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[ 1162.228959][T14282]  sock_sendmsg_nosec+0x13a/0x180
[ 1162.228990][T14282]  ____sys_sendmsg+0x565/0x870
[ 1162.229026][T14282]  ? __might_fault+0xaf/0x130
[ 1162.229060][T14282]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1162.229108][T14282]  ? import_iovec+0x73/0xa0
[ 1162.229137][T14282]  ___sys_sendmsg+0x2a5/0x360
[ 1162.229182][T14282]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1162.229264][T14282]  ? __fget_files+0x2a/0x420
[ 1162.229290][T14282]  ? __fget_files+0x3a8/0x420
[ 1162.229331][T14282]  __sys_sendmmsg+0x279/0x4d0
[ 1162.229375][T14282]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1162.229424][T14282]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1162.229478][T14282]  ? ksys_write+0x248/0x270
[ 1162.229511][T14282]  ? __pfx_ksys_write+0x10/0x10
[ 1162.229550][T14282]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1162.229588][T14282]  do_syscall_64+0x166/0x520
[ 1162.229614][T14282]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1162.229639][T14282]  ? clear_bhb_loop+0x70/0xc0
[ 1162.229670][T14282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1162.229695][T14282] RIP: 0033:0x7fa9e364e0d9
[ 1162.229717][T14282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1162.229737][T14282] RSP: 002b:00007fa9e1885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1162.229762][T14282] RAX: ffffffffffffffda RBX: 00007fa9e38d6090 RCX: 00007fa9e364e0d9
[ 1162.229779][T14282] RDX: 0000000004000050 RSI: 00002000000196c0 RDI: 0000000000000004
[ 1162.229800][T14282] RBP: 00007fa9e1885090 R08: 0000000000000000 R09: 0000000000000000
[ 1162.229815][T14282] R10: 000000000400c010 R11: 0000000000000246 R12: 0000000000000001
[ 1162.229830][T14282] R13: 00007fa9e38d6128 R14: 00007fa9e38d6090 R15: 00007fffa8f32718
[ 1162.229871][T14282]  </TASK>
[ 1163.743056][T12937] Bluetooth: hci1: command tx timeout
[ 1163.929733][T13803] 8021q: adding VLAN 0 to HW filter on device team0
[ 1164.832515][   T95] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1164.832617][   T95] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1164.882199][   T95] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1164.892295][   T95] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1165.720109][T14305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1722'.
[ 1165.842495][T12937] Bluetooth: hci1: command tx timeout
[ 1167.917393][T12937] Bluetooth: hci1: command tx timeout
[ 1169.869300][T14353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1730'.
[ 1169.980697][T12937] Bluetooth: hci1: command tx timeout
[ 1172.887686][T14378] FAULT_INJECTION: forcing a failure.
[ 1172.887686][T14378] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1172.887724][T14378] CPU: 1 UID: 0 PID: 14378 Comm: syz.0.1734 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1172.887754][T14378] Tainted: [L]=SOFTLOCKUP
[ 1172.887762][T14378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1172.887776][T14378] Call Trace:
[ 1172.887785][T14378]  <TASK>
[ 1172.887795][T14378]  dump_stack_lvl+0xe8/0x150
[ 1172.887861][T14378]  should_fail_ex+0x46b/0x600
[ 1172.887903][T14378]  _copy_to_user+0x31/0xb0
[ 1172.887931][T14378]  simple_read_from_buffer+0xe1/0x170
[ 1172.887963][T14378]  proc_fail_nth_read+0x1be/0x230
[ 1172.887997][T14378]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1172.888042][T14378]  ? rw_verify_area+0x250/0x4d0
[ 1172.888089][T14378]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1172.888118][T14378]  vfs_read+0x219/0xa90
[ 1172.888155][T14378]  ? __pfx_vfs_read+0x10/0x10
[ 1172.888185][T14378]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1172.888217][T14378]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1172.888242][T14378]  ? mutex_lock_nested+0x152/0x1d0
[ 1172.888272][T14378]  ? fdget_pos+0x252/0x320
[ 1172.888306][T14378]  ksys_read+0x156/0x270
[ 1172.888337][T14378]  ? __pfx_ksys_read+0x10/0x10
[ 1172.888364][T14378]  ? __pfx_sock_ioctl+0x10/0x10
[ 1172.888398][T14378]  do_syscall_64+0x166/0x520
[ 1172.888422][T14378]  ? trace_irq_disable+0x3b/0x140
[ 1172.888447][T14378]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.888471][T14378]  ? clear_bhb_loop+0x70/0xc0
[ 1172.888502][T14378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.888526][T14378] RIP: 0033:0x7fa9e360e90e
[ 1172.888548][T14378] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1172.888569][T14378] RSP: 002b:00007fa9e18a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1172.888593][T14378] RAX: ffffffffffffffda RBX: 00007fa9e18a66c0 RCX: 00007fa9e360e90e
[ 1172.888611][T14378] RDX: 000000000000000f RSI: 00007fa9e18a60a0 RDI: 0000000000000003
[ 1172.888627][T14378] RBP: 00007fa9e18a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1172.888642][T14378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1172.888656][T14378] R13: 00007fa9e38d6038 R14: 00007fa9e38d5fa0 R15: 00007fffa8f32718
[ 1172.888692][T14378]  </TASK>
[ 1173.257693][T14380] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1735'.
[ 1173.307755][T13986] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1173.348669][T13986] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1173.373853][T13986] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1173.667244][T13986] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1173.694209][T13986] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1173.763109][T13986] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1173.876255][T13986] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1174.017055][T13986] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1174.246389][T14405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1739'.
[ 1175.775045][T13803] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1176.303200][ T1303] bridge_slave_1: left allmulticast mode
[ 1176.303242][ T1303] bridge_slave_1: left promiscuous mode
[ 1176.303526][ T1303] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1176.485799][ T1303] bridge_slave_0: left allmulticast mode
[ 1176.485840][ T1303] bridge_slave_0: left promiscuous mode
[ 1176.486155][ T1303] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1176.974862][T14433] FAULT_INJECTION: forcing a failure.
[ 1176.974862][T14433] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1176.974930][T14433] CPU: 0 UID: 0 PID: 14433 Comm: syz.1.1742 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1176.974963][T14433] Tainted: [L]=SOFTLOCKUP
[ 1176.974972][T14433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1176.974986][T14433] Call Trace:
[ 1176.974996][T14433]  <TASK>
[ 1176.975007][T14433]  dump_stack_lvl+0xe8/0x150
[ 1176.975051][T14433]  should_fail_ex+0x46b/0x600
[ 1176.975100][T14433]  _copy_to_user+0x31/0xb0
[ 1176.975127][T14433]  simple_read_from_buffer+0xe1/0x170
[ 1176.975160][T14433]  proc_fail_nth_read+0x1be/0x230
[ 1176.975193][T14433]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1176.975233][T14433]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1176.975262][T14433]  vfs_read+0x219/0xa90
[ 1176.975300][T14433]  ? __pfx_vfs_read+0x10/0x10
[ 1176.975330][T14433]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1176.975359][T14433]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1176.975384][T14433]  ? mutex_lock_nested+0x152/0x1d0
[ 1176.975414][T14433]  ? fdget_pos+0x252/0x320
[ 1176.975451][T14433]  ksys_read+0x156/0x270
[ 1176.975482][T14433]  ? __pfx_ksys_read+0x10/0x10
[ 1176.975532][T14433]  do_syscall_64+0x166/0x520
[ 1176.975558][T14433]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1176.975582][T14433]  ? clear_bhb_loop+0x70/0xc0
[ 1176.975613][T14433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1176.975637][T14433] RIP: 0033:0x7fb74cd0e90e
[ 1176.975659][T14433] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1176.975679][T14433] RSP: 002b:00007fb74af63fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1176.975704][T14433] RAX: ffffffffffffffda RBX: 00007fb74af646c0 RCX: 00007fb74cd0e90e
[ 1176.975721][T14433] RDX: 000000000000000f RSI: 00007fb74af640a0 RDI: 0000000000000009
[ 1176.975736][T14433] RBP: 00007fb74af64090 R08: 0000000000000000 R09: 0000000000000000
[ 1176.975750][T14433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1176.975765][T14433] R13: 00007fb74cfd6218 R14: 00007fb74cfd6180 R15: 00007ffc420bf058
[ 1176.975802][T14433]  </TASK>
[ 1178.062262][ T1237] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 1178.210833][ T1237] usb 2-1: Using ep0 maxpacket: 32
[ 1178.211843][ T1237] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[ 1178.213645][ T1237] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[ 1178.213671][ T1237] usb 2-1: config 2 has no interface number 0
[ 1178.213720][ T1237] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[ 1178.213751][ T1237] usb 2-1: config 2 interface 88 has no altsetting 0
[ 1178.218574][ T1237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[ 1178.218601][ T1237] usb 2-1: Product: syz
[ 1178.218618][ T1237] usb 2-1: Manufacturer: syz
[ 1178.218634][ T1237] usb 2-1: SerialNumber: syz
[ 1178.299796][T14436] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1178.331780][ T1303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1178.391559][ T1303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1178.434486][ T1303] bond0 (unregistering): Released all slaves
[ 1178.578638][T14436] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1179.084047][ T1303] hsr_slave_0: left promiscuous mode
[ 1179.108253][ T1303] hsr_slave_1: left promiscuous mode
[ 1179.111967][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1179.192523][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1179.409470][ T1237] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1179.416845][ T1237] asix 2-1:2.88: probe with driver asix failed with error -71
[ 1179.451328][ T1237] usb 2-1: USB disconnect, device number 99
[ 1180.283652][ T5586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1180.322486][ T5586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1180.336334][ T5586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1180.359631][ T5586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1180.373765][ T5586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1181.223943][ T1303] team0 (unregistering): Port device team_slave_1 removed
[ 1181.483333][ T1303] team0 (unregistering): Port device team_slave_0 removed
[ 1182.510202][T14465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1748'.
[ 1182.700766][T12937] Bluetooth: hci3: command tx timeout
[ 1183.706304][ T1332] ieee802154 phy0 wpan0: encryption failed: -22
[ 1183.706381][ T1332] ieee802154 phy1 wpan1: encryption failed: -22
[ 1184.445621][T14267] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1184.445749][T14267] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1184.445961][T14267] bridge_slave_0: entered allmulticast mode
[ 1184.483205][T14267] bridge_slave_0: entered promiscuous mode
[ 1184.559151][T14267] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1184.559456][T14267] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1184.559749][T14267] bridge_slave_1: entered allmulticast mode
[ 1184.592805][T14267] bridge_slave_1: entered promiscuous mode
[ 1184.794884][T12937] Bluetooth: hci3: command tx timeout
[ 1185.063936][T14267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1185.153548][T14267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1185.435536][T14267] team0: Port device team_slave_0 added
[ 1185.449078][T14267] team0: Port device team_slave_1 added
[ 1185.614323][T14267] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1185.614343][T14267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1185.614373][T14267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1185.666782][T14267] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1185.666799][T14267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1185.666825][T14267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1186.860742][T12937] Bluetooth: hci3: command tx timeout
[ 1188.219029][T14267] hsr_slave_0: entered promiscuous mode
[ 1188.226228][T14267] hsr_slave_1: entered promiscuous mode
[ 1188.234038][T14267] debugfs: 'hsr0' already exists in 'hsr'
[ 1188.234068][T14267] Cannot create hsr debugfs directory
[ 1188.256797][T13986] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1188.271066][ T1237] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1188.431193][ T1237] usb 2-1: Using ep0 maxpacket: 32
[ 1188.432082][ T1237] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[ 1188.433916][ T1237] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[ 1188.433943][ T1237] usb 2-1: config 2 has no interface number 0
[ 1188.433994][ T1237] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[ 1188.434024][ T1237] usb 2-1: config 2 interface 88 has no altsetting 0
[ 1188.438765][ T1237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[ 1188.438793][ T1237] usb 2-1: Product: syz
[ 1188.438810][ T1237] usb 2-1: Manufacturer: syz
[ 1188.438827][ T1237] usb 2-1: SerialNumber: syz
[ 1188.523693][T14500] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1188.912649][T14494] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1188.940940][T12937] Bluetooth: hci3: command tx timeout
[ 1189.237754][ T5244] 8021q: adding VLAN 0 to HW filter on device eth16
[ 1193.774088][ T1237] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1193.774474][ T1237] asix 2-1:2.88: probe with driver asix failed with error -71
[ 1193.882492][T14524] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1755'.
[ 1193.965642][ T1237] usb 2-1: USB disconnect, device number 100
[ 1194.138006][T13986] 8021q: adding VLAN 0 to HW filter on device team0
[ 1194.464627][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1757'.
[ 1196.772889][T14544] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1756'.
[ 1197.832934][ T5586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1198.580951][ T5586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1198.601050][ T5586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1198.602180][ T5586] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1198.603252][ T5586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1199.721876][   T13] IPVS: starting estimator thread 0...
[ 1199.722105][T14578] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1199.822492][T14587] IPVS: using max 7 ests per chain, 16800 per kthread
[ 1199.877471][T14580] af_packet: tpacket_rcv: packet too big, clamped from 5376 to 4294967272. macoff=96
[ 1200.555618][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1765'.
[ 1200.950265][T12937] Bluetooth: hci2: command tx timeout
[ 1202.083022][T14607] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1766'.
[ 1202.284558][ T5244] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1203.020955][T12937] Bluetooth: hci2: command tx timeout
[ 1205.129649][T12937] Bluetooth: hci2: command tx timeout
[ 1205.896757][T14444] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1205.896901][T14444] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1205.915925][T14444] bridge_slave_0: entered allmulticast mode
[ 1205.924147][T14444] bridge_slave_0: entered promiscuous mode
[ 1205.944289][T14444] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1205.944601][T14444] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1205.944799][T14444] bridge_slave_1: entered allmulticast mode
[ 1205.997853][T14444] bridge_slave_1: entered promiscuous mode
[ 1206.306361][T14444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1207.064923][T14444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1207.184447][T12937] Bluetooth: hci2: command tx timeout
[ 1207.471591][T14444] team0: Port device team_slave_0 added
[ 1207.503729][T14444] team0: Port device team_slave_1 added
[ 1207.884893][T14444] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1207.884911][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1207.884942][T14444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1207.888966][T14444] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1207.888978][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1207.889000][T14444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1208.021306][T14655] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1776'.
[ 1208.023604][T14655] IPVS: set_ctl: invalid protocol: 46 10.1.1.1:20004
[ 1208.153624][ T1303] bridge_slave_1: left allmulticast mode
[ 1208.153663][ T1303] bridge_slave_1: left promiscuous mode
[ 1208.153900][ T1303] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1208.325404][ T1303] bridge_slave_0: left allmulticast mode
[ 1208.325443][ T1303] bridge_slave_0: left promiscuous mode
[ 1208.325745][ T1303] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1209.680755][ T5788] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1209.830597][ T5788] usb 2-1: Using ep0 maxpacket: 32
[ 1209.831815][ T5788] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[ 1209.859233][ T5788] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[ 1209.859264][ T5788] usb 2-1: config 2 has no interface number 0
[ 1209.859329][ T5788] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[ 1209.859359][ T5788] usb 2-1: config 2 interface 88 has no altsetting 0
[ 1209.864557][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[ 1209.864871][ T5788] usb 2-1: Product: syz
[ 1209.864888][ T5788] usb 2-1: Manufacturer: syz
[ 1209.864905][ T5788] usb 2-1: SerialNumber: syz
[ 1209.962504][T14681] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1210.291956][ T1303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1210.565485][ T1303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1211.604326][ T1303] bond0 (unregistering): Released all slaves
[ 1211.765307][T14680] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1212.175453][T14444] hsr_slave_0: entered promiscuous mode
[ 1212.177141][T14444] hsr_slave_1: entered promiscuous mode
[ 1212.178273][T14444] debugfs: 'hsr0' already exists in 'hsr'
[ 1212.178300][T14444] Cannot create hsr debugfs directory
[ 1217.038415][ T5788] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110
[ 1217.038739][ T5788] asix 2-1:2.88: probe with driver asix failed with error -110
[ 1217.210805][ T1303] hsr_slave_0: left promiscuous mode
[ 1217.421463][ T1303] hsr_slave_1: left promiscuous mode
[ 1217.423101][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1217.447321][ T5788] usb 2-1: USB disconnect, device number 101
[ 1217.530271][T14696] sg_write: data in/out 33554396/10 bytes for SCSI command 0xec-- guessing data in;
[ 1217.530271][T14696]    program syz.0.1782 not setting count and/or reply_len properly
[ 1218.337159][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1220.418850][ T1303] team0 (unregistering): Port device team_slave_1 removed
[ 1220.521515][ T1303] team0 (unregistering): Port device team_slave_0 removed
[ 1221.164122][T14267] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1221.226690][T14267] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1222.258963][T14552] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1222.259584][T14552] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1222.259738][T14552] bridge_slave_0: entered allmulticast mode
[ 1222.282873][T14552] bridge_slave_0: entered promiscuous mode
[ 1222.306342][T14552] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1222.306478][T14552] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1222.306654][T14552] bridge_slave_1: entered allmulticast mode
[ 1222.309490][T14552] bridge_slave_1: entered promiscuous mode
[ 1223.226142][ T5788] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1223.271491][ T5586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1223.309110][ T5586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1223.324324][ T5586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1223.329991][ T5586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1223.354420][ T5586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1223.381564][ T5788] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1223.381614][ T5788] usb 2-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40
[ 1223.382742][ T5788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1223.382766][ T5788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1223.385999][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1223.386024][ T5788] usb 2-1: Product: syz
[ 1223.386038][ T5788] usb 2-1: Manufacturer: syz
[ 1223.386053][ T5788] usb 2-1: SerialNumber: syz
[ 1223.779825][T14552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1224.129622][T14736] FAULT_INJECTION: forcing a failure.
[ 1224.129622][T14736] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1224.129664][T14736] CPU: 0 UID: 0 PID: 14736 Comm: syz.1.1787 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1224.129697][T14736] Tainted: [L]=SOFTLOCKUP
[ 1224.129706][T14736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1224.129720][T14736] Call Trace:
[ 1224.129729][T14736]  <TASK>
[ 1224.129740][T14736]  dump_stack_lvl+0xe8/0x150
[ 1224.129781][T14736]  should_fail_ex+0x46b/0x600
[ 1224.129823][T14736]  _copy_to_user+0x31/0xb0
[ 1224.129851][T14736]  simple_read_from_buffer+0xe1/0x170
[ 1224.129883][T14736]  proc_fail_nth_read+0x1be/0x230
[ 1224.129913][T14736]  ? __local_bh_enable+0x1e3/0x2f0
[ 1224.129945][T14736]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1224.129980][T14736]  ? rw_verify_area+0x250/0x4d0
[ 1224.130010][T14736]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1224.130048][T14736]  vfs_read+0x219/0xa90
[ 1224.130085][T14736]  ? __pfx_vfs_read+0x10/0x10
[ 1224.130116][T14736]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1224.130145][T14736]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1224.130171][T14736]  ? mutex_lock_nested+0x152/0x1d0
[ 1224.130202][T14736]  ? fdget_pos+0x252/0x320
[ 1224.130236][T14736]  ksys_read+0x156/0x270
[ 1224.130267][T14736]  ? __pfx_ksys_read+0x10/0x10
[ 1224.130309][T14736]  do_syscall_64+0x166/0x520
[ 1224.130334][T14736]  ? trace_irq_disable+0x3b/0x140
[ 1224.130359][T14736]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1224.130384][T14736]  ? clear_bhb_loop+0x70/0xc0
[ 1224.130413][T14736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1224.130437][T14736] RIP: 0033:0x7fb74cd0e90e
[ 1224.130461][T14736] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1224.130480][T14736] RSP: 002b:00007fb74af63fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1224.130504][T14736] RAX: ffffffffffffffda RBX: 00007fb74af646c0 RCX: 00007fb74cd0e90e
[ 1224.130522][T14736] RDX: 000000000000000f RSI: 00007fb74af640a0 RDI: 0000000000000009
[ 1224.130537][T14736] RBP: 00007fb74af64090 R08: 0000000000000000 R09: 0000000000000000
[ 1224.130552][T14736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1224.130566][T14736] R13: 00007fb74cfd6218 R14: 00007fb74cfd6180 R15: 00007ffc420bf058
[ 1224.130604][T14736]  </TASK>
[ 1224.238597][T14552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1224.320371][ T5244] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1224.498072][T14552] team0: Port device team_slave_0 added
[ 1224.515858][T14552] team0: Port device team_slave_1 added
[ 1225.039530][T14552] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1225.039548][T14552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1225.039577][T14552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1225.152932][ T5788] usb 2-1: USB disconnect, device number 102
[ 1225.185899][T14552] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1225.185918][T14552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1225.185968][T14552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1225.434773][T14440] udevd[14440]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1226.762800][T14552] hsr_slave_0: entered promiscuous mode
[ 1226.766191][T14552] hsr_slave_1: entered promiscuous mode
[ 1226.769141][T14552] debugfs: 'hsr0' already exists in 'hsr'
[ 1226.769170][T14552] Cannot create hsr debugfs directory
[ 1226.782141][T12937] Bluetooth: hci1: command tx timeout
[ 1228.120595][T13759] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1228.260236][T13759] usb 2-1: device descriptor read/64, error -71
[ 1228.490882][T13759] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1228.671047][T13759] usb 2-1: device descriptor read/64, error -71
[ 1228.781463][T13759] usb usb2-port1: attempt power cycle
[ 1228.861191][T12937] Bluetooth: hci1: command tx timeout
[ 1229.122762][T13759] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1229.142512][T13759] usb 2-1: device descriptor read/8, error -71
[ 1229.380617][T13759] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1229.401500][T13759] usb 2-1: device descriptor read/8, error -71
[ 1229.636427][T13759] usb usb2-port1: unable to enumerate USB device
[ 1229.978065][T14805] openvswitch: netlink: Message has 1 unknown bytes.
[ 1230.941133][T12937] Bluetooth: hci1: command tx timeout
[ 1232.550187][T14730] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1232.550391][T14730] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1232.551410][T14730] bridge_slave_0: entered allmulticast mode
[ 1232.580442][T14730] bridge_slave_0: entered promiscuous mode
[ 1232.666396][T14730] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1232.666525][T14730] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1232.666661][T14730] bridge_slave_1: entered allmulticast mode
[ 1232.668792][T14730] bridge_slave_1: entered promiscuous mode
[ 1232.777590][T14730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1232.797452][T14730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1232.898805][T14730] team0: Port device team_slave_0 added
[ 1232.917360][T14730] team0: Port device team_slave_1 added
[ 1233.023475][T12937] Bluetooth: hci1: command tx timeout
[ 1233.653557][T14730] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1233.653577][T14730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1233.653610][T14730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1233.738471][T14730] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1233.738491][T14730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1233.738525][T14730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1234.672607][T14730] hsr_slave_0: entered promiscuous mode
[ 1234.757840][T14730] hsr_slave_1: entered promiscuous mode
[ 1234.771382][T14730] debugfs: 'hsr0' already exists in 'hsr'
[ 1234.771488][T14730] Cannot create hsr debugfs directory
[ 1239.145537][ T5244] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1240.670762][ T1303] bridge_slave_1: left allmulticast mode
[ 1240.670800][ T1303] bridge_slave_1: left promiscuous mode
[ 1240.671075][ T1303] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1240.835044][ T1303] bridge_slave_0: left allmulticast mode
[ 1240.835083][ T1303] bridge_slave_0: left promiscuous mode
[ 1240.835418][ T1303] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1241.122338][ T1303] bridge_slave_1: left allmulticast mode
[ 1241.122369][ T1303] bridge_slave_1: left promiscuous mode
[ 1241.122570][ T1303] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1241.202449][ T5586] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1241.240145][ T5586] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1241.250356][ T5586] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1241.259960][ T5586] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1241.274899][ T5586] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1241.583871][ T1303] bridge_slave_0: left allmulticast mode
[ 1241.583916][ T1303] bridge_slave_0: left promiscuous mode
[ 1241.584175][ T1303] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1242.907668][ T1303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1243.023947][ T1303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1243.103420][ T1303] bond0 (unregistering): Released all slaves
[ 1243.580938][T12937] Bluetooth: hci5: command tx timeout
[ 1243.791457][ T1303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1243.875850][ T1303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1243.937157][ T1303] bond0 (unregistering): Released all slaves
[ 1244.006734][ T5244] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1244.350556][ T1332] ieee802154 phy0 wpan0: encryption failed: -22
[ 1244.350631][ T1332] ieee802154 phy1 wpan1: encryption failed: -22
[ 1245.476105][   T37] audit: type=1326 audit(1787843552.068:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14974 comm="syz.0.1821" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1245.480111][   T37] audit: type=1326 audit(1787843552.068:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14974 comm="syz.0.1821" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1245.480170][   T37] audit: type=1326 audit(1787843552.068:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14974 comm="syz.0.1821" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1245.562947][   T37] audit: type=1326 audit(1787843552.068:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14974 comm="syz.0.1821" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1245.563457][   T37] audit: type=1326 audit(1787843552.158:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14974 comm="syz.0.1821" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1245.563818][   T37] audit: type=1326 audit(1787843552.158:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14974 comm="syz.0.1821" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1245.564725][   T37] audit: type=1326 audit(1787843552.158:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14974 comm="syz.0.1821" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1245.565254][   T37] audit: type=1326 audit(1787843552.158:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14974 comm="syz.0.1821" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1245.565311][   T37] audit: type=1326 audit(1787843552.158:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14974 comm="syz.0.1821" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1245.625910][   T37] audit: type=1326 audit(1787843552.218:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14974 comm="syz.0.1821" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e364e0d9 code=0x7ffc0000
[ 1245.679356][T12937] Bluetooth: hci5: command tx timeout
[ 1245.798047][T14977] 9p: Bad value for 'rfdno'
[ 1245.841071][ T1303] hsr_slave_0: left promiscuous mode
[ 1245.884277][ T1303] hsr_slave_1: left promiscuous mode
[ 1245.885633][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1246.972351][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1247.380631][ T1303] hsr_slave_0: left promiscuous mode
[ 1247.482640][ T1303] hsr_slave_1: left promiscuous mode
[ 1247.758095][T12937] Bluetooth: hci5: command tx timeout
[ 1247.787716][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1248.788637][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1249.825091][T12937] Bluetooth: hci5: command tx timeout
[ 1250.694990][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'.
[ 1253.211238][ T1303] team0 (unregistering): Port device team_slave_1 removed
[ 1253.271328][ T1303] team0 (unregistering): Port device team_slave_0 removed
[ 1253.559391][T15025] FAULT_INJECTION: forcing a failure.
[ 1253.559391][T15025] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1253.559436][T15025] CPU: 0 UID: 0 PID: 15025 Comm: syz.1.1835 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1253.559459][T15025] Tainted: [L]=SOFTLOCKUP
[ 1253.559466][T15025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1253.559476][T15025] Call Trace:
[ 1253.559483][T15025]  <TASK>
[ 1253.559496][T15025]  dump_stack_lvl+0xe8/0x150
[ 1253.559525][T15025]  should_fail_ex+0x46b/0x600
[ 1253.559557][T15025]  __kvm_read_guest_page+0x18d/0x240
[ 1253.559579][T15025]  kvm_fetch_guest_virt+0x12b/0x170
[ 1253.559607][T15025]  ? __pfx_kvm_fetch_guest_virt+0x10/0x10
[ 1253.559632][T15025]  __do_insn_fetch_bytes+0x53a/0x6c0
[ 1253.559657][T15025]  ? __pfx___do_insn_fetch_bytes+0x10/0x10
[ 1253.559680][T15025]  ? bsearch+0x8a/0xc0
[ 1253.559697][T15025]  ? x86_decode_insn+0x16fa/0x5af0
[ 1253.559740][T15025]  x86_decode_insn+0x374/0x5af0
[ 1253.559803][T15025]  ? __pfx_x86_decode_insn+0x10/0x10
[ 1253.559830][T15025]  ? __lock_acquire+0x683/0x2ce0
[ 1253.559863][T15025]  ? vmx_read_guest_seg_ar+0x3f7/0x650
[ 1253.559894][T15025]  ? __asan_memset+0x22/0x50
[ 1253.559919][T15025]  ? init_decode_cache+0xf3/0x160
[ 1253.559939][T15025]  ? init_emulate_ctxt+0x535/0x6e0
[ 1253.559958][T15025]  ? __pfx_init_emulate_ctxt+0x10/0x10
[ 1253.559983][T15025]  x86_emulate_instruction+0x323/0x1fc0
[ 1253.560015][T15025]  ? is_bpf_text_address+0x292/0x2b0
[ 1253.560037][T15025]  ? is_bpf_text_address+0x26/0x2b0
[ 1253.560058][T15025]  ? __pfx_x86_emulate_instruction+0x10/0x10
[ 1253.560077][T15025]  ? vmx_handle_exit_irqoff+0xff/0xae0
[ 1253.560104][T15025]  ? __pfx_vmx_handle_exit_irqoff+0x10/0x10
[ 1253.560136][T15025]  handle_ud+0x19e/0x6a0
[ 1253.560152][T15025]  ? clear_bhb_loop+0x70/0xc0
[ 1253.560169][T15025]  ? __pfx_handle_ud+0x10/0x10
[ 1253.560182][T15025]  ? vmx_vcpu_run+0x1043/0x2f00
[ 1253.560203][T15025]  ? rcu_is_watching+0x16/0xb0
[ 1253.560233][T15025]  ? vcpu_run+0x362a/0x7950
[ 1253.560253][T15025]  ? __pfx_handle_exception_nmi+0x10/0x10
[ 1253.560268][T15025]  vmx_handle_exit+0xfa4/0x16e0
[ 1253.560324][T15025]  vcpu_run+0x4d4b/0x7950
[ 1253.560385][T15025]  ? vcpu_run+0x362a/0x7950
[ 1253.560459][T15025]  ? __pfx_vcpu_run+0x10/0x10
[ 1253.560484][T15025]  ? complete_emulated_mmio+0x1f2/0x910
[ 1253.560520][T15025]  ? __asan_memcpy+0x40/0x70
[ 1253.560552][T15025]  ? complete_emulated_mmio+0x535/0x910
[ 1253.560589][T15025]  kvm_arch_vcpu_ioctl_run+0x13ed/0x2010
[ 1253.560636][T15025]  ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010
[ 1253.560665][T15025]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1253.560737][T15025]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1253.560767][T15025]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1253.560793][T15025]  ? _mutex_lock_killable+0x152/0x1d0
[ 1253.560825][T15025]  ? kvm_vcpu_ioctl+0x282/0xfe0
[ 1253.560855][T15025]  kvm_vcpu_ioctl+0xa64/0xfe0
[ 1253.560886][T15025]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1253.560909][T15025]  ? hook_file_ioctl+0x1f3/0x600
[ 1253.560938][T15025]  ? __asan_memset+0x22/0x50
[ 1253.560971][T15025]  ? smack_file_ioctl+0x335/0x370
[ 1253.561001][T15025]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1253.561039][T15025]  ? __fget_files+0x2a/0x420
[ 1253.561068][T15025]  ? __fget_files+0x3a8/0x420
[ 1253.561085][T15025]  ? __fget_files+0x2a/0x420
[ 1253.561105][T15025]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1253.561130][T15025]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1253.561148][T15025]  __se_sys_ioctl+0xff/0x170
[ 1253.561173][T15025]  do_syscall_64+0x166/0x520
[ 1253.561191][T15025]  ? trace_irq_disable+0x3b/0x140
[ 1253.561208][T15025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.561226][T15025]  ? clear_bhb_loop+0x70/0xc0
[ 1253.561247][T15025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.561263][T15025] RIP: 0033:0x7fb74cd4e0d9
[ 1253.561280][T15025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1253.561315][T15025] RSP: 002b:00007fb74afa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1253.561339][T15025] RAX: ffffffffffffffda RBX: 00007fb74cfd5fa0 RCX: 00007fb74cd4e0d9
[ 1253.561357][T15025] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 1253.561371][T15025] RBP: 00007fb74afa6090 R08: 0000000000000000 R09: 0000000000000000
[ 1253.561386][T15025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1253.561403][T15025] R13: 00007fb74cfd6038 R14: 00007fb74cfd5fa0 R15: 00007ffc420bf058
[ 1253.561429][T15025]  </TASK>
[ 1254.713540][T15030] FAULT_INJECTION: forcing a failure.
[ 1254.713540][T15030] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1254.713571][T15030] CPU: 0 UID: 0 PID: 15030 Comm: syz.1.1837 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1254.713594][T15030] Tainted: [L]=SOFTLOCKUP
[ 1254.713600][T15030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1254.713611][T15030] Call Trace:
[ 1254.713652][T15030]  <TASK>
[ 1254.713661][T15030]  dump_stack_lvl+0xe8/0x150
[ 1254.713700][T15030]  should_fail_ex+0x46b/0x600
[ 1254.713742][T15030]  _copy_to_user+0x31/0xb0
[ 1254.713774][T15030]  simple_read_from_buffer+0xe1/0x170
[ 1254.713797][T15030]  proc_fail_nth_read+0x1be/0x230
[ 1254.713821][T15030]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1254.713845][T15030]  ? rw_verify_area+0x250/0x4d0
[ 1254.713867][T15030]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1254.713895][T15030]  vfs_read+0x219/0xa90
[ 1254.713921][T15030]  ? __pfx_vfs_read+0x10/0x10
[ 1254.713942][T15030]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1254.713962][T15030]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1254.713980][T15030]  ? mutex_lock_nested+0x152/0x1d0
[ 1254.714008][T15030]  ? fdget_pos+0x252/0x320
[ 1254.714032][T15030]  ksys_read+0x156/0x270
[ 1254.714054][T15030]  ? __pfx_ksys_read+0x10/0x10
[ 1254.714073][T15030]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[ 1254.714108][T15030]  do_syscall_64+0x166/0x520
[ 1254.714127][T15030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.714144][T15030]  ? clear_bhb_loop+0x70/0xc0
[ 1254.714165][T15030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.714182][T15030] RIP: 0033:0x7fb74cd0e90e
[ 1254.714197][T15030] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1254.714211][T15030] RSP: 002b:00007fb74afa5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1254.714229][T15030] RAX: ffffffffffffffda RBX: 00007fb74afa66c0 RCX: 00007fb74cd0e90e
[ 1254.714241][T15030] RDX: 000000000000000f RSI: 00007fb74afa60a0 RDI: 0000000000000004
[ 1254.714252][T15030] RBP: 00007fb74afa6090 R08: 0000000000000000 R09: 0000000000000000
[ 1254.714262][T15030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1254.714272][T15030] R13: 00007fb74cfd6038 R14: 00007fb74cfd5fa0 R15: 00007ffc420bf058
[ 1254.714297][T15030]  </TASK>
[ 1352.451212][ T5586] Bluetooth: hci3: command 0x0406 tx timeout
[ 1353.645650][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'.
[ 1354.543965][T10997] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1354.570565][T15046] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1354.704343][T10997] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1354.722276][T10997] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1354.742066][T10997] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1354.746207][T10997] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1354.752764][T10997] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1354.763706][T10997] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1354.778469][T10997] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1354.779418][T10997] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1356.003496][T15046] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1356.052448][T15046] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1356.075764][T15046] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1356.078020][T15046] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1356.093581][T15046] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1357.506293][T15058] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1357.597300][T15058] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1357.601279][T15058] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1357.626725][T15058] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1357.627708][T15058] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1359.139314][T15064] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1359.190016][T15064] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1359.194775][T15064] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1359.246832][T15064] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1359.247650][T15064] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1360.387472][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1360.387492][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P29
[ 1360.387516][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=102677, q=3298 ncpus=2)
[ 1360.387534][    C1] task:ktimers/1       state:R  running task     stack:22536 pid:29    tgid:29    ppid:2      task_flags:0x4208040 flags:0x00080000
[ 1360.387587][    C1] Call Trace:
[ 1360.387595][    C1]  <IRQ>
[ 1360.387604][    C1]  sched_show_task+0x4aa/0x5f0
SYZFAIL: failed to recv rpc
[ 1360.387632][    C1]  ? __pfx_sched_show_task+0x10/0x10
[ 1360.387651][    C1]  ? rcu_dump_cpu_stacks+0x79/0x4e0
[ 1360.387673][    C1]  ? wq_watchdog_touch+0xf9/0x160
[ 1360.387693][    C1]  print_other_cpu_stall+0xfbf/0x1350
[ 1360.387719][    C1]  ? __pfx_print_other_cpu_stall+0x10/0x10
[ 1360.387753][    C1]  rcu_sched_clock_irq+0x94c/0x1060
[ 1360.387782][    C1]  update_process_times+0x234/0x2d0
[ 1360.387805][    C1]  tick_nohz_handler+0x38f/0x6b0
[ 1360.387831][    C1]  ? __pfx_tick_nohz_handler+0x10/0x10
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1360.387854][    C1]  ? do_raw_spin_unlock+0xf5/0x200
[ 1360.387882][    C1]  ? __pfx_tick_nohz_handler+0x10/0x10
[ 1360.387903][    C1]  __hrtimer_run_queues+0x3a0/0xaf0
[ 1360.387943][    C1]  hrtimer_interrupt+0x4c2/0xa80
[ 1360.387989][    C1]  __sysvec_apic_timer_interrupt+0x102/0x430
[ 1360.388009][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[ 1360.388028][    C1]  </IRQ>
[ 1360.388034][    C1]  <TASK>
[ 1360.388041][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1360.388061][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 1360.388081][    C1] Code: f7 e8 7d 68 50 f6 f7 c3 00 02 00 00 74 05 e8 90 9f 7c f6 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 24 9b 42 f6 65 48 8b 05 ec e7 4f 07 48 85 c0 74 18 5b 41 5e c3
[ 1360.388095][    C1] RSP: 0018:ffffc90000a3fba0 EFLAGS: 00000206
[ 1360.388109][    C1] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001
[ 1360.388127][    C1] RDX: 0000000000000002 RSI: ffffffff8d8b55fd RDI: 0000000000000001
[ 1360.388137][    C1] RBP: 1ffff110170e5102 R08: ffffffff8fb0da37 R09: 1ffffffff1f61b46
[ 1360.388150][    C1] R10: dffffc0000000000 R11: fffffbfff1f61b47 R12: ffffffff895a5060
[ 1360.388163][    C1] R13: ffff8880b8728440 R14: ffff8880b8728440 R15: ffff88803f14f440
[ 1360.388178][    C1]  ? __pfx_advance_sched+0x10/0x10
[ 1360.388206][    C1]  __hrtimer_run_queues+0x2ee/0xaf0
[ 1360.388245][    C1]  hrtimer_run_softirq+0x1e1/0x2e0
[ 1360.388276][    C1]  handle_softirqs+0x1da/0x6d0
[ 1360.388305][    C1]  ? smpboot_thread_fn+0x4e/0xa70
[ 1360.388327][    C1]  run_ktimerd+0x6a/0x100
[ 1360.388350][    C1]  smpboot_thread_fn+0x565/0xa70
[ 1360.388375][    C1]  ? smpboot_thread_fn+0x4e/0xa70
[ 1360.388403][    C1]  kthread+0x38b/0x470
[ 1360.388429][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1360.388451][    C1]  ? __pfx_kthread+0x10/0x10
[ 1360.388477][    C1]  ret_from_fork+0x514/0xb70
[ 1360.388504][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1360.388529][    C1]  ? __switch_to+0xc89/0x1420
[ 1360.388553][    C1]  ? __pfx_kthread+0x10/0x10
[ 1360.388579][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1360.388618][    C1]  </TASK>
[ 1364.605868][T15045] Bluetooth: hci5: command 0x0406 tx timeout